Windows server 2019 administration

Ebook hướng dẫn đầy đủ quản trị Windows server 2019 (kèm thực hành), bản đẹp chuẩn nhà sản xuất. Tài khoản mình chuyên đăng tải các tài liệu chuyên ngành chứng chỉ quốc tế CNTT, bạn có thể để lại tin nhắn yêu cầu ebook của bất kì chứng chỉ Microsoft nào bạn muốn học mình sẽ đăng tải lên 123doc. Email công việc: tranthanhnguyen96gmail.com

Microsoft Official Course WS-011T00 Windows Server 2019 Administration WS-011T00 Windows Server 2019 Administration II  Disclaimer   Information in this document, including URL and other Internet Web site references, is subject to change without notice Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred Complying with all applicable copyright laws is the responsibility of the user Without limiting the rights under copyright, no part of this document may be reproduced, stored in  or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation   Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property   The names of manufacturers, products, or URLs are provided for informational purposes only and    Microsoft makes no representations and warranties, either expressed, implied, or statutory, regarding these manufacturers or the use of the products with any Microsoft technologies The inclusion of a manufacturer or product does not imply endorsement of Microsoft of the manufacturer or product Links may be provided to third party sites Such sites are not under the control of Microsoft and Microsoft is not responsible for the contents of any linked site or any link contained in a linked site, or any changes or updates to such sites Microsoft is not responsible for webcasting or any other form of transmission received from any linked site Microsoft is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement of Microsoft of the site or the products contained   therein   © 2019 Microsoft Corporation All rights reserved   Microsoft and the trademarks listed at http://www.microsoft.com/trademarks 1are trademarks of the Microsoft group of companies All other trademarks are property of their respective owners     http://www.microsoft.com/trademarks EULA  III MICROSOFT LICENSE TERMS MICROSOFT INSTRUCTOR-LED COURSEWARE These license terms are an agreement between Microsoft Corporation (or based on where you live, one of its affiliates) and you Please read them They apply to your use of the content accompanying this agreement which includes the media on which you received it, if any These license terms also apply to Trainer Content and any updates and supplements for the Licensed Content unless other terms accompany those items If so, those terms apply BY ACCESSING, DOWNLOADING OR USING THE LICENSED CONTENT, YOU ACCEPT THESE TERMS IF YOU DO NOT ACCEPT THEM, DO NOT ACCESS, DOWNLOAD OR USE THE LICENSED CONTENT If you comply with these license terms, you have the rights below for each license you acquire DEFINITIONS “Authorized Learning Center” means a Microsoft Imagine Academy (MSIA) Program Member, Microsoft Learning Competency Member, or such other entity as Microsoft may designate from time to time “Authorized Training Session” means the instructor-led training class using Microsoft Instructor-Led Courseware conducted by a Trainer at or through an Authorized Learning Center “Classroom Device” means one (1) dedicated, secure computer that an Authorized Learning Center owns or controls that is located at an Authorized Learning Center’s training facilities that meets or exceeds the hardware level specified for the particular Microsoft Instructor-Led Courseware “End User” means an individual who is (i) duly enrolled in and attending an Authorized Training Session or Private Training Session, (ii) an employee of an MPN Member (defined below), or (iii) a Microsoft full-time employee, a Microsoft Imagine Academy (MSIA) Program Member, or a Microsoft Learn for Educators – Validated Educator “Licensed Content” means the content accompanying this agreement which may include the Microsoft Instructor-Led Courseware or Trainer Content “Microsoft Certified Trainer” or “MCT” means an individual who is (i) engaged to teach a training session to End Users on behalf of an Authorized Learning Center or MPN Member, and (ii) currently certified as a Microsoft Certified Trainer under the Microsoft Certification Program “Microsoft Instructor-Led Courseware” means the Microsoft-branded instructor-led training course that educates IT professionals, developers, students at an academic institution, and other learners on Microsoft technologies A Microsoft Instructor-Led Courseware title may be branded as MOC, Microsoft Dynamics, or Microsoft Business Group courseware “Microsoft Imagine Academy (MSIA) Program Member” means an active member of the Microsoft Imagine Academy Program “Microsoft Learn for Educators – Validated Educator” means an educator who has been validated through the Microsoft Learn for Educators program as an active educator at a college, university, community college, polytechnic or K-12 institution 10 “Microsoft Learning Competency Member” means an active member of the Microsoft Partner Network program in good standing that currently holds the Learning Competency status 11 “MOC” means the “Official Microsoft Learning Product” instructor-led courseware known as Microsoft Official Course that educates IT professionals, developers, students at an academic institution, and other learners on Microsoft technologies 12 “MPN Member” means an active Microsoft Partner Network program member in good standing IV  EULA 13 “Personal Device” means one (1) personal computer, device, workstation or other digital electronic device that you personally own or control that meets or exceeds the hardware level specified for the particular Microsoft Instructor-Led Courseware 14 “Private Training Session” means the instructor-led training classes provided by MPN Members for corporate customers to teach a predefined learning objective using Microsoft Instructor-Led Courseware These classes are not advertised or promoted to the general public and class attendance is restricted to individuals employed by or contracted by the corporate customer 15 “Trainer” means (i) an academically accredited educator engaged by a Microsoft Imagine Academy Program Member to teach an Authorized Training Session, (ii) an academically accredited educator validated as a Microsoft Learn for Educators – Validated Educator, and/or (iii) a MCT 16 “Trainer Content” means the trainer version of the Microsoft Instructor-Led Courseware and additional supplemental content designated solely for Trainers’ use to teach a training session using the Microsoft Instructor-Led Courseware Trainer Content may include Microsoft PowerPoint presentations, trainer preparation guide, train the trainer materials, Microsoft One Note