Cert Exam Prep: Exam 70-742: Identity with Windows Server 2019 – Study notes

By | November 4, 2020
2,040 Comments
  1. Install and configure Active Directory Domain Services (AD DS) (20–25%)

Install Active Directory

Know the PowerShell commands:

– Add the binaries

Add-WindowsFeature -name ad-domain-services—lncludeManagementTools -Restart

– Add a new forest

Install-ADDSForest —DomainName ‘corp.contoso.com’

– Add a new domain in an existing forest

Install-ADDSDomain -NewDomainName amer ParentDomainName ‘corp.contoso.com’

– Add a new domain controller in an existing domain

Install-ADDSDomainController —DomainName ‘amer. corp.contoso.com’

– Perform a staged read-only domain controller (RODC) installation

Install-ADDSReadOnlyDomainControl|erAccount –DomainControllerAccountName RODC1 -DomainName amercorp contoso com -SiteName Boston

* Then on RODC1: add the ad-domain-services feature, and domain controller role

 

Transferring and seizing FSMO roles

Exam Topic – What you should know!

Transfer FSMO Roles

  • Perform this on a domain controller which will be down for maintenance for a period of time, to ensure there is no loss of the fsmo service

  • Move-ADDirectoryServerOperationMasterRo|e -Identity “Target-DC” -OperationMasterRole SchemaMaster,RlDMaster,InfrastructureMaster, DomainNamingMaster,PDCEmulator

Seize FSMO Roles

  • Perform this if a domain controller is down and cannot be recovered, to ensure there is no loss of the FSMO service

  • Move-ADDirectoryServerOperationMasterRole -ldentity “Target-DC’ -OperationMasterRole SchemaMaster,RIDMaster,InfrastructureMaster,DomainNamingMaster,PDCEmulator -Force

FSMO roles can be represented by numbers

  • Move-ADDirectoryServerOperationMasterRole -Identity “Target-DC” -OperationMasterRole 0,1,2,3,4 -Force

– 0: PDC Emulator

– 1: RID Master

– 2: Infrastructure Master

– 3: Schema Master

– 4: Domain Naming Master

 

Additional common active directory install functions

Install from media

  • Useful when the database is on a domain controller across a slow WAN link

  • Install-ADDSDomainController —DomainName ‘amer.corp.contoso.com” -lnstallationMediaPath C:\ADMedia

Configure a domain controller to not be global catalog server

  • InstalI-ADDSDomainController —DomainName ‘amer.corp.contoso.com” —NoGlobalCatalog

Move the Infrastructure Master FSMO role

  • Needed if the domain controller will be a global catalog server

  • Install-ADDSDomainController —DomainName ‘amer.corp.contoso.com” -MovelnfrastructureMasterRolelfNecessary

Uninstall active directory and demote to a server

  • Uninstall-ADDSDomainController

Time-limited Group Memberships

Users can be added to a security group with time-to-live (TTL)

  • When the TTL expires, the user’s membership in that group disappears

Kerberos token lifetime will be determined by TTL of the user’s memberships

  • TGT (Ticket Generated Ticket) based on shortest group membership
  • ST (Shortest time) based on TGT and resource local domain group membership

Requires new FFL (Force Functional Level)

  • Scavenger thread takes care of cleaning up group memberships

 

Way to join a computer to the domain

System Control Panel

  • System added to default container unless pre—staged

Windows PowerShell

  • Add-Computer -ComputerName ‘Server1′ -DomainName ‘amer.corp.contoso.com’ -Credential Get-Credential -Restart

  • System added to default container unless pre-staged

Desired State Configuration (DSC)

  • Joins a computer to the domain, and re-joins if it ‘falls out‘ of the domain
  • Uses Start-DscConfiguration cmdlet, and can be set to check compliance every x minutes

Offline domain join

  • Run djoin.exe on a domain controller to pre-stage the object and create provisioning file
  • Run djoin.exe on target computer and point to the provisioning file

