MCSE 70-291: IT Certification Article

The Import Virtual Machine dialog box asks you for the path to the exported virtual machine and allows you to decide if you want to reuse the old virtual machine ID.You want to reuse old virtual machine IDs if you’re moving all virtual machines from a host to a new target machine. The virtual machines are practically the same as on the source system. However, you do not want to reuse old virtual machine IDs if you used Export to clone a virtual machine.

Because Hyper-V uses the import folder as the new target folder for the imported virtual machine, an exported virtual machine can be imported only once. Of course, if you copy the files to a different location before importing them, you can overcome this limitation.

When you import a virtual machine with state data, Hyper-V will use the import path for the virtual hard disks as well as snapshots in its virtual machine configuration XML. Thus, you’re able to import an exported machine only once. For that reason, the import folder should already be on the host’s target disk.

You receive this warning because the virtual machine has probably one or more hard drives configured that now point to no VHD file. You need to correct these settings before starting the virtual machine to have this work.

With virtual machine snapshots, you can save a copy of the virtual machine at any point in time, including while the virtual machine is running. You can take multiple snapshots of a virtual machine and then revert it to any previous state by applying a snapshot.

Using snapshots makes it easier to diagnose the cause of errors by reducing the number of times you need to repeat a task or sequence within a virtual machine. The benefit is obvious; if you use snapshots to revert to a previous virtual machine configuration, you do not need to copy virtual machines to keep a state. Thus it is a quick and easy way to back up a certain state of your virtual machine.

You can create a snapshot when a virtual machine is in a running, saved, or turned-off state. It’s only from a paused state that you cannot perform a snapshot.

Installing TS Web Access

Follow these steps to install TS Web Access.

1.Open Server Manager. Click Start-Administrative Tools-Server Manager.

2. Click Roles and Expand.

3. Right click Terminal Server and click Add Roles Services.

4. Select TS Web Access. If all the roles required for TS Web Access are not installed, you will receive a prompt to install them. Click Add Required Role Services.

5. Click Next.

6. If installing IIS is required, click Next on the Introduction to Web Server page.

7.On the Roles Services Selections for IIS page, click Next.

8. On the Con?rm Installation Selections page, click Install.

9. On the Installation Results page, verify that the installation was successful and
click Close.

If the TS RemoteApp server and the TS Web Access server are separate, the computer account of the TS Web Access server must be added the TS Web Access Computer security group on the TS RemoteApp server. In Exercise 2.15, you’ll add the computer account to the TS Web Access group.

Adding the Computer Account of the TS Web Access Server to the TS RemoteApp Server

Follow these steps to add the computer account to the TS Web Access group.

1.Click Start-Administrative Tools-Computer Management.

2. Expand Local Users and Groups and click Groups.

3. Double-click TS Web Access Computers.

4. Click Add.

5. Click Objects Types, select Computers, and click OK.

6. Type the computer name of the TS Web Access server and click OK.

7. Click OK.

By default, the TS Web Access website is http:///ts , where < server_name> is the NetBIOS or the fully quali ?ed domain name of the TS Web Access server. Launching the site, you can see the TS RemoteApp programs that are TS Web Access enabled. Fig- ure 2.4 shows the TS Web Access page with the available program list.

When you launch an application as a TS RemoteApp and launch an application from the local computer, it becomes very dif ?cult to tell the difference between the TS RemoteApp and the local application. Figure 2.5 shows WordPad launched as a TS RemoteApp and launched locally.

Microsoft Point of Service for .NET Device Redirection

Microsoft Point of Service (POS) for .NET Device Redirection allows peripheral devices such as bar code scanners and magnetic card readers to interface with Terminal Services for Windows 2008. Microsoft POS for .NET 1.1 is available to download at the Microsoft Download Center. Once it’s installed, the Terminal Services UserMode Port Redirector service must be restarted.

