Добавил:
Upload Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз: Предмет: Файл:

20411B-ENU-TrainerHandbook

.pdf
Скачиваний:
237
Добавлен:
01.05.2015
Размер:
16.48 Mб
Скачать

14.In the Microsoft: Secured password (EAP-MSCHAP v2) (encryption enabled) list, select MCT Microsoft: Protected EAP (PEAP) (encryption enabled), and then click Properties.

15.Ensure that the Verify the server’s identity by validating the certificate check box is selected.

16.Clear the Connect to these servers check box, and then under Select Authentication Method, USE ensure that Secured password (EAP-MSCHAP v2) is selected.

17.Clear the Enable Fast Reconnect check box, and then select the Enforce Network Access Protection check box.

18.Click OK twice to accept these settings. ONLY

19.In the Network Connections window, right-click the Adatum VPN connection, and then click

Connect/Disconnect.

20.In the Networks list on the right, click Adatum VPN, and then click Connect.

21.In Network Authentication, in the User name box, type Adatum\Administrator.

22.In the Password box, type Pa$$w0rd, and then click OK. .

23.The Windows Security Alert window appears the first time that this VPN connection is used. Click STUDENT

Show certificate details.

24.Click Connect. Wait for the VPN connection to occur. Because LON-CL2 is compliant, it should have unlimited access to the intranet subnet.

25.Pause your mouse in the lower-left of the taskbar, and then click Start.

26.In Start, type cmd.exe, and then press Enter.

27.Type ipconfig /all, and then press Enter. View the IP configuration. System Quarantine State should be Not Restricted.

28.At the command prompt, type ping 172.16.0.10, and then press Enter. This should be successful. The client now meets the requirement for VPN full connectivity.

29.Switch to Network Connections.

30.Right-click Adatum VPN, and then click Connect/Disconnect. USE

31.In the Networks list on the right, click Adatum VPN, and then click Disconnect.

32.Switch to LON-RTR.

33.In Administrative Tools, double-click Network Policy Server.

34.Expand Network Access Protection, expand System Health Validators, expand Windows SecurityPROHIBITED Health Validator, and then click Settings.

35.In the right pane, under Name, double-click Default Configuration.

36.On the Windows 8/Windows 7/Windows Vista tab, select the Restrict access for clients that do not have all available security updates installed check box, and then click OK.

37.Switch to LON-CL2.

38.In the Networks list on the right, click Adatum VPN, and then click Connect.

39.Switch to the command prompt.

40.Type ipconfig /all, and then press Enter. View the IP configuration. System Quarantine State should be Restricted.

41.Switch to Network Connections.

L9-70 Implementing Network Access Protection

42.Right-click Adatum VPN, and then click Connect/Disconnect.

43.In the Networks list on the right, select Adatum VPN, and then click Disconnect.

Results: After this exercise, you should have created a new VPN connection on LON-CL2, and have enabled and tested NAP on LON-CL2.

To prepare for the next module

When you are finished the lab, revert all virtual machines to their initial state. To do this, perform the following steps:

1.On the host computer, start Hyper-V Manager.

2.In the Virtual Machines list, right-click 20411B-LON-CL2, and then click Revert.

3.In the Revert Virtual Machines dialog box, click Revert.

4.Repeat steps 2 and 3 for 20411B-LON-RTR and 20411B-LON-DC1.

PROHIBITED USE STUDENT .ONLY USE MCT

 

 

MCT

 

L10-71

Module 10: Optimizing File Services

 

Lab A: Configuring Quotas and File

USE

Screening Using FSRM

 

Exercise 1: Configuring FSRM Quotas

 

Task 1: Create a quota template

.ONLY

1.

Sign in to LON-SVR1 as Adatum\Administrator with the password Pa$$w0rd.

2.

On the taskbar, click the Server Manager shortcut.

3.

In Server Manager, click Manage, and then click Add Roles and Features.

4.

In the Add Roles and Features Wizard, click Next.

