74593bindex.fm Page 335 Friday, January 11, 2008 9:25 AM Index A overview of, 69–70 ABOUT_command, PowerShell, 188 policies and system management. See policies, access management, new features, 205 Active Directory ACLs (access control lists) read-only domain controllers, 81–82 Active Directory auditing, 73 restartable AD Domain Service, 87–88 iSCSI using, 64 roles, 79–84 security settings for, 218 TS Remote App deployment using, 275 system ACLs, 73, 204 Windows Deployment Services requiring, ACPI (Advanced Configuration and Power 49–51 Interface) 2.0, 11 AD CS (Active Directory Certificate Services), 80, ACT (Application Compatibility Toolkit) 5.0 82–83 deployment with, 41 AD DS (Active Directory Domain Service) overview of, 36–38 creating domain controller, 76–77 using shimming engines, 311 integrated authorization with, 79–80 actions, specifying Task Scheduler, 174–175 restartable, 87–88 Activate Server wizard, 287–288 TS Web Access with, 281 Active Directory. See AD (Active Directory) AD DS Installation wizard, 76–79 Active Directory Application Mode (ADAM), 84 AD FS (Active Directory Federation Services), 82 Active Directory Certificate Services (AD CS), 82 AD RMS (Active Directory Rights Management Active Directory Domain Services detail panel, Services), 223–224 Server Manager, 157–158 ADAM (Active Directory Application Mode), 81 Active Directory Federation Services (AD FS), 82 Add Features wizard, 241, 247–249 Active Directory Rights Management Services (AD Add Print Driver wizard, 233 RMS), 223–224 Add Printer wizard, 230 Active Directory Schema snap-in, installing, 79 Add Role Services wizard, 226–227 Active/Active standards, 66 Add Roles Wizard, 254–255, 301–302 ActiveX, 6 Administration API, IIS web services, 303 AD (Active Directory), 69–86COPYRIGHTEDAdministrative MATERIAL Template (ADMX) files, 93–94 directory auditing, 72–76 ADMX (Administrative Template) files, 93–94 distribution and replication, 71–72 Advanced Configuration and Power Interface 2.0 DLLs in Server Core installation, 311 (ACPI), 11 domain topologies, 85–87 Aero, 6 landscape, 71 aliases, PowerShell, 189–190, 197–199 objects and schema, 70–71 Allchin, Jim, 70 AMD-V (AMD-Virtualization), 16 74593bindex.fm Page 336 Friday, January 11, 2008 9:25 AM 336 AMERICAN AIRLINE SABRE RESERVATION SYSTEM • BOOT CONFIGURATION DATA (BCD) American Airline SABRE reservation system, TS Gateway connections, 282 260–261 TS Gateway Service, 283 answer files TS Session Broker, 286 defined, 23 Authorization Manager, 81–83 installing Server Core with, 315 automated system deployment overview of, 35–36 Business Desktop Deployment, 42–47 in server deployments, 23–25 Microsoft Solutions Framework, 47–49 APPCMD.EXE command, IIS, 306–307 overview of, 40 AppleTalk protocol, 224 tools for, 41 Application Compatibility team, BDD, 42 automation, Group Policy settings, 93 Application Compatibility Toolkit. See ACT Avalon, 6 (Application Compatibility Toolkit) 5.0 Application Management team, BDD, 43 Application Pool Defaults dialog box, IIS, 292 B APPLICATIONHOST.CONFIG, IIS, 293 B+ Tree system, 126 application-specific integrated circuits (ASICs), backup, with SyncToy, 126 240 backup domain controllers (BDCs), 71–72, 82 architecture bandwidth, 268 Next Generation TCP/IP Stack, 54–57 bandwidth throttling, QoS policy, 120–121 Terminal Server 2008, 266 bare metal deployment, 23–25 Windows Server 2008. See Windows Server BartPE builder, 26 2008 architecture BCD (Boot Configuration Data), 12, 27 archiving, Server Core installation, 316 BCDEDIT command, 27, 41, 150 ASICs (application-specific integrated circuits), BDCs (backup domain controllers), 71–72, 85 240 BDD (Business Desktop Deployment), 42–47 asterisk symbol (*), PowerShell, 187–188 deployment scenarios, 45–47 attributes, LDAP directory, 70 Microsoft Solutions Framework for, 47–49 Audit Policy, Security Configuration Wizard, overview of, 42–43 213–214 team resources, 43–45 auditing, Active Directory, 72–76 Windows Automated Installation Kit 3.01 authentication required by, 29 AD roles, 79–84 BDD Document Explorer, 42, 45 CHAP, 203–204 BDD Solution Accelerator, 47–49 IIS, 301–302 BDD Workbench, 41–42 network connection security, 217 BDE (BitLocker Drive Encryption), 128–129 SSTP server, 56 binding order, for protocols, 59 authorization BIOS, of thin clients, 263–264 IIS 7.0 and, 301 BitLocker, 41, 128–129 integrated, 79–81 BitLocker Drive Encryption (BDE), 128–129 MMC enhancements, 155 BizTalk Initiative, 259 security features for, 205 Boot Configuration Data (BCD), 12, 27 74593bindex.fm Page 337 Friday, January 11, 2008 9:25 AM BOOT SYSTEM • CONFIGURATION PARTITION 337 boot system CLR (Common Runtime Language), 6, 181 Delayed Auto-Start service for, 11 cluster DLLs, Server Core installation, 312 improvements to, 