Mastering Windows Server 2022 with Azure Cloud Services – IaaS, PaaS, and SaaS: Series Monographs in Applied Toxicology

Introduction xxi Chapter 1 Understanding Windows Server 2022 1 Features and Advantages of Windows Server 2022 1 Deciding Which Windows Server 2022 Version to Use 6 Deciding on the Type of Installation 13 Removed Features 17 The Bottom Line 20 Chapter 2 Understanding Virtualization 21 Introduction to Virtualization 21 Hyper-V Features 23 Hyper-V Architecture 28 Hyper-V Operating Systems 29 Linux and FreeBSD Image Deployments 29 Virtualization in Azure 30 The Bottom Line 30 Chapter 3 Installing and Configuring Hyper-V 31 Hyper-V Installation and Configuration 31 Hyper-V Requirements 31 Install the Hyper-V Role 32 Hyper-V in Server Manager 35 Using Hyper-V Manager 35 Configure Hyper-V Settings 36 Manage Virtual Switches 38 Managing Virtual Hard Disks 40 Configuring Virtual Machines 45 Creating and Managing Virtual Machines 45 Linux and FreeBSD Image Deployments 56 PowerShell Commands 59 The Bottom Line 62 Chapter 4 Installing Windows Server 2022 63 Installing the Windows Server 2022 OS 63 Installing with the Desktop Experience 63 Installing Windows Server 2022 Server Core 68 Activating and Servicing Windows 71 Key Management Service 71 Automatic Virtual Machine Activation 73 Active Directory-Based Activation 74 Servicing Windows Server 2022 74 Configuring Windows Server Updates 75 Windows Update 76 Using Windows Server Update Services 80 Understanding Features On Demand 93 The Bottom Line 94 Chapter 5 Understanding IP 97 Understanding TCP/IP 97 Details of the TCP/IP Model 97 How TCP/IP Layers Communicate 98 Understanding Port Numbers 98 Understanding IP Addressing 100 The Hierarchical IP Addressing Scheme 100 Understanding Network Classes 101 Subnetting a Network 104 Implementing Subnetting 105 An Easier Way to Apply Subnetting 110 Applying Subnetting the Traditional Way 114 Working with Classless Inter-Domain Routing 121 Supernetting 124 Understanding IPv6 124 IPv6 History and Need 124 New and Improved IPv6 Concepts 125 IPv6 Addressing Concepts 127 IPv6 Integration/Migration 132 The Bottom Line 136 Chapter 6 Implementing DNS 137 Introducing DNS 137 HOSTS File 138 Understanding Servers, Clients, and Resolvers 142 Understanding the DNS Process 142 Introducing DNS Database Zones 147 Understanding Primary Zones 148 Understanding Secondary Zones 149 Understanding Active Directory Integrated DNS 150 Understanding Stub Zones 152 GlobalName Zones 153 Zone Transfers and Replication 153 Advantages of DNS in Windows Server 2022 156 Background Zone Loading 157 Support for IPv6 Addresses 157 Support for Read-Only Domain Controllers 157 DNS Socket Pools 158 DNS Cache Locking 158 Response Rate Limiting 158 Unknown Record Support 159 IPv6 Root Hints 159 DNS Security Extensions 159 DNS Devolution 161 Record Weighting 161 Netmask Ordering 161 DnsUpdateProxy Group 161 DNS Policies 161 Introducing DNS Record Types 162 Start of Authority (SOA) Records 162 Name Server Records 164 Host Record 164 Alias Record 165 Pointer Record 165 Mail Exchanger Record 166 Service Record 166 Configuring DNS 167 Installing DNS 167 Load Balancing with Round Robin 168 Configuring a Caching-Only Server 168 Setting Zone Properties 168 Configuring Zones for Dynamic Updates 172 Delegating Zones for DNS 173 DNS Forwarding 174 Manually Creating DNS Records 175 DNS Aging and Scavenging 176 DNS PowerShell Commands 176 The Bottom Line 179 Chapter 7 Understanding Active Directory 181 Verifying the File System 181 Resilient File System (ReFS) 182 NTFS 183 Verifying Network Connectivity 185 Basic Connectivity Tests 185 Tools and Techniques for Testing Network Configuration 186 Understanding Active Directory 188 Domains 188 Trees 188 Forests 189 Understanding Domain and Forest Functionality 189 About the Domain Functional Level 190 About Forest Functionality 191 Planning