Module 1
Server Management in
Windows Server 2012
Module Overview
• What's New in Server Manager
• Windows PowerShell and Server Core Enhancements
• What’s New in Active Directory
• Dynamic Access Control
• Introducing IP Address Management
Lesson 1: What's New in Server Manager
• Administering Servers with Server Manager
• Adding Roles and Features
Administering Servers with Server Manager
Using Server Manager, you can:
• Manage multiple servers from
one instance of Server Manager
• Deploy roles and features to
remote servers
• Generate Windows PowerShell
scripts for actions performed in
Server Manager
• Group servers
• View the status of
all servers from a single
location
• Determine whether roles on
the network are functioning
efficiently.
Adding Roles and Features
• Remotely deploy roles and features
• Add roles and features to virtual hard disks even if the
virtual machine is turned off.
Demonstration: Exploring Server Management in
Windows Server 2012
In this demonstration you will:
• Start the Server Manager console.
• Add a server role or feature.
• View role related events.
• Run the Best Practice Analyzer for a role.
• List the tools available from Server Manager.
• Open the Start Menu.
• Log off the currently logged on user.
• Restart Windows Server 2012.
Recorded Demo - Configuring Server Manager.wmv
POLLS
Lesson 2: Windows PowerShell and Server Core
Enhancements
• Using Windows PowerShell in Windows Server 2012
• Removing the Graphical Interface
Using Windows PowerShell in Windows Server 2012
The new PowerShell Integrated Scripting Engine (ISE) provides:
• Integrated help – enables you to search for Windows PowerShell cmdlets if
you know a few characters in their name.
• IntelliSense - which suggests values as you type and prompts you for
parameter values.
Removing the Graphical Interface
• Benefits of Using Server Core

Reduced update requirements.

Reduced hardware footprint.
• Graphical shell is now a feature. Can be turned off and
back on again
• Server Core Installation Options

Server Core. The standard deployment of Server Core. It is
possible to convert to the full version of Windows Server
2012.

Server Core with Management. This works the same as a
deployment of Windows Server 2012 with the graphical
component, except that the graphical components are not
installed
Lesson 3: What’s New in Active Directory
• Key New Features
• Deploying Domain Controllers
• Virtualization-Safe Technology
• Group Managed Service Accounts
Key New Features
New features of AD DS:
•
New deployment methods
•
Simplified administration
•
Virtualized domain controllers
•
Clone a Domain Controller
•
Active Directory Administration Center
•
Active Directory module for PowerShell
•
Windows PowerShell History Viewer
•
Active Directory Federated Services
•
Active Directory Based Activation
Deploying Domain Controllers
• All configuration of
domain controllers
can be done through
a wizard in Server
Manager
• AD DS binaries can
be installed using
PowerShell
• Dism.exe is more
complex to use
• Dcpromo is only
supported in
Unattended mode
Virtualization-Safe Technology
You can safely clone existing virtual domain controllers by:
• Creating a DcCloneConfig.xml file and storing it in the
AD DS database location.
• Taking the VDC offline and exporting it.
• Creating a new virtual machine by importing the
exported VDC.
DcCloneConfig.xml to
AD DS database
location
Export the VDC
Import the VDC
Group Managed Service Accounts
Group Managed Service Accounts provide:
• Automatic password and SPN management to multiple
servers in a farm
• A single identity for services running on a farm
Farm
server1
Farm
server2
Group
managed
service
account
Farm
server3
Lesson 4: Dynamic Access Control
• Introduction to Dynamic Access Control
• What are Claims?
• Using Central Access Policies and Rules
• Classifying Objects Using Resource Properties
Introduction to Dynamic Access Control
• Dynamic Access Control provides :

Data Identification

Access Control to files

Auditing of access to files

RMS protection integration
• Give users access to file system objects based on their
attributes in Active Directory and the Classification of the
file system object
Finance
Finance
What are Claims?
• Claims are statements made by AD DS about specific
user or object in AD DS
• AD DS in Windows Server 2012 supports :

User claims

Device claims
• Can be based on existing Active Directory attributes
• Typical implementation might use Department
•
•
•
•
Department: Sales
Level: 5
Site: Berlin
Role: Manager
Using Central Access Policies and Rules
• Central Access Rules define access based on user attributes (claims)
and resource properties
• Central Access Rules are grouped into Central Access Policies
• Central Access Policies are pushed to file servers using group policies
• A Central Access Policy has three configurable parts :

Applicability.

Access conditions.

Exception.
Classifying Objects Using Resource Properties
• You manage Resource Property objects in Resource Properties
container in Dynamic Access Control node
In ADAC
• There is a new Classification tab
for file system object
Properties in FSRM
• The Classification tab allows you to add
classifications to files and folders
Lesson 5: Introducing IP Address Management
• Introducing IP Address Management
• Server Discovery
• Address Space Management
Introducing IP Address Management
IPAM has the following functionality:
• Address Planning
DHCP
• Address Allocation
• Usage Tracking
• Troubleshooting
• Auditing
Key Prerequisites:


The IPAM server
must not be a
domain
controller
IPAM
DNS
You must log on to the IPAM server using a domain account
Server Discovery
• Agentless discovery
• Server connects to DHCP servers, DNS servers, domain
controllers, and Network Policy Servers
• Client connects to IPAM server to view data
• Client connects to DHCP and DNS servers to perform updates
Update
Query
DHCP,
DNS,
NPS,
Domain
Controllers
IPAM Client
IPAM Server
Agentless
Discovery
Address Space Management
• Address blocks
Contiguous range of IP addresses
• Address ranges
Sub-division of address block for
internal allocation
• IP addresses
Individual IP addresses