Home > Store

MCSA 70-742 Cert Guide: Identity with Windows Server 2016

Register your product to gain access to bonus material or receive a coupon.

MCSA 70-742 Cert Guide: Identity with Windows Server 2016

Best Value Purchase

Book + eBook Bundle

  • Your Price: $57.49
  • List Price: $99.98
  • About Premium Edition eBooks
  • The Premium Edition eBook and Practice Test is a digital-only certification preparation product combining an eBook with enhanced Pearson IT Certification Practice Tests. Click on the "Premium Edition" tab (on the left side of this page) to learn more about this product.

    Your purchase will deliver:

    • Link to download the enhanced Pearson IT Certification Practice Test exam engine
    • Access code for question database
    • eBook in the following formats, accessible from your Account page after purchase:

    ePub EPUB The open industry format known for its reflowable content and usability on supported mobile devices.

    MOBI MOBI The eBook format compatible with the Amazon Kindle and Amazon Kindle applications.

    Adobe Reader PDF The popular standard, used most often with the free Adobe® Reader® software.

    The eBooks require no passwords or activation to read. We customize your eBook by discreetly watermarking it with your name, making it uniquely yours.

    Watermarked eBook FAQ

    eBook Download Instructions

More Purchase Options

Book

  • Your Price: $39.99
  • List Price: $49.99
  • Usually ships in 24 hours.

Premium Edition eBook

  • Your Price: $39.99
  • List Price: $49.99
  • Estimated Release: Jun 28, 2017
  • About Premium Edition eBooks
  • The Premium Edition eBook and Practice Test is a digital-only certification preparation product combining an eBook with enhanced Pearson IT Certification Practice Tests. Click on the "Premium Edition" tab (on the left side of this page) to learn more about this product.

    Your purchase will deliver:

    • Link to download the enhanced Pearson IT Certification Practice Test exam engine
    • Access code for question database
    • eBook in the following formats, accessible from your Account page after purchase:

    ePub EPUB The open industry format known for its reflowable content and usability on supported mobile devices.

    MOBI MOBI The eBook format compatible with the Amazon Kindle and Amazon Kindle applications.

    Adobe Reader PDF The popular standard, used most often with the free Adobe® Reader® software.

    The eBooks require no passwords or activation to read. We customize your eBook by discreetly watermarking it with your name, making it uniquely yours.

    Watermarked eBook FAQ

    eBook Download Instructions

About

Features

The ultimate study guide for the new MCSA 70-742: Identity with Windows Server 2016 exam: the most comprehensive reference available

  • The one-stop certification guide for running Active Directory and managing Group Policy on Windows Server 2016 in production environments
  • In-depth coverage of every exam objective, designed to help candidates quickly master all they need to know
  • Covers installing, configuring, managing, and maintaining AD DS; creating and managing group policy; implementing AD certification services; and implementing Identity Federation and Access
  • Clear explanations, quizzes, memory tables, study strategies, tips, cautions, key terms, troubleshooting scenarios, last-minute review tearsheet, and more
  • Complete set of instructor resources including test bank, instructor’s manual, and power point slides
  • Companion online uCertify course and labs available
  • Includes a powerful, customizable web-based test engine with two complete practice exams

Description

  • Copyright 2017
  • Dimensions: 7-3/8" x 9-1/8"
  • Pages: 528
  • Edition: 1st
  • Book
  • ISBN-10: 0-7897-5703-6
  • ISBN-13: 978-0-7897-5703-6

Learn, prepare, and practice for MCSA 70-742 exam success with this Cert Guide from Pearson IT Certification, a leader in IT certification.

  • Master MCSA 70-742 exam topics
  • Assess your knowledge with chapter-ending quizzes
  • Review key concepts with exam preparation tasks
  • Practice with realistic exam questions
MCSA 70-742 Cert Guide is a best-of-breed exam study guide. Leading technology trainer and exam development consultant Benjamin Finkel shares preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

The book presents you with an organized test preparation routine through the use of proven series elements and techniques. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly. Review questions help you assess your knowledge, and a final preparation chapter guides you through tools and resources to help you craft your final study plan.

