MCSE Desktop Infrastructure

A- Installing and Configuring Windows Server 2012

1. Install and Configure Servers (17%)

• • • Install servers
      • This objective may include but is not limited to: Plan for a server installation; plan for server roles; plan for a server upgrade; install Server Core; optimize resource utilization by using Features on Demand; migrate roles from previous versions of Windows Server
    • Configure servers
      • This objective may include but is not limited to: Configure Server Core; delegate administration; add and remove features in offline images; deploy roles on remote servers; convert Server Core to/from full GUI; configure services; configure NIC teaming
    • Configure local storage
      • This objective may include but is not limited to: Design storage spaces; configure basic and dynamic disks; configure MBR and GPT disks; manage volumes; create and mount virtual hard disks (VHDs); configure storage pools and disk pools

2. Configure Server Roles and Features (16%)

• • • • Configure file and share access
        • This objective may include but is not limited to: Create and configure shares; configure share permissions; configure offline files; configure NTFS permissions; configure access-based enumeration (ABE); configure Volume Shadow Copy Service (VSS); configure NTFS quotas
      • Configure print and document services
        • This objective may include but is not limited to: Configure the Easy Print print driver; configure Enterprise Print Management; configure drivers; configure printer pooling; configure print priorities; configure printer permissions
      • Configure servers for remote management
        • This objective may include but is not limited to: Configure WinRM; configure down-level server management; configure servers for day-to-day management tasks; configure multi-server management; configure Server Core; configure Windows Firewall

3. Configure Hyper-V (17%)

• • • • • Create and configure virtual machine settings
          • This objective may include but is not limited to: Configure dynamic memory; configure smart paging; configure Resource Metering; configure guest integration services
        • Create and configure virtual machine storage
          • This objective may include but is not limited to: Create VHDs and VHDX; configure differencing drives; modify VHDs; configure pass-through disks; manage snapshots; implement a virtual Fibre Channel adapter
        • Create and configure virtual networks
          • This objective may include but is not limited to: Implement Hyper-V Network Virtualization; configure Hyper-V virtual switches; optimize network performance; configure MAC addresses; configure network isolation; configure synthetic and legacy virtual network adapters

4. Deploy and Configure Core Network Services (16%)

• • • • • Configure IPv4 and IPv6 addressing
          • This objective may include but is not limited to: Configure IP address options; configure subnetting; configure supernetting; configure interoperability between IPv4 and IPv6; configure ISATAP; configure Teredo
        • Deploy and configure Dynamic Host Configuration Protocol (DHCP) service
          • This objective may include but is not limited to: Create and configure scopes; configure a DHCP reservation; configure DHCP options; configure client and server for PXE boot; configure DHCP relay agent; authorize DHCP server
        • Deploy and configure DNS service
          • This objective may include but is not limited to: Configure Active Directory integration of primary zones; configure forwarders; configure Root Hints; manage DNS cache; create A and PTR resource records

5. Install and Administer Active Directory (18%)

• • • • • Install domain controllers
          • This objective may include but is not limited to: Add or remove a domain controller from a domain; upgrade a domain controller; install Active Directory Domain Services (AD DS) on a Server Core installation; install a domain controller from Install from Media (IFM); resolve DNS SRV record registration issues; configure a global catalog server
        • Create and manage Active Directory users and computers
          • This objective may include but is not limited to: Automate the creation of Active Directory accounts; create, copy, configure, and delete users and computers; configure templates; perform bulk Active Directory operations; configure user rights; offline domain join; manage inactive and disabled accounts
        • Create and manage Active Directory groups and organizational units (OUs)
          • This objective may include but is not limited to: Configure group nesting; convert groups including security, distribution, universal, domain local, and domain global; manage group membership using Group Policy; enumerate group membership; delegate the creation and management of Active Directory objects; manage default Active Directory containers; create, copy, configure, and delete groups and OUs