5.

Confirm that role-based or feature-based installation is selected, and then click Next.

6.

Confirm that LON-SVR1.Adatum.com is selected, and then click Next.

STUDENT

7.

On the Select server roles page, expand File and Storage Services (Installed), expand File and

 

SCSI Services, and then select the File Server Resource Manager check box.

8.

In the pop-up window, click Add Features.

9.

Click Next twice to confirm the role service and feature selection.

10.

On the Confirm installation selections page, click Install.

11.

When the installation completes, click Close.

12.

In Server Manager, click Tools, and then click File Server Resource Manager.

13.

In the File Server Resource Manager console, expand Quota Management, and then click Quota

 

Templates.

 

 

14.

Right-click Quota Templates, and then click Create Quota Template.

 

15.

In the Create Quota Template dialog box, in the Template name field, type 100 MB Limit Log to

 

Event Viewer.

USE

16.

Under Notification thresholds, click Add.

17.

In the Add Threshold dialog box, click the Event log tab.

 

18.

On the Event log tab, select the Send warning to event log check box, and then click OK.

 

19.

In the Create Quota Template dialog box, click Add.

 

20.

In the Add Threshold dialog box, in the Generate notification when the usage reaches (%) field,

 

type 100.

 

21.

Click the Event Log tab, select the Send warning to event log check box, and then click OK twice.

1.

In the File Server Resource Manager console, click Quotas.

PROHIBITED

2.

Right-click Quotas, and then click Create Quota.

3.

On the Create Quota dialog box, in the Quota path field, type E:\Labfiles\Mod10\Users.

4.

Click Auto apply template and create quotas on existing and new subfolders.

 

 

L10-72 Optimizing File Services

 

MCT

 

 

 

 

 

 

 

 

 

 

 

 

 

 

5.

In the Derive properties from this quota template (recommended) list, click 100MB Limit Log to

 

 

 

Event Viewer, and then click Create.

 

 

 

 

 

 

6.

In the details pane, verify that the E:\Labfiles\Mod10\Users path has been configured with its own

USE

 

 

 

quota entry. You may have to refresh the Quotas folder to view the changes.

 

 

 

 

 

 

 

 

7.

From the taskbar, open Windows Explorer.

 

 

 

 

 

 

8.

In the Windows Explorer window, click drive E, expand Labfiles, expand Mod10, and then

 

 

 

 

 

 

 

 

expand Users.

 

ONLY

9.

In the Users folder, create a new folder named

Max.

 

 

 

 

 

 

 

10. In File Server Resource Manager, on the Action menu, click Refresh.

 

 

 

 

 

 

 

11. In the details pane, notice that the newly created folder now displays in the list.

 

 

 

 

 

 

 

Task 3: Test that the quota is functional

 

 

 

 

 

 

1.

On LON-SVR1, on the taskbar, click the Windows PowerShell shortcut.

.

2.

In the Windows PowerShell window, type the following commands. Press Enter at the end of

STUDENT

 

 

 

each line:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

E:

 

 

 

 

 

 

 

 

 

cd \Labfiles\Mod10\Users\Max

 

 

 

 

 

 

 

 

 

fsutil file createnew file1.txt 89400000

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

This creates a file that is over 85 megabytes (MB), which will generate a warning in Event Viewer.

 

 

 

 

 

3.

On the taskbar, click the Server Manager shortcut.

 

 

 

 

 

4.

In Server Manager, click Tools, and then click Event Viewer.

 

 

 

 

 

5.

In the Event Viewer console, expand Windows Logs, and then click Application.

 

 

 

 

 

6.

In the details pane, note the event with Event ID of 12325.

 

 

 

 

 

7.

In the Windows PowerShell window, type the following command, and then press Enter:

 

USE

 

 

 

 

 

 

 

 

 

fsutil file createnew file2.txt 16400000

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Notice that the file cannot be created. The message returned from Windows references disk space,

 

 

 

 

 

 

 

 

but the file creation fails because it would surpass the quota limit.