Tips

  1. Know the PowerShell commands for installing and managing Active Directory
  2. Active Directory, FSMO Roles, DNS. Group Types and scopes haven’t really changed, but if you haven’t managed them lately, brush up
  3. Desired State Configuration (DSC) can be used to join a server to the domain and rejoin it if necessary

 

  1. Manage and Maintain AD DS (15-20%)

Configure service authentication

Service Accounts

  • Used to enhance security but the pain point is the password management and SPN mgmt.
  • Two types: Managed Service Accounts and Group Managed Service Accounts

Create/configure Managed Service Accounts

  • Used for a single computer or server
  • New-ADServiceAccount with the —RestrictToSingleComputer parameter
  • Not supported for scheduled tasks, Exchange, SQL

Create/configure Group Managed Service Accounts

  • Used for multiple servers
  • Minimum of one DC that runs at least Windows Server 2012
  • Before you begin, must create KDS Root Key: Add-KDSRootKey -Effectivelmmediately
  • New-ADServiceAccount and Set-ADServiceAccount

Configure Kerberos delegation

  • IIS may require the Trust this computer for delegation to any service (Kerberos only) option

Manage Service Principal Names (SPNs)

  • Use SetSPN <service type>/<instance name>:<port number>/<service name>
Category: Microsoft Tips Windows

About Gerald

A Technology Enthusiast with over 15 years experience. Entrepreneur, and founder of TechLimbo. Besides technology I like the EPL, F1, MotoGP, NFL, Basketball, Video Gaming and Swimming.

2,040 thoughts on “Cert Exam Prep: Exam 70-742: Identity with Windows Server 2019 – Study notes”

  41. Vito

    The Best Program Keys For Cars Methods For Changing
    Your Life how much to reprogram a car key uk (Vito)

  44. Anja

    How Defra Exempt Wood Burner Has Become The Most Sought-After Trend In 2023 DEFRA stoves benefits – Anja,

  52. Dale

    How The 10 Worst Robot Vacuum With Lidar-Related FAILS
    Of All Time Could’ve Been Prevented robot vacuums with obstacle avoidance lidar (Dale)

  80. Omer

    Double Glazing Maidstone 101: Your Ultimate
    Guide For Beginners window handle replacement maidstone (Omer)

  97. telegra.ph

    From the 1930s until the 1970s, Asbestos Settlement (telegra.ph)
    was widely used in building materials. It was used in insulation for pipes, fireproofing products cements and plasters, car brakes and much
    more.

  98. Irish

    How Compact All Terrain Stroller Its Rise To The No.

    1 Trend On Social Media strollers for rough
    terrain – Irish,

  120. Janie

    9 Lessons Your Parents Teach You About Composite Front Door Replacement
    composite front door replacement (Janie)

  195. Jere

    Guide To Auto Ghost Immobiliser: The Intermediate Guide The Steps
    To Auto Ghost Immobiliser auto ghost immobiliser (Jere)

  208. Adriene

    Power Mobility Scooters Techniques To Simplify Your Daily Life Power Mobility Scooters
    Trick That Every Person Should Learn power mobility scooters; Adriene,

  319. Brandy

    Mobility Scooters For Sale Second Hand: What’s The Only Thing Nobody Is Talking About fast mobility scooters
    for sale (Brandy)

  371. Orval

    Disorder Social Anxiety Techniques To Simplify Your Daily Lifethe One
    Disorder Social Anxiety Trick That Every Person Must Know disorder social anxiety [Orval]

  403. Felix

    Rollator With Seat Uk Tools To Streamline Your Daily Life Rollator With Seat Uk
    Trick That Everyone Should Know rollator with seat uk (Felix)

  408. Brady

    See What Audi Replacement Key Service Near Me Tricks The Celebs Are Utilizing audi replacement key service
    near me (Brady)

  477. Wally

    5 Common Phrases About Electric Wheelchair With Joystick You
    Should Stay Clear Of electric power chairs for sale (Wally)

