Configuring and troubleshooting windows server 2008 network infrastructure

Microsofthttps://www.atraining.ru/img/course/Microsoft/6421/B.png

Сетевая инфраструктура Windows Server 2008 R2 (Configuring and Troubleshooting Windows Server 2008 Network Infrastructure)

Устаревший курс

Этот курс устарел, мы рекомендуем обновлённую версию — 20411D — Базовое администрирование Windows Server 2012 R2 (Administering Windows Server 2012 R2)

Скачать 6421B

Для подписчиков нашей программы Knowledge Assurance запись курса Microsoft 6421 доступна без дополнительной оплаты.

Если нет подписки на Knowledge Assurance, то можно приобрести запись отдельно.Пожалуйста, до оплаты перейдите на страницу Knowledge Assurance с полным перечнем курсов, фактически имеющихся в архиве записей, чтобы убедиться, что есть именно та версия курса, которую Вы оплачиваете. Возможна ситуация, что в ближайшее время будет читаться курс более новой версии, а в архиве есть только записи по предыдущей.

Кстати, когда вы приобретаете запись курса, мы предоставляем две записи — актуальную, т.е. читаемой сейчас версии, и предыдущую (если, конечно, предыдущая существует в природе — т.е. для курсов версии 1.0 это не работает). Это позволяет проработать материал более качественно — ведь при прочтениях могут быть акценты на различных темах, может даваться разный дополнительный материал и практические работы. Мы добавим в архив для скачивания вторую запись бесплатно.

Даты ближайших онлайн-курсов

• В данный момент в расписании нет ближайших занятий. И, так как данный курс устарел, их скорее всего и не будет. Возможно индивидуальное обучение — оставьте нам запрос на курс — мы обязательно ответим и уточним детали.

Краткое описание курса 6421 (версия 6421B)

Нужен для получения статусов

• Сертификация MCTS Windows Server 2008 Network Infrastructure, Configuration — Microsoft Certified Technology Specialist : Windows Server 2008 Network Infrastructure, Configuration
• Сертификация MCITP Server Administrator 2008 — MCITP : Server Administrator on Windows Server 2008
• Сертификация MCITP Enterprise Administrator 2008 — MCITP : Enterprise Administrator on Windows Server 2008

Подготавливает к сдаче сертификационных экзаменов

• Экзамен 070-642

AT-COURSE-6421-B

Программа курса 6421B

Модуль №1 — Инсталляция и конфигурирование сервера

• Инсталляция Windows Server 2008 R2
• Управление ролями и компонентами
• Обзор способа инсталляции Server Core

Лабораторная работа:

• Инсталляция и конфигурирование сервера и серверных ролей

Модуль №2 — Настройка и устранение неполадок DNS

• Инсталляция роли DNS
• Конфигурирование роли DNS
• Конфигурирование зон DNS
• Настройка трансфера зон DNS
• Управление и устранение неполадок DNS

Лабораторная работа:

• Конфигурирование и проверка работы DNS

Модуль №3 — Конфигурирование и управление WINS

• Обзор службы имен Windows (WINS / NBNS). Формат имён NetBIOS, схема разрешения имен NetBIOS. Проблемы безопасности и управления.
• Управление сервером WINS. Настройки клиента WINS. Файл lmhosts, управление node type.
• Настройка репликации серверов WINS. Push и pull репликация.
• Миграция с WINS на DNS и отказ от WINS в локальной сети.

Модуль №4 — Конфигурирование и устранение неполадок DHCP

• Обзор роли сервера DHCP
• Настройка пулов DHCP — обычные пулы, superscopes, пулы для мультикастовых адресов
• Настройка class id — стандартных и пользовательских. Назначение части DHCP-клиентов специфичных параметров.
• Конфликты DHCP и операция reconcile. Схема обнаружения конфликтов (arp, ping).
• DHCPv6 — stateful и stateless режимы работы (в связке с IPv6-маршрутизатором)
• Назначение IPv6-префикса для dial-in и remote access vpn клиентов
• Назначение IPv4-адресов для dial-in и remote access vpn клиентов. Работа в связке с RAS-сервером в организации и выделенным пулом для RAS-клиентов. Использование dhcp options для тонкой настройки remote access vpn клиентов.
• Ретрансляция DHCP (DHCP-proxy / ip helper). Опция 82. Схема резервирования DHCP с использованием option 82.
• Управление базой данных DHCP
• Мониторинг и устранение неполадок DHCP. Отказоустойчивость DHCP.
• Безопасность DHCP

Лабораторная работа:

• Конфигурирование и устранение неполадок сервера DHCP

Модуль №5 — Конфигурирование и устранение неполадок IPv6

• Обзор протокола IPv6
• Сосуществование с IPv6
• Технологии туннелирования IPv6
• Переход от IPv4 к IPv6
• Устранение неполадок IPv6

Лабораторная работа:

• Конфигурирование маршрутизатора ISATAP
• Работа в среде IPv6-only

Модуль №6 — Конфигурирование и устранение неполадок маршрутизации и удаленного доступа

• Настройка сетевого доступа
• Настройка доступа к VPN
• Обзор сетевых политик
• Обзор пакета администратора диспетчера подключений (CMAK)
• Устранение неполадок маршрутизации и удаленного доступа

Лабораторная работа:

• Настройка и управление доступом к сети

Модуль №7 — Инсталляция, настройка и устранения неполадок службы сетевых политик (NPS)

• Инсталляция и настройка сервера NPS
• Конфигурирование клиентов и серверов RADIUS
• Методы аутентификации NPS
• Мониторинг и устранение неполадок службы сетевых политик

Лабораторная работа:

• Настройка и управление сервером NPS

Модуль №8 — Конфигурирование защиты сетевого доступа (NAP)

• Обзор защиты сетевого доступа
• Как работает NAP
• Настройка NAP
• Мониторинг и устранение неполадок NAP

Лабораторная работа:

• Настройка NAP для DHCP и VPN

Модуль №9 — Конфигурирование IPSec

• Обзор IPSec
• Настройка правил безопасности подключения
• Настройка IPSec NAP Enforcement

Лабораторная работа:

• Настройка IPSec NAP Enforcement

Модуль №10 — Мониторинг и устранение неполадок IPsec

• Мониторинг активности IPSec
• Устранение неполадок IPSec

Лабораторная работа:

• Мониторинг и устранение неполадок IPsec

Модуль №11 — Конфигурирование и управление распределенной файловой системой (DFS)

• Обзор DFS
• Конфигурирование пространства имен DFS
• Конфигурирование репликаций DFS

Лабораторная работа:

• Конфигурирование DFS

Модуль №12 — Управление технологиями хранения данных

• Обзор управления хранением данных в Windows Server
• Управление хранением данных при помощи диспетчера ресурсов (FSRM)
• Управление квотами
• Реализация экранирования файлов (File Screening)
• Управление отчетами хранилища

Лабораторная работа:

• Управление технологиями хранения данных

Модуль №13 — Конфигурирование доступности сетевых ресурсов и данных

• Резервное копирование данных
• Настройка теневых копий
• Реализация доступности сервера и служб

Лабораторная работа:

• Конфигурирование доступности сетевых ресурсов

Модуль №14 — Настройка соответствия сервера правилам безопасности (Server Security Compliance)

• Безопасность инфраструктуры Windows
• Использование шаблонов безопасности для защиты сервера
• Настройка политики аудита
• Обзор служб обновления Windows (WSUS)
• Управление службами обновления Windows

Лабораторная работа:

• Настройка безопасности сервера

Стандартная продолжительность занятий

5 дней

Фактическая продолжительность может быть иной — например субботние курсы обычно читаются дольше. Для уточнения информации по конкретной группе посмотрите расписание.

Overview

---

Language(s):	English, French, German, Italian, Japanese, Korean, Russian, Spanish, Portuguese (Brazil), Chinese (Simplified)
Audience(s):	IT Professionals
Technology:	Windows Server 2008
Type:	Proctored Exam

Audience Profile

The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008 credentials are intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have
at least one year of experience implementing and administering Windows Server 2008 R2 in an environment that has the following characteristics:

• 250 to 5,000 or more users
• multiple physical locations
• multiple domain controllers
• network services and resources such as messaging, databases, file and print, a firewalls, Internet access, an intranet, Public Key Infrastructure, remote access, remote desktop, virtualization, and client computer management
• connectivity requirements such as connecting branch offices and individual users in remote locations to corporate resources and connecting corporate networks

Credit Toward Certification

When you pass Exam 70-642: TS: Windows Server 2008 Network Infrastructure, Configuring, you complete the requirements for the following certification(s):

• Microsoft Certified Technology Specialist (MCTS): Windows Server 2008 Network Infrastructure, Configuring

Exam 70-642: TS: Windows Server 2008 Network Infrastructure, Configuring counts as credit toward the following certification(s):

• Microsoft Certified IT Professional (MCITP): Enterprise Administrator
• Microsoft Certified IT Professional (MCITP): Server Administrator

Skills Measured

---

Configuring Addressing and Services (24%)

• Configure IPv4 and IPv6 addressing.