6. Create and Manage Group Policy (16%)

• • • • • Create Group Policy objects (GPOs)
          • This objective may include but is not limited to: Configure a Central Store; manage starter GPOs; configure GPO links; configure multiple local group policies; configure security filtering
        • Configure security policies
          • This objective may include but is not limited to: Configure User Rights Assignment; configure Security Options settings; configure Security templates; configure Audit Policy; configure Local Users and Groups; configure User Account Control (UAC)
        • Configure application restriction policies
          • This objective may include but is not limited to: Configure rule enforcement; configure Applocker rules; configure Software Restriction Policies
        • Configure Windows Firewall
          • This objective may include but is not limited to: Configure rules for multiple profiles using Group Policy; configure connection security rules; configure Windows Firewall to allow or deny applications, scopes, ports, and users; configure authenticated firewall exceptions; import and export settings

B- Administering Windows Server 2012

1. Deploy, Manage, and Maintain Servers (17%)

• • • • • Deploy and manage server images.
          • This objective may include but is not limited to: Install the Windows Deployment Services (WDS) role; configure and manage boot, install, and discover images; update images with patches, hotfixes, and drivers; install features for offline images
        • Implement patch management.
          • This objective may include but is not limited to: Install and configure the Windows Server Update Services (WSUS) role; configure group policies for updates; configure client-side targeting; configure WSUS synchronization; configure WSUS groups
        • Monitor servers.
          • This objective may include but is not limited to: Configure Data Collector Sets (DCS); configure alerts; monitor real-time performance; monitor virtual machines (VMs); monitor events; configure event subscriptions; configure network monitoring

2. Configure File and Print Services (15%)

• • • • • Configure Distributed File System (DFS).
          • This objective may include but is not limited to: Install and configure DFS namespaces; configure DFS Replication Targets; configure Replication Scheduling; configure Remote Differential Compression settings; configure staging; configure fault tolerance
        • Configure File Server Resource Manager (FSRM).
          • This objective may include but is not limited to: Install the FSRM role; configure quotas; configure file screens; configure reports
        • Configure file and disk encryption.
          • This objective may include but is not limited to: Configure Bitlocker encryption; configure the Network Unlock feature; configure Bitlocker policies; configure the EFS recovery agent; manage EFS and Bitlocker certificates including backup and restore
        • Configure advanced audit policies.
          • This objective may include but is not limited to: Implement auditing using Group Policy and AuditPol.exe; create expression-based audit policies; create removable device audit policies

3. Configure Network Services and Access (17%)

• • • • • Configure DNS zones.
          • This objective may include but is not limited to: Configure primary and secondary zones; configure stub zones; configure conditional forwards; configure zone and conditional forward storage in Active Directory; configure zone delegation; configure zone transfer settings; configure notify settings
        • Configure DNS records.
          • This objective may include but is not limited to: Create and configure DNS Resource Records (RR) including A, AAAA, PTR, SOA, NS, SRV, CNAME, and MX records; configure zone scavenging; configure record options including Time To Live (TTL) and weight; configure round robin; configure secure dynamic updates
        • Configure VPN and routing.
          • This objective may include but is not limited to: Install and configure the Remote Access role; implement Network Address Translation (NAT); configure VPN settings; configure remote dial-in settings for users; configure routing
        • Configure DirectAccess.
          • This objective may include but is not limited to: Implement server requirements; implement client configuration; configure DNS for Direct Access; configure certificates for Direct Access

4. Configure a Network Policy Server Infrastructure (14%)

• • • • • Configure Network Policy Server (NPS).
          • This objective may include but is not limited to: Configure multiple RADIUS server infrastructures; configure RADIUS clients; manage RADIUS templates; configure RADIUS accounting; configure certificates
        • Configure NPS policies.
          • This objective may include but is not limited to: Configure connection request policies; configure network policies for VPN clients (multilink and bandwidth allocation, IP filters, encryption, IP addressing); manage NPS templates; import and export NPS policies
        • Configure Network Access Protection (NAP).
          • This objective may include but is not limited to: Configure System Health Validators (SHVs); configure health policies; configure NAP enforcement using DHCP and VPN; configure isolation and remediation of non-compliant computers using DHCP and VPN; configure NAP client settings

