Index Note to the Reader: Page numbers in bold indicate the principle discussion of a topic or the defi- nition of a term. Page numbers in italic indicate illustrations. overview of, 251–252 A policy templates, 256–259 access control user exclusions, 253–254 applications, 209–210 Add Counters dialog box, 497 SMTP server access settings, 169–171 Add Features Wizard, 17–18 WSS end users, 292–294 Add Node Wizard, 423 access logs, 193–195 Add Roles Wizard, 319 formats, 195 ADFS (Active Directory overview of, 193–194 Federation Services) per-site and per-server, 194 configuring Web SSO, 300–304 rollover criteria, 194 Web SSO, 296 ACLs (Access control Lists) Admin logs, 469 creating, 248–249 admin switch, mstc.exe, 123–124 enabling ACL authorization, 247 Administrative Events custom view, activation. See WPA (Windows 472–473 Product Activation) administrative notices, WSS e-mail Active Directory Certificate Services settings, 273 (AD CS), 202 administrators Active Directory Federation event logs and, 472 Services (ADFS) WDS and, 366 configuring Web SSO, 300–304 advanced delivery options, SMTP Web SSO, 296 messages, 174–175 Active Directory Rights Management advanced streaming options, streaming Service. See AD RMS (Active media, 240 Directory Rights Management agent properties, SNMP, 501–502 Service) alerts, WSS outgoing e-mail settings, 273 AD (Active Directory), WDS server as alternate access mapping, WSS, 287–289 member of AD domain, 366 American National Standards Institute AD Client Certificate Authentication (ANSI), 195 client certificate mapping,COPYRIGHTED 211 Analytics MATERIAL logs, 469 types of website authentication, 207 Anonymous authentication AD CS (Active Directory Certificate creating Anonymous account, Services), 202 245–246 AD RMS (Active Directory Rights types of website authentication, 207 Management Service) ANSI (American National Standards business rules, 252–253 Institute), 195 license required by, 253 antivirus settings, WSS, 281–282 61705bindex.indd 529 6/27/08 12:07:29 PM 530 AppCmd.exe – business rules AppCmd.exe authorization configuring IIS settings, 186 application access and, 209–210 listing and restoring backups, FTP, 165–166 196–197 media services, 246–249 listing configured websites, 186–187 TS CAPs (Terminal Services objects available for administration by, Connection Authorization 187–188 Policies), 77–80 application and services logs, Event TS RAPs (Terminal Services Resource Viewer, 469 Authorization Policies), 80–82 application logs, 469 automatic reconnection, Terminal application pools, 161–163 Services, 125 application settings, failover clustering, availability, 463–464. See also 426–428 high availability application virtualization, 315 applicationHost.config, 160 applications B access control, 209–210 DRM exclusions, 255–256 backups, 195–197 monitoring failures, 465–466 history settings, 195–196 architecture, Hyper-V, 316–317 listing and restoring with AppCmd.exe, archiving, fax services and, 230 196–197 ASP manual, 196 trace content options, 190 overview of, 195 trace provider options, 192 virtual machine snapshots. See ASP.NET snapshots, of virtual machines configuration settings, 149 bandwidth trace content options, 190 Display Data Prioritization and, 46–47 trace provider options, 192 website settings, 158 WSS supported authentication, 296 Basic authentication ASP.NET Impersonation, 208 SMTP, 174 authentication types of website authentication, 208 media services, 245–246 basic disks non-windows, 165 actions performed on, 5 SMTP, 169–170, 174 converting to dynamic, 6–8 Terminal Services, 54–55, Basic Input/Output System (BIOS), 342 129–130 Best Practices Analyzer tool, 282 Web SSO (Web Single Sign On), BIOS (Basic Input/Output System), 342 301–304 block-level access, iSCSI, 19 website, 207–209 Boot image, WDS image types, 366 authentication, WSS broadcast publishing Digest authentication, 297–300 creating Broadcast Publishing Point, overview of, 295–296 235–237 supported methods, 296 for streaming media, 233–234 business rules, DRM, 252–253 61705bindex.indd 530 6/27/08 12:07:29 PM caching – console switch 531 clustering C failover. See failover clustering caching, fast, 240–241 NLB. See NLB (Network Load CAs (Certificate Authorities) Balancing) obtaining/installing certificates for TS pros/cons, 411 Gateways, 74–75 types of, 410 SSL and, 201–202 clusters, failover CEIP (Customer Experience Improvement clustered application settings, 426–428 Program), 278 creating, 421–423 Central Administration site, WSS print services, 424–426 configuring diagnostic logging, quorums, 414–416 280–281 roles, 424 configuring incoming e-mail settings, validating configuration, 416–417 272–273 working with cluster nodes, 423–424 configuring outgoing e-mail settings, clusters, NLB 275–276 