70-410 Certification Path

1
Microsoft Certification
2
Session Objectives And Takeaways

• Session Objective(s)
• Certification Overview
• Exam Preparation per section
• Describe key 70-410 exam objectives
• Prepare more effectively use of the available
  study material
• Relate practical Windows Server 2012 R2
  experiences to the exam
• Identify areas that may require extra studying
• Action plan for exam preparation and success

3
For You

• Increased confidence in your abilities at work
• Enhanced product knowledge
• Learn about certification to educate your
  coworkers and bosses

4
(No Transcript)
5
Exam prep 70-410 70-417 MCSA Installing and
Configuring Windows Server 2012
(R2)
6
But first a little about me!

• Alfred Ojukwu
• alojukwu_at_microsoft.com
• 19 Years of IT Experience
• Senior Consultant with Microsoft Consulting
  Services (MCS)
• Desktop Enterprise Management, ConfigMgr 2012 and
  Intune
• Microsoft communities both Internal and External
• BlogSite
• http//thedevicepros.com
• _at_thedevicepros - twitter.com/thedevicepros
• Facebook http//www.facebook.com/thedeviceprofes
  sionals
• Member of TheKrewe

7
For Your Career

• Makes a great commitment
• Shows drive an initiative
• Tangible way to demonstrate mastery of a product
• Sets you apart from your peers at review time
• Recognition inside and outside of Microsoft
• Completely achievable at SPC

8
Changes to Certifications and Exams
Certification Requirements
Broader Skill Set
Relevance
Rigor
Recertification
Deeper Skill Set
9
MCSE and MCSD Certifications
10
Increased Rigor

• Reflection of the real world
• Learn more, validate more
• Solutions are more complex, questions must
  reflect that
• Best way to measure candidates know what they
  know
• New item types
• Fewer multiple choice
• Case studies
• Scenario based
• See big picture and make decisions
• Innovative item types

http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
11
Exam Tips
http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
12
Exam Basics

• 40-60 questions
• 1-4 hours to complete exam
• Can review questions
• Cannot move between case studies
• 700 is passing
• 700 is not 70

http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
13
How to interpret questions
Business Problem
All questions have a consistent anatomy
Goal Statement
One or Multiple Correct Answers
Questions are not intended to trick you
Multiple Distracters
14
Exam Scoring

• Each exam has a "cut score"
• Each question is worth one point
• No partial credit
• No points deducted for wrong answers

http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
15
70-410
70-417
http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
16
70-410 Exam Objectives

• Install and Configure Servers (17)
• Configure Server Roles and Features (17)
• Configure Hyper-V (18)
• Deploy and Configure Core Network Services (17)
• Install and Administer Active Directory (14)
• Create and Manager Group Policy (16)

17
Install and Configure Servers (15 20)

• Install servers
• Planning
• Optimization
• Migration
• Configure servers
• Configure Server Core
• Delegation
• Offline image management
• Remote servers
• Configure local storage
• Planning for server storage
• Working with Disks

18
OS Licensing and Server Versioning

• Server 2012 is not available in 32-bit
• Data Center
• Standard
• Essentials (same functionality of standard and
  web version of Windows Server 2008)
• Foundations
• (Dont forget about Windows Hyper-V, Storage
  Multipoint Server 2012)
• Differences in licensing are exposed by the
  number of users and physical/virtual instances
  each support.

EDITION POSE INSTANCES VOSE INSTANCES
Datacenter 1 Unlimited
Standard 1 2
Foundation 1 0
Essentials 1 (POSE or VOSE) 1 (POSE or VOSE)
19
Windows Server 2012 Limits

• In comparison

Foundation Essentials Standard / Datacenter
Processor Limit 1 2 64
RAM 32GB 64GB 4TB
Max users 15 25 Unlimited
Routing and Remote Access (RRAS) 50 250 Unlimited
Active Directory Services Root only Root only Full
Active Directory Certificate Services CA Only CA Only Full
Hyper V / Server Core No No Yes
File Services limits 1 Standalone DFS root 1 Standalone DFS root Unlimited
20
Windows Server 2012Operating System
21
Installation Requirements

• Minimum Requirements
• 1.4 GHz 64-bit processor (no upgrade path from a
  32bit system)
• 512 MB RAM
• 32 GB available disk space (considered as the
  minimum)
• DVD drive (not normally a pre-requisite)
• Super VGA (1024 x 768) or higher resolution
  monitor
• Keyboard and mouse (or other compatible pointing
  device)
• Internet access
• Supported Maximums