packs, classroom setup guide and Pre-release course feedback form To clarify, Trainer Content does not include any software, virtual hard disks or virtual machines USE RIGHTS The Licensed Content is licensed, not sold The Licensed Content is licensed on a one copy per user basis, such that you must acquire a license for each individual that accesses or uses the Licensed Content ●● 2.1 Below are five separate sets of use rights Only one set of rights apply to you If you are a Microsoft Imagine Academy (MSIA) Program Member: Each license acquired on behalf of yourself may only be used to review one (1) copy of the Microsoft Instructor-Led Courseware in the form provided to you If the Microsoft Instructor-Led Courseware is in digital format, you may install one (1) copy on up to three (3) Personal Devices You may not install the Microsoft Instructor-Led Courseware on a device you not own or control For each license you acquire on behalf of an End User or Trainer, you may either: distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) End User who is enrolled in the Authorized Training Session, and only immediately prior to the commencement of the Authorized Training Session that is the subject matter of the Microsoft Instructor-Led Courseware being provided, or provide one (1) End User with the unique redemption code and instructions on how they can access one (1) digital version of the Microsoft Instructor-Led Courseware, or provide one (1) Trainer with the unique redemption code and instructions on how they can access one (1) Trainer Content For each license you acquire, you must comply with the following: you will only provide access to the Licensed Content to those individuals who have acquired a valid license to the Licensed Content, you will ensure each End User attending an Authorized Training Session has their own valid licensed copy of the Microsoft Instructor-Led Courseware that is the subject of the Authorized Training Session, you will ensure that each End User provided with the hard-copy version of the Microsoft Instructor-Led Courseware will be presented with a copy of this agreement and each End EULA  V User will agree that their use of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreement prior to providing them with the Microsoft Instructor-Led Courseware Each individual will be required to denote their acceptance of this agreement in a manner that is enforceable under local law prior to their accessing the Microsoft Instructor-Led Courseware, you will ensure that each Trainer teaching an Authorized Training Session has their own valid licensed copy of the Trainer Content that is the subject of the Authorized Training Session, you will only use qualified Trainers who have in-depth knowledge of and experience with the Microsoft technology that is the subject of the Microsoft Instructor-Led Courseware being taught for all your Authorized Training Sessions, you will only deliver a maximum of 15 hours of training per week for each Authorized Training Session that uses a MOC title, and you acknowledge that Trainers that are not MCTs will not have access to all of the trainer resources for the Microsoft Instructor-Led Courseware If you are a Microsoft Learning Competency Member: Each license acquire may only be used to review one (1) copy of the Microsoft Instructor-Led Courseware in the form provided to you If the Microsoft Instructor-Led Courseware is in digital format, you may install one (1) copy on up to three (3) Personal Devices You may not install the Microsoft Instructor-Led Courseware on a device you not own or control For each license you acquire on behalf of an End User or MCT, you may either: distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) End User attending the Authorized Training Session and only immediately prior to the commencement of the Authorized Training Session that is the subject matter of the Microsoft Instructor-Led Courseware provided, or provide one (1) End User attending the Authorized Training Session with the unique redemption code and instructions on how they can access one (1) digital version of the Microsoft Instructor-Led Courseware, or you will provide one (1) MCT with the unique redemption code and instructions on how they can access one (1) Trainer Content For each license you acquire, you must comply with the following: you will only provide access to the Licensed Content to those individuals who have acquired a valid license to the Licensed Content, you will ensure that each End User attending an Authorized Training Session has their own valid licensed copy of the Microsoft Instructor-Led Courseware that is the subject of the Authorized Training Session, you will ensure that each End User provided with a hard-copy version of the Microsoft Instructor-Led Courseware will be presented with a copy of this agreement and each End User will agree that their use of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreement prior to providing them with the Microsoft Instructor-Led Courseware Each individual will be required to denote their acceptance of this agreement in a manner that is enforceable under local law prior to their accessing the Microsoft Instructor-Led Courseware, VI  EULA you will ensure that each MCT teaching an Authorized Training Session has their own valid licensed copy of the Trainer Content that is the subject of the Authorized Training Session, you will only use qualified MCTs who also hold the applicable Microsoft Certification credential that is the subject of the MOC title being taught for all your Authorized Training Sessions using MOC, you will only provide access to the Microsoft Instructor-Led Courseware to End Users, and you will only provide access to the Trainer Content to MCTs If you are a MPN Member: Each license acquired on behalf of yourself may only be used to review one (1) copy of the Microsoft Instructor-Led Courseware in the form provided to you If the Microsoft Instructor-Led Courseware is in digital format, you may install one (1) copy on up to three (3) Personal Devices You may not install the Microsoft Instructor-Led Courseware on a device you not own or control For each license you acquire on behalf of an End User or Trainer, you may either: distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) End User attending the Private Training Session, and only immediately prior to the commencement of the Private Training Session that is the subject matter of the Microsoft Instructor-Led Courseware being provided, or provide one (1) End User who is attending the Private Training Session with the unique redemption code and instructions on how they can access one (1) digital version of the Microsoft Instructor-Led Courseware, or you will provide one (1) Trainer who is teaching the Private Training Session with the unique