The companion website contains the powerful Pearson Test Prep practice test software, complete with hundreds of exam-realistic questions. The assessment engine offers you a wealth of customization options and reporting features, laying out a complete assessment of your knowledge to help you focus your study where it is needed most.

Well-regarded for its level of detail, assessment features, and challenging review questions and exercises, this study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time.

The study guide helps you master all the topics on the MCSA 70-742 exam for Windows Server 2016, including:
  • Installing and configuring Active Directory Domain Services, including domain controllers, users, computers, groups, and OUs
  • Managing and maintaining Active Directory Domain Services, including configuration of service authentication and account policies, and challenges of complex enterprise environments
  • Creating and managing Group Policy: objects, processing, setting, and preferences
  • Implementing Active Directory Certification Services: installation, configuration, and management
  • Implementing Identity Federation and Access Solutions, including Web Application Proxy and Rights Management Services

Premium Edition

MCSA 70-742 Cert Guide, Premium Edition eBook and Practice Test

The exciting new MCSA 70-742 Cert Guide, Premium Edition eBook and Practice Testis a digital-only certification preparation product combining an eBook with enhanced Pearson Test Prep practice test software. The Premium Edition eBook and Practice Test contains the following items:

  • The MCSA 70-742 Premium Edition Practice Test, including four full practice exams and enhanced practice test features
  • PDF and EPUB formats of the MCSA 70-742 Cert Guide from Pearson IT Certification, which are accessible via your PC, tablet, and Smartphone
About the Premium Edition Practice Test

This Premium Edition contains an enhanced version of the Pearson Test Prep practice test software (PTP) software with four full practice exams. In addition, it contains all the chapter-opening assessment questions from the book. This integrated learning package:
Allows you to focus on individual topic areas or take complete, timed exams
  • Includes direct links from each question to detailed tutorials to help you understand the concepts behind the questions
  • Provides unique sets of exam-realistic practice questions
  • Tracks your performance and provides feedback on a module-by-module basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most
Pearson Test Prep online system requirements:
Browsers: Chrome version 40 and above, Firefox version 35 and above, Safari version 7, Internet Explorer 10, 11, Microsoft Edge, Opera.
Devices: Desktop and laptop computers, tablets running on Android and iOS, smartphones with a minimum screen size of 4.7”.
Internet access required.

Pearson Test Prep offline system requirements:
Windows 10, Windows 8.1, Windows 7, or Vista (SP2), Microsoft .NET Framework 4.5 Client; Pentium-class 1 GHz processor (or equivalent); 512 MB RAM; 650 MB disk space plus 50 MB for each downloaded practice exam; access to the Internet to register and download exam databases

About the Premium Edition eBook

Learn, prepare, and practice for MCSA 70-742 exam success with this Cert Guide from Pearson IT Certification, a leader in IT certification.
  • Master MCSA 70-742 exam topics
  • Assess your knowledge with chapter-ending quizzes
  • Review key concepts with exam preparation tasks
  • Practice with realistic exam questions
MCSA 70-742 Cert Guide is a best-of-breed exam study guide from Pearson IT Certification, a leader in IT certification. Leading technology trainer and consultant Benjamin Finkel shares preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

MCSA 70-742 Cert Guide presents you with an organized test preparation routine through the use of proven series elements and techniques. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly. Review questions help you assess your knowledge, and a final preparation chapter guides you through tools and resources to help you craft your final study plan.

Well-regarded for its level of detail, assessment features, and challenging review questions and exercises, this study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time.