12 clusters performing remotely with WDS, 49–51 fail-over, 245–249 setting order for virtual machines, 258 NLB, 242–245 BOOTFIX tool, 27 Windows Server Virtualization and, 253 BOOT.INI file, 12, 27 CMD.EXE, PowerShell syntax vs., 179, 187 BOOT.SDI file, 27 cmdlets, PowerShell BOOTSECT tool, 27 built-in, 191–199 Business Desktop Deployment. See BDD (Business getting help with, 185–186 Desktop Deployment) overview of, 186–187 syntax, 188 viewing snap-ins, 184 C CNG (Crypto Next Generation) CryptoAPI, 128 caching modules, IIS, 296 Code Signing Certificates, RemoteApp, 279–280 Cairo project, 7 Collector Service, Windows Event, 171 Calendar, Windows System Resource Manager, COM (Component Object Model), 7 236–239 COM+ (Component Object Model+), 6 CardSpace, 9 command prompt management, Server Core CAs (certificate authorities), Kerberos, 79–80 enabling remote desktop connections, 318–319 case sensitivity, PowerShell commands, 183 MMC management, 325–326 certificate authority (CA), and Kerberos, 79–80 overview of, 316–318 Certificate Services, 80, 82–83 setting up print server, 324 certificates, RemoteApp, 279–280 command-line utilities CHANGE USER / INSTALL command, 275 configuring web services in IIS, 303 CHAP (Challenge-Handshake Authentication PowerShell. See PowerShell Protocol), 64–65, 203–204 Server Core Management, 326–333 CHDSK Server Manager, 147–152 journaling using, 128 Common Language Infrastructure (CLI), 6 Self-Healing NTFS using, 129 Common Runtime Language (CLR), 6, 181 volume management using, 132 compatibility Citrix, 262–265 client support. See client support ClearType, 273 down-level, 222–223 CLI (Common Language Infrastructure), 6 installing domain controllers, 77 client support, 221–233 PowerShell, 179 down-level compatibility, 222–223 using ACT. See ACT (Application Macintosh interoperability, 224–225 Compatibility Toolkit) 5.0 mobile clients, 223–224 Component Object Model (COM), 7 network printing, 229–233 Component Object Model+ (COM+), 6 Unix interoperability, 225–228 compression modules, IIS, 296 Windows Server 2008 and Vista together, Computer Imaging team, BDD, 43 221–222 Configuration partition, AD database, 72 74593bindex.fm Page 338 Friday, January 11, 2008 9:25 AM 338 CONFIGURATION STORE • DISTRIBUTED SERVICES configuration store, IIS, 293 Desktop Composition, 272 CONFIG.XML migration file, 39–40 desktop connections, remote, 318–319 Connect to Computer dialog box, WSRM, 235–236 Desktop Experience, 272–273 connections Desktop Standard, 104 configuring remote, 276 Device Installation Restrictions, 128–129 enabling remote, 318–319 device management policies, 126–128 TS Gateway, 281–283 Device Manager, 159 content modules, IIS, 295–296 device-specific modules (DSM), 66 context switching, 2 DFS (Distributed File System) Control panel Preference settings, Group Policy, creating shares with Provision a Shared Folder 108–109 wizard, 138 Core team, BDD, 42 overview of, 142–144 counters, Performance Monitor, 162–163 replicating Group Policy Templates, 97 Create a Shared Folder wizard, 249 DFSCMD command, 142 Create Cluster wizard, 247 DHCP DLLs, Server Core installation, 311 Create Windows Installer Package command, 275 DHCPv6, 61 credential caching, 85 dial-up, security settings, 217 Crypto Next Generation (CNG) CryptoAPI, 128 Differentiated Services Code Point (DSCP), QoS CSCRIPT command, 324–325 policy, 121 CSE (client-side extensions), Group Policy Digital Equipment Corporation (DEC), 1–2 Preferences, 104 digital signatures custom views new features, 11 Event Viewer, 171–172 PowerShell execution policies, 200 Server Manager, 157 RemoteApp security, 279–280 Cutler, David, 2 Direct3D, Avalon support for, 6 directories auditing in Active Directory, 72–76 D features of LDAP, 70 DAP (Directory Access Protocol), 70 metadirectories, 81 Data Execution Prevention (DEP), 155 Directory Access Protocol (DAP), 70 data protection, 205 Directory Services, 70 DCOM (Distributed Component Object Model) Directory Tree, 70 rights, 176 Disk Management utility, 126–128, 165–166 DCOMCONFIG.EXE command, 176 disk space requirements, 20 DCPROMO command, 76–77 DISKPART utility, 22–23, 27 DEC( Digital Equipment Corporation), 1–2 display data prioritization, 268–269 Delayed Auto-Start, kernel, 11 display resolutions, Terminal Server, 270–271 delegation, IIS, 306 Distributed Component Object Model (DCOM), denial-of-service (DOS) attacks, NLBS and, 244 176 DEP (Data Execution Prevention), 155 Distributed File Service. See DFS (Distributed File Deployment team, BDD, 43 System) Desired Configuration Monitoring team, BDD, 43 distributed services, PowerShell, 181–182 74593bindex.fm Page 339 Friday, January 11, 2008 9:25 AM DISTRIBUTION • FILE SERVER RESOURCE MANAGER (FSRM) 339 distribution, Active Directory, 71–72 encryption,