redemption code and instructions on how they can access one (1) Trainer Content For each license you acquire, you must comply with the following: you will only provide access to the Licensed Content to those individuals who have acquired a valid license to the Licensed Content, you will ensure that each End User attending an Private Training Session has their own valid licensed copy of the Microsoft Instructor-Led Courseware that is the subject of the Private Training Session, you will ensure that each End User provided with a hard copy version of the Microsoft Instructor-Led Courseware will be presented with a copy of this agreement and each End User will agree that their use of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreement prior to providing them with the Microsoft Instructor-Led Courseware Each individual will be required to denote their acceptance of this agreement in a manner that is enforceable under local law prior to their accessing the Microsoft Instructor-Led Courseware, you will ensure that each Trainer teaching an Private Training Session has their own valid licensed copy of the Trainer Content that is the subject of the Private Training Session, EULA  VII you will only use qualified Trainers who hold the applicable Microsoft Certification credential that is the subject of the Microsoft Instructor-Led Courseware being taught for all your Private Training Sessions, you will only use qualified MCTs who hold the applicable Microsoft Certification credential that is the subject of the MOC title being taught for all your Private Training Sessions using MOC, you will only provide access to the Microsoft Instructor-Led Courseware to End Users, and you will only provide access to the Trainer Content to Trainers If you are an End User: For each license you acquire, you may use the Microsoft Instructor-Led Courseware solely for your personal training use If the Microsoft Instructor-Led Courseware is in digital format, you may access the Microsoft Instructor-Led Courseware online using the unique redemption code provided to you by the training provider and install and use one (1) copy of the Microsoft Instructor-Led Courseware on up to three (3) Personal Devices You may also print one (1) copy of the Microsoft Instructor-Led Courseware You may not install the Microsoft Instructor-Led Courseware on a device you not own or control If you are a Trainer For each license you acquire, you may install and use one (1) copy of the Trainer Content in the form provided to you on one (1) Personal Device solely to prepare and deliver an Authorized Training Session or Private Training Session, and install one (1) additional copy on another Personal Device as a backup copy, which may be used only to reinstall the Trainer Content You may not install or use a copy of the Trainer Content on a device you not own or control You may also print one (1) copy of the Trainer Content solely to prepare for and deliver an Authorized Training Session or Private Training Session If you are an MCT, you may customize the written portions of the Trainer Content that are logically associated with instruction of a training session in accordance with the most recent version of the MCT agreement If you elect to exercise the foregoing rights, you agree to comply with the following: (i) customizations may only be used for teaching Authorized Training Sessions and Private Training Sessions, and (ii) all customizations will comply with this agreement For clarity, any use of “customize” refers only to changing the order of slides and content, and/or not using all the slides or content, it does not mean changing or modifying any slide or content ●● 2.2 Separation of Components The Licensed Content is licensed as a single unit and you may not separate their components and install them on different devices ●● 2.3 Redistribution of Licensed Content Except as expressly provided in the use rights above, you may not distribute any Licensed Content or any portion thereof (including any permitted modifications) to any third parties without the express written permission of Microsoft ●● 2.4 Third Party Notices The Licensed Content may include third party code that Microsoft, not the third party, licenses to you under this agreement Notices, if any, for the third party code are included for your information only ●● 2.5 Additional Terms Some Licensed Content may contain components with additional terms, conditions, and licenses regarding its use Any non-conflicting terms in those conditions and licenses also apply to your use of that respective component and supplements the terms described in this agreement VIII  EULA LICENSED CONTENT BASED ON PRE-RELEASE TECHNOLOGY If the Licensed Content’s subject matter is based on a pre-release version of Microsoft technology (“Pre-release”), then in addition to the other provisions in this agreement, these terms also apply: Pre-Release Licensed Content This Licensed Content subject matter is on the Pre-release version of the Microsoft technology The technology may not work the way a final version of the technology will and we may change the technology for the final version We also may not release a final version Licensed Content based on the final version of the technology may not contain the same information as the Licensed Content based on the Pre-release version Microsoft is under no obligation to provide you with any further content, including any Licensed Content based on the final version of the technology Feedback If you agree to give feedback about the Licensed Content to Microsoft, either directly or through its third party designee, you give to Microsoft without charge, the right to use, share and commercialize your feedback in any way and for any purpose You also give to third parties, without charge, any patent rights needed for their products, technologies and services to use or interface with any specific parts of a Microsoft technology, Microsoft product, or service that includes the feedback You will not give feedback that is subject to a license that requires Microsoft to license its technology, technologies, or products to third parties because we include your feedback in them These rights survive this agreement Pre-release Term If you are an Microsoft Imagine Academy Program Member, Microsoft Learning Competency Member, MPN Member, Microsoft Learn for Educators – Validated Educator, or Trainer, you will cease using all copies of the Licensed Content on the Pre-release technology upon (i) the date which Microsoft informs you is the end date for using the Licensed Content on the Pre-release technology, or (ii) sixty (60) days after the commercial release of the technology that is the subject of the Licensed Content, whichever is earliest (“Pre-release term”) Upon expiration or termination of the Pre-release