Terminal Services Easy Print

Microsoft has improved printing in Terminal Services for Windows 2008 by adding Ter- minal Services Easy Print and group polices that enable the redirection of only the default client printer. In the past, the client computer and the Terminal Services server had to have the proper driver installed in order to successfully print. Now matching the drivers on the two different systems is no longer necessary because the TS Easy Print driver proxies all requests to the client’s actual driver. This feature will please many administrators who had to support printer drivers in the previous version of Terminal Services. Another perk for administrators is that TS Easy Print will increase the scalability and decrease the complex- ity of the TS server by limiting the number of printers the spooler has to enumerate. When a TS session is created, Winlogon will redirect a particular printer instead of redirecting all printers. The last bene?t of TS Easy Print is that administrators will appreciate the support for legacy print drivers.

Although TS Easy Print has decreased administrator headaches with printing in Ter- minal Services, only a select client base will receive its bene?t. TS Easy Print is available only on client computers running Windows Vista SP1 or Windows Server 2008 using the RDC 6.1 and either the Microsoft .NET Framework 3.0 Service Pack 1 or Microsoft .NET Framework 3.5 or later.

Single Sign-On for Terminal Services

With Single Sign-On for Terminal Services, a domain user can enter their credentials once and gain access to a terminal server or their remote application. The current credentials of the logged-on user will be passed to the connecting TS server without the user having to retype their password. To use Single Sign-On (SSO), the client must be running on Windows Vista or another Windows 2008 Server machine, the user must have the appropri- ate rights to log on, and the client computer and TS server must be in the same domain. Exercise 2.8 demonstrates the process to con ?guring the Authentication level of Windows Server 2008.

Configuring Authentication of a Windows 2008 Terminal Server

Follow these steps to set Authentication type for Window Sever 2008 Terminal Server.

1.Open Terminal Server Con?guration. Click Start- Administrative Tools
- Terminal Services-Terminal Services Con?guration.

2. Under Connections, right-click RDP-TCP and choose Properties.

3. On the General tab, verify that the Security Layer value is either Negotiate or SSL (TLS 1.0) and then click OK.

Device Redirection

The following sections are about the device redirection framework for Windows Server 2008. Device redirection gives users the ability to connect physical devices on their local computer and use them within their Terminal Services session. The ?rst section discusses Plug and Play device redirection for media players and digital cameras based on the Picture Transfer Proto- col (PTP). The second section introduces Microsoft Point of Services for .NET device redirection. In third section, we discuss printing redirection with TS Easy Print.

Plug and Play Device Redirection for Media Players and Digital Cameras

New to Windows Server 2008 and RDC 6.0 is the ability to redirect speci ?c Plug and Play (PNP) Windows portable devices. These devices include media players and digital cameras based on the Media Transfer Protocol (MTP) and the Picture Transfer Protocol (PTP), respectively. Plug and Play device redirection allows applications to access devices whether the application is running in a TS remote desktop or with TS RemoteApp.

Another new feature is the ability to attach Plug And Play devices after a session has already been established with the Devices that I plug in later option within the Remote Desktop Connection client software. When a new session is launched, Plug and Play noti- ?cations will appear in the Taskbar on the client computer. The newly detected device is attached to that particular session and is not accessible from any other session. Exercise 2.7 walks us through the process of enabling Plug and Play device redirection.

Redirect Plug and Play Devices

Follow these steps to enable Plug and Play device redirection.

1.Click Start-All Programs-Accessories-Remote Desktop Connection. (It is also
possible to start the RDC client software by typing mstsc in the run line.)

2. In the Remote Desktop Connection dialog box, click Options.

3. On the Local Resources tab, click More.

4. Under Local devices and resources expand Supported Plug and Play Devices.

5. Choose the device you want to redirect.

6. To make Plug and Play device that you will plug in later available, select the Devices that I plug in later check box.