 

 

 

 

 

8.

In the Windows PowerShell window, type exit, and then press Enter.

PROHIBITED

9.

Close all open windows on LON-SVR1.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Results: After completing this exercise, you should have configured an FSRM quota.

 

 

Administering Windows Server® 2012 L10-73

 

Exercise 2: Configuring File Screening and Storage Reports

MCT

Task 1: Create a file screen

 

 

1.

On LON-SVR1, open Server Manager and then from the Tools menu click File Server Resource

 

 

 

 

Manager.

 

 

2.

In the File Server Resource Manager console tree, expand File Screening Management, and then

 

 

click File Screens.

USE

 

 

 

3.

Right-click File Screens, and then click Create File Screen.

.ONLY

4.

In the Create File Screen window, in the File screen path text box, type E:\Labfiles\Mod10\Users.

5.

In the Create File Screen window, click the Derive properties from this file screen template

 

 

(recommended) drop-down list box, and then click Block Audio and Video Files.

6.

Click Create.

Task 2: Create a file group

 

 

 

1.

On LON-SVR1, right-click File Server Resource Manager (Local), and then click Configure Options.

2.

In the File Server Resource Manager Options dialog box, click the File Screen Audit tab.

 

 

3.

On the File Screen Audit tab, select the Record file screening activity in auditing database check

 

 

box, and then click OK.

STUDENT

 

 

 

 

data

4.

In the File Server Resource Manager console tree, expand File Screening Management, and then

 

 

click File Groups.

5.

Right-click File Groups, and then click Create File Group.

USE

6.

In the Create File Group Properties window, in the File group name box, type MPx Media Files.

7.

In the Files to include box, type *.mp*, and then click Add.

8.

In the Files to exclude box, type *.mpp, click Add, and then click OK.

9.

In the File Server Resource Manager console tree, expand File Screening Management, and then

PROHIBITED

 

 

click File Screen Templates.

10. Right-click the Block Audio and Video Files template, and then click Edit Template Properties.

11. On the Settings tab, under File groups remove the check box next to Audio and Video Files.

12.

Select the check box next to MPx Media Files.

13.

Click OK. Click Yes at the message prompt.

14.

Click OK at the message.

Task 3: Test the file screen

1.

On the taskbar, click the Windows Explorer shortcut.

2.

In the Windows Explorer window, in the left pane, click Allfiles (E:).

3.

In the right pane, right-click and point to New, and then click Text Document.

4.

Rename New Text Document.txt to musicfile.mp3. Click Yes to change the file name extension.

 

 

 

L10-74 Optimizing File Services

5.Right-click musicfile.mp3, and then click Copy.

6.In the left pane, expand Allfiles (E:), expand Labfiles, expand Mod10, right-click Users, and then click Paste. You will be notified that the system was unable to copy the file to E:\Labfiles\Mod10\Users.

7.Click Cancel.

Task 4: Generate an on-demand storage report

1.In the File Server Resource Manager console, click Storage Reports Management.

2.Right-click Storage Reports Management, and then click Generate Reports Now.

3.Under Select reports to generate, select the File Screening Audit check box.

4.Click the Scope tab and then click Add.

5.In the Browse for Folder dialog box, browse to E:\Labfiles\Mod10\Users, and then click OK.

6.Click OK to close the Storage Reports Task Properties.

7.In the Generate Storage Reports dialog box, verify that Wait for reports to be generated and then display them is selected, and then click OK.

8.In the Windows Internet Explorer window, review the generated html reports.

9.Close all open windows on LON-SVR1.

To prepare for the next lab

When you finish the lab, do not shut down the virtual machines. You will need them for the next lab.

Results: After completing this exercise, you will have configured file screening and storage reports in

FSRM.

PROHIBITED USE STUDENT .ONLY USE MCT

Administering Windows Server® 2012

MCT

L10-75

Lab B: Implementing DFS

 

 

1.Switch to LON-SVR1. USE

2.On the taskbar, click Server Manager.

