70-410 Flashcards
1
Q
Server Core
A
reduces management and servicing by installing only what is needed to run most server roles and applications. Fully manage locally or remotely with Windows PowerShell.
2
Q
Load Driver on Windows Setup
A
May have load windows drivers for storage from the manufacturer.
3
Q
Windows Server 2012 R2 Foundation
A
- Intended for small office networks.
- Up to 15 users. No CALs.
- Single CPU Socket. No Limit on cores.
- Maximum of 32GB of RAM.
- No Virtualization rights.
4
Q
Windows Server 2012 R2 Essentials
A
- Intended for small office networks
- Up to 25 users and 50 devices
- Pre-configured connectivity to cloud-based services.
- Remote Web Access
- My Server app for Windows/RT/Phone
- Microsoft Azure Backup Integration.
- Office 365 Integration
- No Virtualization rights.
5
Q
Windows Server 2012 R2 Standard
A
- The Entirety of Windows Server.
- Up to two CPU sockets. No Limit on cores.
- Two virtual instances included.
6
Q
Windows Server 2012 R2 Datacenter
A
- The entirety of Windows Server.
- Up to two CPU sockets. No Limit on cores.
- Unlimited virtual instances included.
7
Q
Server with a GUI
A
Standard Windows GUI with traditional start screen. Server manager tool and MMC console supported. All server roles can be installed.
8
Q
Minimal Server Interface
A
Also known as Windows Server core. Start screen, explorer, IE, and the desktop not supported.
9
Q
Full Desktop Experience
A
Intended for using Windows Server as a desktop OS. Standard Windows GUI with traditional Start Screen, plus Windows Store and Windows Store apps supported.
10
Q
Role
A
something a windows server aspires to be.
11
Q
Role Service
A
The functions that fulfill those aspirations.
12
Q
Feature
A
Other tasks that don’t fit within an established Role.
13
Q
Use Powershell to Install a Role, Role Service, and Feature
A
Get-WindowsFeature to see all options.
-Install-WindowsFeature telnet-server
14
Q
Supported Roles on Windows Server Core
A
- AD Certificate Services. AD Domain Services. AD Lightweight Domain Services. AD Rights Management Services.
- DHCP Server. DNS Server.
- File and Storage Services.
- Hyper-V
- Print and Document Services.
- Remote Access Services.
- Streaming Media Services.
- Web Server (IIS)
- Windows Server Update Services.
15
Q
Clean Install
A
Used for new installations. Used where old OS instance will be deleted. Used when changing from x86 to x64 architecture. Used when changing languages. Used when converting from pre-release versions.
16
Q
Upgrade
A
Used when an existing OS instance requires an in-place upgrade. Supported upgrades:
- Windows Server 2008 SP2
- Windows Server 2008 R2
- Windows Server 2012 Standard and Datacenter
17
Q
License Conversion
A
DISM command can migrate a Windows Server instance to a higher OS Edition.
- Offline servicing to OS images
- Online servicing to running OS instances.
18
Q
DISM
A
Services images.
19
Q
Role Migration
A
Windows Server Migration Tools are available as an install-able feature in Server Manager.
-Install-WindowsFeatureMigration
Tools must be installed onto source and destination computer. This can be done manually.
Migration steps are different based on the role being migrated.
- Export-SmigServerSetting
- Import-SmigServerSetting
20
Q
WinSxS Folder
A
Windows Side by Side. Allows Windows to have multiple different versions of things installed simultaneously. mechanism to allow windows to compartmentalize the roles and features. Directory to point to whenever you need a feature that requires media.
21
Q
WinSxS Folder
A
Windows Side by Side. Allows Windows to have multiple different versions of things installed simultaneously. mechanism to allow windows to compartmentalize the roles and features. Directory to point to whenever you need a feature that requires media.
22
Q
NIC Teaming
A
Located within Server Manager. Requires at least 2 physical network cards. Under Tasks, create new team. Select Network adapters involved.