term, you will irretrievably delete and destroy all copies of the Licensed Content in your possession or under your control SCOPE OF LICENSE The Licensed Content is licensed, not sold This agreement only gives you some rights to use the Licensed Content Microsoft reserves all other rights Unless applicable law gives you more rights despite this limitation, you may use the Licensed Content only as expressly permitted in this agreement In doing so, you must comply with any technical limitations in the Licensed Content that only allows you to use it in certain ways Except as expressly permitted in this agreement, you may not: ●● access or allow any individual to access the Licensed Content if they have not acquired a valid license for the Licensed Content, ●● alter, remove or obscure any copyright or other protective notices (including watermarks), branding or identifications contained in the Licensed Content, ●● modify or create a derivative work of any Licensed Content, ●● publicly display, or make the Licensed Content available for others to access or use, ●● copy, print, install, sell, publish, transmit, lend, adapt, reuse, link to or post, make available or distribute the Licensed Content to any third party, ●● work around any technical limitations in the Licensed Content, or ●● reverse engineer, decompile, remove or otherwise thwart any protections or disassemble the Licensed Content except and only to the extent that applicable law expressly permits, despite this limitation RESERVATION OF RIGHTS AND OWNERSHIP Microsoft reserves all rights not expressly granted to you in this agreement The Licensed Content is protected by copyright and other intellectual property EULA  IX laws and treaties Microsoft or its suppliers own the title, copyright, and other intellectual property rights in the Licensed Content EXPORT RESTRICTIONS The Licensed Content is subject to United States export laws and regulations You must comply with all domestic and international export laws and regulations that apply to the Licensed Content These laws include restrictions on destinations, end users and end use For additional information, see www.microsoft.com/exporting SUPPORT SERVICES Because the Licensed Content is provided “as is”, we are not obligated to provide support services for it TERMINATION Without prejudice to any other rights, Microsoft may terminate this agreement if you fail to comply with the terms and conditions of this agreement Upon termination of this agreement for any reason, you will immediately stop all use of and delete and destroy all copies of the Licensed Content in your possession or under your control LINKS TO THIRD PARTY SITES You may link to third party sites through the use of the Licensed Content The third party sites are not under the control of Microsoft, and Microsoft is not responsible for the contents of any third party sites, any links contained in third party sites, or any changes or updates to third party sites Microsoft is not responsible for webcasting or any other form of transmission received from any third party sites Microsoft is providing these links to third party sites to you only as a convenience, and the inclusion of any link does not imply an endorsement by Microsoft of the third party site 10 ENTIRE AGREEMENT This agreement, and any additional terms for the Trainer Content, updates and supplements are the entire agreement for the Licensed Content, updates and supplements 11 APPLICABLE LAW United States If you acquired the Licensed Content in the United States, Washington state law governs the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of laws principles The laws of the state where you live govern all other claims, including claims under state consumer protection laws, unfair competition laws, and in tort Outside the United States If you acquired the Licensed Content in any other country, the laws of that country apply 12 LEGAL EFFECT This agreement describes certain legal rights You may have other rights under the laws of your country You may also have rights with respect to the party from whom you acquired the Licensed Content This agreement does not change your rights under the laws of your country if the laws of your country not permit it to so 13 DISCLAIMER OF WARRANTY THE LICENSED CONTENT IS LICENSED "AS-IS" AND "AS AVAILABLE." YOU BEAR THE RISK OF USING IT MICROSOFT AND ITS RESPECTIVE AFFILIATES GIVES NO EXPRESS WARRANTIES, GUARANTEES, OR CONDITIONS YOU MAY HAVE ADDITIONAL CONSUMER RIGHTS UNDER YOUR LOCAL LAWS WHICH THIS AGREEMENT CANNOT CHANGE TO THE EXTENT PERMITTED UNDER YOUR LOCAL LAWS, MICROSOFT AND ITS RESPECTIVE AFFILIATES EXCLUDES ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT 14 LIMITATION ON AND EXCLUSION OF REMEDIES AND DAMAGES YOU CAN RECOVER FROM MICROSOFT, ITS RESPECTIVE AFFILIATES AND ITS SUPPLIERS ONLY DIRECT DAMAGES UP TO US$5.00 YOU CANNOT RECOVER ANY OTHER DAMAGES, INCLUDING CONSEQUENTIAL, LOST PROFITS, SPECIAL, INDIRECT OR INCIDENTAL DAMAGES  Storage Migration Service  573 ●● An Azure Express Route or virtual private network (VPN) solution tied to the VNet and subnet that allows connectivity from this Azure infrastructure as a service (IaaS) VM to your on-premises network and all the computers being used for migration To identify where the source data is to be migrated, you must map source volumes to the volumes on the destination servers You also must identify which shares you want to migrate In most cases, you won't want to migrate administrative shares You can choose to migrate local users and groups from source servers to the destination server If there are naming conflicts with existing local users and groups, you can specify whether to reuse existing accounts or rename existing accounts on the destination If you're migrating data from a domain controller, you must specify that local users and groups won't be transferred Note: Migrated local users are assigned a randomly generated 127-character password After you have specified the options for data transfer, you can perform a validation The validation ensures that everything is properly configured for the migration Storage Migration Service is designed to allow the transfer process to be performed multiple times The first time transfers a full copy of the data, and subsequent transfers copy only changed files You can use this functionality to perform an initial large copy and then perform a final transfer during a maintenance window Note: If files are found on the destination server during the initial file copy, they must be moved to a backup folder After the file transfer is complete, the files, shares, and their security permissions are migrated to the destination server If you don't want to migrate the source server identities to the destination server, you can mark the migration complete