the Domain Structure 193 Installing Active Directory 193 Improved Active Directory Features 194 Read-Only Domain Controllers 194 Active Directory Prerequisites 194 The Installation Process 194 Installing Additional Domain Controllers by Using Install from Media 201 Verifying Active Directory Installation 201 Using Event Viewer 201 Using Active Directory Administrative Tools 203 Testing from Clients 204 Creating and Configuring Application Data Partitions 206 Creating Application Data Partitions 206 Managing Replicas 207 Removing Replicas 208 Using ntdsutil to Manage Application Data Partitions 208 Configuring DNS Integration with Active Directory 210 The Bottom Line 211 Chapter 8 Administering Active Directory 213 Active Directory Overview 213 Understanding Active Directory Features 214 Understanding Security Principals 215 An Overview of OUs 216 The Purpose of OUs 217 Benefits of OUs 217 Planning the OU Structure 217 Logical Grouping of Resources 218 Understanding OU Inheritance 219 Delegating Administrative Control 220 Applying Group Policies 221 Creating OUs 221 Managing OUs 224 Moving, Deleting, and Renaming OUs 225 Administering Properties of OUs 225 Delegating Control of OUs 227 Creating and Managing Active Directory Objects 228 Overview of Active Directory Objects 229 Managing Object Properties 235 Understanding Groups 238 Filtering and Advanced Active Directory Features 240 Moving, Renaming, and Deleting Active Directory Objects 241 Resetting an Existing Computer Account 242 Understanding Dynamic Access Control 243 Managing Security and Permissions 244 Publishing Active Directory Objects 245 Making Active Directory Objects Available to Users 245 Publishing Printers 245 Publishing Shared Folders 246 PowerShell for Active Directory 247 The Bottom Line 248 Chapter 9 Configuring DHCP 249 Understanding DHCP 249 Introducing the DORA Process 250 Advantages and Disadvantages of DHCP 251 Ipconfig Lease Options 252 Understanding Scope Details 253 Installing and Authorizing DHCP 255 Installing DHCP 255 Introducing the DHCP Snap-In 256 Authorizing DHCP for Active Directory 257 Creating and Managing DHCP Scopes 259 Creating a New Scope in IPv4 259 Creating a New Scope in IPv6 267 Changing Scope Properties (IPv4 and IPv6) 269 Changing Server Properties 270 Managing Reservations and Exclusions 272 Setting Scope Options for IPv4 274 Activating and Deactivating Scopes 276 Creating a Superscope for IPv4 276 Creating IPv4 Multicast Scopes 277 Integrating Dynamic DNS and IPv4 DHCP 279 Using DHCP Failover Architecture 281 Working with the DHCP Database Files 281 Working with Advanced DHCP Configuration Options 283 Implement DHCPv6 283 Configure High Availability for DHCP, Including DHCP Failover and Split Scopes 284 Configure DHCP Name Protection 286 PowerShell Commands 287 The Bottom Line 289 Chapter 10 Building Group Policies 291 Introducing Group Policy 291 Understanding Group Policy Settings 292 The Security Settings Section of the GPO 295 Client-Side Extensions 296 Group Policy Objects 296 Group Policy Inheritance 297 Planning a Group Policy Strategy 298 Implementing Group Policy 298 Creating GPOs 299 Linking Existing GPOs to Active Directory 301 Forcing a GPO to Update 302 Managing Group Policy 303 Managing GPOs 303 Security Filtering of a Group Policy 304 Delegating Administrative Control of GPOs 306 Controlling Inheritance and Filtering Group Policy 307 Assigning Script Policies 308 Understanding the Loopback Policy 310 Managing Network Configuration 310 Configuring Network Settings 311 Automatically Enrolling User and Computer Certificates in Group Policy 311 Redirecting Folders 313 Managing GPOs with Windows PowerShell Group Policy Cmdlets 314 Item-Level Targeting 315 Back Up, Restore, Import, Copy, and Migration Tables 316 The Bottom Line 319 Chapter 11 Advanced Group Policy Options 321 Deploying Software Through a GPO 321 The Software