- ホーム
- > 洋書
- > 英文書
- > Computer / Operating Systems
Full Description
This is the most comprehensive and realistic guide to Windows Server 2012 planning, design, prototyping, implementation, migration, administration, and support. Extensively updated, it contains unsurpassed independent and objective coverage of Windows Server 2012's key innovations, including improved virtualization components, enhanced security tools, new web and management resources, and Windows 8 integration.Windows Server 2012 Unleashed reflects the authors' extraordinary experience implementing Windows Server 2012 in large-scale environments since its earliest alpha releases, reaching back more than two years prior to its official launch. Microsoft MVP Rand Morimoto and his colleagues fully address every aspect of deploying and operating Windows Server 2012, including Active Directory, networking and core application services, security, migration from Windows Server 2003/2008, administration, fault tolerance, optimization, troubleshooting, and much more.Valuable for Windows professionals at all skill levels, this book will be especially indispensable for intermediate-to-advanced level professionals seeking expert, in-depth solutions. Every chapter contains tips, tricks, best practices, and lessons learned from actual deployments: practical information for using Windows Server 2012 to solve real business problems.Plan and migrate from Windows Server 2003 and 2008 Leverage powerful capabilities that are truly new in Windows Server 2012 Install Windows Server 2012 and the GUI-less Windows Server Core Upgrade to Windows Server 2012 Active Directory Utilize advanced AD capabilities including federated forests and identity management Plan and deploy network services, from DNS and DHCP to IPv6, IPAM, and IIS Protect systems and data with server-level security, transport-level security, and security policies Deliver true end-to-end secured anytime/anywhere access to remote/mobile clients Efficiently configure and manage users, sites, OUs, domains, and for ests through Server Manager console Create more fault-tolerant environ ments with DFS, clustering, and Network Load Balancing Leverage major Hyper-V virtualization improvements in availability, redun dancy, and guest support Manage Active Directory more efficiently with Active Directory Administrative Center, Best Practice Analyzer, and PowerShell scripts Systematically tune, optimize, debug, and troubleshoot Windows Server 2012
Contents
Introduction 1Part I Windows Server 2012 Overview1 Windows Server 2012 Technology Primer 5When Is the Right Time to Migrate? 15Versions of Windows Server 2012 16Improvements for Continuous Availability 20Enhancements for Flexible Identity and Security 23Enabling Users to Work Anywhere 29Simplifying the Datacenter 35Addition of Migration Tools 44Identifying Which Windows Server 2012 Service to Install or Migrate to First 45Summary 49Best Practices 492 Planning, Prototyping, Migrating, and Deploying Windows Server 2012 51Determining the Scope of Your Project 52Identifying the Business Goals and Objectives to ImplementWindows Server 2012 52Identifying the Technical Goals and Objectives to Implement Windows Server 2012 55The Discovery Phase: Understanding the Existing Environment 61The Design Phase: Documenting the Vision and the Plan 64The Migration Planning Phase: Documenting the Process for Migration 69The Prototype Phase: Creating and Testing the Plan 74The Pilot Phase: Validating the Plan to a Limited Number of Users 76The Migration/Implementation Phase: Conducting the Migration or Installation 79Summary 80Best Practices 813 Installing Windows Server 2012 and Server Core 85Planning for a Server Installation 85Installing a Clean Version of Windows Server 2012Operating System 91Upgrading to Windows Server 2012 99Understanding Server Core Installation 103Managing and Configuring a Server Core Installation 105Performing an Unattended Windows Server 2012 Installation 113Summary 113Best Practices 113Part II Windows Server 2012 Active Directory4 Active Directory Domain Services Primer 115The Evolution of Directory Services 116Understanding the Development of AD DS 117AD DS Structure 118Outlining AD DS Components 121Understanding Domain Trusts 125Defining Organizational Units 127Outlining the Role of Groups in an AD DS Environment 128Understanding AD DS Replication 130Outlining the Role of DNS in AD DS 132Outlining AD DS Security 134Outlining