download.microsoft.comdownload.microsoft.com/.../MCSM_Directory_Reading_Li… · Web viewCore Directory Concepts & Key Items. ... Active Directory Diagnostics, Troubleshooting,

Microsoft Certified Solution Master (MCSM)Windows Server 2012 Directory ServicesReading list (June 2013)

The Microsoft Certified Solutions Master: Directory Services certification validates comprehensive knowledge of the Windows Server Directory platform. This certification is designed to challenge the limits of most candidates. The reading list below provides an overview of topics covered during training and is not intended to be a conclusive set of reference material. You are encouraged to review the topics below in preparation for the training courses.

Core Directory Concepts & Key Items

MCM Core AD Internals Core Concepts of Active Directory Domain Services

o Attributes o Containers and Leaves o Object Names and Identities o Naming Contexts and Directory Partitions o Domain Trees o Forests o Active Directory Servers and Dynamic DNS o Replication and Data Integrity

Active Directory o Active Directory Logical Structure o Active Directory Data Storage o Name Resolution in Active Directory o Active Directory Schema o Service Publication in Active Directory o Active Directory Replication o Managing Flexible Single-Master Operations o Monitoring Performance in Active Directory o Active Directory Backup and Restore o Active Directory Diagnostics, Troubleshooting, and Recovery

Active Directory Collection o Active Directory on a Windows Server Network o Active Directory Application Mode o Structure and Storage Technologies o Domain Controller Roles o Replication Technologies o Search and Publication Technologies o Installation, Upgrade, and Migration Technologies

AD Users, Computers, and Groups o Introduction

http://technet.microsoft.com/en-us/library/bb727067.aspx#EHAA

http://technet.microsoft.com/en-us/library/bb727067.aspx

http://technet.microsoft.com/en-us/library/cc780036(WS.10).aspx#w2k3tr_ad_over_khvy

http://technet.microsoft.com/en-us/library/cc780036(WS.10).aspx#w2k3tr_ad_over_fugs

http://technet.microsoft.com/en-us/library/cc780036(WS.10).aspx#w2k3tr_ad_over_rlzh

http://technet.microsoft.com/en-us/library/cc780036(WS.10).aspx#w2k3tr_ad_over_xobo

http://technet.microsoft.com/en-us/library/cc780036(WS.10).aspx#w2k3tr_ad_over_vzwp

http://technet.microsoft.com/en-us/library/cc780036(WS.10).aspx#w2k3tr_ad_over_gjov

http://technet.microsoft.com/en-us/library/cc780036(WS.10).aspx#w2k3tr_ad_over_qbjd

http://technet.microsoft.com/en-us/library/cc780036(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc961807.aspx











http://msdn.microsoft.com/en-us/library/ms677921(v=vs.85).aspx








http://msdn.microsoft.com/en-us/library/aa772157(VS.85).aspx

https://blogs.technet.com/b/askpfeplat/archive/2012/07/23/mcm-core-active-directory-internals.aspx?Redirected=true

o Active Directory User and Computer Accounts o Active Directory Groups User Authentication o User Authorization o Summary o Appendix A: Built-in, Predefined, and Special Groups o Appendix B: User Rights

AD DS Design Guide o Understanding AD DS Design o Identifying Your AD DS Design and Deployment Requirements o Mapping Your Requirements to an AD DS Deployment Strategy o Designing the Logical Structure for Windows Server 2008 AD DS o Designing the Site Topology for Windows Server 2008 AD DS o Enabling Advanced Features for AD DS o Evaluating AD DS Deployment Strategy Examples o Appendix A: Reviewing Key AD DS Terms

Distributed Systems Guide . o Active Directory Logical Structure o Active Directory Data Storage o Name Resolution in Active Directory o Active Directory Schema o Service Publication in Active Directory o Active Directory Replication o Managing Flexible Single-Master Operations o Monitoring Performance in Active Directory o Active Directory Backup and Restore o Active Directory Diagnostics, Troubleshooting, and Recovery

Domain and Forest Trusts Technical Reference o What Are Domain and Forest Trusts? o How Domain and Forest Trusts Work o Domain and Forest Trust Tools and Settings o Security Considerations for Trusts

Global Catalog Technical Reference o What Is the Global Catalog? o How the Global Catalog Works o Global Catalog Tools and Settings

Operations Masters Technical Reference o What are Operations Masters? o How Operations Masters Work o Operations Masters Tools and Settings

TCP/IP Technical Reference o What Is TCP/IP? o How TCP/IP Works o TCP/IP Tools and Settings

http://technet.microsoft.com/en-us/library/cc786724(v=ws.10).aspx









http://technet.microsoft.com/en-us/library/how-global-catalog-servers-work(v=ws.10).aspx








http://technet.microsoft.com/en-US/library/cc961807










http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsba_pt2_vesa.mspx?mfr=true

http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsba_pt2_vesa.mspx?mfr=true










http://technet.microsoft.com/en-us/library/bb727067.aspx#EAAA

http://technet.microsoft.com/en-us/library/bb727067.aspx#EBAA

http://technet.microsoft.com/en-us/library/bb727067.aspx#ECAA

http://technet.microsoft.com/en-us/library/bb727067.aspx#EDAA

http://technet.microsoft.com/en-us/library/bb727067.aspx#EEAA

http://technet.microsoft.com/en-us/library/bb727067.aspx#EFAA

http://technet.microsoft.com/en-us/library/bb727067.aspx#EGAA

Active Directory Domain Services in the Perimeter Network o Planning Deployment of AD DS in the Perimeter Network o Designing RODCs in the Perimeter Network o Deploying RODCs in the Perimeter Network

Running Domain Controllers in Hyper-V o Planning to Virtualize Domain Controllers o Deployment Considerations for Virtualized Domain Controllers o Operational Considerations for Virtualized Domain Controllers o Backup and Restore Considerations for Virtualized Domain Controllers o USN and USN Rollback

Distributed Link Tracking on Windows-based domain controllers Active Directory Schema Technical Reference Infrastructure Planning and Design Guides for Windows Server 2008 Active Directory and Active Directory Domain Services Port Requirements DCDIAG Technical Reference: What does DCDIAG actually… do? High Water Mark and Up To Dateness Vector (These are the updates you are looking for) AdminSDHolder

