Вы находитесь на странице: 1из 550

10712A

Windows Server 2008


2


, , .

, URL-
, . ,
, ,
, , , ,
.
, , , ,
, , ,
.
. ,
,
, , -
, (,
, , )
.
,
, ,
.
, ,
,
.
, URL- .
,

.
.
- .
,
, , ,
, .
-
-, .
, -
-
.
(Microsoft Corporation), 2011. .
Microsoft, Microsoft Press, Access, Active Directory, ActiveSync, Aero, BitLocker, Excel, Forefront,
Hyper-V, Internet Explorer, MS, MSDN, MS-DOS, Outlook, PowerPoint, Silverlight, SmartScreen,
SpyNet, SQL Server, Visual Studio, Windows, Windows Live, Windows Mobile, Windows NT,
Windows PowerShell, Windows Server Windows Vista
.
.
: 10712A
: X17-47222
: 03/2011

MICROSOFT
OFFICIAL MICROSOFT LEARNING PRODUCTS TRAINER EDITION -


Microsoft. .
, , ,
.

Microsoft ,
.
.
,
.
, .
,
.

1. .
a.

(, , , -,
. .),
.

b. Microsoft Certified

Partner for Learning Solutions,


,
Microsoft.

c. ,
Microsoft,
,
Microsoft Learning (
Microsoft MOC)
Microsoft Dynamics Learning ( Microsoft
Business Solutions Courseware).
(1) .

d. ,

,
.

e. , , ,

f.

,
. , ,
: (i) , (ii)
, (iii)
(iv) .
.

g.
,
.

h. ,
.

i.

,

.
,
.

j.

a) ,
Microsoft Microsoft,
b) , Microsoft

.

k. ,


( )
.
, ,
Microsoft PowerPoint, ,
.

l.

Microsoft,
(,
) ,

.

.

m.

,
Microsoft(r) Virtual PC Microsoft(r) Virtual Server,
,
,
(, ).

.

n.
( ), .

2. .
.
, ( ),
, ,
.
.

.

3. .
a. .
:

i.



,
, , , ,

,
, , ;

ii.
,

, ,
, , ,
,
, ,
,
, ;
iii. , ,
, ,
(i) (ii)

.
iv. .
.
.
v. .
.
,
.

b. .
i.

,

, .

ii.
.

A. .

, .



.

B. .

4. . (-)

.

a. .


. ,
, ,
. Microsoft
() . Microsoft
.
,
, , ,
Microsoft -
, , ,
.

b. . Microsoft

, Microsoft

.
, , ,

, Microsoft,
, .
, , Microsoft

,
.
.

c. . ,

, ,
, ,
,
Microsoft
Microsoft.
i.

.
,
, ,
.

,
.
,
, .

ii. .

.

iii. .
.
Microsoft

.
, :



Microsoft Microsoft;

d. .
(i) , Microsoft
-, (ii)
, ,
( -).
e. . -
- ,

,
.
f.

. Microsoft ,
- (
-) .
Microsoft ,
, Microsoft
.

5. .
a. .
i.

.
.
Microsoft XP,
Microsoft Windows Vista, Windows Server 2003, Windows Server 2008
Windows 2000 Advanced Server Microsoft,
.
A.
Microsoft Learning
Lab Launcher, .
, .

, ,
( 30 500 ).
, .
,
, , ,
, .

,
.
B.
, .
Microsoft ,
.

Microsoft


Microsoft .

C.
.



:
o



,
;



, ,
Microsoft Certified Partner
for Learning Solutions;



, ,
Microsoft Certified Partner
for Learning Solutions;

,
,
;

Microsoft
, , ,

;

ii. .

,


.

iii. .
,
, , , , , ,
,
.
,
.
iv. .
,
,

.

b. .
i.

PowerPoint.
Microsoft PowerPoint.
,
PowerPoint .
,
:
(a)

;
(b)
.

ii.
.
MCT Agreement
,

. ,
:
(a)
, (b)
.

iii. .
,
. -
- (
). -
, , :

,

;


Microsoft
, .
:
2011
Microsoft. .
Microsoft, Windows Windows Server

Mirosoft .
,
,
.

6. . Microsoft

. Microsoft
.
,
.

, ,
.

7. . ,

.
.
Microsoft . ,
, ,
,
,
.
,
. :


,
;

,
, ,
, ,
;

-

Microsoft;

,
, ,
;

,
,
;

,
;

, (i)
, (ii)
Microsoft;

,
;

,
,
,
Microsoft
, .

8. .
.
,
.

, .
. - www.microsoft.com/exporting.

9.

/ .
,
(Not for Resale NFR).

10. .

, (Academic Edition
AE),
. ,
, - www.microsoft.com/education
Microsoft, .

11. . - Microsoft


.
) , )
) Microsoft,
.
.

12. . ,

,
, ,
,
.

13. .
a. . ,

, .

. ,

,
, , .

b. .
, .

14. .

.
. ,
.
, ,
.

15. .

. ,
. Microsoft
-
.
,
. , ,
Microsoft ,

.

16.

. MICROSOFT
MICROSOFT
5,00 .
, , ,
,
.
:

, ,
, -
( ), ;

, ,
, ,
, , .

, Microsoft
.
,
,
.

!
!
-
, ,
, , ,
.

.
,
.

,
.

.
.
,
,
. IDC , 75%
,
1.
.

.

. ,
. !

,
Microsoft Learning
www.microsoft.com/learning/ru/ru/default.aspx

IDC, Value of Certification: Team Certification and Organizational Performance ( .


), 2006 .

Windows Server 2008

xix

Microsoft Learning
.

.

Andrew J. Warren
Andrew Warren (MCSE, MCITP MCT) 22
,
. 6430B
Windows Server 2008
. TechNet,
Microsoft Exchange Server 2007.

Jason Kellington
Jason Kellington , ,
.
-
, , .

, ,
,
. Jason MCT, MCITP MCSE.

Justin Rodino
Justin Rodino
Purdue University. Justin

Altiris/Symantec, .
MCT MVP, Windows Office
. Justin
, Office 2010 Bible.
.

xx

Windows Server 2008

Claudia Woods
Claudia
, -
.
. Claudia
CompTIA CTT+, VMware VCI (3.x/4.x)
Microsoft MCT (NT - 2008).
, Windows Server, Active Directory
Exchange.

Windows Server 2008

xxi

8.

1.

8-4

2.

8-24

3.

8-32

8-51

9. Windows Server
1. Windows

9-4

2.

9-28

3.

9-52

. Windows

9-76

10.
1.

10-3

2.

10-8

3.

10-31

10-44

11.
1.

11-4

2.

11-21

3.

11-34

11-48

12.
1.

12-4

2.

12-13

12-26

xxii

Windows Server 2008

13. Windows Server

1. Windows Server

13-4

2.

13-19

3. Windows Server

13-37

4. Windows Server

13-49

. Windows Server

13-67

14.

1.

14-3

2. Hyper-V

14-19

14-45

8 .

L8-65

9 . Windows L9-73
10 .

L10-83

11 .

L11-95

12 .

L12-105

13 . Windows Server

L13-113

14 .

L14-133

8-1

1.

8-4

2.

8-24

3.

8-32

8-51

MCT.

10712A. Windows Server 2008


.
,
.

.

MCT.

8-2

8-3

,
:

, ,
.

MCT.

10712A. Windows Server 2008


.
.

.

,
;

MCT.

8-4

, ,
;

, ,
;

, ,
.

8-5

MCT.

10712A. Windows Server 2008


,
, : ,
, , - .
,
, . ,
,
, .
, ,

. ,

.

MCT.

8-6

8-7

,


. ,
,
.
,
.
.



, .
, , ,
, .

.
,
.
-, ,
, -
,
.
.
, ,
.
. -
(, -),
- .

MCT.

10712A. Windows Server 2008


. ,
, .
,
, .
. ,
, 10712A.
Windows Server 2008, 10.
.

-.

.


.
Microsoft Windows Update.

.
, ,
.
.
?

MCT.

8-8

8-9


.
,
, .

. ,
, ,
.
,
.

MCT.

10712A. Windows Server 2008

,
.
:

.
, ;

.

, ;

.
,
.
.

,
;

, ,
, ,
.
. ,
.

MCT.

8-10



. ,
, :

. , ,
;


.
; ,
,

Windows;

8-11

MCT.

10712A. Windows Server 2008

;
. ,
;

.
, ;

. ,
. , ,
.


,
. , ,

,
.

:

. ,
.

MCT.

8-12

8-13



.
.
:

. ,
,
.

;

-. -
,
. -
, .

MCT.

10712A. Windows Server 2008


,
,
.

:

(NAT);

(VPN) .

. - ?

MCT.

8-14

8-15


,
, (LAN)
(WAN). ,
.
.

.

. .

;

.

.
;

MCT.

10712A. Windows Server 2008

.

,

. , , ,

, WEP;

. ,
, ,
.
, .

. () ,
,
. ,
, . ,

,
.



. ,
.
,
,
. ,
(PKI),
.
. ,
, ,
.

MCT.

8-16

8-17

, ,
. ,

, ,

IPsec.
, SSL ,

.

.

;

, ;


MAC- .

.
, ?

MCT.

10712A. Windows Server 2008


.
, .
,
.
:

.
. - ,
.

;

MCT.

8-18

8-19

.
.

.
,
;

.
,
.


Windows Windows Server (WSUS)
Windows
. ,
. Windows 7

Microsoft Forefront Protection Manager Windows.

.

. .

MCT.

10712A. Windows Server 2008


, .
,
, Microsoft Office.
:

.
.

;

. ,
,
.
, ;

MCT.

8-20

8-21

, .
- , .

: , .

. ,
.

MCT.

10712A. Windows Server 2008


, .
, ,
Active Directory (AD DS).
:

.

, ,
. , .
;

Active Directory.

;

.
,
, .

MCT.

8-22

8-23


. ,
NTFS ,

.

. ,
,
,
(EFS) BitLocker.

.


NTFS.

. .

MCT.

10712A. Windows Server 2008


. ,
.

,
Windows Server, .

Windows,
.

MCT.

8-24

8-25



,
, :

-
;

-
;

-
,
.

MCT.

10712A. Windows Server 2008


, ,
:

. ,
, ,
.
, ;

. , ,
,
.

, . ,
,
,
;

MCT.

8-26

8-27

.
,
,
. ,
,
. ,
;

. ,
,
.
. ,

,
. ,
Windows Mobile, .
(EFS)
BitLocker;

. ,
,
.
,
,
BitLocker-to-Go.
.

MCT.

10712A. Windows Server 2008


Windows Server


Windows Server ,
.

(EFS)
EFS
Windows. EFS NTFS;

.

, .
,
, .
,
, .

MCT.

8-28

8-29

BitLocker
BitLocker
, ,
,
, .
BitLocker ,
Windows Server 2008 R2 Windows 7,
,
, .

(RODC)

Windows Server 2008 R2.
,
,
.

Active Directory .

,
. ,
.
,
,
.
.
.
,
.
, ,
, ,
.

MCT.

10712A. Windows Server 2008



, USB-
,
. Windows Server
,
,
.



, ,
,
.
,
. ,
, ,

.
, ,
, .
,
,
. ,
, , .
,
(Wi-Fi).
,
,
.

MCT.

8-30

8-31

(NAP) ,
Windows 7, Windows Vista,
Windows XP 3 (SP3), Windows Server 2008
Windows Server 2008 R2.
,
.

,
,
.
.



. ,
. ,
, ,
. ,
.

MCT.

10712A. Windows Server 2008

,
, .
,
, .
Windows,
Windows .

MCT.

8-32

8-33

, ;

Windows Server,
;

Windows Internet Explorer;

Internet Explorer.

MCT.

10712A. Windows Server 2008


,
,
. ,
, ,
.
.

.
; ,
:

, ;

-.

MCT.

8-34

8-35

,
,
. ,
, , ,
. ,
, .
,
.

-. -
, .
, -, :

. ,
. ,
.

;

ActiveX.
,
,
.
ActiveX
;

.
- ,
,
;

cookie. cookie
, ,
-
. cookie
,
.

, , ,
, .

MCT.

10712A. Windows Server 2008

.
.
.
-

.

. .
, .
, ,
, . ,
-.

. , ,

. , ,
, ,
.
,

.

. ,
, ,
.

,
, . ,
,

. , .

,
. ,
, ,
. ,
,
.

MCT.

8-36

8-37

, , ,
, , ,
, ,
.
,
. ,
,
.

MCT.

10712A. Windows Server 2008


,

.
,
, .

.
,
:

. ,
.

;

MCT.

8-38

8-39

.
. ,
.
;

.
, Microsoft Office Outlook,
. ,
,
,
: .

-. -

-. ,
Internet Explorer
, , ,
.

ActiveX,
.

, .

, ,
-
.
, , .
, ,

, - .

.
,
.
,
,
.

MCT.

10712A. Windows Server 2008

.
,
.
. ,
,
.

.
.
,
, ,
.
, ,
, . Windows

,
.

.
,
. , Windows 7
Windows Server 2008 R2, -
,
Windows Server (WSUS).

.
, . ,
Windows 7 Windows Server 2008 R2,
Windows
. ,
, ,
. Windows

.
, ,
, ,
. ADSL-

(NAT) .

MCT.

8-40

8-41

Windows


Windows 7 Windows Server 2008 R2 ,
.


,

,
.
, .
, ,
,
ActiveX, Windows
, .
, ,
.

MCT.

10712A. Windows Server 2008

,
,
, :

, ,
;

, ,
, -
.

,
, ;
. ,
,
.

,
.

Windows
Windows
, Windows Server 2008 R2.
, ,
( ), ,
( ). Windows
,

. Windows

Windows ,
IPsec.

MCT.

8-42

8-43

Windows
Windows Windows 7
. Windows
. Windows
:

,


. ,
Windows;

SpyNet ,
,
. ,
,
;

,
,

, .

MCT.

10712A. Windows Server 2008

Internet Explorer


Internet Explorer
.
Internet Explorer
,
-. , Internet Explorer
,

, .

MCT.

8-44

8-45



, Internet Explorer.

ActiveX


ActiveX,
. ActiveX

.


-,
. Internet
Explorer . ,

. (Microsoft),

.

,
.

SmartScreen

,

.

,
.


.

,
-
-
.

MCT.

10712A. Windows Server 2008

()

, ,
, cookie .

, ,
,
.


URL ,
URL- . ,
,
.

URL

URL-
.
URL

.

,
.

. ,
,
. ,
.

,
.

Internet Explorer
-,
Internet Explorer ,
.

MCT.

8-46

8-47


Windows Vista
Internet Explorer.
Internet Explorer ,
, ,
. ,
,
,
.
,
, .
,
, ,
Windows
. ,

, .
,
,

.


,

, Windows Vista.
.
,
.
.
.
. ,
.

MCT.

10712A. Windows Server 2008


Internet Explorer ,
Internet Explorer.

.
.
:

, Internet Explorer;

, Internet Explorer;

, ;

ActiveX.

,
ActiveX.

SmartScreen
.
, ,

.
.
Internet Explorer 8 SmartScreen
, Internet Explorer 7.
,
. SmartScreen
-,
,
.

MCT.

8-48

SmartScreen
:
;
;
;
;
.

8-49

MCT.