AD DS Changes in Windows Server 2012 135Summary 146Best Practices 1465 Designing a Windows Server 2012 Active Directory 149Understanding AD DS Domain Design 149Choosing a Domain Namespace 151Examining Domain Design Features 152Choosing a Domain Structure 154Understanding the Single-Domain Model 155Understanding the Multiple-Domain Model 158Understanding the Multiple Trees in a Single-Forest Model 160Understanding the Federated-Forests Model 162Understanding the Empty-Root Domain Model 165Understanding the Placeholder Domain Model 167Understanding the Special-Purpose Domain Model 169Renaming an AD DS Domain 170Summary 173Best Practices 1736 Designing Organizational Unit and Group Structure 175Defining Organizational Units in AD DS 176Defining AD Groups 178OU and Group Design 182Starting an OU Design 182Using OUs to Delegate Administration 184Group Policies and OU Design 186Understanding Group Design 186Exploring Sample Design Models 188Summary 193Best Practices 1947 Active Directory Infrastructure 195Understanding AD DS Replication in Depth 195Understanding Active Directory Sites 200Planning Replication Topology 207Windows Server 2012 IPv6 Support 214Detailing Real-World Replication Designs 216Deploying Read-Only Domain Controllers 220Deploying a Clone Virtualized DC 223Summary 226Best Practices 2268 Creating Federated Forests and Lightweight Directories 229Keeping a Distributed Environment in Sync 229Active Directory Federation Services 235Synchronizing Directory Information with ForefrontIdentity Manager 238Harnessing the Power and Potential of FIM 241Summary 244Best Practices 2449 Integrating AD in a Unix Environment 245Understanding and Using Windows Server 2012 UNIX IntegrationComponents 245Reviewing the Subsystem for UNIX-Based Applications 252Administrative Improvements with Windows Server 2012 253Summary 255Best Practices 255Part III Networking Services10 Domain Name System, WINS, and DNSSEC 257The Need for DNS 258Getting Started with DNS on Windows Server 2012 262Resource Records 265Understanding DNS Zones 269Performing Zone Transfers 273Understanding DNS Queries 276Other DNS Components 277Understanding the Evolution of Microsoft DNS 285DNS in Windows Server 2012 286DNS in an Active Directory Domain Services Environment 288Troubleshooting DNS 292Secure DNS with DNSSEC 301Reviewing the Windows Internet Naming Service 308Installing and Configuring WINS 308Planning, Migrating, and Maintaining WINS 312Summary 316Best Practices 31611 DHCP, IPv6, IPAM 319Understanding the Components of an Enterprise Network 319Exploring DHCP 321Exploring DHCP Changes in Windows Server 2012 329Enhancing DHCP Reliability 336Exploring Advanced DHCP Concepts 347Securing DHCP 348IPv6 Introduction 349Configuring IPv6 on Windows Server 2012 360IP Address Management 367Installing the IPAM Server and Client Features 368Exploring the IPAM Console 382Summary 385Best Practices 38512 Internet Information Services 387Understanding Internet Information Services 8 387Planning and Designing IIS 8 391Installing and Upgrading IIS 8 393Installing and Configuring Websites 399Installing and Configuring FTP Services 408Securing IIS 8 418Summary 426Best Practices 427Part IV Security13 Sever-Level Security 429Defining Windows Server 2012 Security 429Deploying Physical Security 430Using the Integrated Windows Firewall with AdvancedSecurity 433Hardening Servers 437Examining File-Level Security 445Malware and Backup Protection 450Using Windows Server Update Services 452Summary 457Best Practices 45814 Securing Data in Transit 459Introduction to Securing Data in Transit in WindowsServer 2012 460Deploying a Public Key Infrastructure withWindows Server 2012 461Understanding Active Directory Certificate Services inWindows Server 2012 463Active Directory Rights Management Services 472Using IPsec Encryption with Windows Server 2012 475Summary 477Best Practices 47815 Network Policy Server, Network Access Protection and Routing and Remote Access 479Understanding Network Access Protection in WindowsServer 2012 480Deploying a Windows Server 2012 NetworkPolicy Server 482Enforcing Policy Settings with a NetworkPolicy Server 485Verifying the Client-Side Configuration 492Deploying a Virtual Private Network Using RRAS 494Summary 500Best Practices 501Part V Migrating to Windows Server 201216 Migrating from Active Directory 2008 / 2008 R2 to Active Directory 2012 503Beginning the Migration Process 504Big Bang Migration 507Phased Migration 