AD Database

How the Data Store Works o Data Store Architecture o Data Store Protocols o Data Store Interfaces o Data Store Logical Structure o Data Store Physical Structure o Data Store Processes and Interactions o Network Ports Used by the Data Store o Related Information

Data Storage o Directory Tree o Storage Limits o Directory Data Store o Object-Based Security o Growth Estimates for Active Directory Users and Organizational Units o Data Characteristics o Windows 2000 SAM Storage o Data Model o Container Objects and Leaf Objects o Directory Partitions

Extensible Storage Engine Files o Transaction Log Files

http://msdn.microsoft.com/en-us/library/gg294069(v=exchg.10).aspx#ExtensibleStorageEngineFiles_TransactionLogFiles

http://msdn.microsoft.com/en-us/library/gg294069(v=exchg.10).aspx












http://technet.microsoft.com/en-us/library/cc772829(WS.10).aspx#w2k3tr_adstr_how_krin

http://technet.microsoft.com/en-us/library/cc772829(WS.10).aspx#w2k3tr_adstr_how_xuac

http://technet.microsoft.com/en-us/library/cc772829(WS.10).aspx#w2k3tr_adstr_how_kceb

http://technet.microsoft.com/en-us/library/cc772829(WS.10).aspx#w2k3tr_adstr_how_jddq

http://technet.microsoft.com/en-us/library/cc772829(WS.10).aspx#w2k3tr_adstr_how_gchw

http://technet.microsoft.com/en-us/library/cc772829(WS.10).aspx#w2k3tr_adstr_how_mkhb

http://technet.microsoft.com/en-us/library/cc772829(WS.10).aspx#w2k3tr_adstr_how_kpjm

http://technet.microsoft.com/en-us/library/cc772829(WS.10).aspx#w2k3tr_adstr_how_smep


http://technet.microsoft.com/en-us/magazine/2009.09.sdadminholder.aspx

https://blogs.technet.com/themes/blogs/generic/post.aspx?WeblogApp=ad&y=2009&m=09&d=23&WeblogPostName=these-are-the-updates-you-are-looking-for&GroupKeys=

https://blogs.technet.com/themes/blogs/generic/post.aspx?WeblogApp=askds&y=2011&m=03&d=22&WeblogPostName=what-does-dcdiag-actually-do&GroupKeys=

http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx

http://technet.microsoft.com/en-us/solutionaccelerators/ee395428


http://support.microsoft.com/kb/312403/

http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx#usn_and_usn_rollback

http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx#backup_and_restore_considerations_for_virtualized_domain_controllers

http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx#operational_considerations_for_virtualized_domain_controllers

http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx#deployment_considerations_for_virtualized_domain_controllers

http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx#bkmk1_planning_to_virtualize_domain_controllers

http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx

http://technet.microsoft.com/en-us/library/dd728035(v=ws.10).aspx




o Temporary Transaction Log Files o Reserved Transaction Log Files o Checkpoint Files o Database Files o Temporary Databases

Active Directory Domain Services Database Mounting Tool (Snapshot Viewer or Snapshot Browser) Step-by-Step Guide

MCM: Active Directory Indexing For the Masses

ADFS

Overview of Active Directory Federation Services (ADFS) in Windows Server 2003 R2 Active Directory Federation Services (AD FS) Overview ADFS Design Guide

o Understanding the ADFS Design Process o Identifying Your ADFS Deployment Goals o Mapping Your Deployment Goals to an ADFS Design o Evaluating ADFS Design Examples o Planning Partner Organization Deployments o Designing a Federated Application Strategy o Planning ADFS-Enabled Web Server Placement o Planning Federation Server Placement o Planning Federation Server Proxy Placement o Planning for ADFS Capacity o Finding Additional ADFS Resources o Appendix A: Reviewing ADFS Requirements o Appendix B: Reviewing Key ADFS Concepts o Appendix C: Documenting Your ADFS Design

ADFS Deployment Guide o Planning to Deploy ADFS o Implementing Your ADFS Design Plan o Checklist: Implementing a Web SSO Design o Checklist: Implementing a Federated Web SSO Design o Checklist: Implementing a Federated Web SSO with Forest Trust Design o Deploying Partner Organizations o Deploying Federated Applications o Deploying ADFS-Enabled Web Servers o Deploying Federation Servers o Deploying Federation Server Proxies o Finding Additional ADFS Resources

AD FS 2.0 Claims Rule Language Primer o An Introduction to Claims

http://msdn.microsoft.com/en-us/library/ff359101.aspx



























https://social.technet.microsoft.com/wiki/contents/articles/1011.active-directory-federation-services-ad-fs-overview.aspx

https://www.microsoft.com/en-us/download/details.aspx?id=14977

https://blogs.technet.com/b/askpfeplat/archive/2012/11/12/mcm-active-directory-indexing-for-the-masses.aspx?Redirected=true



http://msdn.microsoft.com/en-us/library/gg294069(v=exchg.10).aspx#ExtensibleStorageEngineFiles_TemporaryDatabases

http://msdn.microsoft.com/en-us/library/gg294069(v=exchg.10).aspx#ExtensibleStorageEngineFiles_DatabaseFiles

http://msdn.microsoft.com/en-us/library/gg294069(v=exchg.10).aspx#ExtensibleStorageEngineFiles_CheckpointFiles

http://msdn.microsoft.com/en-us/library/gg294069(v=exchg.10).aspx#ExtensibleStorageEngineFiles_ReservedTransactionLogFiles

http://msdn.microsoft.com/en-us/library/gg294069(v=exchg.10).aspx#ExtensibleStorageEngineFiles_TemproaryTransactionLogFiles

o Security Briefs: Exploring Claims-Based Identity o AD FS 2.0 Content Map o Understanding Claim Rule Language in AD FS 2.0 o When to Use a Custom Claim Rule o The Role of the Claim Rule Language o The Role of the Claims Engine o The Role of the Claims Pipeline

AD FS 2.0 Claims Rule Language Part 2 AD FS 2.0: Using RegEx in the Claims Rule Language AD FS 2.0 RelayState