5. Configure and Manage Active Directory (19%)

• • • • • Configure service authentication.
          • This objective may include but is not limited to: Create and configure Service Accounts; create and configure Group Managed Service Accounts; create and configure Managed Service Accounts; configure Kerberos delegation; manage Service Principal Names (SPNs)
        • Configure Domain Controllers.
          • This objective may include but is not limited to: Configure Universal Group Membership Caching (UGMC); transfer and seize operations masters; install and configure a read-only domain controller (RODC); configure Domain Controller cloning
        • Maintain Active Directory.
          • This objective may include but is not limited to: Back up Active Directory and SYSVOL; manage Active Directory offline; optimize an Active Directory database; clean up metadata; configure Active Directory snapshots; perform object- and container-level recovery; perform Active Directory restore
        • Configure account policies.
          • This objective may include but is not limited to: Configure domain user password policy; configure and apply Password Settings Objects (PSOs); delegate password settings management; configure local user password policy; configure account lockout settings

6. Configure and Manage Group Policy (18%)

• • • • • Configure Group Policy processing.
          • This objective may include but is not limited to: Configure processing order and precedence; configure blocking of inheritance; configure enforced policies; configure security filtering and WMI filtering; configure loopback processing; configure and manage slow-link processing; configure client-side extension (CSE) behavior
        • Configure Group Policy settings.
          • This objective may include but is not limited to: Configure settings including software installation, folder redirection, scripts, and administrative template settings; import security templates; import custom administrative template file; convert administrative templates using ADMX Migrator; configure property filters for administrative templates
        • Manage Group Policy objects (GPOs).
          • This objective may include but is not limited to: Back up, import, copy, and restore GPOs; create and configure Migration Table; reset default GPOs; delegate Group Policy management
        • Configure Group Policy preferences.
          • This objective may include but is not limited to: Configure Group Policy Preferences (GPP) settings including printers, network drive mappings, power options, custom registry settings, Control Panel settings, Internet Explorer settings, file and folder deployment, and shortcut deployment; configure item-level targeting

C- Configuring Advanced Windows Server 2012 Services

1. Configure and Manage High Availability (16%)

• • • • • Configure Network Load Balancing (NLB).
          • This objective may include but is not limited to: Install NLB nodes; configure NLB prerequisites; configure affinity; configure port rules; configure cluster operation mode; upgrade an NLB cluster
        • Configure failover clustering.
          • This objective may include but is not limited to: Configure Quorum; configure cluster networking; restore single node or cluster configuration; configure cluster storage; implement Cluster Aware Updating; upgrade a cluster
        • Manage failover clustering roles.
          • This objective may include but is not limited to: Configure role-specific settings including continuously available shares; configure VM monitoring; configure failover and preference settings
        • Manage Virtual Machine (VM) movement.
          • This objective may include but is not limited to: Perform Live Migration; perform quick migration; perform storage migration; import, export, and copy VMs; migrate from other platforms (P2V and V2V)

2. Configure File and Storage Solutions (15%)

• • • • • Configure advanced file services.
          • This objective may include but is not limited to: Configure NFS data store; configure BranchCache; configure File Classification Infrastructure (FCI) using File Server Resource Manager (FSRM); configure file access auditing
        • Implement Dynamic Access Control (DAC).
          • This objective may include but is not limited to: Configure user and device claim types; implement policy changes and staging; perform access-denied remediation; configure file classification
        • Configure and optimize storage.
          • This objective may include but is not limited to: Configure iSCSI Target and Initiator; configure Internet Storage Name server (iSNS); implement thin provisioning and trim; manage server free space using Features on Demand

3. Implement Business Continuity and Disaster Recovery (16%)

• • • • • Configure and manage backups.
          • This objective may include but is not limited to: Configure Windows Server backups; configure Windows Online backups; configure role-specific backups; manage VSS settings using VSSAdmin; create System Restore snapshots
        • Recover servers.
          • This objective may include but is not limited to: Restore from backups; perform a Bare Metal Restore (BMR); recover servers using Windows Recovery Environment (Win RE) and safe mode; apply System Restore snapshots; configure the Boot Configuration Data (BCD) store
        • Configure site-level fault tolerance.
          • This objective may include but is not limited to: Configure Hyper-V Replica including Hyper-V Replica Broker and VMs; configure multi-site clustering including network settings, Quorum, and failover settings

