MCSE 70-290, Windows Server 2003 Network Infrastructure

Virtualization is quickly becoming a hot topic. The potential for consolidation is tremendous, thus it will get more and more important.After reading this chapter, you should have a good understanding of the Hyper-V architecture and what it requires to install Hyper-V.

The section about installation and configuration covered various basic aspects of config- uring the virtualization environment. You learned about the different types of virtual networks that are available, the options for installing the Hyper-V role, and the various types of virtual hard disks that you can use to optimize virtualization for your specific scenario. You also learned how to configure virtual machines using the Hyper-V environment and how to create your own virtual datacenter on top of your Hyper-V machines. We showed you how to create and manage virtual machines, how to use Virtual Machine Connection to remotely control a virtual machine, and how to install Hyper-V Integration Components. And you learned how to export and import virtual machines as well as how to do snapshots of your virtual machine.

If you have never worked with virtualization software before, the information in this chapter may have been completely new to you. You should now be well prepared to try out Hyper-V in your own environment.

Understand Hyper-V’s architecture. When you have a good understanding of Hyper-V’s architecture, especially when an operating system in a virtual machine is hypervisor aware versus non-hypervisor aware, you have a solid understanding of what is important from an architectural perspective. You should know about the Hyper-V Integration Components and how they change the behavior of a virtual machine. Also know which operating systems the integration components are available for.

Know the hardware and software requirements as well as how to install Hyper-V. Hyper-V requires an x64-based processor and Data Execution Protection (DEP), and hardware assisted virtualization must enabled.

Don’t forget this! Also remember that you can install Hyper-V two ways: using Server Manager or using the command line in Server Core.

Understand virtual networks and virtual hard disks. Virtual networks and hard disks are the two most tested topics. You definitely should know the types of virtual networks available (i.e., external, internal only, and private virtual network) as well as all types of virtual hard disks (i.e., dynamically expanding, fixed size, differential, and physical or pass- through). You should be able to apply the correct one when needed. Don’t forget the Edit Virtual Hard Disk Wizard, which is also a good source for questions in the exam.

This section will explain how to move virtual machines between host computers or move them to a different drive. This is quite different to previous versions of Microsoft’s virtualization software. To move a virtual machine in Virtual Server 2005, you stopped the machine and moved its configuration file (VMC) as well as its virtual hard disk file (VHD) to the target location and then changed the VMC file to point to the VHD file.

Using Hyper-V, you cannot move the configuration files anymore. You need to use the Export feature to export the virtual machine and then use Import on the target machine to import the virtual machine to Hyper-V.

To export a virtual machine, it must be either in Off or Saved state. Open Hyper-V Manager, select the virtual machine you want to export and either right-click on the virtual machine and select Export or click on Export on the virtual machine name’s pane. You will see the Export Virtual Machine dialog box.

In this dialog box, you can set the export path for the virtual machine and choose whether to export your virtual machine state data or not.Because Hyper-V will use the exported files after importing them, you should store the export directly on the target machine’s disks and not on a file share.

Once you check Don’t Export Virtual Machine State Data, only the virtual machine’s configuration files will be exported. The virtual hard disk and snapshots will not be exported. In the export path, a folder with the name of the virtual machine is created along with

Virtual Machines This includes the virtual machine configuration files as well as the virtual machine state if the machine is saved.If you exported the state data, this folder will include your virtual hard disks VHD file(s).

If you exported the state data, this folder will include all snapshot files.Once the virtual machine finishes exporting, you can move the export folder to the target machine if you did not store it directly on the server’s disks. Open Hyper-V Manager and click Import Virtual Machine, which is located in Actions pane.

Creating and Deploying a Windows Installer Package for TS RemoteApp Programs

Now that you have installed an application that will be used for a TS RemoteApp program, you need to know how to deploy a package that contains the TS RemoteApp program con- nection information. There are two different ways to package TS RemoteApp programs: a Windows Installer ?le ( MSI ) or a Remote Desktop ?le ( RDP ). The focus in this section will be on using an MSI ?le because most administrators are used to using group policies to deploy Windows Installer packages to client computers. In order for the client computer to run these packages, they must be running RDC 6.0 or 6.1. In Exercise 2.12, you will follow the procedures to package TS RemoteApp programs.

Packaging a TS RemoteApp Program

Follow these steps to package a TS RemoteApp Program.