Authentication & Logon

Logon and Authentication Technologies o Digest Authentication Technical Reference o Interactive Logon Technical Reference o Kerberos Authentication Technical Reference

What Is Kerberos Authentication? How the Kerberos Version 5 Authentication Protocol Works Kerberos Authentication Tools and Settings

o TLS/SSL Technical Reference Windows Kerberos Authentication

o Introduction o Overview of the Kerberos Protocol o Kerberos Components in Windows 2000 o Authorization Data o Interactive Logon o Remote Logon o Interoperability

Kerberos Protocol Transition and Constrained Delegation o Introduction (Kerberos Protocol Transition and Constrained Delegation) o Authenticating Web Application Users o Windows Server 2003 Kerberos Extensions o Sample Scenario Source Files o Summary (Kerberos Protocol Transition and Constrained Delegation) o Conclusion (Kerberos Protocol Transition and Constrained Delegation)

Kerberos for the Busy Admin Understanding Kerberos Double Hop Kerberos errors in network captures [MS-NLMP]: NT LAN Manager (NTLM) Authentication Protocol Authorization and Access Control Technologies

o Security Descriptors and Access Control Lists Technical Reference



http://msdn.microsoft.com/en-us/library/cc236621.aspx

https://blogs.technet.com/b/askds/archive/2012/07/27/kerberos-errors-in-network-captures.aspx

https://blogs.technet.com/b/askds/archive/2008/06/13/understanding-kerberos-double-hop.aspx?Redirected=true

https://blogs.technet.com/themes/blogs/generic/post.aspx?WeblogApp=askds&y=2008&m=03&d=06&WeblogPostName=kerberos-for-the-busy-admin&GroupKeys=








http://technet.microsoft.com/en-us/library/bb742431.aspx#XSLTsection128121120120
















https://blogs.technet.com/b/askds/archive/2012/09/27/ad-fs-2-0-relaystate.aspx?Redirected=true

https://social.technet.microsoft.com/wiki/contents/articles/16161.ad-fs-2-0-using-regex-in-the-claims-rule-language.aspx

http://blogs.technet.com/b/askds/archive/2013/05/07/ad-fs-2-0-claims-rule-language-part-2.aspx?Redirected=true

http://technet.microsoft.com/en-us/library/ee913585(WS.10).aspx




http://social.technet.microsoft.com/wiki/contents/articles/2735.aspx

http://msdn.microsoft.com/en-us/magazine/cc163366.aspx

o Access Tokens Technical Reference o Permissions Technical Reference o Security Principals Technical Reference o Security Identifiers Technical Reference

Interactive Logon Technical Reference o What is Interactive Logon? o How Interactive Logon Works o Interactive Logon Tools and Settings

User Data and Settings Management o User Profiles Overview in User Data and Settings Management o User Profile Structure o Enhancements to User Profiles in Windows Server 2003 and Windows XP o How to Configure a Roaming User Profile o Security Considerations when Configuring Roaming User Profiles o Best Practices for User Profiles o Folder Redirection Overview o How to Configure Folder Redirection o Security Considerations when Configuring Folder Redirection o Best Practices for Folder Redirection in User Data and Settings Management o Related Technologies: Offline Files and Synchronization Manager o Common Scenarios for IntelliMirror User Data and Settings Features o Appendix: Group Policy Settings for Roaming User Profiles o Related Links for User Data and Settings Management

Problems with Kerberos authentication when a user belongs to many groups (Article ID: 327825) Users who are members of more than 1,015 groups may fail logon authentication (Article ID:

328889) MaxTokenSize and Windows 8 and Windows Server 2012

Backup and Disaster Recovery

AD DS Backup and Recovery Step - by - Step Guide o What's New in AD DS Backup and Recovery? o Known Issues for AD DS Backup and Recovery o Best Practices for AD DS Backup and Recovery o General Requirements for Backing Up and Recovering AD DS o Scenario Overviews for Backing Up and Recovering AD DS o Steps for Backing Up and Recovering AD DS

Planning for Active Directory Forest Recovery o New Features, Assumptions, and Prerequisites for Using This Guide for Planning Active

Directory Forest Recovery o Devising a Custom Forest Recovery Plan o Recovering Your Active Directory Forest





http://technet.microsoft.com/en-us/library/planning-active-directory-forest-recovery(v=ws.10).aspx












https://blogs.technet.com/b/askds/archive/2012/09/12/maxtokensize-and-windows-8-and-windows-server-2012.aspx?Redirected=true

http://support.microsoft.com/kb/328889


























o Appendix A: Forest Recovery Procedures o Appendix B: Frequently Asked Questions o Appendix C: Recovering a Single Domain within a Multidomain Forest o Appendix D: Forest Recovery with Windows Server 2003 Domain Controllers o Additional Resources

Windows Server 2012: Planning for Active Directory Forest Recovery (Word doc download) Recovering Missing FRS Objects and FRS Attributes in Active Directory Performing an Authoritative Restore of Active Directory Objects

o Restore Active Directory from backup o Mark the object or objects authoritative o Synchronize replication with all partners o Run an LDIF file to recover back-links o Restart the domain controller in Directory Services Restore Mode locally o Create an LDIF file for recovering back-links for authoritatively restored objects o Turn off inbound replication o Turn on inbound replication

How to Force a Non-Authoritative Restore of the Data in the SYSVOL Folder on a Domain Controller in Windows 2000 Server and in Windows Server 2003

How to Perform an Authoritative Restore to a Domain Controller in Windows 2000 Performing a Non-Authoritative Restore of a Domain Controller How to Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller How to perform a disaster recovery restoration of Active Directory on a computer with a

different hardware configuration How to restore deleted user accounts and their group memberships in Active Directory Active Directory Database Mounting Tool Step - by - Step Guide

Certificate Services

Best Practices for Implementing a Microsoft Windows Server 2003 Public Key Infrastructure o About This Document (Best Practices for Implementing a Microsoft Windows Server

2003 Public Key Infrastructure) o Overview of the PKI Design Process (Best Practices for Implementing a Microsoft

Windows Server 2003 Public Key Infrastructure) o Integration Into Existing Environments (Best Practices for Implementing a Microsoft