Management Life Cycle 322 The Windows Installer 323 Deploying Applications 326 Implementing Software Deployment 328 Preparing for Software Deployment 328 Software Restriction Policies 329 Using AppLocker 329 Group Policy Slow Link Detection 329 Publishing and Assigning Applications 329 Applying Software Updates 331 Verifying Software Installation 332 Configuring Automatic Updates in Group Policy 332 Configuring Software Deployment Settings 333 The Software Installation Properties Dialog Box 333 Removing Programs 335 Microsoft Windows Installer Settings 337 Troubleshooting Group Policies 337 RSoP in Logging Mode 338 RSoP in Planning Mode 342 Using the gpresult.exe Command 342 Using the Group Policy Infrastructure Status Dashboard 343 The Bottom Line 343 Chapter 12 Understanding Cloud Concepts 345 Understand Cloud Concepts 345 Cloud Advantages 345 Understanding CapEx vs. OpEx 346 Understanding Different Cloud Concepts 348 Understanding the difference between IaaS, PaaS, and SaaS 349 Infrastructure as a Service 350 Platform as a Service 350 Software as a Service 351 Compare and Contrast the Service Types 352 The Bottom Line 353 Chapter 13 Configuring Azure 355 Understanding Azure Benefits 355 Azure Benefits 355 Understanding the Azure Dashboards 357 Using the Azure Dashboard 357 Configuring the Azure Portal Settings 366 The Bottom Line 372 Chapter 14 Understanding Azure Active Directory 373 Azure Active Directory 373 Understanding Azure AD 373 Self-Service Password Reset 392 The Bottom Line 394 Chapter 15 Creating a Hybrid Network 395 Creating a Hybrid Network 395 Password Hash Synchronization with Azure AD 396 Azure Active Directory Pass-Through Authentication 396 Federation with Azure AD 397 Common Identity Scenarios 399 Azure AD Connect 400 Implement Active Directory Federation Services 405 What Is a Claim? 406 AD FS in Windows Server 2022 409 Configuring a Web Application Proxy 411 Active Directory Federation Services Installation 413 AD FS and AD Connect 421 Planning Azure AD Authentication Options 423 Azure AD Multi-Factor Authentication 423 Azure AD Connect Sync--Understand and Customize Synchronization 426 Creating an Azure Recovery Policy 427 Model Apps 427 Automate Tasks in Recovery Plans 428 Run a Test Failover on Recovery Plans 429 Create a Recovery Plan 429 The Bottom Line 432 Chapter 16 Understanding Microsoft Endpoint 433 Using Microsoft Endpoint Manager 433 Understanding AutoPilot 440 Autopilot Benefits 441 Autopilot Prerequisites 441 Deployment Scenarios 443 Planning for Secure Applications Data on Devices 446 Configuring Managed Apps for Mobile Application Management (MAM) 446 Protecting Enterprise Data using Windows Information Protection (WIP) 449 The Bottom Line 458 Chapter 17 Configuring Security 459 Managing Windows Security 459 Windows Defender Security Center 460 Configuring Windows Firewall 463 Understanding Windows Firewall Basics 463 Windows Firewall with Advanced Security 464 Managing Security 469 Implementing Azure Windows Defender Advanced Threat Protection 469 Understanding Windows Defender Application Guard 471 Understanding Windows Defender Credential Guard 476 Implementing and Managing Windows Defender Exploit Guard 478 Using Windows Defender Application Control 481 The Bottom Line 482 Chapter 18 Creating Azure Policies 483 Azure Devices and Policies 483 Compliance Policies 484 Device Configuration Profiles 489 PowerShell Commands 492 The Bottom Line 494 Appendix The Bottom Line 495

William Panek is a 5-time Microsoft MVP Winner. He has taught at Boston University, Clark University, and the University of Maryland and trained members of the United States Secret Service, Cisco, the United States Air Force, and the United States Army in technology and IT. He also produces training videos to help students prepare for some Microsoft certification exams which can be found at: www.youtube.com/c/williampanek.