23
Q
Teaming Mode
A
Static Teaming, switch Independent, and LACP.
24
Q
Static Teaming
A
Requires network guys to check switch config. Network has to recognize the team.
25
Switch Independent
Allows you to configure a team that doesn't require additional support from the network side. If you don't have advanced networking equipment, this is the one to choose.
26
LACP
Requires network guys to check the config on the switch. Is LACP configured.
27
Load Balancing Mode (NIC Teaming)
How you want the network traffic to balance between the 2 different networking cards. Dynamic is more of a standard. Hyper V is only used for Hyper V servers. Address hash is based off of IP address the traffic is coming from.
28
Standby Adapter
When another adapter fails. With 2 network cards. It is essentially one NIC with failover.
29
Powershell Setting IP
- get-netAdapter. (To get the list of adpaters)
- Get-NetAdapter ethernet0 | Set-NetIPInterface -dhcp disabled.
- Get-NetAdapter ethernet0 | new-NetIPAddress -IPAddress 192.168.0.104 -DefaultGateway 192.168.0.1 -PrefixLength 24
- Set-DNSClientServerAddress -InterfaceAlias ethernet0 -ServerAddresses 192.168.0.100
30
Powershell NIC Teaming
- new-netlbfoteam -name "Our Team" -TeamMembers ethernet0,ehternet1 -TeamingMode SwitchIndependent -LoadBalancingAlgorithm dynamic
- you can set Team IP the same way as a single NIC. Get-NetAdapter "our team" | new-netIPAddress -IPaddress 192.0.0.0 -DefaultGateway 0.0.0.0 -PrefixLength 24
- A "yes to all"
- help LBFO
31
User Rights Assigment
Determines which users or groups to accomplish tasks on a machine. Local Security policy to delegate administration. Choose granular tasks. If on local security policy it would be only for that machine.
32
SC (Command Line Tool) for services
Create services or start/stop services. "SC query" will list all services on the machine. To stop service use "SC stop ". To get status of the service type "SC query "
33
manage services with powershell
- get-service | stop-service.
| - get-service | start-service.
34
Configure Display Resolution with Powershell (Server Core)
Set-DisplayResolution
35
Adjust the clock settings in powershell (server core)
timedate.cpl
36
Rename the computer with powershell (server core)
rename-computer
37
Adding a computer to a domain (server core)
add-computer
38
Define product key and activate the license (server core)
slmgr.vbs -ipk & slmgr.vbs -ato
39
Bring up text based menu (Server core) bring up to help find commands you forgot.
sconfig.cmd
40
Configure WSUS (Server Core)
cscript scregedit.wsf
41
Install Features and Roles
- Get-WindowsFeature
| - Install-WindowsFeature | Uninstall-WindowsFeature
42
Use your management desktop to manage that machine you are configuring (Server Core) Can be remoted from another location.
Enable-PSRemoting
43
Convert UI from server core to gui
- Check if possible on existing server: Install-WindowsFeature server-gui-shell -whatif.
- gain access to Windows ISO through powerhsell, and upack the ISO.
- Look for install.wim
- create a mount point: mkdir c:\mount
- run> dism /get-wiminfo /winfile:x:\isos\unpacked\sources\install.wim
- dism /mount-wim /wimfile:x:\isos\unpacked\sources\install.wim /index:2 /mountdir:c:\mount /readonly
- install-windowsfeature server-gui-shell -source c:\mount\windows\winsxs -whatif
44
Convert GUI to server core (powershell) much easier process than vice versa.
Remove-WindowsFeature server-gui-shell, server-gui-mgmt-infra
45
Deploy Role or Feature on Remote servers (Powershell)
Install-WindowsFeature -Computername servercore1
46
Configure Remote management (Powershell)
configure-smremoting
47
Add and Remove Features in Offline Images
- dism /image:c:\mount /enable-feature /featurename:dhcpserver
- write the change to disk. :> dism /unmount-image /commit
48
Powershell Desired State Configuration
Allows you to create config docs for controlling how your servers are configured. Powershelldsc. Configure a document as to what a server aspires to become. Mechanism to control the items your interested in controlling.