512Multiple Domain Consolidation Migration 527Summary 542Best Practices 54317 Compatibility Testing 545The Importance of Compatibility Testing 546Preparing for Compatibility Testing 547Researching Products and Applications 553Verifying Compatibility with Vendors 556Microsoft Assessment and Planning Toolkit 562Lab-Testing Existing Applications 562Documenting the Results of the Compatibility Testing 565Determining Whether a Prototype Phase Is Required 565Summary 566Best Practices 567Part VI Windows Server 2012 Administration and Management18 Windows Server 2012 Administration 569Defining the Administrative Model 570Examining Active Directory Site Administration 571Configuring Sites 574Windows Server 2012 Active Directory Groups 582Creating Groups 583Managing Users with Local Security andGroup Policies 588Managing Printers with the Print Management Console 596Summary 602Best Practices 60219 Windows Server 2012 Group Policies and Policy Management 605Group Policy Overview 605Group Policy Processing: How Does It Work? 607Local Group Policies 609Domain-Based Group Policies 611Security Templates 611Understanding Group Policy 612Group Policy Policies Node 625Group Policy Preferences Node 628Policy Management Tools 628Designing a Group Policy Infrastructure 637GPO Administrative Tasks 641Summary 660Best Practices 66120 Windows Server 2012 Management and Maintenance Practices 663Going Green with Windows Server 2012 664Server Manager Dashboard 665Managing Windows Server 2012 Roles and Features 667Creating a Server Group 672Viewing Events 672Server Manager Storage Page 682Auditing the Environment 686Managing Windows Server 2012 Remotely 695Common Practices for Securing and ManagingWindows Server 2012 701Keeping Up with Service Packs and Updates 703Maintaining Windows Server 2012 707Summary 717Best Practices 71721 Automating Tasks Using PowerShell Scripting 719Understanding Shells 720Introduction to PowerShell 722Understanding PowerShell Fundamentals 724Using Windows PowerShell 751Summary 782Best Practices 78322 Documenting a Windows Server 2012 Environment 785Benefits of Documentation 786Types of Documents 787Planning to Document the Windows Server 2012 Environment 788Knowledge Sharing and Knowledge Management 788Windows Server 2012 Project Documents 789Administration and Maintenance Documents 802Network Infrastructure 806Disaster Recovery Documentation 807Change Management Procedures 810Performance Documentation 810Baselining Records for Documentation Comparisons 811Routine Reporting 811Security Documentation 812Summary 813Best Practices 81323 Integrating System Center Operations Manager 2012 with Windows Server 2012 815Windows Server 2012 Monitoring 816Understanding How OpsMgr Works 818OpsMgr Architecture Components 823Securing OpsMgr 834Fault Tolerance and Disaster Recovery 839Understanding OpsMgr Components 845Putting It All Together in a Design 850Installing Operations Manager 2012 858Configuring OpsMgr 873Administering OpsMgr 882Exploring the Windows 2012 Management Pack 889Summary 900Best Practices 900Part VII Remote and Mobile Technologies24 Server-to-Client Remote and Mobile Access 903What's New for Remote Access in Windows Server 2012 905VPN in Windows Server 2012 907RAS System Authentication Options 911VPN Protocols 913DirectAccess in Windows Server 2012 918Choosing Between Traditional VPN Technologiesand DirectAccess 928Setting Up the Unified Remote Access Role 932DirectAccess Scenario 933VPN Scenario 941Monitoring the Remote Access Server 958Summary 962Best Practices 96325 Remote Desktop Services 965Why Implement Remote Desktop Services? 966How Remote Desktop Works 968Understanding the Name Change 970RDS Roles 971Configuration Options and Fine-Tuning Terminology 979Planning for RDS 985Deploying RDS 991Deploying Virtual Desktops 1003Enabling RemoteFX 1011Securing and Supporting RDS 1013Summary 1017Best Practices 1017Part VIII Desktop Administration26 Windows Server 2012 Administration Tools for Desktops 1019Managing Desktops and Servers 1020Operating System Deployment Options 1021Windows Server 2012 Windows Deployment Services 1024Installing Windows Deployment Services 1026Customizing Boot Images 1037Creating Discover Images 1041Pre-Creating Active Directory Computer Accounts for WDS (Prestaged Systems) 1042Creating Custom Installations Using Capture Images 1046Automating Image Deployment Using Unattend Files 1049General Desktop Administration Tasks 1050Summary 1050Best Practices 