at this point Cut over to the destination server Cutting over to the destination server moves the identity information from the source server to the destination server This includes the server name and IP address When you perform the cutover, you must specify: ●● Which adapter on the destination server will be configured with the source IP addresses ●● The IP address to assign to the source server ●● The name to assign to the source server When you perform the cutover, user access to the migrated data will be interrupted as the servers are renamed and restarted This process is typically performed during a maintenance window After the cutover is complete, users and apps can access the data by using the same server names, IP addresses, and share names as they used before the migration After a cutover, there's no automated way to roll back to the source server You can manually reconfigure the computer names and IP addresses on the source and destination servers to roll back Storage migration considerations Using Storage Migration Service to migrate data works well for most, but not all, scenarios When using Storage Migration Service, you should consider the following: ●● Locked files aren't migrated If apps lock the files, the files won't be migrated when in use 574  Module 12 Upgrade and migration in Windows Server   ●● You can't migrate the identity of domain controllers If you're migrating file shares on a domain controller and want to migrate the domain controller identity, you should demote that domain controller to be a member server ●● Windows system files won't move to the PreExistingData folder on the destination server For example, if you migrate a J:\Windows folder on the source server to C:\Windows on the destination server, Storage Migration Service won't migrate the folder Other system files and folders, such as Program Files, Program Data, and Users are also protected ●● Server consolidation isn't supported Storage Migration Service doesn't include logic to understand the dependencies involved in migrating shares from multiple servers to a single server For example, there's no mechanism to support multiple source identities being applied to the target server ●● Data on New Technology File Systems (NTFS) must be migrated to NTFS on the target server You can't migrate data from NTFS to Resilient File Systems (ReFS) ●● Previous file versions aren't migrated Many file servers have volume shadow copy enabled to allow easy restores of deleted or accidentally modified files The previous versions retained in the volume shadow copies aren't migrated by Storage Migration Service In most cases, Storage Migration Service provides good performance for data transfer However, to optimize performance you can the following: ●● Use Windows Server 2019 with the Storage Migration Service Proxy service installed as the destination This allows file transfers to be performed directly from source to destination instead of being copied through the orchestrator server ●● If you have enough network bandwidth, processor performance, and memory, increasing the number of threads used by Storage Migration Service Proxy might increase performance By default, eight threads are allocated You can increase the allocated threads by creating a FileTransferThreadCount value in the HKEY_Local_Machine\Software\Microsoft\SMSProxy key and setting a value up to 128 ●● Add processor cores and memory Monitor source, destination, and orchestrator computers to identify whether processor and memory capacity are bottlenecks ●● Create multiple jobs Within a single job, source servers are processed one after the other If you create multiple jobs, they can be performed in parallel This is most effective when the Storage Migration Service Proxy is used on Windows Server 2019 destination servers ●● Use high-performance networking High-performance networking features such as Server Message Block version 3.0 (SMB3) with Remote Direct Memory Access (RDMA) and SMB3 multichannel ensure that network performance doesn't become a bottleneck ●● Use high-performance storage The type of disk being used affects storage performance Ensure that the disk subsystem has enough performance to avoid being a bottleneck In some cases, the antivirus software can cause poor disk performance Test your knowledge Use the following questions to check what you've learned in this lesson  Storage Migration Service  575 Question You're using Storage Migration Service to migrate file shares from a source server to a destination server If you want to use a single account to connect to the source and destination servers, which permissions need to be configured for the account? Choose three †† Member of users on source server †† Member of administrators on source server †† Member of users on orchestrator server †† Member of administrators on orchestrator server †† Member of administrators on destination server Question What information you need to specify during the cutover phase of a job in Storage Migration Service? Choose three †† The name to assign to the source server †† The name to assign to the destination server †† The IP address to assign to the source server †† The IP address to assign on the destination server †† The network adapter to configure on the destination server 576  Module 12 Upgrade and migration in Windows Server   Windows Server Migration Tools Lesson overview You can use the Windows Server Migration Tools feature to sync the configuration information and data from a source server to a destination server You use the cmdlets included in the Windows Server Migration Tools to export the configuration information and data from the source server and import the configuration on the destination server For supported roles and features, this is much faster than manually reconfiguring the features on the destination server However, you need to manually install the roles or features on the destination server before importing the configuration Lesson objectives After completing this lesson, you'll be able to: ●● Describe the Windows Server Migration Tools ●● Describe how to install the Windows Server Migration Tools ●● Describe how to use the Windows Server Migration Tools to migrate configuration data What are Windows Server Migration Tools? Windows Server Migration Tools are a set of Windows PowerShell cmdlets that migrate configuration information and data from a source server to a destination server This is done primarily to migrate server roles and features from a server being retired to a new server running a newer operating system Roles and features that you can migrate include: ●● IP configuration ●● Local users and groups ●● DNS ●● DHCP ●● Routing and Remote Access Windows Server Migration Tools can also be used to migrate file shares However, you should use Storage Migration