The study guide helps you master all the topics on the MCSA 70-742 exam for Windows Server 2016, including:
  • Installing and configuring Active Directory Domain Services, including domain controllers, users, computers, groups, and OUs
  • Managing and maintaining Active Directory Domain Services, including configuration of service authentication and account policies, and challenges of complex enterprise environments
  • Creating and managing Group Policy: objects, processing, setting, and preferences
  • Implementing Active Directory Certification Services: installation, configuration, and management
  • Implementing Identity Federation and Access Solutions, including Web Application Proxy and Rights Management Services

Sample Content

Table of Contents

Introduction     xx
PART I:  INSTALLING AND CONFIGURING ACTIVE DIRECTORY DOMAIN SERVICES
Chapter 1  Introducing Active Directory 2016     3

“Do I Know This Already?” Quiz     3
Foundation Topics     7
Identity and Active Directory 2016     7
Active Directory Domain Services (AD DS)     9
    Object     9
    Containers and Organizational Units     10
    Domains     11
    Domain Trees and Forests     11
Group Policy Objects (GPOs)     12
Active Directory Federation Services (AD FS)     13
    Identity Federation     13
    Claims-Based Authentication     14
    Single Sign-On (SSO)     14
Active Directory Certificate Services (AD CS)     14
Active Directory Rights Management Services (AD RMS)     15
    AD RMS Clients     15
    AD RMS Server     16
Exam Preparation Tasks     16
    Review All Key Topics     16
    Complete Tables and Lists from Memory     17
    Define Key Terms     17
    End-of-Chapter Review Questions     18
Chapter 2  Installing and Configuring Domain Controllers     21
“Do I Know This Already?” Quiz     21
Foundation Topics     26
Installing a New Forest     26
    Planning the Domain     26
    Installing AD DS from Server Manager     27
    Promoting the Server to Domain Controller     30
Adding or Removing a Domain Controller from a Domain     33
    Multimaster Replication and FSMO Roles     33
    Forest and Domain Functional Levels     35
    Adding a New Domain Controller to an Existing Domain     35
    Demoting a Server from Domain Controller     38
Upgrading a Domain Controller     39
Installing AD DS on a Server Core Installation     41
    Installing AD DS with PowerShell     41
    Promoting a Server to Domain Controller with PowerShell     42
Installing a Domain Controller with Install from Media (IFM)     44
    Creating the Media for Installation     44
    Deploying a Domain Controller Using IFM     46
Installing and Configuring a Read-Only Domain Controller (RODC)     47
Configuring Domain Controller Cloning     50
    Requirements to Clone a Virtual Domain Controller     51
    Creating DCCloneConfig.xml     51
    Exporting and Importing the Cloned DC     54
Resolving DNS SRV Record Registration Issues     54
Configuring a Global Catalog Server     55
Transferring and Seizing Operations Master Roles     55
Exam Preparation Tasks     58
    Review All Key Topics     58
    Complete Tables and Lists from Memory     59
    Define Key Terms     59
    End-of-Chapter Review Questions     59
Chapter 3  Creating and Managing Active Directory Users and Computers     63
“Do I Know This Already?” Quiz     63
Foundation Topics     67
Creating, Copying, Configuring, and Deleting Users and Computers     67
    Creating and Configuring a New User     67
    Creating and Configuring a New Computer     71
    Copying Users     73
    Configuring Templates     75
    Deleting Objects     76
Automating the Creation of Active Directory Accounts     77
    Working with Users     78
    Working with Computers     82
Performing Bulk Active Directory Operations     83
    Comma Separated Value Data Exchange (csvde)     84
    LDAP Data Interchange Format Data Exchange (ldifde)     86
Configuring User Rights     87
Implementing Offline Domain Join     90
Managing Inactive and Disabled Accounts     92
    Automating Unlocking of Disabled Accounts Using Windows PowerShell     93
    Automating Password Resets Using Windows PowerShell     94
Exam Preparation Tasks     94
    Review All Key Topics     95
    Complete Tables and Lists from Memory     95
    Define Key Terms     96
    End-of-Chapter Review Questions     96
Chapter 4  Creating and Managing Active Directory Groups and Organizational Units     99
“Do I Know This Already?” Quiz     99
Foundation Topics     103
Creating, Copying, Configuring, and Deleting Groups and OUs     103
    Active Directory Groups and Active Directory OUs     103
        Organizational Units     103
        Groups     105
        Group Types     105
        Group Scope     106
    Working with Active Directory Groups     107
    Working with Active Directory OUs     109
    Automate Groups and OUs with PowerShell     111
    Converting Group Scope and Type     114
Configuring Group Nesting     115
    IGDLA     115
    Enumerating Group Membership     117
Delegating the Creation and Management of Groups and OUs     118
Managing Group Membership Using Group Policy     122
Managing Default Active Directory Containers     124
Exam Preparation Tasks     125
    Review All Key Topics     125
    Complete Tables and Lists from Memory     126
    Define Key Terms     126
    End-of-Chapter Review Questions     126
PART II:  MANAGING AND MAINTAINING ACTIVE DIRECTORY DOMAIN SERVICES
Chapter 5  Configuring Service Authentication and Account Policies     131