3.In Server Manager, click Manage, and then click Add Roles and Features. ONLY

4.In the Add Roles and Features Wizard, click Next.

5.On the Select installation type page, click Next.

6.On the Select destination server page, click Next.

7.On the Select server roles page, expand File and Storage Services, expand File and iSCSI Services,

and then select the DFS Namespaces check box. .

8.In the Add Roles and Features pop-up window, click Add Features. STUDENT

9.Select the DFS Replication check box, and then click Next.

10.On the Select features page, click Next.

11.On the Confirm installation selections page, click Install.

12.When the installation completes, click Close.

13.Close Server Manager.Exercise 1: Installing the DFS role service

1.Switch to LON-SVR4.

2.In Server Manager, click Manage, and then click Add Roles and Features.

3.In the Add Roles and Features Wizard, click Next. USE

4.On the Select installation type page, click Next.

5.On the Select destination server page, click Next.

6.On the Select server roles page, expand File and Storage Services, expand File and SCSI Services, and then select the DFS Namespaces check box.

7.In the Add Roles and Features pop-up window, click Add Features. PROHIBITED

8.Select the DFS Replication check box, and then click Next.

9.On the Select features page, click Next.

10.On the Confirm installation selections page, click Install.

11.When the installation completes, click Close.

12.Close Server Manager.

L10-76 Optimizing File Services

MCT

 

 

 

 

 

Exercise 2: Configuring a DFS Namespace

 

 

Task 1: Create the BranchDocs namespace

USE

1.

Switch to LON-SVR1 and then open Server Manager.

 

 

2.

In Server Manager, click Tools, and then click DFS Management.

 

 

3.

In the navigation pane, click Namespaces.

 

 

4.

Right-click Namespaces, and then click New Namespace.

.ONLY

5.

In the New Namespace Wizard, on the Namespace Server page, under Server, type LON-SVR1, and

 

 

 

then click Next.

 

 

6.

On the Namespace Name and Settings page, under Name, type BranchDocs, and then click Next.

 

 

7.

On the Namespace Type page, ensure that Domain-based namespace is selected. Take note that

 

 

 

the namespace will be accessed by \\Adatum.com\BranchDocs.

 

 

8.

Ensure that the Enable Windows Server 2008 mode check box is selected, and then click Next.

 

 

9.

On the Review Settings and Create Namespace page, click Create.

STUDENT

10. On the Confirmation page, ensure that the Create namespace task is successful, and then

 

click Close.

11. In the navigation pane, expand Namespaces, and then click \\Adatum.com\BranchDocs.

12. In the details pane, click the Namespace Servers tab, and ensure that there is one entry that is

 

enabled for \\LON-SVR1\BranchDocs.

1.

In the navigation pane, under Namespaces, right-click \\Adatum.com\BranchDocs, and then

 

click Properties.

2.

In the \\Adatum.com\BranchDocs Properties dialog box, click the Advanced tab.

3.

On the Advanced tab, select the Enable access-based enumeration for this namespace check box,

 

and then click OK.

USE

 

 

 

1.

In DFS Management, right-click Adatum.com\BranchDocs, and then click New Folder.

 

 

2.

In the New Folder dialog box, under Name, type ResearchTemplates.

PROHIBITED

2.

In the New Folder dialog box, under Name, type DataFiles, and then, click Add.

3.

In the New Folder dialog box, click Add.

 

 

4.

In the Add Folder Target dialog box, type \\LON-SVR4\ResearchTemplates, and then click OK.

 

 

5.

In the Warning dialog box, click Yes.

 

 

6.

In the Create Share dialog box, in the Local path of shared folder box, type

 

 

 

C:\BranchDocs\ResearchTemplates.

 

 

7.

Click All users have read and write permissions, and then click OK.

 

 

8.

In the Warning dialog box, click Yes.

 

 

9.

Click OK again to close the New Folder dialog box.

