Microsoft Windows Server 2019 Inside Out - …

1 Windows Server 2019 Inside OutOrin ThomasWindows Server 2019 Inside OutPublished with the authorization of Microsoft Corporation by: Pearson Education, 2020 by Orin ThomasAll rights reserved. This publication is protected by copyright, and permission must be obtained from the publisher prior to any prohibited reproduction, storage in a retrieval system, or transmission in any form or by any means, electronic, mechanical, photocopying, recording, or likewise. For information regarding permissions, request forms, and the appropriate contacts within the Pearson Education Global Rights & Permissions Department, please visit patent liability is assumed with respect to the use of the information contained herein.

2 Although every precaution has been taken in the preparation of this book, the publisher and author assume no responsibility for errors or omissions. Nor is any liability assumed for damages resulting from the use of the information contained : 978- 0-13-549227-7 ISBN-10: 0-13-549227- 0 Library of Congress Control Number: 2020935953 ScoutAutomatedPrintCodeTrademarksMicroso ft and the trademarks listed at on the Trademarks webpage are trademarks of the Microsoft group of companies. All other marks are property of their respective and DisclaimerEvery effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied.

3 The information provided is on an as is basis. The author, the publisher, and Microsoft Corporation shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the programs accompanying SalesFor information about buying this title in bulk quantities, or for special sales opportunities (which may include electronic versions; custom cover designs; and content particular to your business, training goals, marketing focus, or branding interests), please contact our corporate sales department at or (800) government sales inquiries, please contact For questions about sales outside the , please contact Brett BartowExecutive Editor: Loretta YatesSponsoring Editor: Charvi AroraDevelopment Editor: Rick KughenManaging Editor: Sandra SchroederSenior Project Editor: Tracey CroomCopy Editor: Charlotte KughenIndexer: Valerie Haynes PerryProofreader: Dan FosterTechnical Editor.

4 Vince AverelloEditorial Assistant: Cindy TeetersCover Designer: Twist Creative, SeattleCompositor: Danielle FosterGraphics: Vived Graphics iiiContents at a glanceChapter 1

5 Administration tools ..1 Chapter 2 Installation options ..31 Chapter 3 Deployment and configuration ..47 Chapter 4 Active Directory ..109 Chapter 5 DNS, DHCP, and IPAM ..159 Chapter 6 Hyper-V ..191 Chapter 7 Storage ..229 Chapter 8 File servers ..273 Chapter 9 Internet Information Services ..309 Chapter 10 Containers ..337 Chapter 11 Clustering and high availability ..369 Chapter 12 Active Directory Certificate Services ..391 Chapter 13 Active Directory Federation Services ..437 Chapter 14 Dynamic Access Control and Active Directory Rights Management Services.

6 455 Chapter 15 Routing and Remote Access ..475 Chapter 16 Remote Desktop Services ..499 Chapter 17 Azure IaaS and hybrid services ..519 Chapter 18 Windows Subsystem for Linux ..575 Chapter 19 Hardening Windows Server and Active Directory ..581 Chapter 20 Security systems and services ..635 Chapter 21 Maintenance and monitoring ..653 Chapter 22 Upgrade and migration ..685 Chapter 23 Troubleshooting ..723 Index ..755 vTable of contents Introduction.

7 XxiChanges since Windows Server 2016 Inside Out .. , updates, and book 1 Administration tools ..1 Remote not local ..1 Privileged Access Admin Windows Admin Center ..6 Windows Admin Center Server Administration Manager console ..18 PowerShell ..19 One-to-many Desktop .. 2 Installation options ..31 Windows Server 2019 Server servicing branches ..33 Long Term Servicing Channel ..33 Semi Annual Channel ..33 Insider Preview Core ..35 Server Core interface ..36 Server Core roles ..37 Server Core App Compatibility Features on Demand.

8 42 When to deploy Server Core ..43vi Table of contentsServer with Desktop and 3 Deployment and configuration ..47 Bare metal versus images ..48 Modifying Windows Windows drivers and updates to roles and an and files ..57 Windows Deployment requirements ..60 Managing images ..62 Configuring groups and Machine machine templates ..68 VMM storage ..69 VMM a WDS to VMM ..75 VMM host groups ..76 Infrastructure configuration as State configuration Configuration Manager ..83 DSC push pull Server ..84 Chef Infra Development Kit.

9 89 Deploying Chef Chef cookbooks and Master Puppet agent to Windows Server ..99 Managing Windows Server Windows Module Pack ..102 Package-management utilities ..103 PowerShell Table of contents viiChapter 4 Active Directory ..109 Managing Active Directory ..109 Remote rather than local administration ..110 Active Directory Administrative Center ..110 Active Directory Users and Computers Directory Sites and Services console ..114 Active Directory Domains and Trusts console ..117 Domain controllers .. Core ..120 Global catalog servers.

10 121 Read only domain controllers ..121 Virtual domain controller DS structure ..125 Domains ..125 Domain functional and resource units ..127 Flexible Single Master Operations roles .. accounts ..130 Computer accounts ..133 Default groups ..134 Service policy ..138 GPO Policy preferences ..143 Administrative deleted Directory Recycle Directory AD DS with PowerShell ..152 Active Directory module .. 152 Group Policy module ..156 ADDSD eployment 5 DNS, DHCP, and IPAM ..159 DNS ..159 DNS zone types ..159 Zone and conditional zones.