4. Configure Network Services (17%)

• • • • • Implement an advanced Dynamic Host Configuration Protocol (DHCP) solution.
          • This objective may include but is not limited to: Create and configure superscopes and multicast scopes; implement DHCPv6; configure high availability for DHCP including DHCP failover and split scopes; configure DHCP Name Protection
        • Implement an advanced DNS solution.
          • This objective may include but is not limited to: Configure security for DNS including DNSSEC, DNS Socket Pool, and cache locking; configure DNS logging; configure delegated administration; configure recursion; configure netmask ordering; configure a GlobalNames zone
        • Deploy and manage IPAM.
          • This objective may include but is not limited to: Configure IPAM manually or by using Group Policy; configure server discovery; create and manage IP blocks and ranges; monitor utilization of IP address space; migrate to IPAM; delegate IPAM administration; manage IPAM collections

5. Configure the Active Directory Infrastructure (18%)

• • • • • Configure a forest or a domain.
          • This objective may include but is not limited to: Implement multi-domain and multi-forest Active Directory environments including interoperability with previous versions of Active Directory; upgrade existing domains and forests including environment preparation and functional levels; configure multiple user principal name (UPN) suffixes
        • Configure trusts.
          • This objective may include but is not limited to: Configure external, forest, shortcut, and realm trusts; configure trust authentication; configure SID filtering; configure name suffix routing
        • Configure sites.
          • This objective may include but is not limited to: Configure sites and subnets; create and configure site links; manage site coverage; manage registration of SRV records; move domain controllers between sites
        • Manage Active Directory and SYSVOL replication.
          • This objective may include but is not limited to: Configure replication to Read-Only Domain Controllers (RODCs); configure Password Replication Policy (PRP) for RODCs; monitor and manage replication; upgrade SYSVOL replication to Distributed File System Replication (DFSR)

6. Configure Identity and Access Solutions (15%)

• • • • • Implement Active Directory Federation Services 2.1 (AD FSv2.1).
          • This objective may include but is not limited to: Implement claims-based authentication including Relying Party Trusts; configure Claims Provider Trust rules; configure attribute stores including Active Directory Lightweight Directory Services (AD LDS); manage AD FS certificates; configure AD FS proxy; integrate with Cloud Services
        • Install and configure Active Directory Certificate Services (AD CS).
          • This objective may include but is not limited to: Install an Enterprise Certificate Authority (CA); configure CRL distribution points; install and configure Online Responder; implement administrative role separation; configure CA backup and recovery
        • Manage certificates.
          • This objective may include but is not limited to: Manage certificate templates; implement and manage certificate deployment, validation, and revocation; manage certificate renewal; manage certificate enrollment and renewal to computers and users using Group Policies; configure and manage key archival and recovery
        • Install and configure Active Directory Rights Management Services (AD RMS).
          • This objective may include but is not limited to: Install a licensing or certificate AD RMS server; manage AD RMS Service Connection Point (SCP); manage AD RMS client deployment; manage Trusted User Domains; manage Trusted Publishing Domains; manage Federated Identity support; manage RMS templates; configure Exclusion Policies

Create and Maintain Desktop Images (20%)

• Plan images.
  • This objective may include but is not limited to: Design considerations including thin, thick, and hybrid images, image type (boot, install, capture, discover), image format (VHD or WIM), number of images based on operating system or hardware platform, drivers, and operating features
• Capture images.
  • This objective may include but is not limited to: Prepare the operating system for capture; create capture images using Windows Deployment Services (WDS), create capture images manually; capture an image to an existing or new WIM file; capture an operating system image using Microsoft System Center 2012 – Configuration Manager; prepare an existing VM to be used as a base image for a new VDI desktop pool
• Maintain images.
  • This objective may include but is not limited to: Update VHD images using the Offline Virtual Machine Servicing Tool (OVMST); apply updates, drivers, settings, and files to online and offline images; apply service packs to images; install applications into images

Design and Deploy Desktops (21%)