 

 

Task 4: Add the DataFiles folder to the BranchDocs namespace

 

 

1.

In DFS Management, right-click Adatum.com\BranchDocs, and then click New Folder.

 

 

 

 

Administering Windows Server® 2012

MCT

 

 

L10-77

3.

In the Add Folder Target dialog box, type \\LON-SVR1\DataFiles, and then click OK.

 

 

 

4.

In the Warning dialog box, click Yes.

USE

5.

In the Create Share dialog box, in the Local path of shared folder box, type

 

 

C:\BranchDocs\DataFiles.

 

 

 

 

 

6.

Click All users have read and write permissions, and then click OK. The permissions will be

 

 

 

 

 

configured later.

 

 

 

7.

In the Warning dialog box, click Yes.

 

 

 

8.

Click OK again to close the New Folder dialog box.

.ONLY

 

Task 5: Verify the BranchDocs namespace

 

 

 

 

1.

On LON-SVR1, open Windows Explorer, in the address bar type \\Adatum.com\BranchDocs\, and

 

 

then press Enter.

 

 

 

2.

In the BranchDocs window, verify that both ResearchTemplates and DataFiles display.

 

 

 

3.

Close the BranchDocs window.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

1.

In DFS Management, expand Adatum.com\BranchDocs, and then click DataFiles.

STUDENT

2.

In the details pane, notice that there is currently only one folder target.

3.

Right-click DataFiles, and then click Add Folder Target.

 

 

 

4.

In the New Folder Target dialog box, under Path to folder target, type \\LON-SVR4\DataFiles,

 

 

and then click OK.

 

 

 

5.

In the Warning dialog box, click Yes to create the shared folder on LON-SVR4.

 

 

 

6.

In the Create Share dialog box, under Local path of shared folder, type C:\BranchDocs\DataFilesUSE.

7.

In the Create Share dialog box, under Shared folder permissions, select All users have read and

 

 

write permissions, and then click OK.

 

 

 

8.

In the Warning dialog box, click Yes to create the folder on LON-SVR4.

 

 

 

9.

In the Replication dialog box, click Yes. The Replicate Folder Wizard starts.

 

 

 

1.

In DFS Management, in the Replicate Folder Wizard, on both the Replication Group and Replicated

 

 

Folder Name page, accept the default settings, and then click Next.

PROHIBITED

2.

On the Replication Eligibility page, click Next.

3.

On the Primary Member page, select LON-SVR1, and then click Next.

4.

On the Topology Selection page, select No topology, and then click Next.

5.

In the Warning dialog box, click OK.

6.

On the Review Settings and Create Replication Group page, click Create.

 

 

 

L10-78 Optimizing File Services

7.On the Confirmation page, click Close.

8.In the Replication Delay dialog box, click OK.

9.In the DFS Management console, expand Replication, and then click

Adatum.com\BranchDocs\DataFiles.

10.In the Action pane, click New Topology.

11.In the New Topology Wizard, on the Topology Selection page, click Full mesh, and then click Next.

12.On the Replication Group Schedule and Bandwidth page, click Next.

13.On the Review Settings and Create Topology page, click Create.

14.On the Confirmation page, click Close, and in the Replication Delay dialog box, click OK.

15.In the details pane, on the Memberships tab, verify that the replicated folder displays on both

LON-SVR4 and LON-SVR1.

To prepare for the next module

When you finish the lab, revert the virtual machines to their initial state. To do this, complete the following steps:

1.On the host computer, start Hyper-V Manager.

2.In the Virtual Machines list, right-click 20411B-LON-DC1, and then click Revert.

3.In the Revert Virtual Machine dialog box, click Revert.

4.Repeat these steps for 20411B-LON-SVR1 and 20411B-LON-SVR4.

Results: After completing this exercise, you will have configured DFS-R.

PROHIBITED USE STUDENT .ONLY USE MCT

Соседние файлы в предмете [НЕСОРТИРОВАННОЕ]