Windows Server 2003 Public Key Infrastructure) o Windows Server 2003 PKI and Dependencies (Best Practices for Implementing a

Microsoft Windows Server 2003 Public Key Infrastructure) o Deployment Planning (Best Practices for Implementing a Microsoft Windows Server

2003 Public Key Infrastructure) o Creating Certificate Policies and Certificate Practice Statements o Example Scenario for Contoso o Stand-alone Offline Intermediate CA (IntermediateCA1)




















http://support.microsoft.com/kb/840001/en-us



















https://www.microsoft.com/en-us/download/confirmation.aspx?id=16506


http://technet.microsoft.com/en-us/library/dn169484(v=ws.10).aspx

http://technet.microsoft.com/en-us/library/dn169485(v=ws.10).aspx



o Stand-alone Offline Intermediate CA (CorporateSub2CA) o Online Enterprise Issuing CAs (CorporateEnt1CA) o Certification Authority Maintenance o Appendix A: Directory Objects o Contents of \\Localhost\CertConfig and \\Localhost\CertEnroll o Relationship of the Configuration Container and Certificate Store o Default CA Certificate and CRL Storage o Mapping Custom Object Identifiers to Friendly Names o CAPolicy.inf Syntax o CRL Distribution Point Replacement Token o CRL Publishing Properties o AIA Publishing Properties o Sample Script to Configure CorporateRootCA o Sample Script to Configure IntermediateCA o Sample Script to Configure the EnterpriseSubCA o Appendix B: Parameters for a Three-Tier CA Topology o Appendix C: Additional Information

Best Practices for Certificate Management Designing and Implementing a PKI: A 5 Part Article

o Designing and Implementing a PKI: Part I Design and Planning o Designing and Implementing a PKI: Part II Implementation Phases and Certificate

Authority Installationo Designing and Implementing a PKI: Part III Certificate Templates o Designing and Implementing a PKI: Part IV Configuring SSL for Web Enrollment and

Enabling Key Archivalo Designing and Implementing a PKI: Part V Disaster Recovery

Windows XP: Certificate Status and Revocation Checking Certificate Revocation Checking in Windows Vista and Windows Server 2008

o What’s New in Certificate Revocation in Windows Vista and Windows Server 2008 o How Certificate Revocation Works o Pre-Fetching o Support for Independent OCSP Signer and Custom OCSP URLs o Optimizing the Revocation Experience o Appendix A: Managing OCSP Settings with Group Policy o Appendix B: Configuring ETag and Max-Age in IIS o Appendix C: Certificate Revocation References

Public Key Infrastructure (PKI) o CA Certificates Technical Reference o Certificates Technical Reference o Certificate Services Technical Reference

CA Certificates Technical Reference (similar to the next TR)o What Are CA Certificates? o How CA Certificates Work








http://technet.microsoft.com/en-us/library/ee619758(v=ws.10).aspx








http://technet.microsoft.com/library/ee619730.aspx

https://social.technet.microsoft.com/wiki/contents/articles/4954.windows-xp-certificate-status-and-revocation-checking.aspx

http://blogs.technet.com/b/askds/archive/2011/04/07/designing-and-implementing-a-pki-part-v-disaster-recovery.aspx

http://blogs.technet.com/b/askds/archive/2011/04/06/designing-and-implementing-a-pki-part-iv-configuring-ssl-for-web-enrollment-and-enabling-key-archival.aspx

http://blogs.technet.com/b/askds/archive/2011/04/06/designing-and-implementing-a-pki-part-iv-configuring-ssl-for-web-enrollment-and-enabling-key-archival.aspx

http://blogs.technet.com/b/askds/archive/2010/05/27/designing-and-implementing-a-pki-part-iii-certificate-templates.aspx

http://blogs.technet.com/b/askds/archive/2009/10/13/designing-and-implementing-a-pki-part-ii.aspx

http://blogs.technet.com/b/askds/archive/2009/10/13/designing-and-implementing-a-pki-part-ii.aspx

http://blogs.technet.com/b/askds/archive/2009/09/01/designing-and-implementing-a-pki-part-i-design-and-planning.aspx

https://blogs.technet.com/b/askds/archive/2009/09/01/designing-and-implementing-a-pki-part-i-design-and-planning.aspx?Redirected=true



















o CA Certificates Tools and Settings Certificate Service Technical Reference (similar to the previous TR)

o What Is Certificate Services? o How Certificate Services Works o Certificate Services Tools and Settings

Client Interaction

Locating Active Directory Servers o Domain Controller Name Registration o SRV Resource Records o Domain Controller Location Process o Finding a Domain Controller in the Closest Site o Types of Locators

IP/DNS DC Locator Algorithm (This is also a great general DNS review, but review this specific named section)

Domain Locator Across a Forest Trust How Domain Controllers are Located Across Trusts DsgetDCname – particularly the piece about the new stickiness feature

DFS Namespaces (DFSN) & DFS Replication (DFSR)

Distributed File System (DFS) Technical Reference o What Is DFS? o How DFS Works o DFS Tools and Settings

How DFS Works o DFS Terminology o DFS Client and Server Compatibility o Characteristics of Namespace Types o DFS Architecture o DFS Physical Structures and Caches o DFS Processes and Interactions o DFS Protocols o DFS Interfaces o Network Ports Used by DFS o Related Information

Designing Distributed File Systems Tuning DFS Namespaces

o Enable Access-Based Enumeration on a Namespace o Enable or Disable Referrals and Client Failback o Change the Amount of Time That Clients Cache Referrals o Set the Ordering Method for Targets in Referrals




http://technet.microsoft.com/en-us/library/dd759150.aspx


http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_xlad

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_gndl

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_obek

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_mhfa

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_rkvd

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_wxun

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_erkf

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_wbpc

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_sdzq

http://technet.microsoft.com/en-us/library/cc782417.aspx#w2k3tr_dfs_how_yold





http://msdn.microsoft.com/en-us/library/ms675983.aspx



http://blogs.technet.com/askds/archive/2008/09/24/domain-locator-across-a-forest-trust.aspx













o Set Target Priority to Override Referral Ordering o Optimize Namespace Polling o Using Inherited Permissions with Access-Based Enumeration