• Design a deployment method.
  • This objective may include but is not limited to: Design considerations including Lite Touch, Zero Touch, local install, and Windows to Go, capacity and scale, required changes to the infrastructure, client boot method for deployment, scheduling, staggered deployment, network load, multi-site topology and distribution points, and physical vs. virtual
• Implement the deployment infrastructure.
  • This objective may include but is not limited to: Install and configure WDS; install and configure Microsoft Deployment Toolkit (MDT); configure network services to support deployments; configure System Center 2012 – Configuration Manager including multi-site topology and distribution points; configure multi-server topology; configure autonomous and replica WDS servers
• Implement a Lite Touch deployment.
  • This objective may include but is not limited to: Configure unicast/multicast; add images to WDS; configure scheduling; optimize network load; create and manage unattended answer files; restrict who can receive images; manage configuration phases
• Implement a Zero Touch deployment.
  • This objective may include but is not limited to: Configure task sequencing; configure MDT and System Center 2012 – Configuration Manager integration; configure System Center 2012 – Configuration Manager for operating system deployment; configure unicast/multicast; configure advertisements; optimize network load; create and manage unattended answer files
• Design and implement user state migration.
  • This objective may include but is not limited to: Design considerations including determining which user data and settings to preserve, hard-link vs. remote storage, mitigation plan for non-migrated applications, and wipe-and-load migration vs. side-by-side migration; estimate migration store size; secure migrated data; create a User State Migration Tool (USMT) package

Plan and Implement a Remote Desktop Services Infrastructure (18%)

• Plan and configure a Remote Desktop Session Host.
  • This objective may include but is not limited to: Plan for and configure session collections; plan for and configure session properties; plan for and configure redirection settings; plan for and configure profiles
• Plan and implement a Remote Desktop Virtualization Host infrastructure.
  • This objective may include but is not limited to: Plan for and configure virtual desktop templates; plan for and implement highly available VMs; plan for and implement guest resource optimization; configure placement rules; plan for and configure virtual network optimization; plan for storage optimization
• Plan and configure a Remote Desktop Connection Broker.
  • This objective may include but is not limited to: Plan for and configure a session host server farm; plan for and configure re-direction mode
• Plan and configure a Remote Desktop Gateway.
  • This objective may include but is not limited to: Plan for and configure Remote Desktop Resource Authorization Policy (RD RAP); plan for and configure Remote Desktop Client Authorization Policy (RD CAP); plan for and configure certificates for Gateway servers; plan for and configure SSL bridging; plan for and configure Network Access Protection (NAP) integration
• Plan and configure Remote Desktop Web Access.
  • This objective may include but is not limited to: Plan for and configure highly available remote desktop Web Access; plan for and configure single sign on; plan for and configure SSL; customize the Web Access interface

Design and Configure Desktop Settings (20%)

• Design and configure user state virtualization.
  • This objective may include but is not limited to: Design and configure mandatory and roaming profiles; manage profile disks; design and configure folder redirection; configure user device affinity; manage user state in shared and pooled desktops
• Configure the Remote Desktop client experience.
  • This objective may include but is not limited to: Install the RemoteFX role service; configure local resource redirection; configure RemoteFX USB redirection; configure custom RDP settings
• Configure desktop security.
  • This objective may include but is not limited to: Configure Encrypting File System (EFS); plan for device restriction policies; manage removable media restrictions; configure advanced auditing; configure Microsoft System Center 2012 -Endpoint Protection; configure User Account Control (UAC)

Manage and Maintain a Desktop Infrastructure (21%)

• Implement an updates infrastructure.
  • This objective may include but is not limited to: Apply Windows Updates; manage VM pool patching; integrate WSUS with System Center 2012 – Virtual Machine Manager and System Center 2012 – Configuration Manager; apply template-based virtual desktop updates; implement multi-tier WSUS
• Monitor the virtual desktop infrastructure.
  • This objective may include but is not limited to: Monitor the performance of Remote Desktop Services (RDS) servers and VM guests; monitor the health of RDS servers and VM guests; perform capacity analysis; identify and remediate performance bottlenecks
• Create and configure virtual collections.
  • This objective may include but is not limited to: Create and configure virtual desktop collections including pooled or personal virtual desktop collections and managed or unmanaged collections; create and configure Remote Desktop Session Host collections

Design and Prepare the Application Environment (21%)

• Design an application distribution strategy.
  • This objective may include but is not limited to: Design considerations including impact on clients, offline access, deployment infrastructure, and remote locations; plan for updates to applications
• Plan and implement application compatibility.
  • This objective may include but is not limited to: Configure and implement Microsoft Assessment and Planning Toolkit (MAP); planning considerations including RDS, VDI, Client Hyper-V, Application Compatibility Toolkit (ACT), and 32 bit vs. 64 bit; plan for application version co-existence
• Update applications in desktop images.
  • This objective may include but is not limited to: Configure online servicing; apply patches offline; configure offline VM servicing; update MDT task sequences