Component WINDOWS SERVER 2012 WINDOWS SERVER 2008 R2
Logical processors 640 256
RAM 4 terabytes 2 terabytes
Failover cluster nodes 63 16
22
Features on Demand

• Used to keep the server builds simple and
  targeted

• Located at C\Windows\WinSXS directory
• Can be removed and added later if need
• Install-Windows Feature or Uninstalll-Windows
  Feature
• Can reduce the total disk space used.
• Also works on VHD and VHDX

• Install-WindowsFeature ltfeaturenamegt -Source
  wimd\sources\install.wim2

23
Windows 2012 Server Core

• Number of roles support by Server Core increased
• 12 of 19 roles are available
• Roles not available
• Active Directory Federation Services
• Fax Server Application Server
• Network Policy and Access Services
• Remote Desktop Services/Gateway/Session Host/Web
  Access
• Volume Activation Services
• Windows Deployment Services
• To switch from Server full to Core Server
• SQL Server can now run on Server core

• Uninstall-WindowsFeature Server-Gui-Shell,
  Server-Gui-Mgmt-Infra

24
Deploying Server Images

• DISM is your friend
• ..and my favorite DISM commands

Dism /online /Get-Features (run the cmd prompt
with admin account)
And.
Dism.exe /online /Enable-Feature
/FeatureNameNetFx3

• The ImageX tool is deprecated in Windows 8 and
  has been replaced with DISM for image management.

25
Configure Servers

• Post installation tasks to consider

• Configure the network connection
• Set the time zone
• Enable Remote Desktop
• Rename the computer
• Join a domain

26
Configuring NIC Teaming

• Support for 3 Different Modes in Server 2012

• Switch Independent Mode
• Incoming Traffic come through one card
• Unless virtual machines are in use
• Need to use Hyper-V Port or Dynamic
• Static Teaming or LACP
• Requires hardware support
• 802.3ad or 802.1ax
• Incoming Traffic Controlled
• Powershell commands to configure NIC Teaming

New-NetLbfoTeam NewTeam NIC1,NIC2 TeamingMode
Lacp LoadBalancingAlgorithm HyperVPorts
27
Windows Disk Settings

• Select a Partition Style
• Master Boot Record (MBR)
• GUID Partition Table (GPT)
• Select a Disk Type
• Basic Disks
• Dynamic Disks
• Divide Disk Into partitions
• Simple, Spanned, Striped, Mirrored, Raid 5
• Format the partitions
• NTFS, FAT32, FAT16

, ReFS
28
Working with Disks

• Creating and Mounting VHDs
• VHDs original format
• VHDX a new version that supports up to 64TB
• Fixed vs Dynamically Expanding
• Server Manager Usage
• Take advantage of the Disk Management Snap-in
• Determine your storage layout
• Create Storage Pools
• Create simple volumes
• Understand Storage Pools

29
Key Tips to Remember

• 64 Bit only
• Versions/editions and differences
• Things not in Core
• Disk Partitions, types, etc
• NIC Teaming
• DISM

http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
30
Practice Question

• Which of the following are valid reasons why
  administrators might want to install their
  Windows Server 2012 servers using the Server Core
  option? (Choose all that apply)
• A Server Core installation can be converted to
  the full GUI without reinstalling the operating
  system.
• The PowerShell 3.0 interface in Windows Server
  2012 includes more than 10 times as many cmdlets
  as PowerShell 2.0
• The new Server Manager in Windows Server 2012
  makes it far easier to administer servers
  remotely.
• A Windows Server 2012 Server Core license costs
  significantly less than a full GUI license.

Source Exam Ref 70-410
31
Configure Server Roles Features (1520)

• Configure file and share access
• Configure access-based enumeration (ABE)
• Volume Shadow Copy Service
• Migration
• Configure print and document services
• Configure the easy print driver
• Configure Enterprise Print Management
• Configure servers for remote management
• WinRM
• Configure Server Core
• Configure Firewal

32
Configuring File Shares (NTFS Permissions)

• Key tips to know for the exam..

• Network Only
• 1st line of defense
• Read, Change, Full Control
• Folders Only, Drive?
• Effective Permissions w/ Multiple Group
  Membership
• Deny Always Wins
• Combine w/NTFS
• Administrative Shares
• Configuring Access-Base Enumeration

33
Additional File Share Features

• Key tips to know for the exam..

