20411B-ENU-TrainerHandbook

Administering Windows Server® 2012 9-23

A. Datum is a global engineering and manufacturing company with its head office in London, UK. An IT office and data center in London support head office and other locations. A. Datum has recently deployed

1.On the host computer, click Start, point to Administrative Tools, and then click Hyper-V ManagerUSE.

2.In Hyper-V® Manager, click 20411B-LON-DC1, and in the Actions pane, click Start. PROHIBITED

3.In the Actions pane, click Connect. Wait until the virtual machine starts.

4.Sign in using the following credentials: o User name: Adatum\Administrator o Password: Pa$$w0rd

5.Perform steps 2 through 4 for 20411B-LON-CL2 and 20411B-LON-RTR.

9-24 Implementing Network Access Protection

o SHVs used in this health policy: Windows Security Health Validator

13.Create a health policy with the following settings: o Name: Noncompliant

o Client SHV checks: Client fails one or more SHV checks

o SHVs used in this health policy: Windows Security Health Validator



1.Disable existing connection request policies. USE

2.Create a new Connection Request Policy with the following settings: o Policy name: VPN connections

o Type of network access server: Remote Access Server (VPN-Dial up)

o Conditions, Tunnel type: L2TP, SSTP, and PPTP PROHIBITED o Authenticate requests on this server: Enabled

o On the Specify Authentication Methods page, perform the following:

a.Select Override network policy authentication settings.

b.Add Microsoft: Protected EAP (PEAP).

c.Add Microsoft: Secured password (EAP-MSCHAP v2).

d.Edit Microsoft: Protected EAP (PEAP) to ensure that Enforce Network Access Protection is enabled.Task 4: Configure connection request polices for VPN

Administering Windows Server® 2012 9-27

1.Switch to the LON-CL2 computer. ONLY

2.Run the NAP Client Configuration tool (napclcfg.msc).

3.Under Enforcement Clients, enable the EAP Quarantine Enforcement Client.

4.Close the NAP Client Configuration tool. .

5.Run services.msc, and then configure the Network Access Protection Agent service for automaticSTUDENT startup.

6.Start the service.

7.Close the services console.

8.Open the Local Policy Editor (gpedit.msc), and then enable the Local Computer Policy

/Computer Configuration/Administrative Templates/Windows Components /Security Center/Turn on Security Center (Domain PCs only) setting.

9.Close the Local Group Policy Editor.

1.On LON-CL2, create a new VPN connection with the following properties:

o Internet address to connect to: 10.10.0.1 USE o Destination name: Adatum VPN

o Allow other people to use this connection: Enable

2.After you have created the VPN, modify its settings by viewing the properties of the connection, and

then selecting the Security tab. Use the following settings to reconfigure the VPN: PROHIBITED o Authentication type: Microsoft: Protected EAP (PEAP) (encryption enabled)

o Properties of this authentication type:

Validate server certificate: Enable

Connect to these servers: Disable

Authentication method: Secured password (EAP-MSCHAP v2)

Enable Fast Reconnect: Disable

Enforce Network Access Protection: Enable

Administering Windows Server® 2012 9-29

MCT USE ONLY. STUDENT USE PROHIBITED

Module Overview

The files on your servers are constantly changing with content being added, removed, and modified. STUDENT The Windows Server® 2012 File and Storage Services server role is designed to help administrators in an

enterprise environment manage the continually growing and changing amount of data. When storage

larger and complex storage infrastructure. Therefore, to meet the needs of your organization, you need understand and control how the existing storage resources are used.

• Configure and troubleshoot DFS Replication.