1. In TS RemoteApp Manager, under RemoteApp Programs, select the application for which you will create a package.

2. In the Actions pane, click Create Windows Installer Package.

3. In the RemoteApp Wizard, click Next on the Welcome screen.

4. On the Specify Package Settings screen, you can change the default location to save packages to as well as the server name, the RDP port, the TS Gateway setting and cer- ti?cate settings. (TS Gateway and certi?cate settings are discussed later in this chapter.)

5. Click Next.

6. On the Con?gure Distribution Package page, you will place the RemoteApp program into the user ’s Start menu under a folder named Remote Programs, and you can also select Desktop. This screen also speci?es whether or not to take over client exten- sions. What this means is that whenever the user opens a ?le with this extension, it will automatically launch the RemoteApp program. This setting is necessary only when the application is not installed locally on the client.

7. Click Next.

8. Review Settings, click Finish.

By default, the package will be save in C:\Program Files\Pack Programs with a .rap. msi ?lename extension. Now that you have the .rap.msi ?le, Group Policy procedures can be used to deploy the package to users within the domain.

Using TS RemoteApp in large environments

There are some rules that should be considered when using TS RemoteApp in a large server farm. First, think about applications that are similar in nature or share data using Dynamic Data Exchange, DDE (for example, copy and paste); these should reside on the same server. Second, place silo applications that con?ict with other applications onto separate terminal servers; your users will thank you in long run by not complaining about poor performance or errors in their sessions. Third, consider other factors that are not technology related, such as groups like HR always wanting their applications segregated from everyone else. A good rule of thumb is an 80/20 split. Try to maintain and keep the software consistent on the majority of the terminal servers with the main subset of your applications, usually MS Of ?ce and the like.

Three things must occur to enable Desktop Composition. First, you must enable Desk- top Experience on the Windows 2008 Terminal Services server. Second, you must use the Windows Vista theme on the Windows 2008 TS server. Third, you must enable Desktop Composition on the Windows Vista host client.

It is important to note that the Windows Vista client must have the hard-ware capable of supporting Windows Aero to benefit from the Desktop Composition feature. However, the 2008 TS server does not need to have hardware that is capable of running Windows Aero.

Enabling the Desktop Experience Feature

Follow these steps to install Desktop Experience on Windows Server 2008

1.Open Server Manager. Click Start-Administrative Tools-Server Manager.

2.Right-click Features and select Add Feature from the menu.

3.Check Desktop Experience in the Feature Wizard.

4.Click Next.

5.Verify that the Desktop Experience feature is checked and click Install.

6.Reboot after installation is complete.

Starting the Themes Service

Follow these steps to start the Themes service for Windows Server 2008

1.Click Start-Administrative Tools-Services.

2. Right-click Themes and choose Properties.

3. On the General tab, change the startup type to Automatic.

4.Click Apply.

5.Click-Administrative Tools-Services.

6. Double-click Themes.

7. On the General tab, change the startup type to Automatic.

8. Click OK.

9. Right-click Themes and choose Start to start the Themes service.

Now that you have enabled the Themes service, you must select the Windows Vista theme.

Setting the Theme on Windows Server 2008

Follow these steps to set the Theme on Windows Server 2008

1.Click Start-Control Panel-Personalization-Theme.

2. On the Themes tab, change the theme to Windows Vista.

3.Click OK.

The ?nal step is to enable Desktop Composition and Themes on the client.

Making Desktop Composition Available on a Vista Client

Follow these steps to enable Desktop Composition on a Vista client

1.Click Start-All Programs-Accessories-Remote Desktop Connection. (It is also
possible to start the RDC client software by typing mstsc in the run line.)

2. In the Remote Desktop Connection dialog box, click Options.

3. On the Experience tab, check Desktop Composition and Themes.

4.Click Connect to launch the new session.

Remember that Windows Aero will require more resources on your terminal server, so careful consideration must be made on how many concurrent user connections a single terminal server ’s hardware will be able to support. This will be critical to overall user experience and server performance.

Network Attached Storage (NAS)

The concept of a Network Attached Storage (NAS) solution is that it is a low-cost device for storing data and serving ?les through the use of an Ethernet LAN connection. A NAS device accesses data at the ? le level via a communication protocol such as NFS, CIFS, or even HTTP, which is very different from iSCSI or FC Fibre Channel storage devices that access the data at the block level. NAS devices are best used in ?le storing applications, and it does not require a storage expert to install and maintain the device. In most cases, the only setup that is required is an IP address and an Ethernet connection.