• Configuring Offline Files
• Network Shares
• Files available when disconnected or work
  offline
• Very good synch mechanism
• Can be controlled through group policy
• Disk Quotas
• Limit disk usage
• Configuration
• Windows Explorer
• Soft or Hard configuration
• Folders in FSRM
• Templates
• Volume Shadow Copy
• Useful for VM Snapshots and Server Backup and
  File Recovery

34
Configuring Work Folders

• Key tips to know for the exam..

• File and Storage Services sub-role
• An additional access protocol
• Consolidated view of sync activity across your
  server

• Multiple Sync Shares per server
• Each share maps to a file system location
• Users/groups associated with a single share
• Policy defined per share

• Files stay in sync across all devices
• Local changes sync back to server and then to
  other devices
• SMB clients can continue to work directly with
  server files

35
Work Folders Infrastructure
Authentication Kerberos (Windows Auth) Digest
(Windows Auth) ADFS (OAuth)
Device management policy File encryption /
selective wipe Require password / device
lock Limit access to registered devices )ADFS(
Reverse Proxy
User Devices
Data management Quotas File screens Reporting Clas
sification RMS protection
Corporate Environment
User Devices
36
Configure Print and Document Servers

• Understand Windows Printing

• Print Devices Management
• Print Server Management
• Print Drivers
• Direct vs Network Printing
• Managing, Sharing Printers
• Migrating Printers
• Deploying Printers via GPO
• Consider Remote Desktop Easy Print

37
Key Tips to Remember

• Remember VSS applies to the ENTIRE VOLUME!
• Understand the difference between basic and
  advanced permissions
• Remote Management is deeply encouraged!
• Dont Forget about Quotas
• And storage pools ?

38
Practice Question

• You create a volume on Disk 1 on the server and
  create a shared folder on that volume.
• You want to enable the Volume Shadow Copy Service
  (VSS) on the shared folder. What step can you
  take to accomplish the task?

1. In the properties for the shared folder, enable
   shadow copy
2. In the properties for the volume, enable shadow
   copy for the volume
3. Use the xcopy command to enable shadow copy for
   the shared folder

Source MeasureUp
39
Configure Hyper-V (15 20)

• Create and configure virtual machine settings
• Configure Dynamic Memory
• Smart paging Resource Metering
• Configure Integrations
• Create and configure virtual machine storage
• Creating VHDs
• Configure Enterprise Print Management
• Configure servers for remote management
• Hyper-V Network Virtualization
• Optimize Network Performance
• Network Isolation
• Configure MAC Address and Legacy Virtual Address

40
Requirements

• 64-bit processor that includes hardware-assisted
  virtualization. This is available in processors
  that include a virtualization option, such as
  Intel Virtualization Technology (Intel VT) or AMD
  Virtualization (AMD-V) technology.
• A system BIOS that supports the virtualization
  hardware, on which the virtualization feature has
  been enabled.
• Hardware-enforced Data Execution Prevention
  (DEP), which Intel describes as eXecuted Disable
  (XD) and AMD describes as No eXecute (NX). This
  is a technology used in CPUs to segregate areas
  of memory for use by either storage of processor
  instructions or for storage Specifically, you
  must enable the Intel XD bit (execute disable
  bit) or the AMD NX bit (no execute bit).

41
VM Settings Configuration

• Typical Features
• Enable Dynamic Memory
• Ability to add Processor
• Add addition hard drives or disks
• IDE vs SCSI Controller
• Newer Features
• Integration Features
• Operating System shutdown
• Time Synchronization
• Data Exchange
• Heartbeat
• Backup (volume snapshot)

42
Demo Hyper-V Content
http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
43
Key Tips to Remember

• Up to 2,048 virtual CPUs
• Up to 4 terabytes (TB) of physical memory
• One server can host as many as 1,024 active VMs
• Each VM can have up to 64 virtual CPUs
• Up to 1 TB of memory.
• Support clusters with up to 64 nodes and 8,000
  VMs.

http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
44
Practice Question

• Server1 run Windows Server 2012 with the Hyper-V
  role installed.
• A Virtual Machine (VM) named VM1 runs on the
  Hyper-V server. VM1 is configured to use dynamic
  memory. You need to change memory allocation
  settings for VM1.
• Which memory allocation setting can NOT be
  changed while VM1 is running?