7. Click Connect to launch the new session.

DiskPart is a command-line utility that con ?gures and manages disks, volumes, and partitions on the host computer. It can also be used to script many of the storage management commands. DiskPart is a very robust tool and should be studied on your own because it beyond the scope of this book. Figure 1.6 shows the various commands and their function for the DiskPart utility.

FIGURE 1. 6 DiskPart commands

DiskRAID is also a scriptable command-line utility that con?gures and manages hardware RAID storage systems. However, at least one VDS hardware provider must be installed for DiskRAID to be functional. DiskRAID is another useful utility and should be studied on your own because it’s beyond the scope of this book.

Storage Manager for SANs Storage Manager for SANs is a graphical user interface utility that is used to manage SANs. It will be discussed further in the following section.

Storage Manger for SANs (SMfS)

Storage Manager for SANs is a utility that is used to create and manage LUNs on both Fibre Channel and iSCSI storage arrays that support Virtual Disk Service (VDS). A LUN is similar to a volume in that it is a logical representation of a disk drive that is a part of a storage array. A SAN using Storage Manager simpli ?es the management of these resources in a SAN environment because it is a centralized location were LUNs can be assigned access and control privileges even though Fibre Channel and iSCSI use different types of hardware and network protocols.

To use Storage Manager for SANs, you must make sure the server and the storage array
meet the following requirements:

The server must have the Storage Manager for SANs feature installed. The storage array must support VDS.

The VDS hardware provider’s software for the storage array must be installed on the server.

The storage array must be directly attached or accessible over the network.

In order to manage an iSCSI array through Storage Manager for SANs, you must install an iSCSI initiator on the server.

Exercise 1.8 demonstrates the procedures for installing the Storage Manager for SANs feature on Windows Server 2008.

Installing Storage Manager for SANs

Follow these steps to install Storage Manager for SANs:

1.Click Start-Administrative Tools-Server Manager.

2. Right-click Features and select Add Features.

3. In the Add Features Wizard, check Storage Manager for SANs and click Next.

RAID-5 is also known as disk striping with parity. With disk striping with parity, you use three or more disks (with a maximum of 32) striped across all the disks with an additional block of error-correction called parity, which is used to reconstruct the data in the event of a disk failure. RAID-5 has slower write performance than the other RAID types because the OS must calculate the parity information for each stripe that is written, but the read performance is equivalent to a stripe set, RAID-0, because the parity informa- tion is not read. Like RAID-1, RAID-5 comes with additional cost considerations. For every RAID-5 set, roughly an entire hard disk is consumed for storing the parity information. For example, a minimum RAID-5 set requires three hard disks, and if those disks are 300GB each, approximately 600GB of disk space is available to the OS and 300GB is consumed by parity information, which equates to 33.3 percent of the available space. Similarly, in a ?ve-disk RAID-5 set of 300GB disks, approximately 1200GB of disk space is available to the OS, which means that 20 percent of the total available space is consumed by the parity information. The words roughly and approximately are used when calculating disk space because a 300GB disk will really be only about 279GB of space. This is because vendors de? ne a gigabyte as one billion bytes, but the OS de?nes it as 2^30(1,073,741,824) bytes. Also remember that ?le systems and volume managers have overhead as well. Table 1.1 breaks down the various aspects of the supported RAID types in Window Server 2008.

Storage in Windows Server 2008

RAID-1 total available disk space is calculated by taking one half of the sum of both disks in the disk set, and RAID-5 total available disk space is calculated by subtracting the space of one entire disk from the sum of all the disks in the disk set.

