Title of Lesson s4

70-411 Administering Windows Server 2012 LAB 3 MONITORING SERVERS

THIS LAB CONTAINS THE FOLLOWING EXERCISES AND ACTIVITIES:

Exercise 3.1 Using the Event Viewer

Exercise 3.2 Using the Reliability Monitor

Exercise 3.3 Using the Task Manager

Exercise 3.4 Using Resource Monitor

Exercise 3.5 Using the Performance Monitor

Exercise 3.6 Monitoring VMs

Lab Challenge Using Network Monitor

Exercise 3.1 Using the Event Viewer Overview In this exercise, you use the Event Viewer to view the events stored in the Windows logs. Because there can be thousands of log entires, you learn how to filter the logs so you can concentrate on what you need to focus on, and to set up subscriptions to consolidate the logs onto one server. Completion time 20 minutes

Mindset Question: Traditional log files give an administrator insight on what a system or program is doing or any errors that might have occurred. What does Windows use to store Windows logs and how do the logs differ from the traditional log file? 70-411 Administering Windows Server 2012

1. Looking at Events

How many events appear in the System log?

Question 1

How many events appear in the System log now?

Question 2

How many events appear in the Critical & Warning custom view?

Question 3 70-411 Administering Windows Server 2012

2. Creating a Subscription

Do you see any events? If events do not show, what Windows component could block the packets from being received by the collector computer?

Question 4

If you check the configuration of the source computer and the collector computer and you checked the firewall, but you don’t see events, what might cause you not to see the events.

Question 5

Exercise 3.2 Using the Reliability Monitor Overview A hidden tool that can determine the reliability of a system, including allowing you to see whether any recent changes have been made to the system itself, is the Reliability Monitor. During this exercise, you open the Reliability Monitor to check the status of the computer. Completion time 15 minutes 70-411 Administering Windows Server 2012

Do you have any events? If you don’t have any events, why are the events not displayed?

Question 6

Were there any problems reported?

Question 7

Exercise 3.3 Using the Task Manager Overview One of the simplest, yet a powerful troubleshooting tool that you can use to look at overall performance, view running applications and processes, and to stop applications and processes is the Task Manager. During this exercise, you use the task manager to look at a system and use it to help you manage the system. Completion time 15 minutes

Mindset Question: How does Task Manager allow you to manage the performance of a computer? 70-411 Administering Windows Server 2012

What applications are running?

Question 8

What tabs are shown?

Question 9

What tabs are shown?

Question 10

Question In the Apps section, what processes are used for the Server 11 Manager and Wordpad? 70-411 Administering Windows Server 2012

How much memory is Server Manager using?

Question 12

What are the primary systems that you can monitor with Task Manager?

Question 13

What system is missing in Task Manager that will greatly affect system performance?

Question 14 70-411 Administering Windows Server 2012 How many virtual processors is Server01 using?

Question 15

Exercise 3.4 Using Resource Monitor Overview In this exercise, you use Resource Manager to monitor server resources.

Completion time 5 minutes

Mindset Question: What are the four primary systems that affect overall system performance and how does one of these systems cause a bottleneck?

What are the primary systems that you can monitor with Resource Monitor?

Question 16

Question What process is using the most memory? 17 70-411 Administering Windows Server 2012

What process is using the disk the most?

Question 18

What ports is WDSServer using?

Question 19

Exercise 3.5 Using the Performance Monitor Overview Although the Task Manager and Resource Manager gave you a quick look at your system performance, Performance Monitor allows you to thoroughly exam the performance of a system. During this exercise, you open Performance and show various counters over a period of time. Completion time 20 minutes 70-411 Administering Windows Server 2012 Mindset Question: Both Performance Monitor and Task Manager can help you view the systems current performance. What are the advantages of Task Manager and what are the advantages of Performance Monitoring when looking at performance?

3. Using DCS 4. Now that the DCS has been created, what advantages does the MyDCS1 have?

Question 20

15. Take a screen shot of the Performance Monitor window by pressing Alt+Prt Scr and then paste it into your Lab03_worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

Exercise 3.6 Monitoring VMs Overview If you have a physical server with multiple virtual machines, you need to ensure that one virtual machine does not consume too much assigned resources. Therefore, during this exercise, you use PowerShell commands to view resource metering. Completion time 5 minutes 70-411 Administering Windows Server 2012 Mindset Question: Users are complaining that a server is running slow. What tools would you use to determine whether the VM is overworked or the host is overworked.

LAB REVIEW QUESTIONS

Completion time 10 minutes

1. In Exercise 3.1, a busy server over a significant period of time will have hundreds, or even thousands, of events in the Event Viewer logs. What do you need to do when scanning through the event viewer looking for certain relevant events?

2. In Exercise 3.1, what can you use to have one server catch errors from multiple servers that are displayed in the Event Viewer?

3. In Exercise 3.2, what program allows you to see a history of recent changes? 70-411 Administering Windows Server 2012 4. In Exercise 3.3, what is a powerful tool that allows you to monitor current running programs and processes and allows you to stop those programs and processes?

5. In Exercise 3.4, what program allows you to monitor the four primary systems that affect the overall system performance?

6. In Exercise 3.5, why did you want to create Data Collector Sets?

7. In Exercise 3-6, what did you use to monitor the resources running VMs on Hyper-V?

Lab Challenge Using Network Monitor Overview To complete this challenge, you must demonstrate to use network monitor. The NM32_x64 is located in the \\rwdc01\software folder.

Completion time 20 minutes 70-411 Administering Windows Server 2012 You want to look at what steps make a DHCP server work. Therefore, on Server02, you decide to install Microsoft Network Monitor 3.4. You want to capture the packets being sent to and from Server02 and filter the packets to only show you the DNS when using the nslookup server01 command. The Network Monitor installation program should be on the RWDC01 server in C:\Software folder.

Write out the steps you performed to complete the challenge.