10712A. Windows Server 2008

.
Internet Explorer


, .

.
1.

-, ActiveX.

2.

3.

-, ,
.

MCT.

8-50

8-51



.
.
1.

,
Hyper-V.

2.

Hyper-V 10712A-NYC-DC1
.

3.

. ,
.

MCT.

10712A. Windows Server 2008

4.

: Pa$$w0rd

: contoso

5.

2 3 10712A-NYC-CL1.

6.

: Alan

: Pa$$w0rd

: contoso


Alan Brewer .
Contoso, Ltd, ,
,
Ed Meadows. Ed .

MCT.

8-52

8-53

1.

,
. ,
Alan
.

.
1.

2.


Contoso.
: EM220109/1

Ed Meadows

22

Contoso, Ltd.,

.

1. , Contoso, Ltd.,
,
.
2.
.
. .
. .
. .
3. ,

.

MCT.

10712A. Windows Server 2008

Ed Meadows.

Charlotte Weiss
:
:
:
:
:

Ed Meadows [Ed@contoso.com]
6 2010 , 12:01:00
Charlotte@contoso.com
:

Charlotte,
Alan.
. ,
Ed
----- ----:
Alan Brewer [Alan@Contoso.com]
: 5 2010 , 11:45
:
Ed@Contoso.com
:

Ed,
.
,
,
. ,
.

,
,
.

,
USB-.

, Alan

MCT.

8-54

8-55

 1.
1.

2.

Contoso, ,
, -
.

 2.
1.

2.

.
Contoso.
: 501285
:

Ed Meadows

10

10:50

Alan Brewer


-
,
, Alan Brewer. :
1. .
2. .
3. , ,
.
4. USB
.

MCT.

10712A. Windows Server 2008

()
Contoso, Ltd.

1.

Contoso?
2. ?
3. , ?
4.
?
5. ,
?
6. , ?
7. .

. .

MCT.

8-56

8-57

2.
Internet Explorer

Alan ,
. ,
Internet Explorer .
, .

.
1.

Internet Explorer.

2.

3.

4.

- .

5.

 1.
Internet Explorer
1.

NYC-CL1.

2.

Internet Explorer.

3.

 2.
1.

2.

3.

Internet Explorer.

MCT.

10712A. Windows Server 2008

 3.
.
Internet Explorer 8, .

1.

Internet Explorer.

2.

http://nyc-dc1/intranet.

3.

-?

4.

Contoso
.
. ?
. Tabular Data Control
?

5.

- Contoso.

 4. -
. ?

http://nyc-dc1 .

MCT.

8-58

8-59

 5.
1.

Contoso
.
. ?
. Tabular Data Control
?

2.

Internet Explorer.

.
Internet Explorer.



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-CL1.

5.

10712A-NYC-DC1,
.

6.


,
10712A-NYC-DC1, .

! 10712A-NYC-DC1,
, ,
.

MCT.

10712A. Windows Server 2008


1.

2.

,
?

3.


Wi-Fi?

MCT.

8-60

8-61

,
,
;

(NAT);


MAC- ;


NTFS;

MCT.

MCT.

9-1

9
Windows Server

1. Windows

9-4

2.

9-28

3.

9-52

. Windows

9-76

MCT.

Windows Server

10712A. Windows Server 2008


, ,
.
Windows Server 2008 R2

-.
,
Microsoft Windows.

MCT.

9-2

9-3

,
:

Windows Server 2008 R2,


;

,
Windows Server;

, ,
Windows Server 2008 R2,
.

MCT.

Windows Server

10712A. Windows Server 2008

Windows

Windows Server 2008 R2


.
Windows Server 2008 R2.

.

MCT.

9-4

9-5

MCT.

Windows Server

10712A. Windows Server 2008


Windows Server 2008 R2
,

.

.
: .

MCT.

9-6

9-7



.

.
( )

, .

. Windows Server 2008 R2


.
:

-. - ,
.
- . -

.
, -
,
, -,
.

.

.
,
.
.
,
.


.
.
, ,
-.

MCT.

Windows Server

10712A. Windows Server 2008

(Public key infrastructure, PKI).


PKI ,

.
PKI .

RADIUS. Windows Server 2008 R2


RADIUS,

. RADIUS

. ,
VPN- ,
,
Windows
.

,

.
, ,
.
Windows Server .

, ( )
(
). .
, - ,
- (,
.) - -.

MCT.

9-8



.
, Windows,
, .
,

.


.

9-9

MCT.

Windows Server

10712A. Windows Server 2008

Windows Server 2008 R2


,

.


,
.
.
,
.

,
.
.
. Windows Server 2008 R2
.
,
.

, ,

.
,
.

.



.
,
.

MCT.

9-10

9-11

Windows.

Windows ,
.

Windows.

Bluetooth .



Windows Server 2008 R2
.

.
.

UIAccess-
.

MCT.

Windows Server

10712A. Windows Server 2008

.
Server Core
Windows Server 2008 R2.

MCT.

9-12

9-13


, ,
.

. ,
Windows Server 2008 R2

.

MCT.

Windows Server

10712A. Windows Server 2008

Windows Server 2008 R2


.

NTFS .
NTFS NTFS;
.
NTFS
, .

.
( ),
,
.

, .

.
NTFS

.

. NTFS ,
, ,

.
.

.
NTFS?

MCT.

9-14

9-15


, ,
.
,
,
.

.
,
,

*.

MCT.

Windows Server

10712A. Windows Server 2008


,
.

,
,
.

, :



: ,
, ,
( );

.



.


,
.


,


.


.
, 1 ,

,
5
.


1.

MCT.

9-16

9-17

()


,
.


.



30
70 .



.


,

.


,

.




1 . ,


.

.
,

,




.


0,




.

MCT.

Windows Server

10712A. Windows Server 2008

()


,
.



8 12
( ,

).

, ,


,
,


.



,
,



.

MCT.

9-18

9-19

,
, ,
,
,
.
.


,


. ,
3,

,

.



,



.
0

,

.







,

3 5.

30
90 .

MCT.

Windows Server

10712A. Windows Server 2008

()


.



,


.


,

(
),

.

30
60



,

.

.
, secpol.msc .

.
10:00 10:25,
.

: 4

: 60 .

: 30 .

MCT.

9-20

9-21


Active Directory
.
,

.

.

.

MCT.

Windows Server

10712A. Windows Server 2008


Active Directory, .
,
.
,
,
.
.


Active Directory
. ,
,
.
.
Active Directory;
Active Directory.

MCT.

9-22

9-23



.
,
,
.
.

MCT.

Windows Server

10712A. Windows Server 2008

, ;

. , ,

(, , .).
Windows ,

.

MCT.

9-24

9-25


Windows Server 2008 R2 ,
,
.

(EFS)
EFS
, NTFS.
EFS ,
-.
,
.
, .

MCT.

Windows Server

10712A. Windows Server 2008

EFS
, ,

,
.
EFS , ,
, , .

BitLocker
BitLocker
Windows Server 2008 R2 ,
,
.
BitLocker-to-Go ,
USB- - .
EFS, Bitlocker
,
.
USB-,
,
(TPM),

.
BitLocker ;
.

BitLocker EFS

BitLocker EFS.
BitLocker

EFS

(
,
Windows
)

MCT.

9-26

, EFS
, ,
. , ,
, .
BitLocker, ,
;
,
.

9-27

MCT.

Windows Server

10712A. Windows Server 2008


Windows Server 2008 R2.
Windows Server
,
.
,


.

MCT.

9-28

9-29

NTFS;

NTFS
;

MCT.

Windows Server

10712A. Windows Server 2008

NTFS


NTFS ,
,
NTFS. NTFS ,
.
NTFS.

.
.

.
;

.

MCT.

9-30

9-31


NTFS
.
.

,
.

.

.


.

.

. ,
,
, .

NTFS NTFS
.
. NTFS,
NTFS.

NTFS.

MCT.

Windows Server

10712A. Windows Server 2008



.

.
, .

.


,
.
,
.

.

.

.

,
.



.

.
, ,
, .
,
.

;
.

MCT.

9-32

9-33

()


,
.
NTFS.



.
,
.


;
.

;


NTFS.


;
.

;
,
,
.

MCT.

Windows Server

10712A. Windows Server 2008

()


,
.
NTFS.

;
.

.
, ,
.



.
,
.


;
.
.
, ,

.


;

,
.

MCT.

9-34

9-35

()


. ,
,
, ,

.



, ,
.



, ,
.



.
,
,
.




, .

.

.
NTFS , ,
, .

MCT.

Windows Server

10712A. Windows Server 2008

NTFS ,
.
1.

,
, .

2.

,
.

3.

4.

MCT.

9-36

9-37


, ,
.
,
, ,
, .
, ,
.
, .

MCT.

Windows Server

10712A. Windows Server 2008

,
, ,

.

, .
.
, ,
.
, , ,
,
.
.
;
NTFS.
,
.
1.

,
, .

2.

,
.

3.

4.

5.

,
.

6.

,
, .



, .
,
.

MCT.

9-38

9-39

NTFS
.

NTFS
.

, NTFS, FAT,
NTFS,
, NTFS, .


.
, .
.
.

NTFS
.
Windows Server 2008
,
.

, NTFS,
NTFS, , NTFS,
.

MCT.

Windows Server

10712A. Windows Server 2008



. ,
.
,
.
, ,
.
, .
NTFS,
.

MCT.

9-40

9-41

,
, .
.


,
.
,
.

,
, ,
,
.
,
,
.

,
, ,
,

.


,
Windows Server 2008 R2.
( )
,
.
.
. NTFS,
, ,
, .

MCT.

Windows Server

10712A. Windows Server 2008


,
NTFS,

NTFS. NTFS
, ,
.

MCT.

9-42

9-43


,
.
,
,
NTFS NTFS.
NTFS
, ,
.
NTFS,
.


.
. ,
.

.



,
NTFS .

NTFS

,
NTFS.

,
,
.

MCT.

Windows Server

10712A. Windows Server 2008

NTFS
.
,
.
,
,
. NTFS,
, ,
, , ,
.
, ,

,
.
, .
NTFS ,
.

MCT.

9-44

9-45


,
NTFS
.

.
,
. ,
,
, , .

.
.
,
.

MCT.

Windows Server

10712A. Windows Server 2008


.
, NTFS
.
NTFS


.

.

,
.

,
.
,
.

( )

. .


, ,
.


.
,
.

.

MCT.

9-46

9-47

,
,
.
,
,
.
,
.
1.

,
, .

2.

3.

MCT.

Windows Server

10712A. Windows Server 2008

, ,
NTFS,

.

.
1.

2.

NTFS.

3.

MCT.

9-48

9-49



;
,
.
, ,
.
.

MCT.

Windows Server

10712A. Windows Server 2008

Windows Server 2008


.
1.


.
secpol.msc
.
.

2.



, .
,
, ,

.


,
NTFS .


.
. ,
.
.


Windows.
,
.

MCT.

9-50

.
1.

2.

3.

9-51

MCT.

Windows Server

10712A. Windows Server 2008


, .
,

.
.

.

MCT.

9-52

9-53

(PKI);

EFS
;

,
EFS;

EFS;

BitLocker.

MCT.

Windows Server

10712A. Windows Server 2008


,


,
.



.

,
, .

MCT.

9-54

9-55

, ,
, .
,
.

, ,
.

,
().

,
.

() ,
.

,
, ,
,
.

MCT.

Windows Server

10712A. Windows Server 2008

PKI?


PKI
,
.
PKI ,
,
,
.

MCT.

9-56

9-57

, PKI.

().
, ,

.

.
,
,
,

.
, :
, , ,
,
, PKI.

.
,
.

.
Windows Server 2008 R2,
, ,
,
,
PKI.

.
PKI. PKI
.

MCT.

Windows Server

10712A. Windows Server 2008



,
, .
;
-
Windows.

.

.

MCT.

9-58

9-59

,
. ,
, , ,
,

, .
, ,
, .

.
,
,
.
.

. ,
,
. , ,
,
.
, .
.
, -
Contoso Ltd Contoso, Ltd
SSL.
-,
.
Contoso Ltd, -
, Contoso, Ltd
.
, , ,
,
SSL Contoso Ltd,
.
,

Contoso, Ltd.
.

MCT.

Windows Server

10712A. Windows Server 2008

.
,
.
,
,
.
,
.

, ,
,
. ,
,
. ,
, .


. ,
.
,
, , ,
, .

,
.

.


.
. ,
,
.
;
,
.

MCT.

9-60

9-61

.
, ?
.
?
.
, ?

MCT.

Windows Server

10712A. Windows Server 2008

EFS


EFS
Windows. EFS NTFS;


.
,
.
, ,
. ,
,
.

MCT.

9-62

9-63

- , ,
,
,
.
.
-,
, ,
EFS,
.
, EFS.

EFS ,
;
.
, ,
.
EFS ,
EFS, ,
.

, ,
, -
.
,
.

,

.
(
) .

,
.
.

MCT.

Windows Server

10712A. Windows Server 2008


.

.
, ;
.
(PKI).

,
, (, )

.


. ,
,
.
, EFS,


.

, EFS,
,
. ,
, ,
, .
EFS
, -
WebDAV.

EFS NTFS.

, NTFS,
USB -,
FAT32, .

. ,
.

MCT.

9-64

9-65

EFS
EFS
.
EFS . EFS
,
.

EFS .
EFS , ,
EFS
.
. EFS ;
.

EFS Windows Server 2008 R2


Windows Server 2008 R2 EFS,
.

-. Windows
Server 2008
-.
Windows -, -
EFS .

-.
(
)
.

MCT.

Windows Server

10712A. Windows Server 2008

EFS.
EFS EFS,
,
EFS.


-. ,
, ,
.

EFS.
EFS
.
EFS
, .

.
EFS
, .

, .
, ,
,
.

256- AES. EFS


,
AES. AES 256-
;
EFS .

MCT.

9-66

9-67

,
EFS


EFS

.

.
.
.
.

Active Directory Active Directory,
EFS.

MCT.

Windows Server

10712A. Windows Server 2008

EFS .
EFS
-.
,
, ,
.

, ,
.

. ,
,
.

,
.

EFS ,
,
, EFS.

, ,
. ,
Active Directory Active Directory
.

EFS ,
.
-
.

MCT.

9-68

9-69


,
,
,
.
, EFS
,
EFS ,
.


, -,
,

.
,
, .


.
.
1.

2.

3.


.
.
.
, .

4.

5.


Active Directory.

MCT.

Windows Server

10712A. Windows Server 2008

EFS


Windows Server 2008 R2
.
.


.
EFS.
;
,
, ,
.

MCT.

9-70

9-71

Windows Server 2008 R2


,
,
Windows.
.
; .

MCT.

Windows Server

10712A. Windows Server 2008

BitLocker


Windows BitLocker
,
, , ,
,
. BitLocker
Windows Server 2008 R2 ,
, ,
.

,

. BitLocker

Windows. BitLocker
,
BitLocker.

MCT.

9-72

9-73

BitLocker ,

.

,
Windows ( ).
Windows,
, , .
BitLocker
,
.


(TPM),
(,
),
, BitLocker,
,
.


BitLocker TPM
.



, , ,
rootkit.

.
,
,
Windows.

.

. ,
,
.
BitLocker .

MCT.