Service instead Source servers must be running Windows Server 2008 or newer However, you can't migrate from a server core installation of Windows Server that doesn't have the Microsoft NET Framework, such as Windows Server 2008 Server Core Also, the language on the source and destination servers must match Install Windows Server Migration Tools To perform a migration by using Windows Server Migration Tools, you must install the cmdlets on the source and destination servers For a computer running Windows Server 2019, you must install the Windows Server Migration Tools feature You can install this feature by using graphical tools such as Windows Admin Center or Server Manager Alternatively, you can also install Windows Server Migration Tools by using Windows PowerShell Install-WindowsFeature Migration If the source computer is running an earlier version of Windows Server, you must create a deployment folder with installation files for the source server To create a deployment folder, run SmigDeploy.exe  Windows Server Migration Tools  577 from the %Windir%\System32\ServerMigrationTools\ folder on the destination server When you run SmigDeploy.exe, you must specify the: ●● Architecture of the source server ●● Operating system of the source server ●● Path to store the deployment folder The following example creates a deployment share for a 64-bit version of Windows Server 2008 R2 in C:\ Deploy that's named SMT_WS08R2_amd64: SmigDeploy.exe /package /architecture amd64 /os WS08R2 /path C:\Deploy Note: For detailed information about SmigDeploy.exe switches, use the /? option On the source server, you need to register the Windows Server Migration Tools by running SmigDeploy exe with no options from the deployment folder The deployment folder can't be run from a network location You must copy the deployment folder to a local drive on the source server or use removable storage Use Windows Server Migration Tools The Windows Server Migration Tools copy role and feature configuration, but don't install the necessary roles and features on the destination server Before you migrate a role or feature, you must install that role or feature on the destination server in preparation for the migration If the destination server is prepared with the necessary roles and features, you can export the configuration from the source server and then import the configuration on the destination server Most Windows PowerShell cmdlets install as modules and are automatically available at a Windows PowerShell prompt To use the Windows Server Migration Tools cmdlets, you must load a snap-in first, as demonstrated in the following example: Add-PSSnapin Microsoft Windows.Windows.ServerManager.Migration The following table lists the Windows Server Migration Tools cmdlets Table 1: Windows Server Migration Tools cmdlets Cmdlet Get-SmigServerFeature Description Export-SmigServerSetting Exports the settings for the specified Windows features and operating system (OS) from the local computer to a migration store Import-SmigServerSetting Imports the settings for the specified Windows features and OS from a migration store to the local computer Send-SmigServerData Sends shares and data from the source server to a destination server Receive-SmigServerData Receives shares and data from the source server Lists the Windows features that can be migrated from either the local computer or a migration store Note: You should use Storage Migration Service instead of Send-SmigServerData and Receive-SmigServerData 578  Module 12 Upgrade and migration in Windows Server   Export settings Before you export settings from the source server, you can run the Get-SmigServerFeature cmdlet to verify which feature settings can be exported This cmdlet provides the feature names and IDs that you must specify during the export When you run the Export-SmigServerSetting cmdlet on the source server, you specify which Windows features to export You also have the option to specify that local users, local groups, and IP configuration should be exported The migration store you create with Export-SmigServerSetting is encrypted and protected with a password that you specify during the export Import settings Before you import settings from a migration store, run the Get-SmigServerFeature cmdlet to verify which feature settings can be imported Use this information to verify that the necessary Windows features install on the destination server When you run the Import-SmigServerSetting cmdlet on the destination server, you must provide the path to the migration store and the password to decrypt it If you don't provide a password in the command, you're prompted for one You also must identify which Windows features should be imported In some cases, settings for Windows features must be migrated in a specific order To guarantee that settings apply in the correct order, import the settings separately by running Import-SmigServerSetting multiple times You can choose to specify that local users, local groups, or IP configuration import from the migration store When you import IP configuration, you must specify the hardware address of the IP configuration and the hardware address of the network card in the destination server Additional reading: For more information on obtaining detailed syntax information for the Windows Server Migration Tools cmdlets, refer to ServerMigration1 Test your knowledge Use the following questions to check what you've learned in this lesson Question Which of the following operating systems isn't supported in the Server Core configuration when using Windows Server Migration Tools? †† Windows Server 2019 †† Windows Server 2008 †† Windows Server 2012 R2 †† Windows Server 2016 †† Windows Server 2003 https://aka.ms/module-servermigration  Windows Server Migration Tools  579 Question How can you install the Windows Server Migration Tools on Windows Server 2019? Choose two †† Run Install-WindowsFeature Migration †† Download the Windows Server Migration Tools from the Microsoft Download website †† Run SmigDeploy.exe †† Use Windows Admin Center to install the Windows Server Migration Tools feature 580  Module 12 Upgrade and migration in Windows Server   Module 12 lab and review Lab: Migrating server workloads Scenario Contoso, Ltd is an engineering, manufacturing, and distribution company The organization is based in London, England and has major offices in Toronto, Canada and Sydney, Australia Because Contoso has been in business for many years, the existing servers include many versions of Windows Server you're planning to migrate those services to servers running Windows Server 2019 Objectives After completing this lab, you'll be able to: ●● Select a process to migrate server workloads ●● Plan how to migrate files with Storage Migration Service Estimated time: 20 minutes Module review