Managing SANs

In the following sections, we will discuss the tools in Windows Server 2008 that will help manage the various aspects of storage: Storage Manager for SANs (SMfS) and Storage Explorer. These tools are used independently of one another, but they both provide a very powerful and centralized interface to administer a storage environment. Storage Manager for SANs manages the physical storage arrays; conversely, Storage Explorer views and manages the Fibre Channel and iSCSI connections available in the environment.

Virtual Disk Service (VDS)

Virtual Disk Server (VDS) has been created to ease the administration efforts of managing all the various type of storage devices. Many storage hardware providers used their own applications for installation and management, and this made administering all these various devices very cumbersome. VDS is a set of application programming interfaces (APIs) that provide a centralized interface for managing all the various storage devices. The native VDS API enables the management of disks and volumes at an OS level, and hardware- vendor-supplied APIs manage the storage devices at a RAID level. These are known as software and hardware providers.

A software provider is host based and interacts with Plug and Play Manager because each disk is discovered and operates on volumes, disks, and disk partitions. VDS includes two software providers: basic and dynamic. The basic software provider manages basic disks with no fault tolerance, whereas the dynamic software providers manage dynamic disks with fault management. A hardware provider translates the VDS APIs into instructions speci?c to the storage hardware. This how storage management applications are able to communicate with the storage hardware to create LUNs or Fibre Channel HBAs to view the WWN. The following are Windows Server 2008 storage management applications that use VDS: Disk Management snap-in This application con ?gures and manages the disk drives on the host computer. You have already seen this application in use when you initialized disks and created volume sets.

Windows Server 2008 Storage Services

The Welcome page of the New Spanned Volume Wizard appears and explains the type of volume set chosen. Click Next.

The Select Disks page appears. Select the disk that will be included with the volume set and click Add. Repeat this process until all the desired disks have been added.

The Assign Drive Letter or Path page appears. From here you can select the desired drive letter for the volume, mount the volume in an empty NTFS folder, or choose to not assign a drive letter. The new volume is labeled as E.

The Format Volume page appears. Choose to format the new volume.

If the disks have not been converted to dynamic, you will be asked to convert the disks. Click Yes.

The new volume will appear as a healthy spanned dynamic volume with the new available disk space of new volume set.

Storage in Windows Server 2008

Built into Windows Server 2008 is the ability to support drive sets and arrays using Redun- dant Array of Independent Disks (RAID) technology. RAID can be used to enhance data performance, or it can be used to provide fault tolerance to maintain data integrity in case of a hard disk failure. Windows Server 2008 supports three different types of RAID tech- nologies: RAID-0, RAID-1, and RAID-5.

RAID-0 is also known as disk striping. Disk striping is using two or more volumes on independent disks created as a single striped set. There can be a maximum of 32 disks. In a striped set, data is divided into blocks that are disturbed sequentially across all the drives in the set. With RAID-0, disk striping, you get very fast read and write performance because multiple blocks of data can be accessed off of multiple drives simultaneously. However, RAID-0 does not offer the ability to maintain data integrity during a single disk failure. In other words, RAID-0 is not fault tolerant; a single disk event will cause the entire striped set to be lost, and it will have to be re-created through some type of recovery process, such as a tape backup.
Windows Server 2008 Storage Services

RAID-1 is also known as disk mirroring. Disk mirroring is two logical volumes on two separate identical disks created as a duplicate disk set. Data is written on two disks at the same time; that way, in the event of a disk failure, data integrity is maintained and avail-able. Although this fault tolerance gives administrators data redundancy, it comes with a price because it diminishes the amount of available storage space by half. For example, if an administrator wants to create a 300GB mirrored set, they would have to install two 300GB hard drives into the server, thus doubling the cost for the same available space.

Case Study-Based Questions

Case study-based questions ?rst appeared in the MCSD program. These questions present a scenario with a range of requirements. Based on the information provided, you answer a series of multiple-choice and select-and-place questions. The interface for case study-based questions has a number of tabs, each of which contains information about the scenario. At present, this type of question appears only in most of the Design exams.

Microsoft will regularly add and remove questions from the exams. This is called item seeding . It is part of the effort to make it more difficult for individuals to memorize exam questions that were passed along by previous test-takers.

Tips for Taking the MCTS: Windows Server 2008 Applications Infrastructure Configuring Exam.