Windows Server

10712A. Windows Server 2008

TPM BitLocker
, ,
,
.
,

.
,
,
. ,
, BitLocker
, BitLocker
Windows.
, BitLocker
Windows Server 2008 R2
,
, USB-
.

BitLocker To Go
,
, ,
.
, .
BitLocker To Go
BitLocker
, USB- -.
.
Windows Server 2008 R2
. ,
BitLocker.
.
.

. , ,
.

-. -
, - -
.

MCT.

9-74

9-75


. 48-
,
Active Directory Active Directory;
(,
). ,
.
,
BitLocker, Windows , ,
.

MCT.

Windows Server

10712A. Windows Server 2008

.
Windows



.
.
1.

,
Hyper-V.

2.

Hyper-V 10712A-NYC-DC1
.

3.

. ,
.

MCT.

9-76

4.

5.

9-77

: Pa$$w0rd

: contoso

10712A-NYC-SVR3.

MCT.

Windows Server

10712A. Windows Server 2008

1.


Contoso, Ltd.

; ,
, .


: (a-z), (A-Z),
(0-9), (, ! @ # $).

60 .

,
.


.
1.

2.

f 1.
1.

NYC-DC1
.

2.

Default Domain Policy.

3.

,
.

MCT.

9-78

f 2.

,

.

.
.

9-79

MCT.

Windows Server

10712A. Windows Server 2008

2. NTFS

Contoso, Ltd
NYC-SVR3
,
.
,
,
Max Stevens ( ).

.
,
.

.
1.

C:\.

2.

NTFS
.

3.

C:\
.

f 1. C:\
1.

NYC-SVR3
C:\.

2.

C:\
.

f 2. NTFS

1.

C:\.

2.

Contoso\Research
C:\.

MCT.

9-80

3.

C:\\.

4.


C:\\ Contoso\Max.

9-81

f 3. C:\

1.

C:\ .

2.

Contoso\Research
C:\.

. NTFS
.

MCT.

Windows Server

10712A. Windows Server 2008

3.

, NYC-SVR3

Research
.
.

.
1.

EFS.

2.

, .

3.

f 1.
(EFS)
1.

NYC-SVR3
Contoso\ Pa$$w0rd.

2.

.txt C:\\
.

3.

C:\\
.

4.

NYC-SVR3.

f 2. ,
1.

NYC-SVR3
CONTOSO\Max Pa$$w0rd.

2.

,
, .txt
C:\\.
.

3.

NYC-SVR3.

MCT.

9-82

9-83

f 3.
1.

NYC-SVR3
Contoso\ Pa$$w0rd.

2.

C:\\.

.
EFS.

f

. :
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-SVR3.

5.

10712A-NYC-DC1,
.

6.


,
10712ANYCDC1, .

! 10712A-NYC-DC1 ,
,
.

MCT.

Windows Server

10712A. Windows Server 2008


1.

2.


Windows Server 2008?

MCT.

9-84

9-85


(secpol.msc)
(gpedit.msc).

, .

.


,

. ,
, ,
,
.
,

.

.

EFS
EFS:


. ,
.
, ,
.
,
.
,
.

(<_>\ )
.
, ,
.

MCT.

Windows Server

10712A. Windows Server 2008

, .
-.
,
.

, ,
.

PFX-,
, ,
.

Windows BitLocker
BitLocker
, ,
.

TPM.

USB-, USB- -.
TPM 1.2 ,
BitLocker .

BitLocker
TPM
1.2.

, TPM 1.2,
BitLocker Windows.

USB- ,
,
BitLocker, TPM.

MCT.

9-86

10-1

10

1.

10-3

2.

10-8

3.

10-31

10-44

MCT.

10712A. Windows Server 2008


.

Windows, .

,
:

Windows
Windows;

, .

MCT.

10-2

10-3

.

.

, ;

MCT.

10712A. Windows Server 2008



.
:

.
, ,
,
.
, , , ,
, .
. .

MCT.

10-4

10-5

.

.

;
,
, .

. , TCP/IP,
TCP UDP .
,
;
. ,

.

.
,
.
, .
,
,
.

.
.

. - ?
?

MCT.

10712A. Windows Server 2008


, ,
, ,
. ,
,
.
,
.

.

IPsec. IPsec
IP ,
, .

.
.

MCT.

10-6

10-7

. ,

.
,
. ,
,
.

(VPN).
,
.
,

.

VPN,
.

. ,
.
,
.
, Windows Server
,
,
Microsoft Baseline Security Analyzer.

. ,
,

.
.
,
, .

MCT.

10712A. Windows Server 2008


,
.
, .

;
.

Windows.

MCT.

10-8

,
Windows .

IPsec.

10-9

MCT.

10712A. Windows Server 2008


, .

.
OSI.
, , ,
. , HTTP-
FTP-.
NAT Traversal,
IP-
.
, , ,
,
.

MCT.

10-10

10-11

. OSI

.
TCP
TCP-
. , , ,
.
.

. OSI
.

,
. .

.

.

,
. ,
,
OSI. ,

, .


.

,
Windows Server,
, .

MCT.

10712A. Windows Server 2008


,
, .


, .

MCT.

10-12

10-13


, .

.
,
, , .

, .
,
, ,
, .
; - ,

,
.

.
:
, .
.

.
,

,
.

,


,
.

,
,
.

. ,
,
.

MCT.

10712A. Windows Server 2008

, , ,
.
. ,
-
, -
,
.
.
TCP;
HTTP HTTPS. ,

TCP- 80/443.


,
,
.

POP3, IMAP4, SMTP, Microsoft


Office Outlook Web Access
(HTTPS), Outlook
(HTTPS), Microsoft
Exchange ActiveSync (HTTPS)

Microsoft Exchange Server



ForeFront
Threat Management Gateway
(TMG). ,


Exchange

SMTP .

HTTP, HTTPS

-


ForeFront TMG.

MCT.

10-14

10-15

()


Active Directory

LDAP



.


Active Directory,


Microsoft Active
Directory
.

HTTPS, SIP, PSOM, RTP, RTCP

Microsoft Office
Communications Server



.
,


ForeFront TMG
.

SIP

SIP
,

.

.
?

MCT.

10712A. Windows Server 2008

Windows?


Windows
,
Windows Server 2008 R2. Windows
,
.
Windows
Windows XP 2 (SP2).
Windows Server 2008 R2
Windows.

MCT.

10-16

10-17

Windows Server 2008 R2 Windows


, .
Windows
,
.
Windows ,
. Windows
.
,
. ,

Windows.
Windows
, .

. Windows

,
Windows.

MCT.

10712A. Windows Server 2008



.
,
.

. :

. ,
,
.
.

MCT.

10-18

10-19

. .

.
, .

.
, .
,
.
.


Windows.
Windows,
.
.

,
.

, .

.

.



.
Windows,

.

MCT.

10712A. Windows Server 2008

Windows


Windows

, .
,
. IPSec
Ipsec
. ,
.

.
.

. ,
,

,
.

MCT.

10-20

10-21

. ,
,
,
.

. ,
,
.

. .

Windows

, ,
, .
.


,
. ,
, ,
IPsec, ,
, IPsec.
Windows
.
, ,
. ,
-, ,
TCP- 80.
Windows
,
,
.

MCT.

10712A. Windows Server 2008


Windows ,
.
,
. , ,
,
( IP-),
, .

.
.

. ,
,
(EXE-)
.

.
TCP UDP.

TCP UDP,
.
.

.
Windows.


. ,
, , ,
.

.
.

,
.

MCT.

10-22

10-23



,
.

IPsec.

. ,
,
.
.
, ,

.
.
.

Windows
,
.
(,
) .
. Windows

. ,
Windows
.

MCT.

10712A. Windows Server 2008

.
Windows


,
.

.
1.

ping.

2.

3.

4.

MCT.

10-24

10-25

IPsec?


IPsec
IP . IPsec
:

MCT.

10712A. Windows Server 2008

IPsec ,

.
,
,

, .
IPsec .


IP- .

IPsec .

. IPsec .
IPsec IP-, IP-
.
, .

. IPsec
, IP-.
,
, .

MCT.

10-26


Windows IPsec
Windows
, .
Windows Server 2008 R2 IPsec Windows ,
IPsec
Windows
.

10-27

MCT.

10712A. Windows Server 2008

IPsec Windows
IPsec Windows
,
,
.
IPsec
Windows
. IPsec
Windows.

, .
IPsec
;

Windows. ,

.
; ,
.

?

,

. Windows
IPsec.

IPsec .
Windows

, .
Windows
. ,
( ),
,
.

MCT.

10-28

10-29

.
,
.

.

.
,
.
IP-, IP,
, .

-. -
.
, , .
,
.
.

.
.
.
IP- ,
.

.
,

,
, .

MCT.

10712A. Windows Server 2008


,
.

. :
,

.

.
: Kerberos,
, NTLMv2 .

.

.
. :
, .

.
;
IP-, IP- IP-.

. -;
IP-, .

. ;
,
.
.
IPsec . IPsec
,

.

MCT.

10-30

10-31


.

.
.

MCT.

10712A. Windows Server 2008

DHCP.

MCT.

10-32

10-33


,
,
, , ,
.
, , ,
,


.

MCT.

10712A. Windows Server 2008


,
, ,
,
, -
.
Windows Server 2008 R2

.

MCT.

10-34

10-35


,

.

,
,
,
.
.


.
:

MCT.

10712A. Windows Server 2008

Windows;

,
, .


, , ,
,
.
,
,
,

.


.

.


,
.
. ,
,

,
.
,
, .
, ,
.

MCT.

10-36

10-37

.



.
,
Microsoft System Center Configuration Manager 2007.
, ,

.

.
, ,
,
, ,
.

.
, .

, .
,
,
,
. ,
,
.

MCT.

10712A. Windows Server 2008



, .
,
.

MCT.

10-38

10-39



,
.
. ,

. ,
, ,
.

(VPN)
.


, , ,
.

.
-,
,
.
,
.

. ,

.

.


,
, - . ,
,
.
,
,
. , ,
.
,
.

MCT.

10712A. Windows Server 2008


,
Active Directory ,
VPN.
,
.

,
.

VPN
,
.

MCT.

10-40

10-41

NAP


,
,

.
Windows 7, Windows Vista, Windows XP 3 (SP3),
Windows Server 2008 Windows Server 2008 R2

.

, IPsec.
IPsec ,

.

MCT.

10712A. Windows Server 2008

IEEE 802.1X.
IEEE 802.1X


IEEE 802.1X,
Ethernet
IEEE 802.11.

VPN- .
VPN ,
VPN .

DHCP-.
DHCP
IPv4-
DHCP-.
IPv4-,
.


.

. ,
Windows Server 2008 (
(IAS), Windows Server 2003),

.
. NAP
? ,

NAP? , ?

MCT.

10-42

10-43

.
NAP DHCP


,
.

.
1.

2.

DHCP.

3.

4.

5.

6.

7.

MCT.

10712A. Windows Server 2008



.
.
1.

,
Hyper-V.

2.

Hyper-V 10712A-NYC-DC1
.

3.

. ,
.

MCT.

10-44

4.

5.

10-45

: Pa$$w0rd

: contoso

10712A-NYC-SVR2
10712A-NYC-CL1.


Ed Meadows
.
.
.
Ed Meadows.

Charlotte Weiss
:
:
:
:

Ed Meadows [Ed@contoso.com]
18 2010, 13:14
Charlotte@contoso.com

Charlotte,
.
ping.exe
. , ping.exe

, .
, ,
, .
?

Ed

MCT.

10712A. Windows Server 2008

1. Windows

,
ICMPv4,
ping.exe Contoso, Ltd.

.
1.

Ping.

2.

3.

4.

 1. Ping
1.

NYC-DC1.

2.

NYC-DC1 .

3.

NYC-CL1.
. ?

 2.
1.

NYC-CL1.

2.

NYC-CL1 Windows
.

3.

,
.
.

: ICMPv4

MCT.

10-46

. : ICMPv4 Contoso
.
?

 3.

NYC-DC1.
. NYC-CL1?

 4.
1.

NYC-CL1.

2.

Windows
.

3.

ICMPv4 Contoso.

4.

Windows
.

5.

NYC-DC1.
. NYC-CL1?

.
.

10-47

MCT.

10712A. Windows Server 2008

2.
(NAP)

NAP DHCP
,
.

.
1.

2.

DHCP-.

3.

4.

5.

6.

7.

NAP .

8.


IPv4.

9.

 1.
1.

NYC-SVR2 .

2.

3.

4.

 2. DHCP-
1.

DHCP .

2.

MCT.

10-48

3.

4.

5.

6.

7.


006 DNS IP- 10.10.0.10.

8.

015 DNS-
restricted.contoso.com.

9.

DHCP.

10-49

 3.

1.

NYC-SVR2
.

2.


,

Windows, .

3.

4.


Windows ,
, .

. Windows 7
Windows Vista.

MCT.

10712A. Windows Server 2008

 4.
1.

2.

 5.
1.

2.

3.

, SHV: SHV

:
Windows

, SHV:
SHV

:
Windows

 6.
.
.

1.

2.

MCT.

10-50

10-51

3.

4.

5.

6.

7.

8.

9.


,
.

10. .
11.
NAP.
12.
.
13.
.
14.
.
15.


.
16. .
17.
.
18.

.

MCT.

10712A. Windows Server 2008

19. .
20. .
21.
,
.
22. .
23.
NAP.
24.
.
25.
.

 7. NAP
1.

NYC-CL1.

2.

napclcfg.msc.

3.

DHCP.

4.

napclcfg.msc.

5.

services.msc.

6.

,
.

7.

services.msc.

8.

mmc.exe.

9.


, .

10.
/ /
/ Windows/
.

MCT.

10-52

10-53

11.
( ),
.
12. .

 8.
IPv4-
1.

,
(3)
.

2.

3.

4.

.
.

IP- .

DNS- .

. TCP/IPv4.

MCT.

10712A. Windows Server 2008

 9.
1.

NYC-CL1 .

2.

ipconfig /release .

3.

ipconfig /renew .

4.

ipconfig /all .
. DNS- .
. ?

.
NAP DHCP.



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
.

3.

4.

10712A-NYC-SVR2
10712A-NYC-CL1.

5.

10712A-NYC-DC1,
.

6.


,
10712A-NYC-DC1, .

! 10712A-NYC-DC1 ,
,
.

MCT.

10-54

10-55


1.

,
?

2.

,
,
Windows?

3.

NAP ,
,
.
?

MCT.

10712A. Windows Server 2008

;

, .


MAC- .

DHCP

DHCP-

mmc.exe

Ping.exe

Windows


,
IPsec

MCT.

10-56

()

Services.msc

Napclcfg.msc

10-57

MCT.

MCT.

11-1

11

1.

11-4

2.

11-21

3.

11-34

11-48

MCT.

10712A. Windows Server 2008

, .

, ,
.
.

, ,
, .

,
, ,
.

.
, ,
-.

MCT.

11-2


,
.

Windows Server
.

, ,
.

,
Windows Server .

11-3

MCT.

10712A. Windows Server 2008

,
,
,
. ,

.

, .
Windows Server 2008 R2

,
.


.

MCT.

11-4

11-5

AppLocker;

AppLocker;

AppLocker;


AppLocker.

MCT.