  This objective may include but is not limited to: configure IP address options; subnetting; supernetting; multi-homed; interoperability between IPv4 and IPv6

• Configure Dynamic Host Configuration Protocol (DHCP).

  This objective may include but is not limited to: DHCP options; creating new options; PXE boot; default user profiles; DHCP relay agents; exclusions; authorize server in Active Directory; scopes; DHCPv6

• Configure routing.

  This objective may include but is not limited to: static routing; persistent routing; Routing Internet Protocol (RIP); metrics; choosing a default gateway; maintaining a routing table; demand-dial routing; IGMP proxy

• Configure Windows Firewall with Advanced Security.

  This objective may include but is not limited to: inbound and outbound rules; custom rules; authorized users; authorized computers; configure firewall by using Group Policy; network location profiles; service groups; import/export policies; isolation policy;
  IPsec group policies; Connection Security Rules

Configuring Names Resolution (27%)

• Configure a Domain Name System (DNS) server.

  This objective may include but is not limited to: conditional forwarding; external forwarders; root hints; cache-only; socket pooling; cache locking

• Configure DNS zones.

  This objective may include but is not limited to: zone scavenging; zone types; Active Directory integration; Dynamic Domain Name System (DDNS); Secure DDNS; GlobalNames; zone delegation; DNS Security Extensions (DNSSEC); reverse lookup zones

• Configure DNS records.

  This objective may include but is not limited to: record types; Time to live (TTL); weighting records; registering records; netmask ordering; DnsUpdateProxy group; round robin; DNS record security; auditing

• Configure DNS replication.

  This objective may include but is not limited to: DNS secondary zones; DNS stub zones; Active Directory Integrated replication scopes; securing zone transfer; SOA refresh; auditing

• Configure name resolution for client computers.

  This objective may include but is not limited to: configuring HOSTS file; Link-Local Multicast Name Resolution (LLMNR); broadcasting; resolver cache; DNS server list; Suffix Search order; DNS devolution

Configuring Network Access (22%)

• Configure remote access.

  This objective may include but is not limited to: dial-up; Remote Access Policy; Network Address Translation (NAT); VPN protocols, such as Secure Socket Tunneling Protocol (SSTP) and IKEv2; Routing and Remote Access Services (RRAS); packet filters; Connection
  Manager; VPN reconnect; RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP

• Configure Network Access Protection (NAP).

  This objective may include but is not limited to: network layer protection; DHCP enforcement; VPN enforcement; RDS enforcement; configure NAP health policies; IPsec enforcement; 802.1x enforcement; flexible host isolation; multi-configuration System Health
  Validator (SHV)

• Configure DirectAccess.

  This objective may include but is not limited to: IPv6; IPsec; server requirements; client requirements; perimeter network; name resolution policy table

• Configure Network Policy Server (NPS).

  This objective may include but is not limited to: IEEE 802.11 wireless; IEEE 802.3 wired; group policy for wireless; RADIUS accounting; Connection Request policies; RADIUS proxy; NPS templates

Configuring File and Print Services (13%)

• Configure a file server.

  This objective may include but is not limited to: file share publishing; Offline Files; share permissions; NTFS permissions; encrypting file system (EFS); BitLocker; Access-Based Enumeration (ABE); branch cache; Share and Storage Management console

• Configure Distributed File System (DFS).

  This objective may include but is not limited to: DFS namespace; DFS configuration and application; creating and configuring targets; DFS replication; read-only replicated folder; failover cluster support; health reporting
• Configure backup and restore.

  This objective may include but is not limited to: backup types; backup schedules; managing remotely; restoring data; shadow copy services; volume snapshot services (VSS); bare metal restore; backup to remote file share

• Manage file server resources.

  This objective may include but is not limited to: FSRM; quota by volume or quota by user; quota entries; quota templates; file classification; Storage Manager for SANs; file management tasks; file screening

• Configure and monitor print services.

  This objective may include but is not limited to: printer share; publish printers to Active Directory; printer permissions; deploy printer connections; install printer drivers; export and import print queues and printer settings; add counters to Performance
  Monitor to monitor print servers; print pooling; print priority; print driver isolation; location-aware printing; print management delegation

Monitoring and Managing a Network Infrastructure (14%)

• Configure Windows Server Update Services (WSUS) server settings.

  This objective may include but is not limited to: update type selection; client settings; Group Policy object (GPO); client targeting; software updates; test and approval; disconnected networks

• Configure performance monitoring.