Common DFSN Configuration Mistakes and Oversights DFS Replication: What’s new in Windows Server™ 2008 DFS Replication: Frequently Asked Questions (FAQ) Schema Extension Requirements for running Windows Server 2008 DFSR The Case for Migrating SYSVOL to DFSR SYSVOL Replication Migration Guide: FRS to DFS Replication

o SYSVOL Migration Conceptual Information o SYSVOL Migration Procedure o Troubleshooting SYSVOL Migration o SYSVOL Migration Reference Information

SYSVOL Migration Series (5 parts) o 1: SYSVOL Migration Series: Part 1 – Introduction to the SYSVOL migration process o 2: SYSVOL Migration Series: Part 2 - Dfsrmig.exe: The SYSVOL migration tool o 3: SYSVOL Migration Series: Part 3 - Migrating to the Prepared State o 4: SYSVOL Migration Series: Part 4 – Migrating to the ‘REDIRECTED’ state o 5: SYSVOL Migration Series: Part 5 – Migrating to the ‘ELIMINATED’ state

Distributed File System Consolidation of a Standalone Namespace to a Domain-Based Namespace

DNS & Name Resolution

How DNS Works – (a bit lengthy) o DNS Architecture o DNS Protocol o DNS Physical Structure o DNS Processes and Interactions o Network Ports Used By DNS o Related Information

DNS Technical Reference o What Is DNS? o How DNS Works o DNS Tools and Settings

How DNS Support for Active Directory Works o DNS Support for Active Directory Architecture o DNS Physical Structure in Support of Active Directory o DNS Support for Active Directory Processes and Interactions o Network Ports Used by DNS in Support of Active Directory o Related Information

Windows 2000 DNS


http://technet.microsoft.com/en-us/library/cc759550.aspx#w2k3tr_addns_how_bkhj

http://technet.microsoft.com/en-us/library/cc759550.aspx#w2k3tr_addns_how_uumw

http://technet.microsoft.com/en-us/library/cc759550.aspx#w2k3tr_addns_how_rotg

http://technet.microsoft.com/en-us/library/cc759550.aspx#w2k3tr_addns_how_nsbm

http://technet.microsoft.com/en-us/library/cc759550.aspx#w2k3tr_addns_how_kiua






http://technet.microsoft.com/en-us/library/cc772774.aspx#w2k3tr_dns_how_rjbc

http://technet.microsoft.com/en-us/library/cc772774.aspx#w2k3tr_dns_how_mlkk

http://technet.microsoft.com/en-us/library/cc772774.aspx#w2k3tr_dns_how_gaxc

http://technet.microsoft.com/en-us/library/cc772774.aspx#w2k3tr_dns_how_ceap

http://technet.microsoft.com/en-us/library/cc772774.aspx#w2k3tr_dns_how_hjxl

http://technet.microsoft.com/en-us/library/cc772774.aspx#w2k3tr_dns_how_ehij




http://blogs.technet.com/b/askds/archive/2013/02/06/distributed-file-system-consolidation-of-a-standalone-namespace-to-a-domain-based-namespace.aspx?Redirected=true

http://blogs.technet.com/b/askds/archive/2013/02/06/distributed-file-system-consolidation-of-a-standalone-namespace-to-a-domain-based-namespace.aspx?Redirected=true

http://blogs.technet.com/filecab/archive/2008/03/19/sysvol-migration-series-part-5-migrating-to-the-eliminated-state.aspx

http://blogs.technet.com/filecab/archive/2008/03/17/sysvol-migration-series-part-4-migrating-to-the-redirected-state.aspx

http://blogs.technet.com/filecab/archive/2008/03/05/sysvol-migration-series-part-3-migrating-to-the-prepared-state.aspx

http://blogs.technet.com/filecab/archive/2008/02/14/sysvol-migration-series-part-2-dfsrmig-exe-the-sysvol-migration-tool.aspx






https://blogs.technet.com/themes/blogs/generic/post.aspx?WeblogApp=askds&y=2010&m=04&d=22&WeblogPostName=the-case-for-migrating-sysvol-to-dfsr&GroupKeys=

https://blogs.technet.com/themes/blogs/generic/post.aspx?WeblogApp=askds&y=2008&m=07&d=02&WeblogPostName=what-are-the-schema-extension-requirements-for-running-windows-server-2008-dfsr&GroupKeys=


https://blogs.technet.com/b/filecab/archive/2007/12/26/what-s-new-in-windows-server-2008.aspx?Redirected=true

https://blogs.technet.com/b/askds/archive/2012/07/24/common-dfsn-configuration-mistakes-and-oversights.aspx

http://technet.microsoft.com/en-us/library/dd834874.aspx



o Introduction o DNS Fundamentals o New Features of the Windows 2000 DNS o Designing a DNS Namespace for the Active Directory o Summary o Glossary

DNS Support for Active Directory o What Is DNS Support for Active Directory? o How DNS Support for Active Directory Works o DNS Support for Active Directory Tools and Settings

GlobalNames Zone Deployment (document download) Description of the netmask ordering feature and the round robin feature in Windows Server

2003 DNS How to reconfigure an _msdcs subdomain to a forest - wide DNS application directory partition

when you upgrade from Windows 2000 to Windows Server 2003 Event ID 4515 is logged in the DNS Server log in Windows Server 2003 Tools / concepts to be familiar with: NSLOOKUP, DNSCMD (all), DNSLINT, etc

Deployment

How to use the Install from Media feature to promote Windows Server 2003 - based domain controllers

Installing an Additional Domain Controller by Using IFM o Create Installation Media by Using Ntdsutil o Install an Additional Domain Controller by Using Installation Media

Infrastructure Planning and Design (Windows Server 2008 Active Directory Domain Services)

Domain Migration

ADMT Guide: Migrating and Restructuring Active Directory Domains o ADMT versions o Best Practices for Active Directory Migration o Interforest Active Directory Domain Restructure o Intraforest Active Directory Domain Restructure o Appendix: Advanced Procedures o Troubleshooting ADMT o Additional Resources

File Replication Service (FRS)