10712A. Windows Server 2008


,
, ,
.
,
. ,
,

.
,
Windows XP Windows Server 2003,
,
.

. ,
.

MCT.

11-6

11-7

,

.
,
,
.
,
.

. .

.
.

. UNC- .

. .



,
,
.
.

. , ,
.

. ,
,
.

. , ,
.

MCT.

10712A. Windows Server 2008



, ,

,
.
,
,
.

.
,
,
.

.
, ,
.
,

.

. ,
,
, .

,
,

. ,
,
,

, .

MCT.

11-8

11-9

,
,

,
.
, ,
,
.


:
\ Windows\ \
.
.
Windows Server 2008 R2.

MCT.

10712A. Windows Server 2008

AppLocker?


Applocker (
Windows 7 Windows Server 2008 R2)
, ,
.
AppLocker
,
.
AppLocker . , AppLocker

Active Directory.
AppLocker

, , .

MCT.

11-10

11-11

AppLocker

ActiveX.
,

,
.

AppLocker
.

,
-,

.

,
, ,
.

,
,
, ,

.

,
.

,

.


,
.

MCT.

10712A. Windows Server 2008

AppLocker
Windows:

Windows Server 2008 R2 Standard;

Windows Server 2008 R2 Enterprise;

Windows Server 2008 R2 Datacenter;

Windows Server 2008 R2 for Itanium-based


Systems;

Windows 7 ;

Windows 7 .

. Applocker
Windows Server 2008 R2.

MCT.

11-12

11-13

AppLocker


,
AppLocker .
, ;
.
AppLocker ,

AppLocker.

MCT.

10712A. Windows Server 2008


AppLocker ,

. ,
.

Program Files
.

,
Windows.


, .

.
AppLocker , .
.

.
.

.
.

, ,
,
.

MCT.

11-14

11-15

.

. .

.
,
. ,

.

.
, .

, .

.
.
,
.

,

. , ,
,
.
,
.

.
AppLocker .

MCT.

10712A. Windows Server 2008

. AppLocker


, AppLocker.


1.

AppLocker.

2.

AppLocker.

3.

AppLocker.

MCT.

11-16

11-17


AppLocker



Windows Server 2008 R2 Windows 7
, AppLocker

. AppLocker
Windows Server 2008 R2 Windows 7.
AppLocker

, ,
.

MCT.

10712A. Windows Server 2008

AppLocker


Windows

.

,
.
AppLocker ,
,
.
,
.

,
; AppLocker
.
,
, .
,
,
, . AppLocker
: Microsoft Office 2007,
, 12.0.0.0.
AppLocker
.
,
, , ,
.
,
.
:
, AppLocker.

MCT.

11-18

11-19

, ,
(MMC),
.
,
.

AppLocker .

AppLocker


(
)


( )

, ,
, ,
-

, ,

Windows PowerShell

MCT.

10712A. Windows Server 2008

AppLocker

Windows,
Windows Server 2008 R2 Windows 7,
.
Windows Server 2008 R2 Windows 7
AppLocker,
.
Windows 7
,
.

Windows Server 2008 R2 Windows 7 AppLocker
,
AppLocker,
.
AppLocker
Windows Server 2008 R2 Windows 7,
.

AppLocker
AppLocker.
AppLocker ,
,
AppLocker.
.

Windows, Windows Server 2008 Windows 7.

. AppLocker

?

MCT.

11-20

11-21


.
,

.


. ,

, ,
, .

,
.

MCT.

10712A. Windows Server 2008

, ;

MCT.

11-22



.

,
, .
,
.

11-23

MCT.

10712A. Windows Server 2008


, ,
, .

.
,
- .
,
. ,
,
, ,
,
.

.
.


-.
.
, ,

. Windows Server 2008 R2, Windows 7
Windows Internet Explorer 8 ( )
,
-,
.

,
, ,
.
,
, ,
, .

MCT.

11-24

11-25

,
.

.
,
,
.
, ,
, .
,
.

MCT.

10712A. Windows Server 2008




, ,
.
,
,
.

MCT.

11-26

11-27



.
,
( ) ,
, ,
.

, .
, ,
,
.


,

.
()
.
.

,
, .
,
, .


.
,
,
.
,
, ,
,
.

MCT.

10712A. Windows Server 2008

IP-

IP-.
IP-,
,
.
, IP-
,
.

DNS

DNS.
@contoso.com,

DNS ,
contoso.com. (PTR)
DNS, . ,
.
contoso.com
, .

DNS;
.

IP ,
.
, ,

.

MCT.

11-28

11-29

Microsoft Exchange Server



Microsoft Exchange,
, Exchange
. ,
,
.
,
,
.
,
,
, , ,
.

Microsoft Forefront Protection Exchange Server


Microsoft Forefront ,
Windows.
Microsoft Forefront Protection Exchange Server
, ,
Microsoft Exchange.
Exchange Server
Microsoft Forefront Protection Exchange Server.
Microsoft Forefront Protection Exchange Server

.
,
, , .

,
.

MCT.

10712A. Windows Server 2008


,
, ,
,
,
.


.

MCT.

11-30

11-31

Microsoft Office Outlook 2007 2010



Microsoft Office Outlook 2007 2010
. Office Outlook 2007 2010
,

.
, .
Office Outlook 2007 2010

. Office Outlook 2007 2010

Office Outlook 2007 2010.

.
,
. ,
, ,
;
,
, .

.
,
, .
.

, Office Outlook 2007 2010


,
. ,
, ,

.de .mx.

MCT.

10712A. Windows Server 2008


Office Outlook 2007 2010
.
.

.
;

Office Outlook 2007 2010 .

.
;
.
,
, Office Outlook 2007 2010.

,
Office Outlook 2007 2010, .

,
.

,
.

. ,
,
, .mx
. ,
(),
.

MCT.

11-32

11-33

. , ,
, ; ,
.
.

.

,
.

, ,
.



, Microsoft Office Outlook.
,
.
, .
,

.

-
, . ,
,
Microsoft Office Word, Microsoft Office Excel
Microsoft Office PowerPoint.
,
.

MCT.

10712A. Windows Server 2008

.
, ,
.
,
,

. ,
,
.

,
.

MCT.

11-34

11-35

Microsoft Baseline Security Analyzer (MBSA);

MBSA
.

MCT.

10712A. Windows Server 2008



Windows Server 2008 R2 ,

.

.

MCT.

11-36

11-37


, Windows Server 2008 R2,

,
. ,

.
,
. ,
Windows Server
Update Services (WSUS), ,

.



(,
, ).
, ,

.
. ,
,

.
,
-
.



Windows Server 2008 R2
,
.

MCT.

10712A. Windows Server 2008


,

. ,

,
.

Windows
Windows
. Windows


,
.

MCT.

11-38

11-39



, ,
.

, ,
.
scwcmd.exe.
,
Windows Server 2008 R2.

MCT.

10712A. Windows Server 2008

, ,
. ,

.

,
.
.

, .

, , , .

, ,
.

IP- , .

XML-.
.

.
,

, ,
.
, .
,
.

MCT.

11-40

11-41


,
.
, ,
, .
,
, ,
,
. ,
.



.
Windows .
,
, ,
.
,
.


,
.
SMB, LDAP,
LAN Manager LAN Manager
.
,
, .


,
,
, .
,
SCWAudit.inf.

MCT.

10712A. Windows Server 2008




.

. XML, , ,
.
Windows
.



scwcmd.exe
.

, ,
,
Scwcmd.exe
.

MCT.

11-42

11-43


Scwcmd.exe transform.
.
scwcmd transform /p:"Contoso DC Security.xml" /g:"Contoso DC
Security GPO"


Contoso DC Security GPO ,
Contoso DC Security.xml.

,

. scwcmd.exe transform /?,
.

MCT.

10712A. Windows Server 2008


,
(SCW).

SCW.

MCT.

11-44

11-45

Microsoft Baseline Security Analyzer?


MBSA ,

. MBSA
,
. 2.1, MBSA
Windows Server 2008 R2.
, MBSA

, Exchange SQL Server,
, IE IIS. ,

.

MCT.

10712A. Windows Server 2008

, MBSA
(mbsacli.exe),
.
MBSA
,
.

MCT.

11-46

11-47

. Windows
MBSA


,
Windows MBSA.

.
1.

MBSA.

2.

MBSA
NYCSVR2.

MCT.

10712A. Windows Server 2008



.
.
1.

,
Hyper-V.

2.

Hyper-V 10712A-NYC-DC1
.

3.

. ,
.

MCT.

11-48

4.

11-49

: Pa$$w0rd

: contoso

5.

10712A-NYC-SVR2.

6.

Hyper-V
10712ANYCCL1,
.
NYC-CL1 .

MCT.

10712A. Windows Server 2008

1.
AppLocker


Contoso, Ltd Microsoft Office 2007.

WordPad.
Office Word 2007,
WordPad
.

.
1.

,
AppLocker .

2.

Contoso.com.

3.

AppLocker.

 1. ,
AppLocker

1.

NYC-DC1.

2.



Wordpad.

3.

,
:

:

C:\Program Files\Windows NT\Accessories\wordpad.exe,
wordpad.exe
.

MCT.

11-50


a.

11-51

 2.
Contoso.com


WordPad Contoso.com.

 3. AppLocker
1.

NYC-CL1
Contoso\Alan Pa$$w0rd.

2.

, gpudate /force
.

3.


WordPad.
. AppLocker
. , NYC-CL1
.
.

.
AppLocker.

MCT.

10712A. Windows Server 2008

2.


contoso.com
NYC-DC1.
,
.

.
1.

2.

 1.
1.

NYC-DC1
.

2.

, .

3.


.xml.

4.

MCT.

11-52

11-53

 2.

1.

NYC-DC1
c:\windows\security\msscw\policies\scwcmd
DC-Security Policy.xml
DC Security Policy GPO.

2.

.



.

MCT.

10712A. Windows Server 2008

3.
Windows Server

MBSA NYC-SVR2,
, .

.
1.

Microsoft Baseline Security Analyzer (MBSA)


NYC-SVR2.

2.

MBSA .

 1. Microsoft Baseline Security Analyzer


(MBSA) NYC-SVR2
1.

NYC-SVR2.

2.

Windows E:\Labfiles\MBSA.

3.

MBSASetup-x64-EN.msi,
.

MCT.

11-54

11-55

 2. MBSA

NYC-SVR2 MBSA
( ).
.
;
, .

. ,
.




Windows

.
MBSA.

MCT.

10712A. Windows Server 2008



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-SVR2
10712A-NYC-CL1.

5.

10712A-NYC-DC1,
.

6.


,
10712ANYCDC1, .

! 10712A-NYC-DC1 ,
,
.

MCT.

11-56


1.

AppLocker
?

2.


, ,
, ?

3.

11-57

MCT.

10712A. Windows Server 2008

AppLocker

Microsoft Forefront
Protection
Exchange Server


. -
Forefront Protection 2010
Exchange Server:
http://www.microsoft.com
/forefront/protection-forexchange/en/us/default.aspx

Microsoft Baseline
Security Analyzer


. Microsoft
Baseline Security Analyzer:



,
Windows Server 2008 R2
Windows 7


Windows.


Windows Server 2008 R2
Windows 7.


Microsoft Exchange Server.




Windows Server 2008 R2.

http://technet.microsoft.com/
ru-RU/security/cc184924.aspx

MCT.

11-58

12-1

12

1.

12-4

2.

12-13

12-26

MCT.

10712A. Windows Server 2008


. ,
.
, ,
.

,
. ,
,
.

MCT.

12-2


,
.

,
.


, .

12-3

MCT.

10712A. Windows Server 2008


,
,
.
.

.

MCT.

12-4

12-5

64-
.

MCT.

10712A. Windows Server 2008


,
, .
,

.
.


,
.

,
,
.

MCT.

12-6

12-7


.
,
. ,

, , ,

, , .
. 64-

.
,
.

.
,
, ,
. ,

.

,

.
,
.
Windows Server
,
.
.

MCT.

10712A. Windows Server 2008


.
,
.
Windows Server ,
, ,
.
,
.
.
,
. 64-
, ,
.

,
,
.
,
,
,
.

MCT.

12-8

12-9

64-


Windows Server 2008 R2
64 . 64-
. , 64-

( ),
32-.



, ;

.

,
Windows Server 2008 R2.

MCT.

10712A. Windows Server 2008

.

.
Windows Server 2008 R2 API-
,
, ,
, .
, ,
Windows Server (32-),
Windows Server 2008 R2.

Windows Server 2008 R2
, .

,
,
64- Windows Server 2008 R2.
.
64 , 32-
?

MCT.

12-10

12-11


,
, .
, ,
. , -
.


,
- .

MCT.

10712A. Windows Server 2008

, , .
.

, ,
. ,
,
,
, .

MCT.

12-12

12-13

Windows Server
. ,
,
,
.

MCT.

10712A. Windows Server 2008

MCT.

12-14

12-15



.
.
,

. , ,

(SLA).

,

.

.

MCT.

10712A. Windows Server 2008


,
.
,
.
,
,
.
,
.
, .
.


Windows
Server 2008 R2

Windows Server 2008 R2



.
.
,
.


Microsoft
Windows (WSRM)

WSRM

, .


,
.
WSRM
Windows Server 2008 R2.


Microsoft


. ,
.

.
-
.

MCT.

12-16

12-17

()


Microsoft Windows

Microsoft Windows
,

,
. Windows
,
,

.

Windows Server 2008 R2.

Microsoft System
Center Operations
Manager 2007
(Operations Manager)

Operations Manager

.
, Operations Manager

,
.
Operations Manager .

.

MCT.

10712A. Windows Server 2008


,
,
.
Windows Server 2008 R2

. Windows Server 2008 R2
, :

MCT.

12-18

x ;

12-19


,
, .

>% .
,
.
,
, .
, .

>/.
.

> .
, .
, ,
,
;

. , \
,
.

MCT.

10712A. Windows Server 2008


,
.
(RAM) .
.
, . .
.

> /.
.
,
, .
,
, , ,
.


,
.
, .
, .

(),
.

>% . ,
.
100% ,
,
.

> .
,
- Windows Server .
, .

MCT.

12-20

12-21


,

. ,
, . . ,
.
.
,
. ,
:

-;


.
,

.

.
1.

2.

3.

MCT.

10712A. Windows Server 2008



Windows Server
.



.

,

.
,
.

MCT.

12-22

12-23

.
.

.
,
.

.
.

,


.

MCT.

10712A. Windows Server 2008


,
.

.
1.

2.

3.

MCT.

12-24

12-25


,
, ,
, ,
.
, .

.
1.

2.

, .

3.

MCT.

10712A. Windows Server 2008



.
.
1.

,
Hyper-V.

2.

Hyper-V 10712A-NYC-DC1
.

3.

. ,
.

MCT.

12-26

4.

5.

12-27

: Pa$$w0rd

: contoso

10712A-NYC-SVR2.



Contoso, Ltd.
,

.

MCT.

10712A. Windows Server 2008

1.


.

.
1.

2.

3.

4.

 1.
1.

NYC-SVR2.

2.

3.

,
.
.

: NYC-SVR2

: ( )

, % .

, /

, %

, /

MCT.

12-28

4.

: 1

12-29

 2.


NYC-SVR2 .

 3.
1.