“Do I Know This Already?” Quiz     131
Foundation Topics     135
Creating and Configuring Service Accounts     135
    Service Accounts     136
    Managed Service Accounts     139
    Group Managed Service Accounts (gMSAs)     142
    Virtual Service Accounts     143
Configuring Kerberos Constrained Delegation (KCD)     144
    Constrained Delegation     145
    Managing Service Principal Names (SPNs)     147
Configuring Default Domain Account Policies     149
    Configuring Domain and Local User Password Policy Settings     150
    Configuring Account Lockout Policy Settings     151
    Configuring Kerberos Policy Settings Within Group Policy     153
Configuring and Applying Password Settings Objects (PSOs)     155
    PSO Precedence     155
    Creating PSOs     156
    Delegating Password Settings Management     158
Exam Preparation Tasks     159
    Review All Key Topics     160
    Complete Tables and Lists from Memory     160
    Define Key Terms     161
    End-of-Chapter Review Questions     161
Chapter 6  Maintaining Active Directory     165
“Do I Know This Already?” Quiz     165
Foundation Topics     169
Configuring Active Directory Snapshots     169
    NTDSUTIL Snapshot Menu     169
    Creating and Mounting a Snapshot     169
    Hosting a Snapshot     171
Backing Up and Restoring Active Directory and SYSVOL     173
    Backing Up Active Directory     173
    Restoring Active Directory     174
    Nonauthoritative Restore     175
    Authoritative Restore     178
Configuring and Restoring Objects by Using the Active Directory Recycle Bin     179
Managing Active Directory Offline     181
    Performing Offline Defragmentation of an Active Directory Database     182
Cleaning Up Metadata     184
Configuring Replication to Read-Only Domain Controllers (RODCs)     185
    Configuring Password Replication Policy (PRP) for RODC     186
Monitoring and Managing Replication     189
    Upgrading SYSVOL Replication to Distributed File System Replication (DFSR)     192
Exam Preparation Tasks     193
    Review All Key Topics     194
    Complete Tables and Lists from Memory     194
    Define Key Terms     195
    End-of-Chapter Review Questions     195
Chapter 7  Configuring Active Directory in a Complex Enterprise Environment     199
“Do I Know This Already?” Quiz     199
Foundation Topics     202
Deploying Windows Server 2016 Domain Controllers Within a Pre-Existing Active Directory Environment     202
    Upgrading Existing Domains and Forests     202
    Configuring Domain and Forest Functional Levels     203
    Configuring Multiple User Principal Name (UPN) Suffixes     205
Configuring Trusts     206
    Configuring Forest, External, Realm, and Shortcut Trusts     207
    Configuring SID Filtering     211
    Configuring Name Suffix Routing     212
Configuring Sites     213
    Configuring Sites and Subnets     214
        Sites     214
        Subnets     216
    Creating and Configuring Site Links     217
    Managing Sites with PowerShell     219
Exam Preparation Tasks     221
    Review All Key Topics     221
    Complete Tables and Lists from Memory     222
    Define Key Terms     222
    End-of-Chapter Review Questions     222
PART III: CREATING AND MANAGING GROUP POLICY
Chapter 8  Creating and Managing Group Policy Objects (GPOs)     225