Creating RAID Sets

Now that you understand the fundamental concepts of RAID sets and how to use them, we can now look at the creation of RAID sets in Windows Server 2008. The process of creating a RAID set is the same as the process for creating a simple or spanned volume set except for the minimum disk requirements associated with each RAID type. Creating a mirrored volume set is the same as creating a volume set, as shown in Exercise 1.3, except you will select New Mirrored Volume in the fourth step. It is after the disk select wizard appears that you’ll begin to see the difference. Since a new mirrored volume is being created, the volume requires two disks. During the disk select process, if only one disk is selected, the Next button will be unavailable because the disk minimum has not been met. Refer to Figure 1.1 to view the Select Disks page of the New Mirrored Wizard during the creation of a new mirrored volume and notice that the Next button is not available.

When you schedule the exam, you will be provided with instructions regarding appoint- ment and cancellation procedures, ID requirements, and information about the testing center location. In addition, you will receive a registration and payment conrmation letter from Prometric.

Microsoft requires certi ?cation candidates to accept the terms of a nondisclosure agreement before taking certication exams.

Is This Book for You?

If you want to acquire a solid foundation in Windows Server 2008 applications, and your goal is to prepare for the exam by learning how to use and manage the new operating system functions in practical ways, this book is for you. You’ll ?nd clear explanations of the fundamental concepts you need to grasp and plenty of help to achieve the high level of professional competency you need to succeed in your chosen eld.

If you want to become certi?ed as an MCTS, this book is de?nitely for you. However, if you just want to attempt to pass the exam without really understanding Windows Server 2008 applications, this Study Guide is not for you. It is written for people who want to acquire hands-on skills and in-depth knowledge of Windows Server 2008 applications.

What’s in the Book?

What makes a Sybex Study Guide the book of choice for hundreds of thousands of MCPs? We took into account not only what you need to know to pass the exam, but what you need to know to take what you’ve learned and apply it in the real world. Each book con- tains the following:

Objective-by-objective coverage of the topics you need to know Each chapter lists the objec- tives covered in that chapter.

Introduction

The topics covered in this Study Guide map directly to Microsoft’s official exam objectives. Each exam objective is covered completely.

Assessment test
Directly following this introduction is an assessment test that you should take. It is designed to help you determine how much you already know about Windows Server 2008 Active Directory. Each question is tied to a topic discussed in the book. Using the results of the assessment test, you can ?gure out the areas where you need to focus your study. Of course, we do recommend you read the entire book.

Exam essentials To highlight what you learn, you’ll ?nd a list of exam essentials at the end of each chapter. The exam essentials section brie?y highlights the topics that need your particular attention as you prepare for the exam.

19. Which of the following group scope conversions is not possible?
A. Global to universal
B. Domain local to universal
C. Universal to global
D. Universal to domain local

20. Which of the following group types can contain members from any domain but access resources only from within its own domain?
A. Global
B. Universal
C. Domain local
D. Local

Answers to Review Questions

19. D. Although you can convert from domain local to universal, it is not possible to convert from universal to domain local. This is because universal groups may contain memberships that access resources outside of the local domain.

20. C. Domain local accounts can contain membership from any domain but can access resources only from within their own domain. This is because domain local accounts are designed to limit the scope of access to only the domain.

Chapter 6
Planning and

Designing Group

Policy

Objectives cOvereD in this chaPter:

__Design the enterprise-level group policy strategy.

_N May include but is not limited to group policy hierarchy and scope filtering, control device installation, and authentication and authorization

An easy statement to make about Group Policy at the enter- prise level is that if your network is the heart of your infra- structure, Group Policy is the circulatory system that directs it. The only difference is that with Group Policy you can?t rely upon divine design to make it work. Instead, administrators have to do some of the hard work themselves.

You are configuring an image of Windows Vista that will be deployed to a new office location for your company. You are configuring the desktop. You want to ensure that the taskbar is viewable even when applications are opened in full-screen mode. You also do not want the taskbar to be moved by the users. How can you configure these options? A. By right-clicking an empty space of the taskbar, selecting Properties, and clicking the Toolbars tab B. By right-clicking an empty space of the taskbar, selecting Properties, and clicking the Taskbar tab C. By right-clicking an empty space of the taskbar, selecting Properties, and clicking the Notification Area tab D. By right-clicking an empty space of the taskbar, selecting Properties, and clicking the Start.