,
.
Fsutil file createnew bigfile 104857600
Copy bigfile \\nyc-dc1\c$
Copy \\nyc-dc1\c$\bigfile bigfile2
Del bigfile*.*
Del \\nyc-dc1\c$\bigfile*.*

2.

 4.
1.

2.


NYC-SVR2.

3.

4.

5.

:
.

6.

Admin.

7.

NYC-SVR2,
NYC-SVR2_date-000001 DataCollector01.

MCT.

10712A. Windows Server 2008

8.

9.

, % .

, /

, %

, /

10.
.
11. , ,
.
:

, % .

, /

, %

, /

. .

MCT.

12-30

12-31

2.

,
.

.
1.

2.

 1.
1.

NYC-SVR2 .

2.

C:\Labfiles\StressTool.

 2.

NYC-SVR2 StressTool.exe 95.

. .

MCT.

10712A. Windows Server 2008

3.

,
, ,
.

.
1.

 .
1.

2.

NYC-SVR2.

3.

, .

.
.

MCT.

12-32

12-33

4.

, ,
.

.
1.

2.

3.

 1.

CTRL + C
.

 2.
1.

2.

3.

4.

5.

:
.

6.

7.

8.

NYC-SVR2_date-000002
DataCollector01.

MCT.

10712A. Windows Server 2008

9.

.
.
, 49.

, % .

, /

, %

, /

 3.
1.

2.

.
.

MCT.

12-34

12-35



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-SVR2.

5.

10712A-NYC-DC1,
.

6.


,
10712A-NYC-DC1, .

! 10712A-NYC-DC1 ,
,
.

MCT.

10712A. Windows Server 2008


1.

64-
?

2.


Windows Server?

Fsutil.exe

MCT.

12-36

13-1

13
Windows Server

1. Windows Server

13-4

2.

13-19

3. Windows Server

13-37

4. Windows Server

13-49

. Windows Server

13-67

MCT.

Windows Server

10712A. Windows Server 2008

Windows Server 2008 R2



. Windows Server


.
, Windows Server
. ,
Windows Server .
Windows Server ,
,

. ,
.

MCT.

13-2

13-3

,
.

Windows Server.


Windows Server.

MCT.

Windows Server

10712A. Windows Server 2008


Windows Server

Windows Server
Windows Server ,
.
,
( , )
Windows Server.

Windows Server ,
Windows Server.

MCT.

13-4

13-5

Windows Server;

,
;

MCT.

Windows Server

10712A. Windows Server 2008

Windows Server


Windows Server ,

. ,
.
.

MCT.

13-6

13-7

Windows Server
POST
Windows Server ,
BIOS
EFI.
POST ( ). POST


. , BIOS EFI
POST
, POST.

, Windows Windows Boot Loader


Windows Server,
Windows Server 2008 R2 (INI-)
.
Windows.

,
.

,
, .


.
( )
, .
Windows Server 2008 R2
, Windows,
Windows Boot Loader
Windows Server 2008 R2. Windows Boot Loader
\Windows\System32\winload.exe
Windows .

MCT.

Windows Server

10712A. Windows Server 2008

Windows

.
Windows.
, ,
.

, .


, Windows
. ,

Windows Server 2008 R2,
, Windows 7.

.
.


.
BCDEdit.
. BCDEdit BCDEdit.exe .
Windows Server 2008 R2
.
,
,
, ,
.

MCT.

13-8

13-9


Windows Boot Loader
Windows
Windows Server 2008 R2.
,
( ,
, , ).



.
, ,
.

,
(, ,
).

Plug and Play


Windows Server 2008 R2,

,

Active Directory (AD DS).
,
Windows Server 2008 R2
Plug and Play .

MCT.

Windows Server

10712A. Windows Server 2008



Windows
. ,
,
,
.
Windows Server 2008 R2 ,
,
, , ,
.
.
Windows, , F8
- Windows Server 2008 R2.

MCT.

13-10

13-11

Windows (WinRE)
Windows Server 2008 R2
,

Windows (WinRE).

( F8). , WinRE ,
.
WinRE
.



Windows Server .

Windows ,
(RAM) .


,

.

.
Windows
.

MCT.

Windows Server

10712A. Windows Server 2008




.
,
, ,
.

.

HKLM\SYSTEM\CurrentControlSet\Control:
.

HKLM\SYSTEM\CurrentControlSet\Services:
.


Windows
failed ,
.



, .
-
,
Windows.
Windows
Windows .

,
, , ,
.
.

MCT.

13-12

13-13


,
, ,
Windows.


,
, ,
.

Windows

Windows
Windows.


,
.



640 x 480 ,
, -
.


Windows Server 2008 R2 ,
,
.

MCT.

Windows Server

10712A. Windows Server 2008


Windows

.
,
.

, ,
,
,
.

MCT.

13-14

13-15

(MBR)

. (MBR)
,
POST BIOS,
. Invalid partition table,
Error loading operating system Missing operating system.

.
,

.

. Windows,
bootrec/fixmbr.
.

. POST BIOS
, :
Windows - ,


.

. ,
, -
.

. Windows,
bootrec/scanos
bootrec/rebuildbcd.
Windows.
,


.
Bcdedit.exe

.

MCT.

Windows Server

10712A. Windows Server 2008

. ( DLL,
, ), , ,
POST BIOS
: Windows -
,
.

. , ,

.

. Windows,
chkdsk.
(Chkdsk) .
Chkdsk ,

.

. ,
- Windows,

.

. ,

.

MCT.

13-16

13-17

.
.

,
.
,
.
,
, .
, ,
,
.

.
,
?

MCT.

Windows Server

10712A. Windows Server 2008


,
.

.
1.


Windows.

2.

,
.

MCT.

13-18

13-19


. ,

.
,
,
, .
, ,
,
,
Windows Server, .

MCT.

Windows Server

10712A. Windows Server 2008

(NLB);

MCT.

13-20

13-21


. ,
,
. -
, ,
-,
.

, ,
. ,
, ,
, . ,
,
.
,
, ,
.

MCT.

Windows Server

10712A. Windows Server 2008

Windows Server 2008 R2


.
-, .
,
, ,
.

-
,
, ,
.
- ,
,

.

.


,
,
.
(
-),
.
Windows Server,
Windows Server,
.

MCT.

13-22

13-23



,
,
.


.
.
?
.
, ?

MCT.

Windows Server

10712A. Windows Server 2008


-
-.

, -.
,


, .

MCT.

13-24

13-25



,
.
,
(SLA) ,
,
,
, .
,

.
(99,999 %),
10 .
, ,
,
.
,
.
Windows Server 2008 R2 ,
.


Windows Server 2008 R2
,
,
, , ,
, , .


.

MCT.

Windows Server

10712A. Windows Server 2008



.
,
,
.

(NLB)

TCP/IP.

, -
,
,
.



,
. ,
.
-,
.
,

, .
, ,


.

Windows Server
Windows Server
Windows Server 2008 R2.
Windows Server
.
Windows Server ,
.

MCT.

13-26

13-27

Windows Server
,
. Windows Server
, DVD
. DVD
, ,
.
Windows Server
.
,
,
,
, .

.
. ,
Windows Server, Windows.

Windows Server

Windows Server 2008 R2,

.
.

?

MCT.

Windows Server

10712A. Windows Server 2008



TCP/IP, -,
FTP, .


. .
,

.
.

MCT.

13-28

13-29


,

, .
,
- . (,
-)
,
.
. ,

, TCP/IP
TCP UDP.
.

HTTP
HTTPS

Microsoft IIS: 80

FTP

Microsoft IIS: 20, 21 1024-65535

SMTP

Microsoft Exchange Server: 25

: 3389

PPTP IPsec

(VPN):
1723 PPTP


,
IP-,
.
,
. , -

-.
.

MCT.

Windows Server

10712A. Windows Server 2008



.
,
.
. ,

.

MCT.

13-30



Windows Server 2008 R2.
()
.
, ,
. -
,
( ).

.

13-31

MCT.

Windows Server

10712A. Windows Server 2008


,
. , Microsoft
SQL Server, Microsoft Exchange Server, , DHCP,
DNS,
,
.
.
Windows Server 2008 R2 Enterprise Windows Server 2008 R2
Datacenter.



,
.


,
.


.
.

DFS

DHCP-

Exchange Server

MCT.

13-32

SQL Server

WINS (Windows Internet Name Service)

. Exchange Server 2007 Exchange Server 2010


,
. Exchange Server
.

, ,
.

.
.

IP-.
IP-
.


.
,
.


.
,
.

13-33

MCT.

Windows Server

10712A. Windows Server 2008



,
,
, ,
,
.



. -
.
.
:
? ,
, .

MCT.

13-34

13-35



. :
?,
?
?
-
. ,
,
, ,
.

.

.
1520 .
, 14 .
, ,
, .

.


, ,
.
,
CD DVD, - USB,
.



.
,
.

MCT.

Windows Server

10712A. Windows Server 2008



, , ,
, .

.
.

.
, .
,
.
(
)
.

Windows Server
.

Windows Server
Windows Server
:
(MMC) WBAdmin (wbadmin.exe).


, .
Windows Server
.
.
?

MCT.

13-36

Windows Server

Windows Server 2008 R2



.

13-37

MCT.

Windows Server

10712A. Windows Server 2008

Windows Server
;

,
;

, Windows Server
Windows Server (WSUS);

WSUS.

MCT.

13-38

Windows?



. ,
, , .


.

13-39

MCT.

Windows Server

10712A. Windows Server 2008

,
Windows Server 2008 R2 .

,

?

,
?

,
?

Windows Server,
,
,
.
Windows -
. ,
.
Windows Server 2008 R2

, ,

, .

MCT.

13-40

13-41



Windows Server.

.
.

.
, ,
DLL
,
.

MCT.

Windows Server

10712A. Windows Server 2008

.
.

.
Windows
,
Windows . ,

,
.

. .
,


.


,
.

MCT.

13-42

13-43

Windows Server Update Services


WSUS

.
WSUS ,
Windows ,

WSUS.

MCT.

Windows Server

10712A. Windows Server 2008

WSUS

WSUS, . WSUS

,
. WSUS
,
. WSUS
,
.
WSUS ,
.

.
WSUS
.

. , WSUS
.
Windows,
Microsoft, Microsoft Office, SQL Server,
Exchange Server .

.
, .

WSUS.

. WSUS
, Windows Server 2008 R2.

.
,
.
WSUS
,
. WSUS
,
, .

MCT.

13-44

13-45

. WSUS
Cab C:\WSUS\WsusContent.

.
WSUS
.

Windows.

. WSUS

,
.

.

WSUS MMC,
,
,
WSUS.

MCT.

Windows Server

10712A. Windows Server 2008


Windows
WSUS
(GPO).


, ,

,

.

URL-,

WSUS .

,

,

,
,

.

,


.
,
,
.

MCT.

13-46

()



,
-
,
.

13-47

MCT.

Windows Server

10712A. Windows Server 2008

. WSUS


, WSUS.

.
1.

2.

WSUS.

MCT.

13-48

13-49

Windows Server


.



.
,
.

MCT.

Windows Server

10712A. Windows Server 2008

Windows .

MCT.

13-50

13-51


(, )
,

,
.


.

,
.

MCT.

Windows Server

10712A. Windows Server 2008


,
,
. ,
(,
),

.
, ,
, ,
.
, ,


.


.
, .
,
,
, -
.

, .
.

, , , .
,
,
.

MCT.

13-52

13-53

,
, ,
. ,
,
( , )
.

.


.


.
,
, ,
, ,
.

, ,
,
,
,
,
.
,
,
.

MCT.

Windows Server

10712A. Windows Server 2008


,
,
.
,
.

MCT.

13-54

13-55

1.

.
.
,
, .

( , )
, .
.



.

2.

.
. ,

,


.

3.

.

, ,
.


, . ,

.

4.

. ,

. .
,

( ) . ,

,
.

MCT.

Windows Server

10712A. Windows Server 2008

5.

.
.

6.

.
,
, . ,
,
.

7.


.
.

,
.
,
.

, ,
.

8.


. , ,
,
.
,
,

.
, Microsoft Office Word Microsoft
Office Excel .

,

,

.

MCT.

13-56

13-57


Windows Server


Windows Server 2008 R2

.
, ,
.
Windows Server 2008 R2 ,

.

MCT.

Windows Server

10712A. Windows Server 2008


Windows
Windows 2008.
Windows.
,
Windows.

Windows (, ,
),

Windows. ,
,
, .
,

. ,

.
, ,
,
.
. ,
, .

MCT.

13-58

13-59


Windows

Windows Server 2008 R2.

, ,
: , . ,

.
. ,
.
1. CTRL+SHIFT+ESC.
2. CTRL+ALT+DEL .
3.
.
4. , taskmgr.exe.


,
, .

(, , )
.
, ,
, .
.
.
1. ,
.
2. , perfmon /res
.

MCT.

Windows Server

10712A. Windows Server 2008


Windows MMC,

.

. Windows

.
.

, Windows Server,
Microsoft SQL Server Microsoft Exchange Server,

.

,

.
.
.
,
.



, ,
.
, Windows,
.

MCT.

13-60

13-61

,

, .

, .
.
.
, perfmon /rel
.


,
Windows, ,
,
, , -
.

MCT.

Windows Server

10712A. Windows Server 2008



. ,
-

.
. ,
,
. , ,
, (
) ( ).
,
.
.

MCT.

13-62

13-63



.

. ,
, , ,
, .

( ,
),
, .

. ,
,
.
( ) .

.


,
, ,
. ,
.
(
) .
.

.

.
.
.

MCT.

Windows Server

10712A. Windows Server 2008



. , TCP/IP ,
, IP-,
, ,
. ,
, ,
,
- .
,
.

,
, , ,
, ,
, .

. ,
,
, .

.
, -

. ,
Windows
,
.

,
,
.

- ,
.
.

MCT.

13-64

13-65

,
, ,
.
, ,

, .

, , ,
. ,
. ,
,
, ,
.

.

. ,
, ,
,
.

MCT.

Windows Server

10712A. Windows Server 2008

. Windows Server
Windows


,
Windows.


1.

2.

3.

MCT.

13-66

.
Windows Server

Windows;

WSUS;

,
.

13-67

MCT.

Windows Server

10712A. Windows Server 2008



.
.
1.

,
Hyper-V.

2.

Hyper-V 10712A-NYC-DC1
.

3.

. ,
.

4.

: Pa$$w0rd

: contoso

5.

10712A-NYC-SVR2.

6.

10712A-NYC-SVR4.



Contoso, Ltd.

MCT.

13-68

13-69

1.

Contoso, Ltd
.
,
.
,
.
.
1.

2.

3.


Contoso.
: 501285
:

John Peoples

15

11:45

Daniel Roth

:
-.
NYC-SVR4.
1. .
2. NYC-SVR4
.
3. IP- NYC-SVR4
.
4. .

MCT.

Windows Server

10712A. Windows Server 2008

()
Contoso.
:
1. ?
2. NYC-SVR4,
, ,
NYC-SVR4?

:
1. NYC-SVR4?
2. ?
3. ,
?
4. ?

 1.
1.

,
.

2.

 2.
10712ANYC-SVR4
1.

NYC-SVR4.

2.

,
NYC-SVR4
.

MCT.

13-70

13-71

 3.
NYCSVR4
1.

DVD Windows Server 2008 R2


NYC-SVR4, .
.