Use the following to check what you've learned in this module Question Which of the following are true about migrating to a new Active Directory Domain Services (AD DS) forest? Choose two †† Migrating to a new AD DS forest is simpler than upgrading an existing AD DS forest †† You must use the same domains and organizational unit (OU) structure in the new forest †† You must use new domain names †† All objects must be migrated from the source to the destination †† During a phased migration, you can maintain access to resources in the source and destination AD DS forests Question Which software is used to sync user passwords from a source domain to a target domain? †† ADMT †† Password Export Server †† DirSync †† BizTalk †† Users in the target domain are always assigned a new password  Module 12 lab and review  581 Question During an AD DS upgrade, which commands must you run before introducing the first domain controller running Windows Server 2019? Choose two †† Adprep /domainprep †† Set-ADDomainMode -DomainMode Windows2016Domain †† Adprep /updateschema †† Adprep /forestprep †† Dfrsmig /getmigrationstate Question Which of the following are true of Storage Migration Service? Choose three †† It can migrate the name of a source server to a destination server †† It can migrate the IP address of a source server to a destination server †† It can combine multiple source servers onto a single destination server †† It can migrate domain users to a new target domain †† It can migrate security permissions for files and folders to a destination server Question Which of the following server operating systems can't have their identity migrated by Storage Migration Service? Choose two †† Windows Server 2003 †† Windows Small Business Server †† Linux servers configured with Samba †† Windows Server 2012 failover cluster †† Windows Server Essentials Question How does Storage Migration Service configure passwords for migrated users? †† Migrated users are assigned a randomly generated 127-character password †† Migrated users are disabled and assigned a blank password †† Migrated users are assigned a 12-character password that's stored in a text file on the destination server †† Migrated users are assigned a password that you specify †† Migrated users are assigned the same password that they had on the source server 582  Module 12 Upgrade and migration in Windows Server   Question Which two cmdlets from the Windows Server Migration Tools would you use to migrate Dynamic Host Configuration Protocol (DHCP) settings from a source server to a destination server? Choose two †† Receive-SmigServerFeature †† Export-SmigServerFeature †† Get-SmigServerFeature †† Import-SmigServerFeature †† Send-SmigServerFeature  Module 12 lab and review  583 Answers Question Which of the following are true about upgrading Active Directory Domain Services (AD DS)? Choose two †† The highest available forest functional level is Windows Server 2012 R2 ■■ All domain controllers must be running Windows Server 2019 or Windows Server 2016 before you can raise the forest functional level to Windows Server 2016 ■■ Upgrading AD DS to use domain controllers running Windows Server 2019 can be done without any downtime †† Upgrading AD DS is very complex and requires downtime Explanation The highest available forest and domain functional levels are Windows Server 2016 To use the Windows Server 2016 domain and forest functional levels, all domain controllers must be running Windows Server 2019 or Windows Server 2016 When you upgrade to using domain controllers running Windows Server 2019, no downtime is required because clients automatically begin using the new domain controllers when they're available Question What is the minimum forest functional level required to support a domain controller running Windows Server 2019? †† Windows Server 2003 R2 ■■ Windows Server 2008 †† Windows Server 2008 R2 †† Windows Server 2012 †† Windows Server 2016 Explanation The minimum forest and domain functional levels required to support a domain controller are Windows Server 2008 Question You're using Storage Migration Service to migrate file shares from a source server to a destination server If you want to use a single account to connect to the source and destination servers, which permissions need to be configured for the account? Choose three †† Member of users on source server ■■ Member of administrators on source server †† Member of users on orchestrator server ■■ Member of administrators on orchestrator server ■■ Member of administrators on destination server Explanation A source migration account must be an administrator on the source server and the orchestrator server A destination migration account must be an administrator on the destination server and the orchestrator server To use a single account for migration, the account must be an administrator on the source server, destination server, and the orchestrator server 584  Module 12 Upgrade and migration in Windows Server   Question What information you need to specify during the cutover phase of a job in Storage Migration Service? Choose three ■■ The name to assign to the source server †† The name to assign to the destination server ■■ The IP address to assign to the source server †† The IP address to assign on the destination server ■■ The network adapter to configure on the destination server Explanation During cutover, you must provide the name and IP address to assign to the source server This is required because the original name and IP address of the source server are being assigned to the destination server On the destination server, you must specify which network adapter will be configured with the IP address from the source server Question Which of the following operating systems isn't supported in the Server Core configuration when using Windows Server Migration Tools? †† Windows Server 2019 ■■ Windows Server 2008 †† Windows Server 2012 R2 †† Windows Server 2016 †† Windows Server 2003 Explanation To run the Windows PowerShell cmdlets provided by the Windows Server Migration Tools, the operating system must include the NET Framework Windows Server 2008 Core doesn't support running the NET Framework or Windows PowerShell Newer versions of Windows Server running as Server Core support the NET Framework and Windows PowerShell Windows Server 2003 wasn't available in Server Core configuration Question How can you install the Windows Server Migration Tools on Windows Server 2019? Choose two ■■ Run Install-WindowsFeature Migration †† Download the Windows Server Migration Tools from the Microsoft Download website †† Run SmigDeploy.exe ■■ Use Windows Admin Center to install the Windows Server Migration Tools feature Explanation You can use the Install-WindowsFeature cmdlet to install the Windows Server Migration Tools The name of the