  This objective may include but is not limited to: Data Collector Sets; Performance Monitor; Reliability Monitor; monitoring System Stability Index; page files; analyze performance data

• Configure event logs.

  This objective may include but is not limited to: custom views; application and services logs; subscriptions; attaching tasks to events find and filter
• Gather network data.

  This objective may include but is not limited to: Simple Network Management Protocol (SNMP); Network Monitor; Connection Security Rules monitoring

Preparation Materials

Learning Plans and Classroom Training

• 6421B: Configuring and Troubleshooting a Windows Server 2008 Network Infrastructure (5 Days)

Microsoft E-Learning

• 6421BE: Configuring and Troubleshooting a Windows Server 2008 Network Infrastructure (16 Hours)

Books

• MCTS Self-Paced Training Kit (Exam 70-642): Configuring Windows Server 2008 Network Infrastructure (2nd Edition)

Practice Tests

• MeasureUp (Measureup.com)
• Self Test Software (Selftestsoftware.com)

Community

---

• Wiki: Training and Certification Portal (en-US)
• Forum: Training and Certification (en-US)
• Microsoft Learning community

Related Forum Posts

If one of the posts in the following threads helps you answering your question, please vote them as helpful so other community members will find helpful information faster.

• 70-642

Other Languages

---

This article is also available in the following languages:

Deutsch

• Prüfung
  70-642 — TS: Konfigurieren von Windows Server 2008-Netzwerkinfrastrukturdiensten (de-DE)

Пользователь ESET Антон Севостьянов подготовил руководство по развертыванию и администрированию сети на основе выделенного сервера.

---

Сегодня хочу рассказать о настройке Windows Server 2008 R2 в условиях, приближенных к боевым (то есть в виртуальной среде). Такой подход позволит в домашних условиях протестировать и изучить все возможности данной технологии.

В статье рассматриваются следующие вопросы:

• настройка DNS сервера;
• установка Active Directory;
• взаимодействия учетных записей в рабочей группе и в домене;
• подключение компьютеров к домену;
• создание доменных пользователей;
• управление доступом к ресурсам;
• настройка DHCP сервера;
• подключение сети к интернет;
• настройка групповой политики;

Для начала вам понадобится 64-разрядная операционная система Windows и программа управления виртуальными машинами (например, VMWare). Минимальные системные требования: 6 Гб ОЗУ и 70 Гб свободного места на жестком диске.

Требования к ресурсам вашего ПК зависят от того, сколько машин будет в виртуальной сети и какие на них установлены ОС.


Установка клиентских машин с ОС Windows 7, 8.1 и 10

В нашем примере будет 4 компьютера под управлением Windows Server 2008 R2, 7, 8.1 и 10. Таким образом, 4 Гб оперативной памяти понадобится только для работы виртуального полигона.

Начинаем с установки и настройки DNS-сервера. С помощью программы VMWare создаем серверную и клиентские виртуальные машины:

Файл Новая виртуальная машина Выборочный Указываем установочный образ системы Windows 2008 R2 Путь к виртуальной машине D:VirtualMashinDomain 2008R22008R2 1Гб Использовать только сеть для узла Создать виртуальный диск: 40 Гб, хранить в одном файле Готово

Затем устанавливаем ОС Windows Server 2008 R2:

• Запускаем виртуальную машину
• 
  Открываем BIOS (клавиша F2) и проверяем правильность настроек для загрузки с виртуального привода. Нужно убедиться, что у виртуального привода установлен высший приоритет. Если это не так, меняем соответствующие настройки в BIOS

Аналогичным образом создаем виртуальные машины для клиентских операционных систем.

Перед настройкой DNS-сервера, переименовываем его в server, чтобы назначение компьютера в сети было понятно:

Мой компьютер ПКМ Свойства Имя компьютера Изменить параметры Изменить server ОК Перезагрузка

Теперь назначаем сетевой карте статический IP-адрес, так как у сервера IP-адрес меняться не должен:

Центр управления сетями и общим доступом Подключение по локальной сети Свойства Протокол интернета версии 4

Устанавливаем значения:

IP: 192.168.0.1

Mask: 255.255.255.0

Теперь переходим настройке DNS-сервера:

Пуск Администрирование Диспетчер сервера Роли Добавить роли Далее DNS-сервер Далее Далее Установить Закрыть

Далее сконфигурируем DNS-сервер:

Пуск Администрирование Диспетчер сервера Роли DNS-сервер DNS Server ПКМ Настроить DNS Создать зоны прямого и обратного просмотра