Hyper-V,
10712A-NYC-SVR4
.

10712A-NYC-SVR4
DVD- .

DVD-
.

C:\Program Files\Microsoft Learning\


10712\Drives, WServer2008R2_Eval.iso
.

10712A-NYC-SVR4
.

2.

NYC-SVR4.

3.

10712A-NYC-SVR4 localhost

.

4.

5.

Press Any Key to boot from CD or DVD


( CD DVD ),
.

6.

Install Windows ( Windows)


Next () Repair your computer
( ).

7.

System Recovery Options (


) Use recovery tools that can help fix
problems starting Windows ( ,
Windows)
Next (). Command Prompt ( ).

MCT.

Windows Server

10712A. Windows Server 2008

8.

bcdedit
.

9.

bootrec

.
, .

10. , .
11. .
12. NYC-SVR4.

. Windows
Windows.

MCT.

13-72

13-73

2. WSUS

WSUS
Contoso, Ltd - ,
,
WSUS .

.
1.

2.

WSUS NYC-SVR2.

3.

NYC-SVR2 WSUS.

4.

,
NYC-CL1
WSUS.

5.

NYC-CL1.

6.

Windows 7.

7.

Windows 7.

8.

WSUS.


Contoso
: 10527

Nancy Anderson

17

MCT.

Windows Server

10712A. Windows Server 2008

()
Contoso
:
WSUS
:
1. NYC-SVR2.
2. WSUS NYC-SVR2.
3. WSUS .

WSUS E:\Labfiles\WSUS\Backup.
4. NYC-CL1
WSUS.
5. , NYC-CL1.

 1.

 2. NYC-SVR2
1.

IIS .
.

NYC-SVR2.

- (IIS),
.

ASP.NET

Windows

IIS 6

. .

MCT.

13-74

13-75

. ,
.

2.

3.

()
.
.

Windows
E:\Labfiles\WSUS\.

ReportViewer.exe
.

 3. NYC-SRV2 WSUS
1.

E:\Labfiles\WSUS.

2.

WSUS30-KB972455-x64.exe
Windows Server Update Services 3.0
2 (SP2).

3.

WSUS.

4.

C:\WSUS ,
Windows WSUS
- IIS .

5.

Windows Server
Update Services. ,
, .
.

6.

, CMD.exe .

7.

Net Stop MSSQL$Microsoft##SSEE


.

8.

E:\LabFiles\WSUS\Backup.

9.

MCT.

Windows Server

10712A. Windows Server 2008

10. .
11. .
12. C:\WSUS\.
13. .
14.

.
15.
1
.
16.
Net Start MSSQL$Microsoft##SSEE .
17.
IIS.
18. NYC-SVR2
.
19. WsusPool
.
20. IIS.
21. : cd C:\Program Files\Update Services\
Tools .
22. wsusutil reset .
23. .

 4. ,
NYC-CL1
WSUS
1.

NYC-DC1
.

2.

WSUS,
Contoso.com.

MCT.

13-76

13-77

3.


WSUS.

4.



, , Windows
Windows.

5.

6.

,
,
http://NYC-SVR2.

7.

8.

10712A-NYC-CL1
Contoso\ Pa$$w0rd.

9.

NYC-CL1 ,
wuauclt /a /r .

 5.
NYCCL1
1.

NYC-SVR2
Windows Server Update Services.

2.

NYC-SVR2, ,
.
. .

3.

4.

- nyc-cl1.contoso.com,
.

MCT.

Windows Server

10712A. Windows Server 2008

 6.
Windows 7
1.

Update Services
.

2.

,
,
.
.

3.


Windows 7
(KB981332), .
. 64- .

4.

5.

6.


Windows 7 (KB976662)
.

7.

. ,
, .

MCT.

13-78

13-79

 7.
Windows 7
1.

NYC-CL1
GPUpdate /force.

2.


wuauclt /detectnow.

3.

Windows,
.
. Windows
.

 8. WSUS

NYC-SVR2
,
NYCCL1.

. WSUS
.

MCT.

Windows Server

10712A. Windows Server 2008

3. , ,


NYC-SVR2.
, NYC-SVR2
,
.
,
. , NYC-SVR2
, .

.
1.

,
, .

2.

,
, .


Contoso. , A ( 1)
: 501289
:

John Peoples

19

12:10

Daniel Roth

:
-. ,
NYCSVR2 .
E:\Labfiles\Captures\10712A-NYC-SVR2-LAB13-EX3-PARTA.blg.

MCT.

13-80

13-81

()
Contoso. , A ( 1)
:
1.
NYC-SVR2?
2. 1, (
) ,
?

Contoso. , ( 2)
: 501290
:

John Peoples

20

13:15

Daniel Roth

:
-. ,
NYCSVR2 .
E:\Labfiles\Captures\10712A-NYC-SVR2-LAB13-EX3-PARTB.blg.
:
1.
NYC-SVR2?
2. 1, (
) ,
?

MCT.

Windows Server

10712A. Windows Server 2008

 1. ,
,

1.

NYC-SVR2.

2.

NYC-SVR2

E:\Labfiles\Captures\10712A-NYC-SVR2-LAB13-EX3-PARTA.blg
.

3.

% ( 0)

% ( )

4.

5.

 2. ,
,

1.

NYC-SVR2.

2.

NYC-SVR2

E:\Labfiles\Captures\10712A-NYC-SVR2-LAB13-EX3-PARTA.blg
.

3.

( 0 :)

( 0 C:)

/ ( 0 C:)

I/O - , ( )

MCT.

13-82

4.

5.

13-83

. ,
.



.
:
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-SVR2
10712A-NYC-CL1.

MCT.

Windows Server

10712A. Windows Server 2008


1.

2.


,
Windows Server 2008 R2?

3.

MCT.

13-84

13-85

BCDEdit

WSUS

http://www.microsoft.com
/downloads/details.aspx?
FamilyId=a206ae202695436c9578403a7d46e40&displaylang=en

Windows




Windows
( F8)



Windows 2008.



Windows ( F8).

Windows Server






Windows (F8).

Windows Server

,

Windows Server

.


Windows

Microsoft


Windows Server.

,



.


Windows Server.

bcedit.

MCT.

Windows Server

10712A. Windows Server 2008

()

Windows

WSUS

http://technet.microsoft.com/


CTRL+SHIFT+ESC.

,

perfmon /rel
.

,

Microsoft.



Windows.

Windows.

Windows
.
Windows
.




Windows

.



.


,
Windows

.
ru-RU/windowsserver/
bb332157.aspx.

MCT.

13-86

14-1

14

1.

14-3

2. Hyper-V

14-19

14-45

MCT.

10712A. Windows Server 2008


-.

-.

, .

Hyper-V.

,
.

Hyper-V.

MCT.

14-2

Microsoft
.

-.
Microsoft
.

14-3

MCT.

10712A. Windows Server 2008

MCT.

14-4

14-5

Microsoft



, ,
,
. ,
,

, .
,
.



.

MCT.

10712A. Windows Server 2008


Microsoft ,

.

. Windows Server 2008 Hyper-V


Microsoft Virtual Server 2005 R2
,
.
(, ,
),
.

.
Microsoft Virtual PC
Windows Vista Windows Virtual PC
Windows XP Windows 7.



. Microsoft

Microsoft Enterprise Desktop Virtualization (MED-V). MED-V
Virtual PC
,
.

.
(RDS)
Windows Server 2008 R2. RDS ,
Windows.

,
. RDS
,
,
. Microsoft

,
.
Hyper-V
RDS.

MCT.

14-6

14-7

.

.
,
.

.
Microsoft Application Virtualization (App-V)
.

.



.

,
.

.

( ,
). System Center
. System Center
Configuration Manager, System Center Operations Manager 2007
System Center Virtual Machine Manager (VMM)

,
.

MCT.

10712A. Windows Server 2008



, .
,
.

MCT.

14-8

14-9

Microsoft .

Microsoft Virtual Server 2005 R2

Windows Server 2008 Hyper-V

Windows Server 2008 R2 Hyper-V

. Windows Server 2008 R2 Hyper-V


,
Windows Server 2008,
.


,
.

.
.


.

.

.

.

. ,

. ,

.

MCT.

10712A. Windows Server 2008

.

.
, ,


.
. ,

,
,
.

.

,
.
Windows Server 2008 R2

.


.

. ,
Windows Server 2008 R2 Hyper-V
Windows Server 2003, Windows Server 2008 Linux.

.

MCT.

14-10

14-11



,
.

.

MCT.

10712A. Windows Server 2008


Microsoft Virtual PC
Windows Vista Windows Virtual PC Windows 7,

Windows.
,


.
Windows 7 Microsoft
Windows XP,
Windows Virtual PC.
Windows XP
Windows 7
Windows XP.

(VDI)

,
.
,
, Hyper-V
.
,

. Windows Server 2008
RDS
.
VDI
. VDI

.

MCT.

14-12

14-13

MED-V
Microsoft Desktop Optimization Pack
MED-V,
, . MED-V
Virtual PC ,

.

.
, ,
.

.
.

.

.

.
?

MCT.

10712A. Windows Server 2008



,
,
.
,
.
Windows Server
.
Windows Server 2008 R2
RDS.

MCT.

14-14

14-15


Windows Server 2008 R2
Windows Server 2008 R2 ,
.

RemoteApp. RemoteApp

. RemoteApp
,
. ,
RemoteApp,
,
:
,
.

- .
-.

.
HTTPS-.


(VPN).

.



.

RemoteApp .
,
Windows 7,
RemoteApp .

MCT.

10712A. Windows Server 2008



, .

.
,
, ,

.


.
, ,
.

,
.
.

,
,
. App-V


.


. ,

, ,
,
,
.

MCT.

14-16

14-17



,
.
,
DLL .
.
,

.
App-V .

MCT.

10712A. Windows Server 2008

App-V
App-V .

App-V
.

. ,
DLL,
DLL.

DLL,
.

.


.
, .
,


.


.

,
. .
,

, .


.
,
,
.
.
,
.

MCT.

14-18

Hyper-V


. Microsoft
Windows Server 2008 R2 Hyper-V.
Hyper-V.

14-19

MCT.

10712A. Windows Server 2008

Hyper-V;

Hyper-V;

VMM 2008 R2.

MCT.

14-20

14-21

Hyper-V?


Hyper-V Windows Server 2008 Windows Server 2008 R2

,
.
Hyper-V .
,

.

MCT.

10712A. Windows Server 2008

Hyper-V .
,
.
. Hyper-V
64- .

. ,
64 .
(
Intel VT AMD V) Hyper-V

.
Hyper-V Intel VT AMD-V,

,
.
.
,
.
Windows Server 2008 R2
.
Hyper-V
.
,
.

, ,
.

.
(VSC),
(VSP)
(VMBus).
VMBus
.

MCT.

14-22

VMBus . VMBus
.
(VSP)
VMBus
.
(VS)
VMBus
.

14-23

MCT.

10712A. Windows Server 2008

Hyper-V


Windows Server 2008 R2 Hyper-V
,

. Hyper-V
.
.

x64.

(DEP) .

BIOS,
.

MCT.

14-24

14-25

(DEP)

,
Advanced Micro Devices ( NX)
Intel ( XD).
.
,
;
.

,
.


Hyper-V
AMD (AMD-V) Intel (Intel VT).
.

, Microsoft Virtual Server.
, ,

.

.

MCT.

10712A. Windows Server 2008

BIOS
, ,
,
.
.
.
. Windows Server 2008 R2 Hyper-V
AMD
Rapid Virtualization Indexing (RVI) Intel Extended
Page Tables. Hyper-V ,
.
Hyper-V ,
.

MCT.

14-26

14-27



.
, ,
.
(VHD), .

MCT.

10712A. Windows Server 2008


,
,
.

,
. ,
.

,
.

.


.
,

, ,

.


VHD-
,
.


,

. ,

100 (), 100
.

,
.

MCT.

14-28

14-29

,


. , Microsoft Microsoft
Exchange Server 2010 Exchange Server 2007,
.


.



,
-. ,
.
.
()
;
. ,
,
.

.


, ,
.
.
, -
, , ,
,
.

CD-ROM.

MCT.

10712A. Windows Server 2008

.
,
.
.

.


.
Hyper-V
.


Hyper-V .

.


.
,
. ,
Hyper-V (
)
, .
,
.
. ,
.

MCT.

14-30

14-31



.
.
,
.
Hyper-V.
Hyper-V .

MAC- (VLAN).
MAC- ,
MAC-,
MAC- .

Ethernet, 802.3.

MCT.

10712A. Windows Server 2008


. MAC- ,
MAC-.

, 802.11 MAC-.

.
.
.

Hyper-V .

Hyper-V
.

,
.

Windows Server 2008 R2 Hyper-V


: , .
Hyper-V
Windows (WMI) .

.
.

.
Hyper-V,
.
Hyper-V
,

.

.

MCT.

14-32

14-33

.

,
;
. ,

. ,
,

, .

.

Hyper-V, .
.
.

. (VPN)
,
. ,
,

.
, .

, ,
.

. ,
?

MCT.

10712A. Windows Server 2008

. ,
,
.
,
,
,

, .

.
64 . ,
, (RAM),
.
,
.

MCT.

14-34

14-35

.
,
.
.

. VHD-,

.
. ,
,
.AVHD.

Windows Server 2008 Windows Server 2008 R2.


,
Windows Server 2008 R2
Itanium. 64- 32-
,
.

Windows Server 2003 Standard Edition


Service Pack 2 (SP2) Windows Server 2003 R2
Standard Edition SP2.
,
Windows Server 2003 Enterprise Edition
Itanium. 64-
32
.

Microsoft Windows 2000 Server


SP4.
(Server Advanced Server),
.

Red Hat Enterprise Linux 5.2, 5.3 5.4.


86- 64- ,
. Linux
Linux Hyper-V.

MCT.

10712A. Windows Server 2008

SUSE Linux Enterprise Server 10


Service Pack 1 2 SUSE Linux Enterprise Server 11.
86- 64- ,
. Linux
Linux Hyper-V.

Windows 7, Windows Vista Windows XP


SP2 .
Windows 7
. Windows Vista
Windows XP SP3 ,
Windows XP SP2 .

MCT.

14-36

14-37


Hyper-V
Windows Server 2008 R2 Server Core.
Hyper-V Windows Server 2008 R2
Hyper-V. Hyper-V

.
Hyper-V ,
Windows Server 2008 R2,
HyperV
HyperV. Hyper-V,
(MMC),
,
.

MCT.

10712A. Windows Server 2008

Hyper-V
, Hyper-V, .
Hyper-V
Windows Server 2008 Windows Server 2008 R2.
Hyper-V ,
.
Hyper-V
,
Hyper-V. Hyper-V
Hyper-V.
System Center VMM.
Hyper-V .
Hyper-V.
, Hyper-V,
.

.


, , ,
.



.
, ,
.
() .

. ,
.

.

MCT.

14-38

14-39



.
,
.
,
.
.
.
,
.



. :
, , , ,
, .


,
.

.
Hyper-V ,
Hyper-V.
,
Hyper-V.

.
1.

2.

3.

MCT.

10712A. Windows Server 2008

VMM 2008 R2?


VMM 2008 R2
. ,
VMM


.
.

MCT.

