Identity with Windows Server 2016：Microsoft 70-742 MCSA Exam Guide

coverpage

Title Page

Copyright and Credits

Identity with Windows Server 2016: Microsoft 70-742 MCSA Exam Guide

About Packt

Why subscribe?

Packt.com

Contributors

About the authors

About the reviewer

Packt is searching for authors like you

Preface

Who this book is for

What this book covers

To get the most out of this book

Conventions used

Get in touch

Reviews

Installing and Configuring Active Directory

Introduction to Active Directory

Logical components

Partitions

Schemas

Domains

Domain trees

Forests

Sites

Organizational Units

Containers

Physical components

Domain controllers

Read-only domain controllers

Data stores

Global catalogs

What's new in AD DS in Windows Server 2016

AD DS administration tools

Installing and configuring the Active Directory

Installing a new forest and domain controller

Installing a new forest (GUI)

Installing a new forest on a Server Core installation

Installing a domain controller from Install from Media (IFM)

Removing a domain controller from a domain

Upgrading a domain controller

In-place upgrade

Domain-controller migration

Configuring a global catalog server

Transferring and seizing operation master roles

Transferring FSMO roles

Seizing FSMO roles

Installing and configuring a read-only domain controller (RODC)

Configuring domain controller cloning

Active Directory users and computers

Creating and managing users accounts

Creating and managing computer accounts

Configuring templates

Performing bulk Active Directory operations

Implementing offline domain joins

Managing accounts

Active Directory groups and organizational units

Creating configuring and deleting groups

Configuring group nesting

Converting groups

Managing group membership using Group Policy

Enumerating group memberships

Automating group-membership management using Windows PowerShell

Delegating the creation and management of Active Directory groups

Active Directory containers

Creating configuring and deleting OUs

Summary

Questions

Further reading

Managing and Maintaining Active Directory

Active directory authentication and account policies

Creating and configuring managed service accounts

Configuring Kerberos Constrained Delegation (KCD)

Managing service principal names (SPNs)

Configuring domain and local user password policy settings

Configuring and applying Password Settings Objects (PSOs)

Delegating password settings management

Configuring account lockout policy settings

Configuring the Kerberos policy settings within the group policy

Configuring authentication policies

Maintaining AD

Backing up AD and SYSVOL

Restoring AD

Non-authoritative restoration

Authoritative restoration

Managing the AD offline

Performing the offline defragmentation of an AD database

Configuring AD snapshots

Performing object-level and container-level recovery

AD Recycle Bin (configuring and restoring objects)

Configuring the Password Replication Policy (PRP) for RODC

Monitoring and managing replication

AD in enterprise scenarios

Configuring a multi-domain and multi-forest AD infrastructure

Upgrading existing domains and forests

Configuring the domain and forest functional levels

Configuring multiple user principal name (UPN) suffixes

Configuring external forest shortcut and realm trusts