Design and Implement a Presentation Virtualization Environment (19%)

• Plan and implement presentation virtualization servers.
  • This objective may include but is not limited to: Install and configure Remote Desktop Session Host; install and configure the Remote Desktop Web Access role; configure the Remote Desktop Connection Broker for the Remote Desktop Session Host; perform capacity analysis
• Create and configure remote applications.
  • This objective may include but is not limited to: Prepare Remote Desktop Session Hosts for application installation; configure RemoteApp properties; create a RemoteApp distribution file (MSI or RDP); sign packages with certificates; implement application version co-existence by using Remote Desktop Web Access; configure file extension associations
• Deploy and manage remote applications.
  • This objective may include but is not limited to: Configure RemoteApp and Desktop Connections settings; configure GPOs for signed packages; subscribe to the RemoteApp and Desktop Connections feeds; export and import RemoteApp configurations; deploy a RemoteApp distribution file (MSI or RDP)

Design and Implement an Application Virtualization Environment (19%)

• Install and configure application virtualization environments.
  • This objective may include but is not limited to: Planning considerations including choosing a protocol to deploy virtual applications (file server or streaming); configure App-V modes (stand-alone, lightweight, and enterprise); install an App-V infrastructure; configure GPO settings for App-V; deploy an App-V client for Remote Desktop Session Hosts
• Prepare virtual applications.
  • This objective may include but is not limited to: Sequence applications; install and configure the sequencer environment; prepare applications for deployment in different environments; configure virtual application interaction and sharing
• Manage application virtualization environments.
  • This objective may include but is not limited to: Configure App-V; manage application cache; configure System Tray / SFTTray.exe switches; configure application extensions with virtualized applications; configure application settings using group policies

Deploy, Manage, and Maintain the Application Environment (21%)

• Deploy applications to the desktop.
  • This objective may include but is not limited to: Deployment considerations including using System Center 2012 – Configuration Manager or Client Hyper-V; configure package advertisements using System Center 2012 -Configuration Manager; publish or assign software using GPOs
• Plan and implement application updates.
  • This objective may include but is not limited to: Configure System Center 2012 – Updates Publisher; re-sequence/redeploy applications; deploy updates by using System Center 2012 – Configuration Manager; configure WSUS for application updates
• Plan and implement application upgrades.
  • This objective may include but is not limited to: Migrate application settings and configurations; mitigate compatibility issues; plan for application version co-existence; re-sequence/redeploy applications; decommission applications; migrate documents; migrate Microsoft Office applications using Office Migration Planning Manager (OMPM); deploy application upgrades by using Group Policy
• Implement applications security.
  • This objective may include but is not limited to: Configure AppLocker policies; configure System Center 2012 – Endpoint Protection settings; configure User Account Control (UAC) settings; configure Data Execution Prevention (DEP) settings; configure Windows Firewall; configure Remote Desktop Session Host server security; configure Software Restriction Policies (SRP)
• Monitor applications.
  • This objective may include but is not limited to: Monitor Remote Desktop Session Host sessions; monitor offline application usage; monitor real-time sessions; monitor application licensing usage; configure Asset Intelligence Service (AIS) in System Center 2012 Configuration Manager

Design Business Continuity for the Desktop and Application Environment (20%)

• Design and implement a resilient Remote Desktop infrastructure.
  • This objective may include but is not limited to: Design highly available Remote Desktop Web Access, Remote Desktop Connection Broker, and Remote Desktop Gateway; perform backup and recovery of the Remote Desktop Licensing server; configure virtual machine or dedicated farm redirection
• Design and implement business continuity for virtual desktops.
  • This objective may include but is not limited to: Design and implement Hyper-V Replica with Hyper-V Replica Broker; design and implement business continuity for personal and shared desktop collections.
• Design and implement a resilient virtual application delivery infrastructure.
  • This objective may include but is not limited to: Design and implement highly available App-V data store and management server; implement pre-populated/shared cache App-V functionality for the VDI environment; implement highly available content share; implement a branch office strategy using App-V; manage VM backups