49
Powershell DSC example
Configuration Server1
{
Node "server1" {
WindowsFeature DNSServer {
Ensure = "Present"
Name = "DNS"
}
}
}
Server1
50
Execute the DSC (Powershell)
Start-DscConfiguration -wait -verbose -path .\server1
51
Test the DSC config (powershell)
Test-DscConfiguration
52
MBR
Master Boot Record. Uses a partition table in the first sector of the disk to describe the location of disk partitions. Supports disks up to 2TB. Four primary partitions or three primary plus one extended partition.
53
GPT
GUID Partition Table. Uses extensible firmware interface to store partition information with redundancy. Support disks larger than 2TB. Not all previous windows versions can recognize GPT disks.
54
Mark the selected partition as active
diskpart active
55
Add a mirror to a simple volume
diskpart add
56
assign a drive letter or mount point to the selected volume
diskpart assign
57
manipulate volume or disk attributes
diskpart attributes
58
attach a virtual disk file
diskpart attach
59
enable and disable automatic mounting of basic volumes
diskpart automount
60
break a mirror set
diskpart break
61
Clear the configuration information, or all information, off the disk
diskpart clean
62
attempts to reduce the physical size of the file
diskpart compact
63
convert between different disk formats
diskpart convert
64
create a volume, partition or virtual disk
diskpart create
65
Delete an object
diskpart delete
66
Provide details about an object
diskpart detail
67
detach a virtual disk file
diskpart detach
68
Exit diskpart
exit
69
Extend a volume
Diskpart extend
70
expands the maximum size available on a virtual disk.
diskpart expand
71
display current and supported file systems on the volume.
Diskpart filesystems
72
Format the volume or partition.
diskpart format.
73
assign attributes to the selected GPT partition.
diskpart GPT
74
display a list of commands
Help
75
Import a disk group
diskpart import
76
mark the selected partition as inactive
diskpart inactive
77
Display a list of objects
diskpart List
78
Merges a child disk with its parents
dispart Merge
79
Online an object that is currently marked offline
diskpart online
80
Offline an object that is currently marked as online.
dispart offline
81
Refreshes the state of all disks in the selected pack. Attempts recovery on disks in the invalid pack, and resynchronizes mirrored volumes and RAID5 volumes that have stale plex or parity data.
diskpart Recover
82
Does nothing. This is used to comment scripts.
diskpart REM
83
Remove a drive letter or mount point assignment.
diskpart Remove
84
Repair a RAID-5 volume with a failed member.
diskpart repair
85
rescan the computer looking for diskss and volumes.
diskpart rescan
86
place a retained partition under a simple volume.
diskpart retain
87
display or set the SAN policy for the currently booted OS.
diskpart SAN
88
Shift the focus to an object
diskpart select
89
change the partition type
diskpart setID
90
Reduce the size of the selected volume.
diskpart shrink
91
Displays or sets the GUID partition table identifier or MBR signature of a disk
diskpart UNIQUEID
92
Basic Volumes
In existence since MS-DOS. Still today a common configuration for disk volumes. Can be extended only to adjacent, contiguous, unallocated space on the same disk. Start here. Automatically created when intialized and brought online.
93
Dynamic Volumes
Supports spanned, striped, mirrored and Raid-5 volumes. Supports an unlimited number of volumes. Spanned volumes can extend across multiple disks. Not always the best choice. Convert basic to dynamic disks.
94
Simple Volume
See most commonly.
95
Spanned volume
provide a mechanism for you to take contents from multiple disk to attach one next to the other to combine available storage. Total storage space in a single drive letter. Potential for a bad day. Loss of any disks will cause the loss of the entire volume. Not many of these in organizations.