creating, 89–90, 435–437 configuring WSS, 269–270 managing, 438–439 workflow options, 277 modifying properties, 437–438 Certificate Authorities (CAs) color depth, Terminal Services obtaining/installing certificates for settings, 127 TS Gateways, 74–75 COM ports, virtual machine SSL and, 201–202 configuration, 343 certificates, SSL comma-delimited files (CSV), 120 client certificate mapping, 211 communication services exporting/importing, 206–207 digital rights. See DRM (Digital requesting/renewing, 202–205 Rights Management) CHAP (Challenge Handshake exam essentials, 260 Authentication Protocol), 19 fax services. See fax services ClearType, 46 media servers. See media services client access licenses. See TS CALs (client overview of, 219–220 access licenses) Q&As, 261–265 clients summary, 260 configuring client for TS Gateway, computer accounts 82–83 connection authorization, 78–79 enabling font smoothing on, 45–46 resource authorization, 81 mapping client certificates, 211 condition options, trace logs, 191 media services connection settings, configuration backup settings, 195–197 244–245 Configuration Wizard, 306–311 WDS client components, 365 connections Client-Server Runtime Subsystem authorization policies, 77–80 (csrss.exe), 124 timeout settings for websites, 158 cloning hard disks, 332–334 console switch, mstc.exe, 124 61705bindex.indd 531 6/27/08 12:07:29 PM 532 content – dialing rules content “Log On as a Batch Job” user right, adding to WSS sites, 295 446–447 publishing options for streaming overview of, 446 media, 232–235 start condition, 451–452 trace logs, 190 stop condition, 453 copyrights, 250 DDNS (dynamic DNS), 386 counters, Performance Monitor Debug logs, 469 adding, 495–497 delegation of administration, recommended system counter 197–201 thresholds, 498 Feature delegation, 199–201 CPUs overview of, 197–198 Hyper-V hardware requirements, 319 remote administration permissions, Performance Monitor counters for, 498 198–199 resource allocation for Terminal delivery options, SMTP messages, Services, 138 172–173 SMP (Symmetric Multiprocessors), 315 dependency viewer, 429 virtual machine configuration, 342 overview of, 428 Create Capture Image Wizard, 377 running, 429 Create Task dialog, 480–481 deploying images, WDS, 365–367 credentials, WDS, 366 deploying Server Core, 380–381 csrss.exe (Client-Server Runtime deploying servers. See WDS (Windows Subsystem), 124 Deployment Services) CSV (comma-delimited files), 120 deploying TS RemoteApps, 67 Customer Experience Improvement Deployment Server, WDS, 369 Program (CEIP), 278 Deployment Services. See WDS (Windows Deployment Services) Desktop Composition D making available on Vista client, 50–51 data collection, Reliability Monitor, 462 overview of, 50 Data Collector Sets. See DCS (Data Desktop Experience Collector Sets) Desktop Composition, 50–51 data management settings, DCS (Data overview of, 48–49 Collector Sets), 454–456 Themes, 49–50 Data Manager, Windows Reliability and desktop virtualization, 315 Performance Monitor, 451, device redirection, 51–53 454–456 overview of, 51 DCS (Data Collector Sets) Plug and Play and, 51–53 creating automatically, 447–449 POS (Point of Service) and, 53 creating from a template, 449 DHCP (Dynamic Host Configuration creating manually, 450–451 Protocol), 366, 372 data management, 454–456 diagnostic logging, WSS, 278–281 log management, 453 dialing rules, fax services, 225–226 61705bindex.indd 532 6/27/08 12:07:29 PM differencing virtual hard disks – dynamic disks 533 differencing virtual hard disks TS Session Broker Load Balancing creating, 331–332 and, 88–89 description and use of, 330 WDS reliance on, 366 Digest authentication domain controllers, deploying with configuring, 297–300 IFM, 394 overview of, 297 Domain Name System. See DNS (Domain types of website authentication, 208 Name System) digital certificates. See also Domain scope, TS Licensing discovery, certificates, SSL 101–102 mapping certificate to TS Gateway domains server, 75–76 configuring for routing SMTP obtaining/installing certificate for TS mail, 177 Gateway, 74–75 FTP server and domain restrictions, Digital Rights Management. See DRM 166–167 (Digital Rights Management) DR (disaster recovery), 408 digital signatures, 134–135 drive letters Directory Management Service, WSS assigning, 10 e-mail, 271 mount points for overcoming disaster recovery (DR), 408 limitations of, 15 disconnect options, Terminal Service, 127 Drive Specific Module (DSM) Discovery Domains, 25–26 installing third-party DSM software, discovery scopes, TS Licensing servers, 18–19 101–102 load balancing and, 17 disk drives DRM (Digital Rights Management), converting basic disks to dynamic, 6–8 249–259 initializing, 3 application exclusions, 255–256 Performance Monitor counters, 498 business