How FRS works o FRS Terminology

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56#w2k3tr_frs_how_bopg

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56







http://technet.microsoft.com/en-us/library/active-directory-migration-tool-versions-and-supported-environments(v=ws.10).aspx


http://microsoft.com/ipd

















http://www.microsoft.com/downloads/details.aspx?FamilyID=1C6B31CD-3DD9-4C3F-8ACD-3201A57194F1&displaylang=en











o FRS Architecture o FRS Protocols o FRS Interfaces o FRS Physical Structures o FRS Processes and Interactions o Network Ports Used by FRS o Related Information

FRS Tools and Registry Settings o FRS Tools o FRS Registry Entries o Network Ports Used by FRS

File Replication Service (FRS) Technical Reference o What Is FRS? o How FRS Works o FRS Tools and Settings

Group Policy

Core Group Policy Technical Reference How Core Group Policy Works

o Core Group Policy Architecture o Core Group Policy Physical Structure o Core Group Policy Processes and Interactions o Network Ports Used by Group Policy o Related Information

What is Core Group Policyo Change and Configuration Management o Core Group Policy Infrastructure o Core Group Policy Scenarios o Core Group Policy Dependencies o Related Information

Core Group Policy Tools and Settingso Group Policy Tools o Group Policy Settings o Group Policy WMI Classes o Related Information

Group Policy Components Group Policy Preferences Overview Whitepaper (download) (Vista) - Troubleshooting Group Policy Using Event Logs Interpreting Userenv log files Designing a Group Policy Infrastructure

o Overview of Group Policy








http://www.microsoft.com/downloads/details.aspx?FamilyID=42e30e3f-6f01-4610-9d6e-f6e0fb7a0790&DisplayLang=en


http://technet.microsoft.com/en-us/library/cc784165(v=ws.10).aspx#w2k3tr_gp_tools_hekr

http://technet.microsoft.com/en-us/library/cc784165(v=ws.10).aspx#w2k3tr_gp_tools_ezzg

http://technet.microsoft.com/en-us/library/cc784165(v=ws.10).aspx#w2k3tr_gp_tools_anbv

http://technet.microsoft.com/en-us/library/cc784165(v=ws.10).aspx#w2k3tr_gp_tools_qcbs

http://technet.microsoft.com/en-us/library/cc779077(v=ws.10).aspx#w2k3tr_gp_what_kwhz

http://technet.microsoft.com/en-us/library/cc779077(v=ws.10).aspx#w2k3tr_gp_what_esiz

http://technet.microsoft.com/en-us/library/cc779077(v=ws.10).aspx#w2k3tr_gp_what_xzql

http://technet.microsoft.com/en-us/library/cc779077(v=ws.10).aspx#w2k3tr_gp_what_jedm

http://technet.microsoft.com/en-us/library/cc779077(v=ws.10).aspx#w2k3tr_gp_what_lifl

http://technet.microsoft.com/en-us/library/eb0042e3-699b-4c49-abcc-e3526dbecc0e#w2k3tr_gp_how_ojba

http://technet.microsoft.com/en-us/library/eb0042e3-699b-4c49-abcc-e3526dbecc0e#w2k3tr_gp_how_whpj

http://technet.microsoft.com/en-us/library/eb0042e3-699b-4c49-abcc-e3526dbecc0e#w2k3tr_gp_how_rbme

http://technet.microsoft.com/en-us/library/eb0042e3-699b-4c49-abcc-e3526dbecc0e#w2k3tr_gp_how_ynan

http://technet.microsoft.com/en-us/library/eb0042e3-699b-4c49-abcc-e3526dbecc0e#w2k3tr_gp_how_wtxp






http://technet.microsoft.com/en-us/library/cc786122.aspx#w2k3tr_frs_tools_auwv

http://technet.microsoft.com/en-us/library/cc786122.aspx#w2k3tr_frs_tools_yaxk

http://technet.microsoft.com/en-us/library/cc786122.aspx#w2k3tr_frs_tools_kmyw

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56#w2k3tr_frs_how_ahlm

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56#w2k3tr_frs_how_zebk

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56#w2k3tr_frs_how_rfih

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56#w2k3tr_frs_how_uzjx

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56#w2k3tr_frs_how_eskv

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56#w2k3tr_frs_how_myvx

http://technet.microsoft.com/en-us/library/7636aede-a944-4765-8973-40dc1e1f2d56#w2k3tr_frs_how_mhtc

o Planning Your Group Policy Design o Designing Your Group Policy Model o Deploying Group Policy o Maintaining Group Policy o Additional Resources for Group Policy Infrastructure

Group Policy Management ConsolE Technical Reference o What Is Group Policy Management Console? o How Group Policy Management Console Works o Group Policy Management Console Tools and Settings

Group Policy Object Editor o What Is Group Policy Object Editor? o How Group Policy Object Editor Works o Group Policy Object Editor Tools and Settings

Group Policy Loopback processing o Part 1: Circle Back to Loopback o Part 2: Back to the Loopback: Troubleshooting Group Policy loopback processing

Lightweight Directory Services (AD-LDS)

Introduction to Windows Server 2003 Active Directory Application Mode (download) 2008 & 2012 Active Directory Lightweight Directory Services Overview AD LDS Getting Started Step-by-Step Guide

o Step 1: Install the AD LDS Server Role o Step 2: Practice Working with AD LDS Instances o Step 3: Practice Using AD LDS Administration Tools o Step 4: Practice Managing AD LDS Organizational Units, Groups, and Users o Step 5: Practice Working with Application Directory Partitions o Step 6: Practice Managing Authorization o Step 7: Practice Managing Authentication o Step 8: Practice Managing Configuration Sets o Appendix A: Configuring LDAP over SSL Requirements for AD LDS o Appendix B: Upgrading from ADAM to AD LDS .