96
Mirrored Volume
takes 2 different disks and attaches them together to create multiple copies of the data on the disk. Gives you a single drive letter. 2 copies of the data is always available. Slower performance
97
Striped Volume
Takes data and stripes the data across two or more disks. Faster performance. Don't care at all about HA.
98
Raid 5 volume
requires atleast 3 disks. Every 2 bits of data a 3rd bit of parity has to be calculated. Redundancy equivalent to mirror. Additional performance for reads, but cost for writes due to the parity bit have to being calculated.
99
Create and Mount VHD
Disk MGMT/Action/Create and attach VHD.
- VHDX is the updated format.
- Dynamically expanding is the best recommendation.
- File can become a disk the machine can use.
- VHD provide you a way to encapsulate into a single disk that is mobile. Storage virtualization.
100
Storage Spaces
Provides a way to consolidate storage into a storage pool. You can chop up the pool into individual virtual disks. Relies on the total disk space that exists.
101
Configure a Storage pool
- File & storage services/Disks.
- Storage Pools/Primordial/Tasks/New Storage Pool.
- -Choose disks/Then allocation (Such as Hotspare)/
- Create Virtual disk out of storage pool.
1. ) Storage Pools/Virtual Disks/Tasks/New Virtual disks/
2. )Storage Layout. "Simple, Mirror, or Parity".
3. )Resiliency Settings. "two way mirror or three way mirror"
4. ) Provisioning Type: Thin or Fixed. Never want to run out of disk with thin provisioning.
102
SAS
HBAs to connect storage.
103
Storage Pool by disk enclosure
storage spaces subsystem provides the ability to connect to JBOD devices using sas to connect to servers. Could be used for cluster storage. Connects to nodes via SAS. It Is shared storage and accessible in a HA way. Multiple methods of connections including multiple JBOD storage to multiple nodes making it HA. There are JBOD enclosures certified by Microsoft.
104
JBOD
Just a bunch of disks. A collection of hard disks that have not been configured to act as a redundant array of independent disks. (RAID).
105
JBOD
Just a bunch of disks. A collection of hard disks that have not been configured to act as a redundant array of independent disks. (RAID).
106
Powershell Ping equivelant
test-connection -computername 192.168.0.0 -quiet -count 1
| Test if a machine is online, output is true or false
107
Powershell to get to control panel
> control
108
Configure Server Networking (Server Core)
sconfig
109
Configure Server Networking (Server Core)
sconfig
110
Find networking Commandlets
cd c:\
get-help *-net
or
get-command -module nettcpip
111
Get IP addresses on Adapters (Powershell)
Get-NetIPAddress
or more defined to IPv4:
Get-NetIpAddress -AddressFamily IPv4
or get all properties:
Get-NetIpAddress -AddressFamily IPv4 | Select-Object -Property *
112
Get detailed help file (Powershell)
get-help get-NETIPaddress -Detailed
113
Get network interface information (Powershell)
Get-NetIPInterface
114
Check the IPv4 Protocol configuration (Powershell)
Get-NetIPv4Protocol
115
Understand More of IP configuration (Powershell)
Get-NetIpConfiguration
or
Get-NetIpConfiguration | FL *
or for remote computer:
Get-NetIpConfiguration -ComputerName Servercore1
116
Check the routing on your machine (Powershell)
(Windows Native) route print
or Powershell:
Get-NetRoute
117
Find the network interface information (Win native)
netsh interface ipv4 show interface
118
Add an IP to an existing network interface (Windows native)
netsh interface ipv4 add address "Ethernet0" 192.x.x.x. 255.255.255.0
119
Find the network interface information (Powershell)
Get-NetIPInterface
120
Add an IP to an existing network interface (Powershell)
Get-NetIPInterface -InterfaceIndex 12 -AddressFamily IPv4 | New-NetIPAddress -IPAddress 192.x.x.x. -PrefixLength 24
121
Global Unicast IPv6
2000::/3
122
APIPA Address (IPv6) Automatically obtained
Fe80::/64
123
Loopback (IPv6)
::1
same as 127.0.0.1
124
%12 (%) (IPv6)
Shows what interface the Ipv6 address is on.