“Do I Know This Already?” Quiz     225
Foundation Topics     228
Introduction to Group Policy     228
    Creating Group Policy Objects     229
    Configuring GPO Links     230
Managing Starter GPOs     232
Backing Up, Importing, Copying, and Restoring GPOs     234
    Using the Group Policy Management Editor (GPME)     234
    Using PowerShell to Manage GPOs     237
    Creating and Configuring a Migration Table     240
    Resetting Default GPOs     242
Delegating Group Policy Management     243
Detecting Health Issues Using the Group Policy Infrastructure Status Dashboard     245
    Group Policy Infrastructure     245
    Group Policy Infrastructure Status Dashboard     246
Local Group Policies     248
    Configuring Multiple Local Group Policies     248
    Configuring a Central Store     250
Exam Preparation Tasks     251
    Review All Key Topics     251
    Complete Tables and Lists from Memory     252
    Define Key Terms     252
    End-of-Chapter Review Questions     252
Chapter 9  Configuring Group Policy Processing     255
“Do I Know This Already?” Quiz     255
Foundation Topics     258
Configuring Processing Order, Precedence, and Blocking of Inheritance     258
    Processing Order and Precedence     258
    Blocking of Inheritance     260
Configuring Security Filtering and Windows Management Instrumentation (WMI) Filtering     261
    Security Filtering     261
    WMI Filtering     263
    Loopback Processing     265
Client-Side Processing     266
    Configure and Manage Slow Link Processing and Group Policy Caching     267
    Configure Client-Side Extension (CSE) Behavior     268
    Force a Group Policy Update     269
Exam Preparation Tasks     271
    Review All Key Topics     271
    Complete Tables and Lists from Memory     272
    Define Key Terms     272
    End-of-Chapter Review Questions     272
Chapter 10  Configuring Group Policy Settings     275
“Do I Know This Already?” Quiz     275
Foundation Topics     277
Configuring Software Installation     277
Configuring Folder Redirection     279
Configuring Scripts     281
Configuring Administrative Templates     284
    Importing a Custom Administrative Template File     285
    Configuring Property Filters for Administrative Templates     286
Exam Preparation Tasks     288
    Review All Key Topics     288
    Complete Tables and Lists from Memory     289
    Define Key Terms     289
    End-of-Chapter Review Questions     290
Chapter 11  Configuring Group Policy Preferences     293
“Do I Know This Already?” Quiz     293
Configuring Control Panel Settings     295
    Configuring Printer Preferences     296
    Configuring Power Options     298
    Configuring Internet Explorer Settings     299
    Configuring Item-Level Targeting     301
Configuring Windows Settings     303
    Configuring Custom Registry Settings     304
    Defining Network Drive Mappings     306
    Configuring File and Folder Deployment     308
    Configuring Shortcut Deployment     310
Exam Preparation Tasks     312
    Review All Key Topics     312
    Complete Tables and Lists from Memory     313
    Define Key Terms     313
    End-of-Chapter Review Questions     313
PART IV:  IMPLEMENTING ACTIVE DIRECTORY CERTIFICATION SERVICES
Chapter 12  Installing and Configuring Active Directory Certificate Services     317