AD LDS Replication Step-by-Step Guide o Step 1: Practice Managing Replica AD LDS Instances o Step 2: Practice Managing Site Objects o Step 3: Practice Managing Site Link Objects

AD LDS Backup and Restore Step-by-Step Guide o Step 1: Back Up AD LDS Instance Data o Step 2: Restore AD LDS Instance Data o Appendix A: Metadata Cleanup for the Retired AD LDS Instances o Appendix B: Restore an AD LDS Instance with a Backup Taken with Dsdbutil.exe

http://technet.microsoft.com/en-us/library/cc770886




http://go.microsoft.com/fwlink/?LinkID=98680

















http://download.microsoft.com/download/5/7/a/57a8d3ed-89f7-4878-b945-b68c447f288a/Adam.DOC

http://blogs.technet.com/b/askds/archive/2013/05/21/back-to-the-loopback-troubleshooting-group-policy-loopback-processing-part-2.aspx?Redirected=true

http://blogs.technet.com/b/askds/archive/2013/02/08/circle-back-to-loopback.aspx?Redirected=true














Understanding ADAM replication and configuration sets

Replication

How Active Directory Replication Topology Works o Active Directory KCC Architecture and Processes o Replication Topology Physical Structure o Performance Limits for Replication Topology Generation o Goals of Replication Topology o Topology-Related Objects in Active Directory o Replication Transports o Replication Between Sites o KCC and Topology Generation o Network Ports Used by Replication Topology o Related Information

Active Directory Replication Model o What Is the Active Directory Replication Model? o How the Active Directory Replication Model Works o Active Directory Replication Tools and Settings

Active Directory Replication Topology o What Is Active Directory Replication Topology? o How Active Directory Replication Topology Works o Active Directory Replication Tools and Settings

AD Branch Office Guide (download) Microsoft Active Directory Topology Diagrammer The Role of the Inter - Site Topology Generator in Active Directory Replication How to view and set LDAP policy in Active Directory by using Ntdsutil.exe How to configure the Windows Time service against a large time offset BridgeHead Server Selection Active Directory Load Balancing Tool (ADLB) Configuring Change Notification on a MANUALLY created Replication partner

AD Sites & Services

Familiarity with the following (most concepts covered in the Distributed Systems Guide linked above): • Architecture • BASL • BH Failover/1311 • Firewall • Optimization-CN on link • Tools Review • Site link bridging

http://blogs.technet.com/b/askds/archive/2013/01/21/configuring-change-notification-on-a-manually-created-replication-partner.aspx?Redirected=true

http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=9353a4f6-a8a8-40bb-9fa7-3a95c9540112&displaylang=en

http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=9353a4f6-a8a8-40bb-9fa7-3a95c9540112&displaylang=en

http://technet.microsoft.com/en-us/library/bridgehead_server_selection(WS.10).aspx

http://support.microsoft.com/default.aspx/kb/884776

http://support.microsoft.com/?id=315071




http://www.microsoft.com/downloads/details.aspx?FamilyID=CB42FC06-50C7-47ED-A65C-862661742764&displaylang=en










http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_uhrf

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_ueyj

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_ludi

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_bwzg

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_imft

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_rrnv

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_mmhv

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_qvtw

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_yipb

http://technet.microsoft.com/en-us/library/cc755994.aspx#w2k3tr_repto_how_uvgz



• UGC • BODG – Options

RODC – Deployment

• (Physical Security/Compromise) KCC/ISTG

Server 2008 AD Features

Changes in Functionality from Windows Server 2003 with SP1 to Windows Server 2008 AD DS Fine - Grained Password and Account Lockout Policy Step - by - Step Guide Fine-Grained Password Policy and “Urgent Replication” What's New in AD DS: Active Directory Best Practices Analyzer AD DS Auditing Step - by - Step Guide Managed Service Accounts Managed Service Accounts: Understanding, Implementing, Best Practices, and Troubleshooting Changes in Functionality from Windows Server 2003 with SP1 to Windows Server 2008 (doc

download) What’s New in Active Directory Domain Services in Win2008 What’s New in Active Directory Domain Services in Win2008 R2 Changes in Functionality from Windows Server 2008 to Windows Server 2008 R2 Getting the Effective Audit Policy in Windows 7 and 2008 R2 What's New in AD DS: Active Directory Module for Windows PowerShell The AD Recycle Bin: Understanding, Implementing, Best Practices, and Troubleshooting

Read Only Domain Controller

Read-Only Domain Controller Planning and Deployment Guide o Understanding Planning and Deployment for Read-Only Domain Controllers o RODC Branch Office Guide o Appendix A: RODC Technical Reference Topics o Appendix B: RODC-Related Events o Appendix C: Acronyms Used in This Guide

RODC Administration o Installing Remote Server Administration Tools o Administering the Password Replication Policy

Read-only Domain Controllers Step-by-Step Guide o Who Should Use This Guide? o What Is an RODC? o RODC Placement Considerations for Windows Server 2003 Domains o Prerequisites for Deploying an RODC o Known Issues for Deploying an RODC







http://technet.microsoft.com/en-us/library/rodc-guidance-for-administering-the-password-replication-policy(v=ws.10).aspx









https://blogs.technet.com/b/askds/archive/2009/08/27/the-ad-recycle-bin-understanding-implementing-best-practices-and-troubleshooting.aspx?Redirected=true


https://blogs.technet.com/themes/blogs/generic/post.aspx?WeblogApp=askds&y=2011&m=03&d=11&WeblogPostName=getting-the-effective-audit-policy-in-windows-7-and-2008-r2&GroupKeys=





https://blogs.technet.com/themes/blogs/generic/post.aspx?WeblogApp=askds&y=2009&m=09&d=10&WeblogPostName=managed-service-accounts-understanding-implementing-best-practices-and-troubleshooting&GroupKeys=

http://technet.microsoft.com/en-us/library/ff641731(WS.10).aspx







https://blogs.technet.com/themes/blogs/generic/post.aspx?WeblogApp=askds&y=2010&m=08&d=18&WeblogPostName=fine-grained-password-policy-and-urgent-replication&GroupKeys=









o Steps for Deploying an RODC o Steps for Administering an RODC o RODC Frequently Asked Questions o Appendix A: Client Operations o Appendix B: How the Authentication Process Works with RODCs o Appendix C: Application Compatibility with RODCs o Appendix D: Steps to Add an Attribute to the RODC Filtered Attribute Set

RODC Frequently Asked Questions Adding Attributes to the RODC Filtered Attribute Set Description of the Windows Server 2008 read-only domain controller compatibility pack for

Windows Adding Attributes to the RODC Filtered Attribute Set Using the confidentiality bit in 203 SP1 RODC DNS Client Update Mechanism The RODC requests the update using a special operation called replicateSIngleObject: BitLocker implementation for RODC.