125
Powershell command to display only IPv6 Info
Get-NetIPAddress -AdressFamily IPv6
126
Network Interoperability
ability to operate networks with both IPv4 and IPv6.
127
ISATAP
Enables connectivity between IPv6/Ipv4 hosts across an intranet. ISATAP addresses are automatically configured. Address scheme: 64bit link-local, site-local, or Global Prefix. First 32 bit 0000:5efe (5efe is the identifier for ISATAP). Last 32 bit IPv4 address. Tunneling protocol to self address it's self. I.E." FE80::5efe:192.168.0.13 " ISATAP addresses get tunneled over the IPv4 network.
128
Internet Addressing 6to4 Addresses
Scheme for internet communication. Used to tunnel out to an intranet or a corporate internet outside your corporate walls. IPv4 is part but almost always in hexadecimal. All configured automatically. Can't cross a NAT device. Public addresses to talk on internet.
129
Teredo Addresses
Used for application that needs to be able to cross an IPv4 based Nat. Tunneling protocol that encapsulates IPv6 packets into an IPv4 UDP message. Allows tunneling of information between host across a nat device. It gets active when an app is installed that needs Teredo.
130
Find ISATAP address IPv6 (Powershell)
>Get-NetIPAddress -AddressFamily IPv6
| Look for 5efe and IPv4 integration
131
Find ISATAP cmdlets
get-help *ISATAP*
132
Configure Interoperability between Ipv4 and Ipv6 addresses using Group Policy
GPM/Domain Policy/Edit/Computer Configuration/Policies/Administrative Templates/Network/TCPIPSettings/Transition technologies
133
Enable DHCP Server with DISM
Dism /online /enable-feature /featurename:DHCPServer
134
Enable DHCP Server with Powershell
install-windowsfeature DHCP -IncludeManagementTools
135
Check if DHCP Service is running with Powershell
get-service -name *dhcp*
136
Add New DHCP Scope with powershell
Add-DHCPServerv4Scope -StartRanger 192.168.3.10 -EndRange 192.168.3.20 -subnetmask 255.255.255.0
(Then Name the scope)
137
Configure Default Gateway for DHCP Server Side
Scope Options/Add 003 router/choose appropriate IP.
138
Configure DNS Server for DHCP Server Side
Scope Options/Add 006 DNS servers/Choose appropriate IP that links to DNS.
139
Add WINS Server for netbios resolution DHCP Server side
Scope options/044 WINS/NBNS Servers/ type in WINS address. Add 046 WINS/NBT Node type / HNode 0x8
140
Configure PXE boot through DHCP
Scope options/066 Boot Server Host Name/Enter string value or IP address of WDDS server (image deployment)
Then
/067 Bootfile Name (Image you want to launch when client connects to WDDS server)
141
Manage authorized DHCP servers
Right click on DHCP within DHCP window/Manage Authorized Servers/Specify trusted servers.
142
Setup a DHCP Relay Agent
Add roles and features/Remote Access/Routing.
Tools/Routing and Remote Access/Server/IPv4 right click on general/select DHCP Relay Agent/
Right click on Relay agent to listen on Ethernet0. Specify Agent properties and the DHCP that is on the other network.
143
DNS
Provides name resolution. Replacement for the host file. Answer what they know. Can ask other DNS servers for help. Can remember previous requests.
144
Enable DNS with DISM
DISM /online /enable-feature:DNS-Server-Full-Role
145
Enable DNS with powershell
install-windowsfeature DNS -IncludeManagementTools
146
Shortcut for DNS management
DNSMGMT
147
SRV Records
Help find domain controllers, global catalog servers, to do authentication and authorization.
148
DNS Active Directory Integrated
The zone is going to be stored in an application partition in AD. The benefit is on DC's that have DNS, it gets that zone information. It acts like fault tolerance. All A records are stored in AD, and get's replicated to other DCs. You can choose which DCs to replicate it to.