1. Minimum RAM
2. Maximum RAM
3. Startup RAM

Source MeasureUp
45
Deploy and Configure Core Network Services (15
20)

• Configure IPv4 and IPv6 addressing
• Configure IP Address Options, Subnetting,
  Supernetting
• IPv4 IPv6 Interoperability, Teredo ISATAP
• Deploy and configure Dynamic Host Configuration
  Protocol (DHCP) service
• Creating and configured DHCP scopes and
  reservations
• PXE boot options for client server
• DHCP Relay agent
• Deploy and configure DNS service
• Creating Primary and Forward lookup zones,
  DNSCache A PTR Records

46
Configure IPv4 and IPv6 Addressing

• Important factors to know about Addressing
• Understand IPv4 Subnetting Supernetting
• Understand IPv6 Addressing
• Global Unicast Address -gt Routable world wide
  unique to the internet
• Link-Local Unicast Address -gtAuto-Assigned IPv6
  address
• Assign an IPv6 Addresses and check the route
  (route print)

• Tunneling
• Automatic or Manual Configuration
• 6to4
• ISATAP
• Teredo
• NAT64

47
Deploy and Configure DHCP Service

• Understand the DHCP options available

48
Deploy Configure DNS

• DNS Terminology that you should know

• DNS System
• DNS Host Name Resolution
• Forward and reverse lookups
• Types of DNS
• Primary, secondary, Active Directory-Integrated,
  and stub zones
• For AD-Integrated, what is the domain partition,
  forestDNSZone, and domainDNSZone?
• Records SOA, NS, A, CNAME, PTR, SRV, and MX

Hint replication scope
49
Key Tips to Remember

• Understand the Importance of Root Hints
• Know your subnetting!!!
• IPv6 Global Unique or Local Address
• Powershell is not the only way to configure DNS
  and DHCP settings
• Global Names can still be used
• Be able to distinguish between stub zones,
  forward reverse lookup zones

50
Practice Question

• Server1 runs Server 2012 with the DNS Server role
  installed. Server1 is joined to the Active
  Directory domain.
• Users that have computers joined to the same
  domain are reporting that they are not able to
  resolve any server names.
• After troubleshooting this issue, you find that
  the DNS IP address configured on the clients is
  different from the IP address of Server1. You
  need to prevent this issue in the future. What
  should you do?

1. Configure a static IP address for Server1
2. Create a PTR DNS resource record for Server1
3. Configure static IP addresses for client computers

Source MeasureUp
51
Install and Administer Active Directory (15 20)

• Install and Administer Active Directory
• Add or Remove, Upgrade DCs, Install AD DS, via
  Server Core or (IFM)
• Resolve DNS SRV registration Issues
• Configure Global Catalog servers
• Create and manage Active Directory users and
  computers
• Create, Copy, Configure or Delete user or
  computer objects
• Perform bulk operations, including offline
  domain join, etc.
• Create and manage Active Directory groups and
  organizational units (OUs)
• Manage Groups and Group Memberships in Active
  Directory

52
Install and Administer Active Directory

• Things to Remember In Active Directory

• Know your FSMO roles
• AD DS is different from AD LDS
• Installing AD from media (IFM) will work
• DC Cloning is still cool!
• Powershell TidBits
• Its relevant so use it when you can

• Note The Dcpromo.exe program from previous
  version of Windows Server has been deprecated in
  favor of the Server Manager domain controller
  installation process.
• It is still possible to automate AD DS
  installations by running Dcpromo.exe with an
  answer file.

53
Create and Manage ADUC

• More things to remember about Active Directory

• Automate, automate, automate!
• The Active Directory Administrative Center
• DSADD, LDIFDE CSVDE still live
• Two new(er) features
• Recycle Bin
• Fine-Grained Passwords

54
Create and Manage AD Users and Groups

• Tell me something I may not know

• Distribution Groups vs Security Groups
• Understand Group scopes
• Group Nesting How does it work
• A few more details
• Create groups Active Directory Administrative
  Center
• Create OUs for decentralized administration

55
Practice Question

• Currently all domain controllers run Server 2008
  R2. You install a Windows Server 2012 server. You
  need to promote the Server 2012 server to a
  domain controller. You need to use the Install
  From Media (IFM) option. What should you do?