Зона прямого просмотра — преобразование имени в адрес, зона обратного просмотра —– преобразование адреса в имя. Выбираем «Да, создать зону прямого просмотра», затем «Основная зона», то есть зона будет храниться и обновляться на сервере. Дополнительная зона создается в ситуации, когда основная хранится на другом сервере, а на текущем сервере сохраняется копия. Это нужно для распределения нагрузки на основной сервер:

Имя зоны: office.local Создать новый файл зоны Динамическое обновление зоны


Создание файла office.local

Записи в DNS необходимо регулярно обновлять. Если у компьютера изменится IP-адрес, он должен быть изменен в записи, относящийся к доменному имени этого ПК, чтобы другие компьютеры знали, к какому IP-адресу нужно обращаться. Если записи не соответствуют действительности, то компьютер просто не сможет получить доступ к сети.

Существует несколько вариантов динамического обновления зоны DNS:

• Разрешить только безопасные динамические обновления. Рекомендуется использовать этот способ. Однако опция будет недоступна до создания домена, пока не установлена служба Active Directory.
• Разрешать любые динамические обновления — эту настройку лучше не использовать, так как данные могут быть недостоверны
• Запретить динамическое обновление — записи придется обновлять вручную. Выбираем этот способ, пока динамические обновления неактивны. После поднятия домена просто изменяем настройки

В нашем примере сервер будет всего один, поэтому пересылка запросов не потребуется:

Серверы пересылки Нет, не пересылать запросы Готово

---

Надеюсь, статья пригодилась. Пишите замечания в комментариях!

Антон Севостьянов

системный администратор, www.sys-team-admin.ru

NE-6421B

Configuring and Troubleshooting a Windows Server 2008 Network
Infrastructure
Summary
Duration
5 Days

Vendor
Microsoft

Audience
IT Professionals

Published
24 June 2011

Level
200

Technology
Windows Server 2008

Delivery Method
Instructor-led (Classroom)

Software Assurance Training Voucher
Yes

Introduction

This five-day instructor-led course provides students with the knowledge and skills to configure and troubleshoot Windows
Server 2008 and Windows Server 2008 R2 Sp1 Network Infrastructures. It will cover networking technologies most commonly
used with Windows Server 2008 and Windows Server 2008 R2 Sp1 such as DNS, DHCP, IPv4 and IPv6 network addressing,
Network Policy server and Network Access Protection and configuring secure network access. It also covers fault tolerant storage
technologies, Network Storage and routing and remote access, monitoring and compliance updates as well as other relevant
technologies.

Prerequisites
Before attending this course, students must have working knowledge of:


You must have an intermediate understanding of Windows Server operating systems such as Windows Server 2003,
Windows Server 2008 or Windows Server 2008 R2 Sp1 and Windows client operating systems such as Windows Vista
or Windows 7. Client operating system knowledge equivalent to the below certifications would be of benefit.

You should understand how TCP/IP functions and have a basic understanding of addressing, name resolution
(Domain Name System [DNS]/Windows Internet Name Service [WINS]), connection methods (wired, wireless,
virtual private network [VPN]).

You should have an awareness of security best practices such as understanding file system permissions,
authentication methods, workstation, and server hardening methods, and so forth.

Basic knowledge of Active Directory would also be of benefit.
Students who attend this training can meet the prerequisites by attending the following courses, or obtaining equivalent
knowledge and skills:

Course 6420B: Fundamentals of Windows Server 2008

At Course Completion
After completing this course, students will be able to:















Plan and configure an IPv4 network infrastructure.
Implement DHCP within their organization.
Configure and troubleshoot DNS.
Configure, transition to, and troubleshoot IPv6.
Configure and troubleshoot Routing and Remote Access.
Install, configure, and troubleshoot the Network Policy Server Role service.
Implement Network Access Protection.
Implement security features within Windows Server 2008 and Windows Server 2008 R2.
Implement security features within Windows Server 2008 and Windows Server 2008 R2 that help to secure network
communications.
Configure and troubleshot file and print services.
Enable and configure services to optimize branch office data access.
Control and monitor network storage.
Recover data on Windows Server 2008 and Windows Server 2008 R2 servers.
Monitor Windows Server 2008 and Windows Server R2 network infrastructure services.

Course Content

Module 1: Planning and Configuring

implement an IPv4 addressing scheme,

IPv4

determine which name services to deploy,



Implementing an IPv4

This module explains how to deploy and

and troubleshoot network-related

configure networking services in your

problems.

Resolution Services in an

organization. This module explains how to

Lessons

IPv4 Network Infrastructure

Network Infrastructure


Overview of Name



Configuring and



Configure DHCP scopes.

rapid growth of new network-aware

Troubleshooting IPv4



Configure DHCP options.

devices.