105027 Group Policy Management for Network Clients 1053The Need for Group Policies 1054Windows Group Policies 1055Group Policy Feature Set 1058Planning Workgroup and Standalone Local Group PolicyConfiguration 1063Planning Domain Group Policy Objects 1066Managing Computers with Domain Policies 1075Configuring Preference Item-Level Targeting 1083Managing Users with Policies 1093Managing Active Directory with Policies 1100Summary 1112Best Practices 1112Part IX Fault Tolerance Technologies28 File System Management and Fault Tolerance 1115Windows Server 2012 File System Overview 1115File System Access Services and Technologies 1125Managing Windows Server 2012 Disks 1126Adding the File and Storage Services Role 1132Managing Data Access Using Windows Server 2012 Shares 1133File Server Resource Manager 1137The Distributed File System 1149Planning a DFS Deployment 1154Installing and Configuring DFS 1157Using the Volume Shadow Copy Service 1163Configuring Data Deduplication 1166Configuring Storage Spaces 1168Dynamic Access Control 1172Summary 1185Best Practices 118629 System-Level Fault Tolerance (Clustering / Network Load Balancing) 1189Building Fault-Tolerant Windows Server 2012 Systems 1190Windows Server 2012 Clustering Technologies 1192Determining the Correct Clustering Technology 1198Overview of Failover Clusters 1200Deploying Failover Clusters 1206Backing Up and Restoring Failover Clusters 1228Deploying Network Load Balancing Clusters 1232Managing NLB Clusters 1240Network Teaming 1242Summary 1243Best Practices 124330 Backing Up the Windows Server 2012 Environment 1245Understanding Your Backup and Recovery Needs and Options 1246Creating the Disaster Recovery Solution 1249Documenting the Enterprise 1250Developing a Backup Strategy 1251Windows Server Backup Overview 1252Using Windows Server Backup 1255Managing Backups Using the Command-Line Utility Wbadmin.exe and Windows PowerShell Cmdlets 1261Backing Up Active Directory 1264Backing Up Windows Server 2012 Roles 1269Volume Shadow Copy Service 1270Extending Server Backup to the Enterprise with Data Protection Manager 2012 1271Summary 1271Best Practices 127231 Recovering from a Disaster 1273Ongoing Backup and Recovery Preparedness 1273When Disasters Strike 1277Disaster Scenario Troubleshooting 1279Recovering from a Server or System Failure 1282Managing and Accessing Windows Server Backup Media 1289Windows Server Backup Volume Recovery 1290Recovering Role Services and Features 1294Summary 1301Best Practices 1301Part X Optimizing, Tuning, Debugging, and Problem Solving32 Optimizing Windows 2012 for Branch Office Communications 1303Key Branch Office Features in Windows 2012 1304Understanding Read-Only Domain Controllers 1304Using BitLocker with Windows Server 2012 1321BranchCache in Windows 2012 1332Printing with Branch Office Direct Printing 1345Summary 1347Best Practices 134733 Logging and Debugging 1349Using the Task Manager for Logging and Debugging 1349Using Event Viewer for Logging and Debugging 1357Performance Monitoring 1368Setting Baseline Values 1395Using the Debugging Tools Available in Windows Server 2012 1397Task Scheduler 1411Summary 1416Best Practices 141734 Capacity Analysis and Performance Optimization 1419Defining Capacity Analysis 1419Using Capacity-Analysis Tools 1424Monitoring System Performance 1442Optimizing Performance by Server Roles 1451Summary 1457Best Practices 1458Part XI Integrated Windows Application Services35 Sharepoint 2010 Products 1459History of SharePoint Technologies 1460SharePoint Foundation 2010 Versus SharePoint Server 2010 1462Identifying the Need for SharePoint 2010 Products 1466Designing a SharePoint 2010 Farm 1467Exploring a Basic SharePoint 2010 Site 1471Lists and Libraries in SharePoint 2010 1474Managing the Site Collection 1486Summary 1494Best Practices 149436 Deploying and Using Windows Virtualization 1497Understanding Microsoft's Virtualization Strategy 1497Integration of Hypervisor Technology inWindows Server 2012 1500Planning Your Implementation of Hyper-V 1504Installing the Microsoft Hyper-V Role 1507Becoming Familiar with the Hyper-V Administrative Console 1510Installing a Guest Operating System Session 1516Modifying Guest Session Configuration Settings 1520Launching a Hyper-V Guest Session 1523Using Snapshots of Guest Operating System Sessions 1525Quick Migration and Live Migration 1527Utilizing Hyper-V Replica for Site-to-Site Redundancy 1540Summary 1547Best Practices 1548Index 1549