149
DNS Dynamic updates
Clients that have authenticated can update their DNS records. Client get's IP changed by DHCP or statically. The client updates the DNS record automatically.
150
Zone file
Normal way to create a zone without AD integration. Stores the zone in Windows\System32\dns in a txt file. Not much fault tolerance.
151
Primary Zones
master copy. Read/writable copies of the zones.
152
Secondary zone
Created as secondary zone for a primary zone or in other words a copy. Create new zone, select Secondary zone. Can't be integrated with AD. Type in IP address or Name of the DNS server that has the master copy of the zone. Ensure zone transfers on the master copy server has the secondary server added to the server list. Right click and transfer from master to force the primary zone transfer.
153
Stub Zone
creates a glue record and points to another DNS server but doesn't bring across all of the other records. Can be AD integrated.
154
DNS Forwarders
Forward a request to a different DNS server to do it faster. Any DNS especially on the external. You can send the request and see if that bigger DNS server can find out.
155
Create a dns forwarders
right click on DC\Forwarders tab\Add a forwarder address such as 4.2.2.2 or 8.8.8.8.
156
Root Hints
Root level servers hand the requests down in order to find a DNS server with an answer. Root level servers. DNS cache file holds all of the root level servers, down to TLD servers, down to subdomain servers.
157
Configure Root hints
right click on DC\RootHints Tab. Open cache.DNS to get a updated list of root servers. \Windows\System 32.
158
See DNS events
Global logs\DNS Events
159
Host Records
A Records.
160
IPv6 Host Records
AAAA Records.
161
CNAME
Alias that points to something that already exists. Canonical Name record. Requires an existing A record to point to. Gives a friendly name.
162
MX Record
mail exchange record. Directs the mail into your messaging environment. Displays what server you have that can accept emails. Give a mail server priority.
163
PTR Record
Gets created when you create an A record. Stores ptr records in reverse look up zone. Reverse lookup record.
164
Configure WinRM
Windows Remote Management. Already turned on and ready to go on server 2012 R2. Web Services http/https . Using default TCP port 5985. Configure the WinRM service start to Automatic. Create a WS-Man listener on TCP 5985. Create firewall exception. Command: Winrm quickconfig. Powershell:Enable-PSRemoting
165
Configure WinRM with Powershell
winrm quickconfig
166
(WinRS) Windows Remote Shell via Powershell
Allows you to run remote commands.
| winrs -r:hostname ipconfig /all
167
PSSession with Powershell
Enter-Pssession -computerName hostname.
You can invoke commands remotely through Powershell
168
Enable remoting on client with Powershell
enable-PSRemoting. Use GPO to enable remoting scaling accross the enterprise.
169
Configure Down-Level Server management
For Win 7 and 2008 R2 and up. Install Windows Management Framework 4 or WMF4. Check release notes. For XP/2003 - WMF2.0.
170
Configure Server for Day-to-day management tasks
Install Remote Server Administration tools (RSAT) on your client. Add servers to Server manager. Use the MMC.
171
Configure Multi-Server management
Configure Server manager to allow management on other servers. Add servers to server manager. Group servers. RDP is no longer best practice.
172
Run command on multiple servers at once with powershell
invoke-command -computername dc, file1, print1 {Get-Service -name bits}
173
Configure Server Core
Use sconfig. Or enable winrm to add a server core server is added to a server manager for management with the server manager tools.
174
Configure Windows firewall through powershell and netsh
>netsh advfirewall firewall set rule group="Remote administration" new enable=yes
175
Configure Windows Firewall with Powershell sort through rules
Sort specific rules i.e.: >get-netfirewallrule | select-object -property name, displayname | where {$_.displayname -like "*remote*"}
176
Enable a firewall rule with powershell
>Get-NetFirewallRule -name WinRM-HTTP-In-TCP | Set-netFirewallRule -enabled:true