“Do I Know This Already?” Quiz     317
Foundation Topics     320
Installing Active Directory Integrated Enterprise Certificate Authority     320
    Installing AD CS on a Server     320
    Configuring AD CS on a Server     322
    Installing Offline Root and Subordinate CAs     328
Configuring Certificate Revocation List Distribution Points     328
    Creating New CRL Distribution Points (CDPs)     329
    Installing and Configuring Online Responders     331
Configuring CA Backup, Recovery, and Administrative Role Separation     336
    Configuring CA Backup and Recovery     336
    Administrative Role Separation     337
Exam Preparation Tasks     339
    Review All Key Topics     339
    Complete Tables and Lists from Memory     340
    Define Key Terms     340
    End-of-Chapter Review Questions     340
Chapter 13  Managing Certificates     343
“Do I Know This Already?” Quiz     343
Foundation Topics     346
Managing Certificate Templates     346
    Enabling Certificate Templates     346
    Creating New Templates     348
Managing Certificate Deployment, Validation, Revocation, and Renewal     349
    Manual Enrollment     350
    CA Web Enrollment     351
    Revoking Certificates     354
Managing Certificate Autoenrollment Using Group Policies     355
Configuring Key Archival and Recovery     358
Exam Preparation Tasks     363
    Review All Key Topics     363
    Complete Tables and Lists from Memory     364
    Define Key Terms     364
    End-of-Chapter Review Questions     364
PART V:  IMPLEMENTING IDENTITY FEDERATION AND ACCESS SOLUTIONS
Chapter 14  Installing and Configuring Active Directory Federation Services     367

“Do I Know This Already?” Quiz     367
Foundation Topics     370
Implementing Claims-Based Authentication     370
    Installing a Standalone AD FS Server     370
    Installing an AD FS Server Farm     376
Configuring Authentication     378
    Configuring Authentication Policies     378
    Configuring Multi-Factor Authentication     380
Implementing and Configuring Device Registration     381
Integrating AD FS with Microsoft Passport     384
Configuring AD FS to Enable Authentication of Users Stored in LDAP Directories     385
Exam Preparation Tasks     388
    Review All Key Topics     388
    Complete Tables and Lists from Memory     389
    Define Key Terms     389
    End-of-Chapter Review Questions     390
Chapter 15  Implementing Web Application Proxy     393
“Do I Know This Already?” Quiz     393
Foundation Topics     395
Installing and Configuring Web Application Proxy     395
    Installing Web Application Proxy     395
    Implementing WAP in Pass-Through Mode     397
Implementing WAP as AD FS Proxy     399
Exam Preparation Tasks     405
    Review All Key Topics     405
    Complete Tables and Lists from Memory     405
    Define Key Terms     405
    End-of-Chapter Review Questions     406
Chapter 16  Installing and Configuring Active Directory Rights Management Services     409
“Do I Know This Already?” Quiz     409
Foundation Topics     412
Installing an Active Directory Rights Management Services Server     412
    Installing AD RMS     412
    Configuring AD RMS     414
    Managing AD RMS Service Connection Point     416
Managing AD RMS Templates and Exclusion Policies     418
    AD RMS Policy Templates     418
    Configuring Exclusion Policies     422
Backing Up and Restoring AD RMS     423
Exam Preparation Tasks     427
    Review All Key Topics     427
    Complete Tables and Lists from Memory     427
    Define Key Terms     428
    End-of-Chapter Review Questions     428
Chapter 17  Final Preparation     431
Tools for Final Preparation     431
    Pearson Cert Practice Test Engine and Questions on the Website     431
        Accessing the Pearson Test Prep Software Online     432
        Accessing the Pearson Test Prep Software Offline     432
    Customizing Your Exams     433
    Updating Your Exams     434
    Premium Edition     435
    Memory Tables     435
    Chapter-Ending Review Tools     435
Suggested Plan for Final Review/Study     436
Summary     436
PART VI:  APPENDICES
Appendix A  Answers to the “Do I Know This Already?” Quizzes and End-of-Chapter Review Questions     439
Glossary of Key Terms     461
Index     473


Elements Available on the Book Website
Appendix B Memory Tables
Appendix C Memory Tables Answer Key
Appendix D Study Planner

Updates

Submit Errata

More Information

Unlimited one-month access with your purchase
Free Safari Membership