1. Create a system state backup from any Server 2008
   R2 server
2. Upgrade one of the existing Server 2008 R2 domain
   controllers to Server 2012 first and then create
   an IFM backup
3. Create an IFM backup from any existing Sever
   2008R2 backup

Source MeasureUp
56
Create and Manage Group Policy (15 - 20)

• Group Policy objects (GPOs)
• Configure a central store, manage starter GPOS
• GPO Links, security filtering and manage local
  GPOs
• Configure Security Policies
• User rights assignment
• Security Options and Templates
• Audit Policy and manage local user request
• Configure Application Restriction Policies
• Rules enforcement, Applocker Rules and Software
  Restrictions
• Configure Windows Firewall
• Firewall Policies to allow\deny certain access.

57
Create Group Policy Objects

• What is Group Policy?
• Deploy software, configure registry based
  settings, configure security settings
• Group Policy objects
• 2 default policies Domain, Domain Controller
• Domain Admins, Group Policy Creator Owners
• Link to sites, domains, OUs
• Not link directly to users, groups, computers
• Can use security filtering
• Policy applies to user/computer

58
Create Group Policy Objects

• Types of GPOS
• Local GPOs
• Non-Local GPOs
• Starter GPOS
• Group Policy objects
• 2 default policies Domain, Domain Controller
• Domain Admins, Group Policy Creator Owners
• Link to sites, domains, OUs
• Not link directly to users, groups, computers
• Can use security filtering
• Policy applies to user/computer

59
Create Application Restriction Policies

• Deploy software
• Publish to users
• Assign to users
• Assign to computers
• Software removal
• Software Restriction Policies
• AppLocker
• Win7 2008 R2

60
Key tips to know

• Remote GP update
• GP Infrastructure Status
• Windows RT GP Support
• Starter GPOS

61
Practice Question

• You are the system administrator for a
  medium-sized Active Directory Domain. Currently,
  the environment supports many different domain
  controllers, some of which are running Windows
  2003 and Server 2012. When you are running domain
  controllers in this type of environment, which of
  the following types of groups cant you use?
  (Choose all the apply)

1. Universal security groups
2. Global Groups
3. Domain Local Groups
4. None. You can use all group types

Source Study Guide
http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
62
In Review Session Objectives And Takeaways

• Session Objective(s)
• Certification Overview
• Exam Preparation per Section
• Describe key 70-410 exam objectives
• Prepare more effectively using available study
  material
• Relate practical Windows Server 2012 experience
  to exam
• Identify areas that may require extra studying
• Action plan for exam preparation and success

http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
63
Related Content

• Addition Exam Prep Sessions
• EXM08 Exam Prep 70-410 and 70-417 - MCSA
  Windows Server 2012 (Repeated)
• Tuesday, May 13 500 PM - 615 PM Room Hilton L2
  Ballrm F (Alfred Ojukwu)
• EXM02 Exam Prep 70-411 and 70-417 - MCSA
  Windows Server 2012
• Monday, May 12 300 PM - 415 PM Room Hilton L2
  Ballrm F (Alfred Ojukwu)
• EXM03 Exam Prep 70-412 and 70-417 - MCSA
  Windows Server 2012
• Monday, May 12 445 PM - 600 PM Room Hilton L2
  Ballrm F (Peter De Tender)
• EXM10 Exam Prep 70-413 and 70-414 - MCSE Server
  Infrastructure
• Wednesday, May 14 1015 AM - 1130 AM Room
  Hilton L2 Ballrm F (AlfrRyan Sokolowski)
• Hands-on Labs
• Any session that starts with PCIT-H3XX Windows
  Server 2012 R2

64
Resources
65
Complete an evaluation and enter to win!
66
Evaluate this session
Scan this QR code to evaluate this session.
67
http//www.allpass4sure.com/microsoft-pdf-70-410.h
tml
2014 Microsoft Corporation. All rights
reserved. Microsoft, Windows, and other product
names are or may be registered trademarks and/or
trademarks in the U.S. and/or other
countries. The information herein is for
informational purposes only and represents the
current view of Microsoft Corporation as of the
date of this presentation. Because Microsoft
must respond to changing market conditions, it
should not be interpreted to be a commitment on
the part of Microsoft, and Microsoft cannot
guarantee the accuracy of any information
provided after the date of this presentation.
MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED
OR STATUTORY, AS TO THE INFORMATION IN THIS
PRESENTATION.