Manage a DHCP database.

Lessons



Monitor and troubleshoot the



Overview of IPv6

DHCP Server Role.



IPv6 Addressing

Configure security the DHCP



Coexistence with IPv6

Server Role.



IPv6 Transition Technologies



Transitioning from IPv4 to

Lab : Planning and Configuring IPv4


Selecting an IPv4 Addressing
scheme for branch offices



Implementing and Verifying



IPv4 in the branch office
After completing this module, students

Module 3: Configuring and

will be able to:

Troubleshooting DNS



IPv6

Plan an IPv4 addressing

This module introduces you to Domain

scheme.

Name System (DNS), which is the

Determine which name

foundation name service in Windows

services you must deploy.

Server 2008 R2. It is vital that you

Configure and troubleshoot

understand how to deploy, configure,

Router to Enable

an IPv4 network.

manage, and troubleshoot this critical

Communication Between an

Module 2: Configuring and

service.

IPv4 Network and an IPv6

Troubleshooting DHCP

Lessons




This module introduces you to Dynamic



Host Configuration Protocol (DHCP), which
plays an important role in the Windows



Server 2008 R2 infrastructure. It is the

Lab : Configuring an ISATAP Router


Configuring a New IPv6
Network and Client



Configuring an ISATAP

Network
Installing the DNS Server

Lab : Converting the Network to Native

Role

IPv6

Configuring the DNS Server



Role

Transitioning to a Native
IPv6 Network

primary means of distributing important



Configuring DNS Zones

After completing this module, students

network configuration information to



Configuring DNS Zone

will be able to:

network clients, and it provides

Transfers

configuration information to other



network-enabled services, including

Troubleshooting DNS

Windows Deployment Services (WDS) and

Lab : Configuring and Troubleshooting

Network Access Protection (NAP). To

DNS

support and troubleshoot a Windows

Lessons


benefits of IPv6.


Implement IPv6 addressing.



Implement an IPv6

Selecting a DNS



Configuration


deploy, configure, and troubleshoot the
DHCP Server Role.



Describe and select a
suitable IPv6 transition

Deploying and Configuring

solution.

DNS



Transition from IPv4 to IPv6.

Troubleshooting DNS



Troubleshoot an IPv6-based

After completing this module, students
Overview of the DHCP

Describe the features and

coexistence strategy.


Server-based network infrastructure, it is
important that you understand how to



Managing and

will be able to:

network.
Module 5: Configuring and

Server Role



Install the DNS server role.

Troubleshooting Routing and Remote



Configuring DHCP Scopes



Configure the DNS server

Access



Configuring DHCP Options

role.

To  support  your  organization’s  distributed



Managing a DHCP Database

Create and configure DNS

workforce, you must become familiar with



Monitoring and

zones.

technologies that enable remote users to





Troubleshooting DHCP



Configure zone transfers.

connect  to  your  organization’s  network  

Configuring DHCP Security



Manage and troubleshoot

infrastructure. These technologies include

DNS.

virtual private networks (VPNs) and

Lab : Configuring and Troubleshooting the
DHCP Server Role

Module 4: Configuring and

DirectAccess. It is important that you

Selecting a Suitable DHCP

Troubleshooting IPv6 TCP/IP

understand how to configure and secure

Configuration

This module introduces you to IPv6, a

your remote access clients by using



Implementing DHCP

technology that will help ensure that the

network policies. This module explores



Reconfiguring DHCP in the

Internet can support a growing user base

these remote access technologies.

Head Office

and the increasingly large number of IP-

Lessons



Testing the Configuration

enabled devices. The current Internet



Configuring Network Access



Troubleshooting DHCP

Protocol Version 4 (IPv4) has served as



Configuring VPN Access

Issues

the underlying Internet protocol for



Overview of Network Policies

After completing this module, students

almost thirty years. Its robustness,



Overview of the Connection

will be able to:

scalability, and limited feature set is now





Describe the function of the

challenged by the growing need for new

DHCP Server Role.

IP addresses, due in large part to the

Manager Administration Kit


Troubleshooting Routing and
Remote Access



Configuring DirectAccess



Monitoring and

Lab : Configuring and Managing Network

Troubleshooting a Network

Access

Policy Server





Lab : Configuring and Managing Network

Windows Servers

Policy Server

Security is an essential consideration for

Installing and Configuring

networking with Windows Server 2008. In

Configuring a Custom

the Network Policy Server

this module, you will learn how to

Network Policy

Role Service



implement various methods to increase

Create and distribute a



Configuring a RADIUS Client

security. Windows Firewall with Advanced

CMAK Profile



Configuring Certificate Auto-

Security is one of the features in Windows

Enrollment

Server 2008 that is used to increase

Configuring and Testing the

security. You can also use Windows

VPN

Server Update Services to ensure that

DirectAccess






Configure the AD DS Domain
Controller and DNS

After completing this module, students

approved security updates are applied to

Configure the PKI

will be able to:

servers in a timely way.