You are the network administrator for a manufacturing company. You are configuring several Windows Vista computers for a group of newly hired engineers. You want to optimize the new computers so that it uses the new user interface enhancements included with Windows Vista. How can you accomplish this task? A. By right-clicking an empty space of the desktop, selecting Personalize, and clicking Display Settings B. By right-clicking an empty space of the desktop, selecting Personalize, and clicking Desktop Background C. By right-clicking an empty space of the desktop, selecting Personalize, and clicking Screen Saver D. By right-clicking an empty space of the desktop, selecting Personalize, and clicking Theme

You are configuring a computer to be deployed to another network administrator. You want to allow the other administrator to quickly access the Administrative Tools options available with Windows Vista. How can you accomplish this task?

A. By right-clicking an empty space of the taskbar, selecting Properties, and clicking Desktop on the Toolbars tab

B. By right-clicking an empty space of the taskbar, selecting Properties, and clicking Show Quick Launch on the Taskbar tab

C. By right-clicking an empty space of the taskbar, selecting Properties, and clicking Customize on the Start Menu tab

D. By right-clicking an empty space of the taskbar, selecting Properties, and clicking Customize on the Notification Area tab

You are configuring Windows Sidebar on your Windows Vista computer. You want to ensure that the Sidebar is displayed every time you reboot the computer. Which of the following should you do to accomplish this goal?

A. Enable the Sidebar by clicking Start Computer
B. Install Windows Sidebar by clicking Start
C. Open the Windows Sidebar properties dialog box by clicking Start Control Panel

D. Open the Windows Sidebar properties dialog box by clicking Start Control Panel

To roll back a driver to a previous state, you should use Device Manager. In Device Man- ager, you can view driver information for an installed device, and you can update the driver or roll it back to a previous state.

To ensure that data is saved to the hard disk, that the computer is quickly accessible on wakeup, and that the computer is never shut down when put into a power-saving state, you should configure the computer to use sleep mode. Sleep mode is a combination of standby mode and hibernate mode. The user’s session is quickly accessible on wakeup, but the data is saved to the hard disk. Sleep mode is the preferred power-saving mode in Windows Vista.

Windows Vista offers many options for configuring the Desktop to suit personal preferences. These options include customizing the taskbar and Start Menu, creating shortcuts, setting display

Because of Windows Vista’s modular architecture, support for multiple languages and regional settings is improved over previous versions. The support that comes with localized editions of Windows Vista allows users to view, edit, and print multilingual documents, which can include documents that are written in almost any language. You can also specify locale settings for the Desktop to customize items such as the date format and currency for your geographical location.

The accessibility options support users with limited sight, hearing, or mobility. You can configure the Desktop and use Windows Vista utilities to provide a higher degree of accessibility.

This chapter describes how to manage Desktop settings, multilanguage support, and acces-sibility options.

You can set Windows Vista to use the Windows Vista Aero theme, the Windows Vista Stan- dard theme, the Windows Vista Basic theme, the Windows Classic theme, or any customized theme you want. The Windows Vista Desktop , shown in Figure 4.1, appears after a user has logged on to a Windows Vista computer. Users can configure their Desktops to suit their per- sonal preferences and to work more efficiently.

If you have installed Windows Vista from a clean install, you will notice that the Desk- top is clean, with all the options for managing the computer grouped accessible from the Start Menu.

By default, stores the documents that are created. Each user has a unique Documents folder, so even if a computer is shared, each user will have unique personal folders.

Lists the documents you have recently accessed. Shows any pictures that are in the user’s Pictures folder. Shows any music that is in the My Music folder.

Allows you to centrally manage your computer’s files, hard drives, and devices with removable storage. Also allows you to manage system tasks and other places (such as other computers on the network) and to view details about your computer.