Windows 2012 Features

TechED: What's New in Active Directory in Windows Server 2012 (Dean Wells’ presentation at TechEd)

How many Windows Server 2012 domain controllers do I need initially and where should I put them?

PowerShell version 3 commandlets including Active Directory Replication and Topology: Introduction & Advanced Topics

Group Managed Service Accounts (gMSA)

Getting Started with Group Managed Service Accounts Group Managed Service Accounts Overview Windows Server 2012: Group Managed Service Accounts

RID Protection

TechNet Article: Managing RID Issuance ASKDS Blog Article: Managing RID Issuance in Windows Server 2012

DC Cloning & SafeGuarding

Virtual Domain Controller Cloning in Windows Server 2012 Microsoft Article: Introduction to Active Directory Domain Services (AD DS) Virtualization (Level

100) Microsoft Virtual Machine Generation ID Whitepaper document


http://technet.microsoft.com/en-us/library/hh831734.aspx


https://blogs.technet.com/b/askpfeplat/archive/2012/10/01/virtual-domain-controller-cloning-in-windows-server-2012.aspx?Redirected=true

https://blogs.technet.com/b/askds/archive/2012/08/10/managing-rid-issuance-in-windows-server-2012.aspx?Redirected=true

http://technet.microsoft.com/en-us/library/jj574229.aspx

https://blogs.technet.com/b/askpfeplat/archive/2012/12/17/windows-server-2012-group-managed-service-accounts.asp





http://blogs.technet.com/b/askpfeplat/archive/2012/09/10/how-many-windows-server-2012-domain-controllers-do-i-need-initially-and-where-should-i-put-them.aspx?Redirected=true

http://blogs.technet.com/b/askpfeplat/archive/2012/09/10/how-many-windows-server-2012-domain-controllers-do-i-need-initially-and-where-should-i-put-them.aspx?Redirected=true

http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/SIA312

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c3c0615-baf4-4a9c-b613-3fda14e84545&DisplayLang=en




http://technet.microsoft.com/en-us/library/cc754218(WS.10).aspx#BKMK_DDNS














Virtualize your Windows Server 2012 domain controllers Things to consider when you host Active Directory domain controllers in virtual hosting

environments Virtualized Domain Controller Deployment and Configuration ms-DS-Generation-Id Attribute Virtual Domain Controller Cloning in Windows Server 2012 Safely Cloning an Active Directory Domain Controller with Windows Server 2012 – Step-by-Step Virtualized Domain Controller Deployment and Configuration New-ADDCCloneConfigFile

Dynamic Access Control (DAC)

Introduction to Windows Server 2012 Dynamic Access Control Understand and Troubleshoot Dynamic Access Control in Windows Server 2012 (Word doc

download) Getting started with Central Access Policies - Reducing security group complexity and achieving

data access compliance using Dynamic Access Control MSDN Article on Dynamic Access Control (DAC) DAC Scenario

Kerberos FAST RFC6113 A Generalized Framework for Kerberos Pre-Authentication What's New in Kerberos Authentication Access Control and Authorization Overview – covers domain requirements for Kerberos

armoring and group policy settings.

Kerberos Constrained Delegation Enhancements Kerberos Constrained Delegation Overview How Windows Server 2012 Eases the Pain of Kerberos Constrained Delegation

o Part 1 o Part 2

[MS-SFU]: Kerberos Protocol Extensions: Service for User and Constrained Delegation Protocol Specification

Kerberos Proxy

Kerberos Authentication Overview Enriched Remote Access experience in Windows Server 2012 Delegation of Authentication [MS-KKDCP]: Kerberos Key Distribution Center (KDC) Proxy Protocol

http://msdn.microsoft.com/en-us/library/hh553774.aspx


https://blogs.technet.com/b/mspfe/archive/2012/09/20/enriched-remote-access-experience-in-windows-server-2012.aspx?Redirected=true


http://msdn.microsoft.com/library/cc246071(PROT.13).aspx

http://msdn.microsoft.com/library/cc246071(PROT.13).aspx

http://windowsitpro.com/security/how-windows-server-2012-eases-pain-kerberos-constrained-delegation-part-2

http://windowsitpro.com/security/how-windows-server-2012-eases-pain-kerberos-constrained-delegation-part-1




https://tools.ietf.org/html/rfc6113


http://msdn.microsoft.com/en-us/library/windows/desktop/jj552966(v=vs.85).aspx

https://blogs.technet.com/b/filecab/archive/2012/05/29/getting-started-with-central-access-policies-reducing-security-group-complexity-and-achieving-data-access-compliance-using-dynamic-access-control.aspx?Redirected=true

https://blogs.technet.com/b/filecab/archive/2012/05/29/getting-started-with-central-access-policies-reducing-security-group-complexity-and-achieving-data-access-compliance-using-dynamic-access-control.aspx?Redirected=true

https://www.microsoft.com/en-us/download/confirmation.aspx?id=36830

https://blogs.technet.com/b/windowsserver/archive/2012/05/22/introduction-to-windows-server-2012-dynamic-access-control.aspx?Redirected=true



https://blogs.technet.com/b/keithmayer/archive/2012/08/06/safely-cloning-an-active-directory-domain-controller-with-windows-server-2012-step-by-step-ws2012-hyperv-itpro-vmware.aspx?Redirected=true

https://blogs.technet.com/b/askpfeplat/archive/2012/10/01/virtual-domain-controller-cloning-in-windows-server-2012.aspx?Redirected=true

http://technet.microsoft.com/en-us/subscriptions/hh446580(v=vs.85).aspx




http://blogs.virtualizationadmin.com/lowe/2012/07/31/virtualize-your-windows-server-2012-domain-controllers/

Documents

download.microsoft.comdownload.microsoft.com/.../MCSM_Directory_Reading_Li… · Web viewCore Directory Concepts & Key Items. ... Active Directory Diagnostics, Troubleshooting,