Here are some general tips for achieving success on your certi ?cation exam:

Arrive early at the exam center so that you can relax and review your study materials. During this final review, you can look over tables and lists of exam-related information. Read the questions carefully. Do not be tempted to jump to an early conclusion. Make sure you know exactly what the question is asking.

Answer all questions. If you are unsure about a question, mark it for review and come back to it at a later time.

On simulations, do not change settings that are not directly related to the question. Also, assume default settings if the question does not specify or imply which settings are used.

For questions you’re not sure about, use a process of elimination to get rid of the obvi- ously incorrect answers first. This improves your odds of selecting the correct answer when you need to make an educated guess.

Introduction

You may take the Microsoft exams at any of more than 1,000 Authorized Prometric Test- ing Centers (APTCs) around the world. For the location of a testing center near you, call Prometric at 800-755-EXAM (755-3926). Outside the United States and Canada, contact your local Prometric registration center. You may also register for your exams online at www.prometric.com .

Find out the number of the exam you want to take, and then register with the Prometric registration center nearest to you. At this point, you will be asked for advance payment for the exam. The exams are $125 each and you must take them within one year of payment. You can schedule exams up to six weeks in advance or as late as one working day prior to the date of the exam. You can cancel or reschedule your exam if you contact the center at least two working days prior to the exam. Same-day registration is available in some locations, subject to space availability. Where same-day registration is available, you must register a minimum of two hours before test time.

15. Within your enterprise help desk, technicians have been delegated authority to add users to all OUs within the organization through the help-desk security group. This is designed to relieve the pressure from higher-level administrators whenever a new employee is added to the business. Today, a junior IT help-desk technician claims he is able to create a user account but unable to create a group within a particular OU. What is a possible reason for this?
A. The help-desk technician is not a member of the Helpdesk security group.
B. The Helpdesk security group has been assigned the incorrect delegation permissions.
C. The OU being managed by the technician is set to block inheritance.
D. The Helpdesk security group file permissions are incorrect.

16. If you are asked to adhere to the Microsoft-recommended standard practice for adding universal groups to your Active Directory infrastructure, what procedures must you follow? (Choose all that apply.)
A. Create the universal group.
B. Create a global group.
C. Create a domain local group.
D. Place the global group within the universal group.
E. Place the global group containing the universal group within the domain local group.

17. Which of the following organizational structures cannot receive permissions?
A. Global groups
B. Universal groups
C. Local groups
D. Organizational units
E. Domain local groups

18. The MegaCorp corporation is an enterprise that consists of three domains operating at the Windows Server 2008 functional level. You are the senior administrator for this company,
and you are responsible for creating and implementing all administrative policies. Your organizational layout for the OU structure appears as shown here. Recently, you have decided to expand the IT_Technicians OU to three different departments; however, you do not want the delegation properties to be any different from the current layout. Which of the following methods will achieve this with the least amount of administrative effort?

A. Create three new OUs named IT_Tech1, IT_Tech2, and IT_Tech3. Nest the OUs within the parent OU, which is IT_Tech, and inherent the previous settings.
B. Create three new OUs named IT_Tech1, IT_Tech2, and IT_Tech3. Replicate the settings via an ADMX file, and apply to each OU.
C. Create three new OUs named IT_Tech1, IT_Tech2, and IT_Tech3. Assign permissions based upon the previously established template.
D. Create three new OUs named IT_Tech1, IT_Tech2, and IT_Tech3. Nest the OUs within the parent OU, which is IT_Tech, and block inheritance so that each group can be administered separately.

Answers to Review Questions
15. B. If a technician is able to create users but unable to create groups, it's most likely that the Delegation of Control Wizard was used and the ability to create and manage groups was

not applied. It is possible that the OU is using inheritance, but the question does not indi- cate that this OU is a child of another OU; thus, it must be disregarded.

16. A, B, D. The best practice of adding global groups to universal groups stems from the idea that global groups can reduce replication costs. This is done to enhance speed and lessen

the effect of universal group membership changes on the infrastructure.

17. D. Organizational units are designed for delegation and for deploying group Policy. They cannot take permissions of any kind.

18. A. By nesting OUs within OUs, you ensure that the child inherits the parent settings of the top-level OU. This will ensure that the delegations do not have to be reassigned, so you can leave them at the default settings.