14-40

14-41

,
.

Hyper-V.

Virtual Server 2005 R2.

VMware.


(P2V) (V2V).

Hyper-V.

VMM Hyper-V;

, Hyper-V,
. Hyper-V
,
,
. ,

.
VMM
-, ,
, ,
.

MCT.

10712A. Windows Server 2008

,
VMM.


.
5 15 . VMM

,

.

, ,
.

Microsoft Virtual Server VMware ESX.


VMM
VMware ESX Virtual Center.
VMware: VMware ESX Server 3.0
, VMware ESX Server 3.5i, VMware VirtualCenter (VC) 2.5 (VMware
Infrastructure 3 [VI3]) VMware vSphere 4 ( VI3).
,
,
.
VMware VI3
( Virtual Center), VMM ,
VMotion, VMM,
VMware.

(PRO).
PRO

PRO.
System Center Operations Manager 2007, PRO
,
, PRO

, .
, PRO


PRO.

MCT.

14-42

14-43


,
, , ,
.
P2V
, .
, VMM
VMware
V2V.

. VMM ,
-
, .

,
, ,
-.


.

, VMM
.

.
Operations Manager 2007


,
.


.

- ,

,

.

MCT.

10712A. Windows Server 2008

.
VMM

,
.

,

.


Windows PowerShell.
VMM
Windows PowerShell.
PowerShell
,

.

MCT.

14-44

14-45



.
.
1.

, , .

2.

, .


Contoso, Ltd.
-
.
Hyper-V,
Windows Server 2008 R2.
.

MCT.

10712A. Windows Server 2008

1. VHD

Contoso, Ltd. Hyper-V


.
.
Contoso, Ltd.
, .
- ,
,
,
, .
.
,
Windows Server 2008 R2.

.
1.

2.

 1.

Hyper-V
.

: NYC-Prod1-Data.vhd

: C:\Program Files\Microsoft Learning

: 32

MCT.

14-46

 2.

Hyper-V
.

: NYC-Test1.vhd

: C:\Program Files\Microsoft Learning

: C:\Program Files\Microsoft Learning\Base\


Drives\WS08R2- SVR2_RU.vhd

.
.

14-47

MCT.

10712A. Windows Server 2008

2.

,
.

.
1.

2.

 1.

Hyper-V
:

: NYC-PROD1

: C:\Program Files\Microsoft Learning

: 1024

, NYC-PROD1.vhd,

1.

 2.

Hyper-V
.

: NYC-TEST1

: C:\Program Files\Microsoft Learning

: 1024

MCT.

14-48

14-49

, NYC-TEST1.vhd,

1

. ,
.

MCT.

10712A. Windows Server 2008

3.

- .
,
.
,
, SCSI
. ,
2048 (RAM).
.
1.

 .

1.

Hyper-V
.

: NYC-Prod1-Data.vhd

: C:\Program Files\Microsoft Learning

: 64

2.

NYC-PROD1.

3.

NYC-PROD1-Data.vhd
SCSI .

MCT.

14-50

4.

, ,
2048.

5.

, ,
2.

.
.

14-51

MCT.

10712A. Windows Server 2008

4.

,
, .
, .
.
1.

2.

 1.
1.

Hyper-V , NYC-TEST1
.

2.

NYC-TEST1
.

3.

NYC-TEST1 .

Pa$$w0rd.

4.

 2.
1.


1.txt.

2.

NYC-TEST1
2.

3.


2.txt.

4.

. ,
2.txt .

MCT.

14-52

5.

. ,
. ,
.

6.

2 .
, 1.txt .

7.

.
.

14-53

MCT.

10712A. Windows Server 2008


1.


Hyper-V.
, ?

2.


BIOS Hyper-V?

3.

,
?

4.

VHD- ?

5.

MCT.

14-54

14-55

,

.

,
IP .



.

.





.
,
.



,

.

.


,

,
.
,

.

MCT.

10712A. Windows Server 2008


1.

Hyper-V
Windows Server 2008 R2.
- ,
.

2.

Hyper-V.

.
Hyper-V
: Hyper-V; VMX
BIOS.

3.

. -
, ,
, .
?

MCT.

14-56

14-57


.

.


.
.

MCT.

MCT.

10712A. Windows Server 2008

G-1

MCT.

10712A. Windows Server 2008

10712A. Windows Server 2008

Ethernet. ,
. ,
.

MAC-. , 6-
(48) , . MAC-
OSI.
. ,
,
.

, .
. , .
. ,
. ,
.

N
NetBIOS. ,
Microsoft. NetBIOS-
Windows 7 Windows Server 2008 R2.

. ,
.

- (BIOS).

.
. (
),
.
.

MCT.

G-2

G-3

(VLAN).
, .

(WAN). ,
,
.

.

. .
(TPM).
,
.

, (NAS).
,
.
(NAP). ,
Windows Server 2008,
,
, ,
;

,
.

(IEEE). IEEE
,

.

MCT.

10712A. Windows Server 2008

10712A. Windows Server 2008

EFI (Extensible Firmware Interface).



,
BIOS,
BIOS.
iSCSI. ,
Ethernet (TCP/IP).
SATA. ,
.
SAS.
SCSI.
SCSI. ,
.
(Public Key Infrastructure, PKI).
,
.
,
,
.

. ,
MAC-,

.
. ,
.

(LUN).
SCSI, , ,
iSCSI.
(LAN).
,
.

MCT.

G-4

G-5

TCP/IP.
, .
(DAS).
, ( ,
).

-. -,
(,
-), -
.
. ,
.
(MBR).
( , ),
,
.

.
.
. ,
; .
WebDAV. HTTP-,
,
WWW (World Wide Web).
.
,
.
(
).
-.
. .

MCT.

10712A. Windows Server 2008

10712A. Windows Server 2008

. ,
Microsoft.

. ,
.
(SAN). ,

.
(DNS).
.
WINS. NetBIOS-,
, ,
Microsoft,
Microsoft Windows NT. WINS
Windows Server 2008 R2.

SDH.
,
.

. SDH ,
.
SONET.
,
.

. SONET .

(MAC).
, ,
. MAC-
.

MCT.

G-6

G-7

FAT. ,

, .

.
FAT32. FAT32
FAT

.
NTFS.
Microsoft. NTFS
, ,
.
.
.

. , .

MCT.

10712A. Windows Server 2008

MCT.

L8-65

8.

.


1.
 1.
1.

2.

Contoso, ,
, -
.

 2.
1.

2.

.
Contoso.
: 501285
:

Ed Meadows

10

10:50

Alan Brewer

MCT.

8.

()
Contoso.

-
,
, Alan Brewer. :
1. .
2. .
3. , ,
.
4. USB-
.

1.

Contoso?
. .
2. ?
. ,
. -,
( ),
. -,
.
, ,
.
, ,

.

;
, .

MCT.

L8-66

L8-67

()
Contoso.
3. , ?
. (NAP),
,
. ,
(NAP) ,
.
(EFS)
Windows BitLocker
, .
4.
?
. ,
.
,
BitLocker.
, ,
, (RODC).
,
.
5. ,
?
. NAP,
, .
,
, ;
.
6. , ?
. ,
;
,
USB .
7. .
. .

MCT.

8.

()
Contoso.

BitLocker EFS .
BitLocker .
RODCs,
, (DCs).
.
,
USB.
.

. .

MCT.

L8-68

L8-69

2.
Internet Explorer
 1.
Internet Explorer
1.

NYC-CL1.

2.

Internet Explorer.

3.

4.

5.


.
. ?
. .

 2.
1.

2.

(
Internet Explorer) .

3.

Internet Explorer.

 3.
.
Internet Explorer 8, .

1.

Internet Explorer.

2.

http://nyc-dc1/intranet
.

MCT.

8.

3.

.
-?
. .

4.

Contoso
.

5.

. ?
.
.

6.

.
. Tabular Data Control?
. .

7.

8.

- Contoso.

 4. -
1.

Contoso ,
.

2.

3.


.
. ?
. .

4.

5.


(https:),
, .

6.

MCT.

L8-70

L8-71

 5.
1.

Contoso
.
. ?
. .

2.

.
. Tabular Data Control?
. .

3.

4.

- Contoso.

5.

Contoso.

.
Internet Explorer.



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-CL1.

MCT.

8.

5.

10712A-NYC-DC1,
.

6.


,
10712ANYCDC1, .
! 10712A-NYC-DC1,
, ,
.

MCT.

L8-72

L9-73

9.
Windows Server

.

Windows
1.
 1.
1.

NYC-DC1.

2.

,
.

3.

:Contoso.com,
Contoso.com.
Default Domain Policy ....

4.


, Windows ,
.

5.

6.

5
:. .

7.


60 :.
.

8.

8
:. .

9.


, .
.

MCT.

9. Windows Server

. Windows

 2.

1.

2.

3
.

3.

:
.

4.

,
.

5.

6.

.
.

MCT.

L9-74

L9-75

2. NTFS
 1. C:\
1.

NYC-SVR3 ,
(C:).

2.

3.

4.

5.

6.

7.

8.

 2. NTFS

1.

,
.

2.

: Research
.

3.


Research .

4.


Research ,

Windows.

5.


Research .

6.


Research .

MCT.

9. Windows Server

. Windows

7.

: Research
.

8.

Research

(NYC-SVR3\) .

9.

10. : , ,

() Contoso\Research,
.
11. Research
(CONTOSO\Research).
12. Research

.
13. : Research .
14. ,
.
15. : Classified
.
16.
Classified .
17.
Classified ,

Windows.
. NTFS
, Administrator.
,
.

MCT.

L9-76

L9-77

18.
Classified .
19.
Classified .
20. : Classified
.
21. Classified
Research (CONTOSO\Research)
.
22. Classified
.
23. : , ,

() Contoso\Max,
.
24. Max Stevens
(CONTOSO\Max).
25. Classified

.
26. : Classified .

 3. C:\

1.

,
.

2.

: Research
....

3.

,
,
.

MCT.

9. Windows Server

. Windows

4.

Research
.

5.

6.

: , ,

() Contoso\Research,
.

7.

Research
(CONTOSO\Research).

8.

Research

.

9.

10. : Research .
11. Windows.

. NTFS ,
.

MCT.

L9-78

L9-79

3.
 1.
(EFS)
1.

NYC-SVR3 ,
(C:).

2.

3.

4.

5.

Personal.txt.

6.

(C:),
.

7.

8.

: ....

9.

10. : Classified .
11.
,
, .
12. Windows
NYCSVR3.

 2. ,
1.

NYC-SVR3
CONTOSO\Max Pa$$w0rd.

2.

,
(C:).

MCT.

9. Windows Server

. Windows

3.

4.

5.

.txt,
, ,
, .

6.

7.

Windows
NYCSVR3.

 3.
1.

NYC-SVR3
CONTOSO\ Pa$$w0rd.

2.

,
(C:).

3.

4.

,
.

5.

: ....

6.

7.

: Classified .

8.


,
, .

9.

Windows.

.
EFS.

MCT.

L9-80

L9-81



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-SVR3.

5.

10712A-NYC-DC1,
.

6.


,
10712ANYCDC1, .
! 10712A-NYC-DC1,
, ,
.

MCT.

9. Windows Server

MCT.

L10-83

10.

.


1. Windows

 1. Ping
1.

NYC-DC1.

2.

NYC-DC1 ,
cmd.exe .

3.


.
Ping nyc-cl1

. ?
.

 2.
1.

NYC-CL1.

2.

NYC-CL1
Windows.

3.

(1) Windows
.

MCT.

10.

4.

Windows

.

5.

6.

7.

8.


ICMPv4 .

9.

10.
.
11. .
12. ICMPv4 Contoso
.
13.
.
. ?
.

 3.
1.

NYC-DC1.

2.


.
Ping nyc-cl1

. ?
.

MCT.

L10-84

L10-85

 4.
1.

NYC-CL1.

2.

Windows

.

3.


ICMPv4 Contoso .

4.

Windows
.

5.

NYC-DC1.

6.


.
Ping nyc-cl1

. ?
.

.
.

MCT.

10.

2.
(NAP)
 1.
1.

NYC-SVR2.

2.

3.

4.

5.

6.

7.

8.

9.

10. .

 2. DHCP-
1.

, ,
DHCP.

2.

DHCP nyc-svr2.contoso.com
IPv4, ,
O [10.10.0.0] Deployment .

3.

: O[10.10.0.0] Deployment
,
.

4.

MCT.

L10-86

L10-87

5.

6.

:
.

7.

8.

006 DNS-.

9.

IP- 10.10.0.10 .

10. 015 DNS-


.
11. restricted.contoso.com
.
12. DHCP.

 3.

1.

NYC-SVR2 ,
.

2.


,

Windows, .

3.

4.


Windows ,
, .

. Windows 7
Windows Vista.

MCT.

10.

 4.
1.

2.

 5.
1.

2.

,
.

3.

4.

, SHV
SHV.

5.


Windows .

6.

,
.

7.

8.

, SHV
SHV.

9.


Windows .

 6.
1.

2.

MCT.

L10-88

L10-89

3.

4.

5.

6.

7.

8.

9.


,
.

10. .
11.
NAP.
12.
.
13.
.
14.
.
15.


.
16. .
17.
.

MCT.

10.

18.

.
19. .
20. .
21.
,
.
22. .
23.
NAP.
24.
.
25.
.

 7. NAP
1.

NYC-CL1.

2.

,
napclcfg.msc .

3.

napclcfg [ NAP
( )\ ]
.

4.


DHCP
.

5.

napclcfg [ NAP (
)\ ].

6.

,
Services.msc .

7.

MCT.

L10-90

8.

:
( )
.

9.

L10-91

10. .
11. ,
mmc .
12. .
13.

.
14.
.
15.
, ,
, Windows
.
16.
( ),
.
17. .
.

 8.
IPv4-
1.

,
(3)
.

2.

3.

MCT.

10.

4.

-
4 (TCP/IPv4).

5.

: 4
(TCP/IPv4) IP- .

6.

DNS-
.

7.

-
.

 9.
1.

NYC-CL1 ,
cmd.exe .

2.


.
Ipconfig /release

3.


.
Ipconfig /renew

4.


.
Ipconfig /all

. DNS- ?
. Restricted.contoso.com
. ?
.

.
NAP DHCP.

MCT.

L10-92

L10-93



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
.

3.

4.

10712A-NYC-SVR2
10712A-NYC-CL1.

5.

10712A-NYC-DC1,
.

6.


,
10712ANYCDC1, .
! 10712A-NYC-DC1,
, ,
.

MCT.

10.

MCT.

L11-95

11.

.


1.
AppLocker
 1. ,
AppLocker

1.

NYC-DC1 ,

.

2.

: Contoso.com .

3.

Contoso.com.

4.

5.

6.


WordPad .

7.


WordPad .

8.

, ,
Windows ,
AppLocker.

MCT.

11.

9.

,
.

10. .
11. .
12. .
13. ..., .
14. (C:).
15. Program Files, Windows NT,
, wordpad.exe .
16. : .
17. .
18. .
19.
, Windows
.
20. .
21. AppLocker,
.
22.

.
23. .
24.
, Windows
.
25. ,
.
26. :
.

MCT.

L11-96

L11-97

27. a
.
28. .

 2.
Contoso.com
1.


: Contoso.com.

2.