Environment



Install and configure NPS.

Configure the DirectAccess



Configure RADIUS clients



Windows Security Overview

and servers.



Configuring Windows

Clients and Test Intranet
Access




Configure the DirectAccess
Server



NAP.
Module 8: Increasing Security for

Remote Access as a VPN

Lab : Configuring and Managing


Monitor and troubleshoot

Configuring Routing and
Remote Access Solution





Describe NPS authentication

Firewall with Advanced

methods.


Verify DirectAccess
Functionality

Lessons

Monitor and troubleshoot

Security


NPS.

Deploying Updates with
Windows Server Update

Module 7: Implementing Network

Services

After completing this module, students

Access Protection

Lab : Increasing Security for Windows

will be able to:

In this module, you will learn about

Servers



Configure network access.

Network Access Protection (NAP). NAP



Create and configure a VPN

enables you to create customized health-

solution.

requirement policies to validate computer

Describe the role of network

health before allowing access or

After completing this module, students

policies.

communication. NAP also automatically

will be able to:

Use the Connection Manager

updates compliant computers to ensure

Administration Kit to create

on-going compliance and can limit the

and configure client

access of noncompliant computers to a

connection profiles.

restricted network until they become

Troubleshoot routing and

compliant.

remote access.

Lessons







Implement DirectAccess.



Module 6: Installing, Configuring, and



Deploying a Windows
Firewall Rule





Implementing WSUS

Describe a process for
increasing the security of
Windows Server 2008.



Configure Windows Firewall
with Advanced Security.


Overview of Network Access

Describe Windows Server
Update Services and how to

Protection

use it.

Troubleshooting the Network Policy



How NAP Works

Module 9: Increasing Security for

Server Role Service



Configuring NAP

Network Communication

NPS provides support for the Remote



Monitoring and

Internet Protocol security (IPsec) is a

Troubleshooting NAP

framework of open standards for

Authentication Dial-In User Service
(RADIUS) protocol, and can be configured

Lab : Implementing NAP into a VPN

protecting communications over IP

as a RADIUS server or proxy. Additionally,

Remote Access Solution

networks through cryptographic security

NPS provides functionality that is essential



for the implementation of Network Access
Protection (NAP). This module explains



how to install, configure, and troubleshoot

Configuring NAP

services. IPsec supports network-level

Components

peer authentication, data-origin

Configuring Client Settings

authentication, data integrity, data

to Support NAP

confidentiality (encryption), and replay

NPS.

After completing this module, students

protection. The Microsoft IPsec

Lessons

will be able to:

implementation is based on standards



Installing and Configuring a



Network Policy Server


Configuring RADIUS Clients



and Servers


NPS Authentication Methods



Describe how NAP can help

that the Internet Engineering Task Force

protect your network.

(IETF) IPsec working group developed. In

Describe the various NAP

this module, you will learn how to

enforcement processes.

implement, configure, and troubleshoot

Configure NAP.

IPsec.
Lessons



Overview of IPsec



Configuring Connection



Configuring NAP with IPsec

will be able to:


DFS replication.


Discuss how to configure
BranchCache.

Module 12: Controlling and

share security.

Monitoring Network Storage

Explain how to encrypt

Network storage for users is a finite

network files with EFS.

resource that must be managed

Describe how to encrypt

appropriately to ensure that it remains

partitions with BitLocker.

available for all users. If network storage

Discuss how to configure and

is not monitored and managed, it can

Configuring IPsec to

troubleshoot network

become filled with irrelevant data, such as

Authenticate Computers

printing.

personal music or movies. Irrelevant data

Monitoring and

Communication




Selecting a Network Security
Configuration



Explain how to configure

Describe how to manage file

Lab : Increasing Security for Network





Printer Pool
After completing this module, students

Troubleshooting IPsec



Creating and Configuring a

Security Rules
Enforcement




Module 11: Optimizing Data Access

increases network storage costs and in

After completing this module, students

for Branch Offices

some cases can prevent useful data from

will be able to:

Many organizations maintain a large

placement on the network storage. In this

Describe when and how to

number of file resources that need to be

module, you will learn how to monitor and

use IPsec.

organized and made highly available to

manage network storage.