Meredith is a user with limited mobility. She wants to use an alternate method of input instead of a regular keyboard. What options can you configure using Windows Vista? (Select all that apply.) A. Configure and install a joystick to use as an input device. B. Configure the On-Screen Keyboard to be an input device. C. Configure Alternative Serial Devices and install a new serial device. D. Configure and install a microphone to use for speech recognition.

You administer a network for an office location in Canada. Some of your users have requested that they want to view currency in French instead of English. How can you modify this setting?

A. Through Control Panel Options Formats tab B. Through Control Panel Clock, Language and Region C. Through Control Panel and Language Options D. Through Control Panel

Bill is a new employee and you are configuring a Windows Vista computer for him to use. He is visually impaired, and you need to configure the computer so that he can use it. Which of the following options should you configure? A. Magnifier B. High Contrast C. On-Screen Keyboard D. Narrator

A user in your organization has limited mobility and you want to make it easier for them to perform keyboard actions, particularly for using keyboard shortcuts. Which of the following options should you configure? A. Narrator B. Sticky Keys C. Filter Keys D. Toggle Keys

You are the network administrator for your organization. You are configuring a computer for Lisa, who has mentioned that she has difficulty using the keyboard and often has to delete repeated keystrokes. She has asked if you can help her reduce the additional work that she is performing because of this. Which of the following options could you configure? A. Sticky Keys B. Easy Keys C. Filter Keys D. Toggle Keys

You are the network administrator for your organization. You are configuring a Windows Vista computer for one of your users. You want to configure the computer so that a tone is played when the Caps Lock key is pressed. Which of the following options could you configure? A. Sticky Keys B. Easy Keys C. Filter Keys D. Toggle Keys

You are an administrator for your company’s network. You want to configure the volume control and the clock to be displayed on the desktop of your users’ computers. How can you accomplish this task? A. Through Control Panel B. Through Control Panel C. Through Control Panel D. Through Control Panel

Several users in your organization need to edit documents in multiple languages. You have installed the necessary languages on each of the users’ computers. You want to enable the users to more easily change the language used, and you want to enable this through the use of the Language Bar in the taskbar. How can you enable this option? A. By right-clicking an empty space of the taskbar, selecting Properties, and clicking the B. By clicking Control Panel Appearance and Personalization Taskbar and Start Menu and clicking the Toolbars tab C. By clicking Control Panel Clock, Language, and Region D. By right-clicking an empty space of the taskbar, selecting Properties, and clicking the Taskbar tab.

You have installed a new driver for the video adapter on a Windows Vista computer. However, the video on the computer is no longer functioning properly, and you want to roll back the driver. Which management utility should you use? A. Device Manager B. Control Panel C. MMC D. Registry Editor

You are configuring a laptop computer running Windows Vista. You want to ensure that after a specified period of inactivity the computer is put into a power saving state. However, you want to ensure that data is saved to the hard disk, that the computer is quickly accessible on wakeup, and that the computer is never shut down. Which power-saving mode should you configure? A. Standby mode B. Sleep mode C. Hibernate mode D. Hybrid mode

You can configure what actions will occur if the service fails to start on the Recovery tab of the service’s Properties dialog box. For example, you can configure the service to attempt to restart, or you can configure the computer to reboot.

In Windows Vista, you can edit the Registry with REGEDIT or REGEDT32. You should always use extreme caution when editing the Registry, as improper configurations can cause the computer to fail to boot.

Microsoft uses driver signing to verify that drivers have been properly tested before they are installed on a Windows Vista computer.

If you want to configure multiple displays in Windows Vista, you can install multiple adapt- ers or a single adapter that supports multiple monitors. You can use PCI or AGP video adapters in addition to PCI-Express video adapters. Windows Vista allows you to extend your Desktop across more than eight monitors.

You should uninstall the camera, disconnect it from the computer, and then reconnect it. Doing so will uninstall the driver that was manually installed, and when the camera is recon- nected, the operating system will scan for a suitable driver for the device and install that driver.

The root hub may be improperly configured. USB controllers require that an IRQ be assigned in the computer’s BIOS. If the controller is not properly configured, you will see the root hub dis- played in Device Manager with a yellow exclamation point.

You configure keyboard and mouse properties in Control Panel.

The Add Hardware utility in Control Panel (Classic View) starts the Add Hardware Wizard to install hardware that is not Plug and Play compatible. You need to verify that other devices do not already use the configuration settings that you select for resource use.

On a laptop computer, Elena can use the battery meter to view the amount of battery power available and to change the power plan configured for the computer.