3.

Contoso.com.

4.

5.

WordPad
Contoso.com.

6.

,
.

7.

8.

,
cmd .

9.

gpupdate /force
. , .

 3. AppLocker
1.

NYC-CL1
Contoso\Alan Pa$$w0rd.

2.

,
cmd .

3.

gpupdate /force
. , .

MCT.

11.

4.

, ,
WordPad.

5.

.
. AppLocker
. , NYC-CL1
.
NYC-CL1 . ,
, .

.
AppLocker.

MCT.

L11-98

L11-99

2.

 1.
1.

NYC-DC1 ,
.

2.

3.

4.


NYC-DC1 .

5.



NYC-DC1.

6.

7.

8.


NYC-DC1,
. .

9.


NYC-DC1,
. .

10.
NYC-DC1,
. .
11.
NYC-DC1,
. .
12.
.
.
13.
.

MCT.

11.

14. ,
NYC-DC1,
.
15. .
16. .
17.
.
18.
, NYC-DC1.
. .
19.
.
20.
, , .
,
,
.
21.
.
22. ,
. .
23.
T .
.
24.
.
25.
.
26. .
. ActiveX.

MCT.

L11-100 .

27. .
28. , .
29. .
30.
.
31. .

 2.

1.

NYC-DC1 ,
cmd .

2.

cd c:\windows\security\msscw\policies
.

3.

scwcmd transform /p:


.xml /g:DC Security Policy
.

4.

5.

, ,
.

6.

:Contoso.com,
, Contoso.com
DC Security Policy. ,
Scwcmd.exe.

7.

,
.

8.

.



.

MCT.

11. L11-101

3.
Windows Server
 1. Microsoft Baseline Security Analyzer
(MBSA) NYC-SVR2
1.

NYC-SVR2
E:\Labfiles\MBSA.

2.

MBSASetup-x64-EN.msi.

3.

4.

I accept the license agreement.

5.

Next.

6.

Next.

7.

Install.

8.

 2. MBSA
1.

NYC-SVR2
Microsoft Baseline Security Analyzer 2.1.

2.

Scan a computer.

3.

Check for security updates.


. ,
, ,
.

MCT.

L11-102 .

4.

Start Scan.
.
;
, .

. ,
.




Windows

.
MBSA.

MCT.

11. L11-103



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-SVR2
10712A-NYC-CL1.

5.

10712A-NYC-DC1,
.

6.


,
10712ANYCDC1, .
! 10712A-NYC-DC1,
, ,
.

MCT.

L11-104 .

12.

.


1.

 1.
1.

NYC-SVR2.

2.

,
.

3.

4.

,
.

5.


NYC-SVR2.

6.

( ) .

7.

?

.

8.


? .

9.

,
%
>>.

10. ,
/ >>.

MCT.

12. L12-105

11.
, % >>.
12. , >>.
13. ,
>>.
14. ,
/
>> .
15.
? 1
.
16. ?
.
17. ?
.

 2.


NYC-SVR2 .

 3.
1.

,
cmd.exe .

2.


.
Fsutil file createnew bigfile 104857600

3.


.
Copy bigfile \\nyc-dc1\c$

MCT.

L12-106 .

4.


.
Copy \\nyc-dc1\c$\bigfile bigfile2

5.


.
Del bigfile*.*

6.


.
Del \\nyc-dc1\c$\bigfile*.*

7.

 4.
1.

2.


NYC-SVR2 .

3.

4.

5.

:
.

6.

Admin.

7.

NYC-SVR2,
NYC-SVR2_date-000001 DataCollector01.

8.

9.


, /
>>.

10. , /
>>.

MCT.

12. L12-107

11. , %
>>.
12. >>.
13. , %
>>.
14. ,
>> .
15. :
.
16.
.
17. , ,
.

. .

MCT.

L12-108 .

2.
 1.
1.

NYC-SVR2 .

2.


.
Cd\Labfiles\StressTool

 2.


.
StressTool 95

. .

MCT.

12. L12-109

3.

 .
1.

2.


,
NYC-SVR2 .

3.

, .

.
.

MCT.

L12-110 .

4.

 1.
1.

2.

CTRL+C.

3.

 2.
1.

2.


NYC-SVR2 .

3.

4.

5.

:
.

6.

7.

8.

NYC-SVR2_date-000002
DataCollector01.

9.

.
, 49.

MCT.

12. L12-111

 3.
.
?
. ;
.
. ?
. , ,
.
.
.



. :
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-SVR2.

5.

10712A-NYC-DC1,
.

6.


,
10712ANYCDC1, .
! 10712A-NYC-DC1,
, ,
.

MCT.

L12-112 .

13. Windows Server

.
Windows Server
1.
Contoso, Ltd.
: 501285
:

John Peoples

15

11:45

Daniel Roth

:
-.
NYC-SVR4.
1. .
2. NYC-SVR4
.
3. IP- NYC-SVR4
.
4. .

MCT.

13. Windows Server L13-113

()
Contoso, Ltd.
:
1. ?
. ,
ping ,
,
; -,

.
2. NYC-SVR4,
, ,
NYC-SVR4?
. NYC-SVR4 ,

,
.
:
1. NYC-SVR4?
. Windows
.
2. ?
.
. ,

Windows 2008.

MCT.

L13-114 . Windows Server

()
Contoso, Ltd.
3. ,
?
. bcdedit.exe
. , NYC-SVR4
.
, bootrec.exe /scanos
, bootrec.exe
/rebuildbcd,

.
4. ?
.
Windows Server 2008 R2
.
:
1. ?
. bcdedit bootrec,
3.
2. ?
.
NYC-SVR4, ,
.
NYC-SVR4, ,
. ,

.

 1.
1.

,
.

2.


( . ).

MCT.

13. Windows Server L13-115

 2.
10712ANYC-SVR4
1.

Hyper-V 10712A-NYC-SVR4
.

2.

, .

3.


( . ).

 3.
NYCSVR4
1.

Hyper-V,
10712A-NYC-SVR4
.

2.

10712A-NYC-SVR4
DVD .

3.

DVD-
.

4.

C:\Program Files\Microsoft Learning\10712\Drives,


WServer2008R2_Eval.iso .

5.

10712A-NYC-SVR4
.

6.

NYC-SVR4.

7.

10712A-NYC-SVR4 localhost

.

8.

9.

Press Any Key to boot from CD or DVD


( CD DVD ),
.

10. Install Windows ( Windows)


Next ().

MCT.

L13-116 . Windows Server

11. Install Windows ( Windows)


Repair your computer ( ).
12. System Recovery Options (
) Use recovery tools that
can help fix problems starting Windows (
,
Windows). Next ().
13. System Recovery Options (
) Command Prompt
( ).
14.
.
bcdedit

15.
.
16.
.
bootrec /scanos

17.
.
Bootrec /rebuildbcd

18. Add installation to boot list (


?) Y, .
19. .
20. System Recovery Options (
) Restart ().

MCT.

13. Windows Server L13-117

21. , NYC-SVR4
.
22.
( . ).
23. NYC-SVR4.

. Windows
Windows.

MCT.

L13-118 . Windows Server

2. WSUS
 1.

 2. NYC-SVR2
1.

NYC-SVR2 .

2.

3.

4.

5.

- (IIS).
.

6.

ASP.NET

Windows

IIS 6

. .

. .
.

7.

8.

9.

10. .
11. Windows E:\Labfiles\WSUS\.

MCT.

13. Windows Server L13-119

12. ReportViewer.exe.
13. Microsoft Report Viewer Redistributable 2008 SP1
Next ().
14. License Terms ( )
I have read and accept the license terms ( ()
) Install ().
15. Finish ().

 3. NYC-SRV2 WSUS
1.

NYC-SVR2
E:\Labfiles\WSUS.

2.

WSUS30-KB972455-x64.exe.

3.

Windows Server 3.0 SP2


.

4.

,
,
.

5.

6.

,
,
C:\WSUS. .

7.

,
Windows,
C:\WSUS ,
.

8.

- ,
- ISS .

9.

Windows Server
Update Services 3.0 2 (SP2)
.

10. .

MCT.

L13-120 . Windows Server

11. Windows Server


Update Services.
12. .
13. , CMD.exe .
14. Net Stop MSSQL$Microsoft##SSEE
.
15. E:\LabFiles\WSUS\Backup.
16. .
17. .
18. .
19. C:\WSUS\.
20. .
21.

.
22.
1
.
23.
Net Start MSSQL$Microsoft##SSEE .
24.
IIS.
25. NYC-SVR2
.
26. WsusPool
.
27. IIS.
28. : cd C:\Program Files\Update Services\
Tools .
29. wsusutil reset .
30. .

MCT.

13. Windows Server L13-121

 4. ,
NYC-CL1
WSUS
1.

NYC-DC1 ,

.

2.

: Contoso.com
, Contoso.com.

3.

Contoso.com
.

4.


WSUS .

5.

WSUS,
.

6.


,
, Windows
Windows.

7.

8.


, .

9.

10.
http://NYC-SVR2.
11.
http://NYCSVR2, .
12.
, .
13. ,
.

MCT.

L13-122 . Windows Server

14. 10712A-NYC-CL1
Contoso\ Pa$$w0rd.
15. NYC-CL1 ,
wuauclt /a /r .

 5.
NYCCL1
1.

NYC-SVR2
Windows Server.

2.

NYC-SVR2 ,
.

3.

4.

5.

,
.

6.

,
.

7.

nyc-cl1.contoso.com,
.

8.

 6.
Windows 7
1.

,
.

2.

,
.

MCT.

13. Windows Server L13-123

3.

, .
. .

4.

,
Windows 7 (KB981332),
.
. 64- .

5.


,
.

6.

7.

8.


Windows 7 (KB976662), .

9.


,
.

10.
.
. ,
, .

11. .

MCT.

L13-124 . Windows Server

 7.
Windows 7
1.

NYC-CL1 , cmd,
.

2.

GPUpdate /force
.
. , .

3.

wuauclt /detectnow
.

4.

Windows
, .

5.

,
Windows.

6.

7.

, Windows 7
(KB976662) ,
Windows 7 (KB981332) .
. Windows
.

. - KB957097
WSUS server
.

8.

Windows.

MCT.

13. Windows Server L13-125

 8. WSUS
1.

NYC-SVR2
.

2.

,
Windows Server.

3.

4.

NYC-SVR2
.

5.

,
nyc-cl1.contoso.com.

6.

NYC-SVR2.

7.

. WSUS
.

MCT.

L13-126 . Windows Server

3. , ,


Contoso. , A ( 1)
: 501289
:

John Peoples

19

12:10

Daniel Roth

:
-. ,
NYC-SVR2 .
E:\Labfiles\Captures\10712A-NYC-SVR2-LAB13-EX3-PARTA.blg.
:
1.
NYC-SVR2?
. cpustres .
2. 1, (
) ,
?
. :
cpustres
.
, cpustres,
, , ,
cpustres, .
cpustres,
, .

MCT.

13. Windows Server L13-127

()
Contoso. , ( 2)
: 501290
:

John Peoples

20

13:15

Daniel Roth

:
-. ,
NYC-SVR2 .
E:\Labfiles\Captures\10712A-NYC-SVR2-LAB13-EX3-PARTB.blg.
:
1.
NYC-SVR2?
. explorer.exe .
2. 1, (
) ,
?
. explorer.exe ,
,
, .
,
, ,
explorer.exe.
,
.

MCT.

L13-128 . Windows Server

 1. ,
,

1.

NYC-SVR2 ,
.

2.

3.


(CTRL+D).

4.

:
.

5.


E:\Labfiles\Captures.

6.

10712A-NYC-SVR2-LAB13-EX3-PARTA.blg
.

7.

:
.

8.


(CTRL+L).

9.


, %
.

10. 0
.
11.
,
,
.

MCT.

13. Windows Server L13-129

12. % ,
NYC-SVR2.
:

30%.

60%.

40%.

13. (CTRL+L).
14.
, %
.
15.
< >, ,
.
16. ,
.
(CTRL+B) . ,
.
17. . .
18. .

 2. ,
,

1.

NYC-SVR2 ,
.

2.

3.

(CTRL+D).

4.

:
.

5.


E:\Labfiles\Captures.

MCT.

L13-130 . Windows Server

6.

10712A-NYC-SVR2-LAB14-EX3-PARTA.blg
.

7.

:
.

8.


(CTRL+L).

9.

10. 0 C:
.
11.
.
12. 0 C:
.
13. /.
14. 0 C:
.
15.
I/O - , .
16.
< >, ,
.
17. I/O - ,
.
(CTRL+B) .
, .
18. . .
19. .

. ,
.

MCT.

13. Windows Server L13-131



.
:
1.

Hyper-V.

2.

10712A-NYC-DC1
, .

3.

4.

10712A-NYC-SVR2
10712A-NYC-CL1.

MCT.

L13-132 . Windows Server

14.

.



1.

, , .

2.

, .

1. VHD
 1.
1.

Hyper-V.

2.

,
.

3.

4.

5.


NYC-Prod1.vhd,
C:\Program Files\Microsoft Learning .

6.


32 , .

7.

 2.
1.

Hyper-V ,
.

2.

MCT.

14. L14-133

3.

4.


NYC-Test1.vhd,
c:\Program Files\Microsoft Learning .

5.

.
C:\Program Files\Microsoft Learning\Base\Drives,
WS08R2- SVR2_RU.vhd .

6.

7.

.
.

MCT.

L14-134 .

2.
 1.
1.

Hyper-V
.

2.

.
.

3.


NYC-PROD1.

4.


.
C:\Program Files\Microsoft Learning .

5.

1024
.

6.


, .

7.


,
, NYC-PROD1.vhd,
, .

8.

 2.
1.

Hyper-V
.

2.

.
.

3.


NYC-TEST1.

MCT.

14. L14-135

4.


.
C:\Program Files\Microsoft Learning .

5.

1024
.

6.


, .

7.


,
, NYC-TEST1.vhd,
, .

8.


.
. ,
.

MCT.

L14-136 .

3.

 .

1.

Hyper-V ,
.

2.

3.

4.


NYC-PROD1-Data.vhd,
C:\Program Files\Microsoft Learning, .

5.


64 , .

6.

Hyper-V
NYC-PROD1, .

7.

: NYC-PROD1 SCSI-,
,
SCSI.

8.

,
NYC-PROD1-Data.vhd, .

9.

10. , 2048.
11. ,
2, .
.
.

MCT.

14. L14-137

4.

 1.
1.

Hyper-V , NYC-TEST1
.

2.

NYC-TEST1. NYC-TEST1
.

3.

4.

NYC-TEST1 .

5.

NYC-TEST1 .

6.

NYC-TEST1 localhost -
.
CTRL+ALT+DELETE. Pa$$w0rd
.

7.

Windows,
.

8.

,
.

 2.
1.

,

. 1.txt .

2.

Hyper-V NYC-TEST1.
NYC-TEST1 .

3.

2.

4.

,

. 2.txt .

MCT.

L14-138 .

5.

Hyper-V , NYC-TEST1
.

6.

NYC-TEST1 .
.

7.

, 2.txt
.

8.

9.

10. , . ,
.
11. 2
.
12. . ,
NYC-TEST1,
.
13. , 1.txt
.
14. .
.
.
.

MCT.

14. L14-139

MCT.