Configure Connection

users. These file resources are often

Lessons

Security rules.

stored on servers and provided to users



Monitoring Network Storage

Configure IPsec with NAP

who are distributed geographically in



Controlling Network Storage

Enforcement.

widespread locations. In this module, you

Describe how to monitor and

will learn how to provide efficient access

troubleshoot IPsec.

to network resources with minimal traffic






Testing IPsec Authentication



Utilization


Managing File Types on
Network Storage

Module 10: Configuring and

over a WAN link.

Lab : Controlling and Monitoring Network

Troubleshooting Network File and

Lessons

Storage

Print Services



Branch Office Data Access



Configuring FSRM Quotas

File and print services are some of the



DFS Overview



Configuring File Screening

most commonly implemented network



Overview of DFS



Configuring File Classification

services for end users. Unlike
infrastructure services like DNS, file and
print services are highly visible to the end
users. In this module, you will learn how
to configure and troubleshoot file and

Namespaces
Configuring DFS Replication

After completing this module, students



Configuring BranchCache

will be able to:

Lab : Implementing DFS


print services to provide high quality
service to end users. In addition, you will

are located in file shares.
Lessons







quotas by using FSRM.


Describe how to implement
file screening, classification
management, and file

Configuring and

Configuration Tasks for

management tasks by using

Troubleshooting File Shares

BranchCache

Encrypting Network Files



Encrypting Partitions with



Configuring and



FSRM.

Configuring BranchCache

Module 13: Recovering Network Data

Clients

and Servers

Configuring BranchCache on

This module explains how to recover

the Branch Server

network data and servers. There are a

Monitoring BranchCache

variety of scenarios where a network data

Troubleshooting Network

After completing this module, students

or a server that provides networks

Printing

will be able to:

services can be lost. Volume shadow



Describe the challenges

copies can be used to restore previous

experienced when providing

versions of files when a file is accidentally

Creating and Configuring a

data access to branch

deleted or modified on a computer that is

File Share

offices.

running Windows Server 2008. Windows

Identify the basic

Server Backup can be used to back up

components of DFS.

and restore data files or an entire server.

Describe DFS namespaces.

Lessons

Network File and Print Services



Configuring DFS Replication

Explain how to manage

Performing Initial

Lab : Configuring and Troubleshooting


FSRM.


Lab : Implementing BranchCache

BitLocker


Configuring the Required

Describe how to monitor
network storage by using

Namespace

with EFS




Installing the DFS Role
Service

see how both EFS and BitLocker can be
used to increase the security of files that

and File Management



Encrypting and Recovering



Files




Recovering Network Data

Module 14: Monitoring Windows

with Volume Shadow Copies

Server 2008 Network Infrastructure



Monitoring Tools

Recovering Network Data

Servers



Using Performance Monitor

and Servers with Windows

When a system failure or an event that



Monitoring Event Logs

Server Backup

affects system performance occurs, you

Lab : Monitoring Windows Server 2008

Lab : Recovering Network Data and

need to be able to repair the problem or

Network Infrastructure Servers

Servers

resolve the issue quickly and efficiently.





Configuring Shadow Copies

With so many variables and possibilities in



Configuring a Scheduled

the modern network environment, the

Backup

ability to determine the root cause quickly

Lessons



Establishing a Performance
Baseline



Identifying the Source of a
Performance Problem

After completing this module, students

often depends on having an effective

will be able to:

performance monitoring methodology and

After completing this module, students

Describe how to configure

toolset. In this module, you will learn to

will be able to:

and use volume shadow

use performance-monitoring tools to

copies.

identify components that require

Describe how to configure

additional tuning and troubleshooting. By

and use Windows Server

identifying components that require

Backup.

additional tuning, you can improve the







efficiency of your servers.



Centralizing Events Logs

Describe monitoring tools for
Windows Server 2008 R2.



Describe how to use
performance monitor.



Describe how to monitor
event logs.

Associated Certifications & Exam
This course prepares students to write Exam 70-642: TS: Windows Server 2008 Network Infrastructure, Configuring, the only
course requirement to achieve the MCTS: Windows Server 2008 Network Infrastructure, Configuring certification.
On successful completion of this course students will receive a Torque IT attendance certificate.

Skip to main content

Course 6421B: Configuring and Troubleshooting a Windows Server 2008 Network Infrastructure: CONFIGURING AND TROUBLESHOOTING A WINDOWS SERVER 2008 NETWORK INFRASTRUCTURE: 0099751199675: Amazon.com: Books