Windows Server Migration Tools feature is Migration when using the Install-WindowsFeature cmdlet When you install the Windows Server Migration Tools feature by using Server Manager or Windows Admin Center, it uses the full name Windows Server Migration Tools in the user interface The SmigDeploy.exe tool is used to create a deployment folder and can't be used to install the Windows Server Migration Tools feature The Add-WindowsFeature cmdlet doesn't exist  Module 12 lab and review  585 Question Which of the following are true about migrating to a new Active Directory Domain Services (AD DS) forest? Choose two †† Migrating to a new AD DS forest is simpler than upgrading an existing AD DS forest †† You must use the same domains and organizational unit (OU) structure in the new forest ■■ You must use new domain names †† All objects must be migrated from the source to the destination ■■ During a phased migration, you can maintain access to resources in the source and destination AD DS forests Explanation The process of migrating to a new AD DS forest is complex and much harder than upgrading an existing AD DS forest When you migrate to a new AD DS forest, you must use new domain names to avoid naming conflicts The new AD DS forest doesn't need to mimic the OU structure of the existing domains, and you can combine multiple domains into a single domain You can choose the specific objects that you want to migrate Most migrations will be phased; during a phased migration you can maintain access to resources in both AD DS forests by using a forest trust and populating the sIDHistory attribute Question Which software is used to sync user passwords from a source domain to a target domain? †† ADMT ■■ Password Export Server †† DirSync †† BizTalk †† Users in the target domain are always assigned a new password Explanation ADMT doesn't include native functionality to sync passwords from a source domain to a target domain You need to install Password Export Server on a domain controller in the source domain Question During an AD DS upgrade, which commands must you run before introducing the first domain controller running Windows Server 2019? Choose two ■■ Adprep /domainprep †† Set-ADDomainMode -DomainMode Windows2016Domain †† Adprep /updateschema ■■ Adprep /forestprep †† Dfrsmig /getmigrationstate Explanation Before you introduce the first domain controller running Windows Server 2019 to an AD DS forest or domain, you need to prepare the forest and domain by using Adprep This is required even if the forest and domain are already at the Windows Server 2016 functional level The command Adprep /forestprep prepares the forest and includes schema extensions The command adprep /domainprep prepares the domain 586  Module 12 Upgrade and migration in Windows Server   Question Which of the following are true of Storage Migration Service? Choose three ■■ It can migrate the name of a source server to a destination server ■■ It can migrate the IP address of a source server to a destination server †† It can combine multiple source servers onto a single destination server †† It can migrate domain users to a new target domain ■■ It can migrate security permissions for files and folders to a destination server Explanation Storage Migration Service can migrate file shares and their contents from a source server to a destination server The data migration includes security permissions Storage Migration Service can migrate the identity from a source server to a destination server The identity includes the server name and the IP addresses of the source server However, it can't migrate the identities of multiple source servers to a single destination server, which means you can't combine multiple source servers onto a single destination server Storage Migration Service can migrate local users and groups from a source server to a destination server The security permissions for domain users are preserved, but domain users aren't migrated Question Which of the following server operating systems can't have their identity migrated by Storage Migration Service? Choose two †† Windows Server 2003 ■■ Windows Small Business Server †† Linux servers configured with Samba †† Windows Server 2012 failover cluster ■■ Windows Server Essentials Explanation Both Windows Small Business Server and Windows Server Essentials are configured as domain controllers Migrating the identity of domain controllers isn't possible You can migrate the identity of Windows member servers and Linux servers configured with Samba Question How does Storage Migration Service configure passwords for migrated users? ■■ Migrated users are assigned a randomly generated 127-character password †† Migrated users are disabled and assigned a blank password †† Migrated users are assigned a 12-character password that's stored in a text file on the destination server †† Migrated users are assigned a password that you specify †† Migrated users are assigned the same password that they had on the source server Explanation When local users are migrated by Storage Migration Service, the new local user account is assigned a randomly generated 127-character password that isn't recorded anywhere To begin using the local user account, you must assign it a known password  Module 12 lab and review  587 Question Which two cmdlets from the Windows Server Migration Tools would you use to migrate Dynamic Host Configuration Protocol (DHCP) settings from a source server to a destination server? Choose two †† Receive-SmigServerFeature ■■ Export-SmigServerFeature †† Get-SmigServerFeature ■■ Import-SmigServerFeature †† Send-SmigServerFeature Explanation You should use Export-SmigServerFeature to save configuration information on the source server Then you should use Import-SmigServerFeature to import configuration information on the destination server These are the two cmdlets that are required The Get-SmigServerFeature cmdlet lets you notice which features can export from the source server This can be useful, but it isn't required The Send-SmigServerFeature and Receive-SmigServerFeature cmdlets are used to migrate file shares You shouldn't use these cmdlets with Windows Server 2019 Instead, you should use Storage Migration Service ... deploying Windows Server 2019 Essentials The Windows Server Essentials Experience role has been deprecated from Windows Server Essentials 2019 Windows Server 2019 Standard edition Windows Server 2019. .. edition Windows Server 2019 is released in the following four editions: ●● Windows Server 2019 Essentials ●● Windows Server 2019 Standard ●● Windows Server 2019 Datacenter ●● Microsoft Hyper-V Server. .. in Windows Server High availability in Windows Server Disaster recovery in Windows Server Windows Server security RDS in Windows Server 10 Remote access and web services in Windows Server 11 Server