  534. Dyan

    See What Lightweight Folding Child’s Wheelchair
    Tricks The Celebs Are Making Use Of lightweight folding
    child’s wheelchair (Dyan)

  542. Jonnie

    16 Facebook Pages You Must Follow For Adhd Assessment Adults-Related Businesses adult adhd
    diagnostic assessment and treatment (Jonnie)

  556. Mari

    11 “Faux Pas” That Are Actually Okay To Create With Your Skoda Key Fob Replacement skoda octavia 2 key programming – Mari,

  558. Shella

    Ten Stereotypes About Lightweight Foldable Electric Wheelchair That Don’t Always Hold
    foldable lightweight electric wheelchair – Shella –

  604. Tod

    What’s The Current Job Market For Lightest Automatic Folding Mobility Scooter Professionals?
    lightest automatic folding mobility scooter (Tod)

  629. asbestos claim

    A mesothelioma lawyer with experience can help determine the eligibility of a patient and provide compensation options.
    A lawyer can also guarantee that a asbestos claim is filed within the period of limitations.

  639. Karl

    The Leading Reasons Why People Perform Well With The Subaru Car Keys Replacement Industry subaru lost keys (Karl)

  701. Regan

    15 Terms That Everyone Who Works In Mazda Key Replacement Near
    Me Industry Should Know mazda cx 5 key replacement; Regan,

  827. Asbestos Claim

    A knowledgeable Asbestos Claim lawyer can assist you to
    bring a claim against parties responsible for your exposure.
    They can also help you navigate the settlement or lawsuit process
    to ensure the best possible outcome.

  908. Asbestos Claim

    A reputable mesothelioma lawyer has the expertise and resources
    to assist victims in receiving compensation. Compensation can be received from various sources which include VA benefits
    or Asbestos Claim
    Trust Funds.

  999. Hudson

    11 “Faux Pas” That Are Actually Okay To Make With Your Wine Fridge Undercounter undercounter wine refrigerator (Hudson)

  1051. asbestos Law

    Unlike the pleural form of mesothelioma that affects the lining of the
    chest cavity and the lungs, peritoneal mesothelioma is found within the tissue that lines the abdomen.
    This rare cancer is related to asbestos Law exposure.

  1078. Damion

    It’s The One Triple Bunk With Storage Trick Every Person Should Be Able To bunk beds double on bottom single on top – Damion –

  1079. Asbestos Litigation

    Asbestos lawyers may also pursue compensation from asbestos
    trust funds established by manufacturers that have gone bankrupt.

    A knowledgeable attorney can study your history of exposure and identify the Asbestos Litigation products you were exposed to.

  1120. Kiera

    What’s The Job Market For Composite Door Glass Replacement Professionals Like?
    composite door glass replacement (Kiera)

  1198. Andra

    10 Easy Ways To Figure The Cutting-Edge Electric Scooters You’re Looking For mobility
    scooter electric 4 wheel (Andra)

  1273. Cary

    15 Things Your Boss Wished You’d Known About Adult Double Loft Bed bunk beds with stairs for adults [Cary]

  1290. Gaye

    There Are A Few Reasons That People Can Succeed With The Uk
    Private Psychiatrist Industry private psychiatrist derby (Gaye)

  1329. Eloy

    Forget Non Prescription ADHD Medication: 10 Reasons That
    You No Longer Need It can you get adhd medication without a
    diagnosis [Eloy]

  1336. Lester

    The Reasons ADHD In Women In 2023 Is The Main Focus Of All People’s Attention. 2023 famous women with adhd
    – Lester –

  1371. Christie

    Best Bunk Bed Ideas Tools To Help You Manage Your Daily Lifethe One Best Bunk Bed Ideas Trick Every
    Individual Should Be Able To best bunk bed ideas, Christie,

  1396. asbestos Claim

    An experienced mesothelioma law firm has the expertise and resources to help victims receive compensation. Compensation can be received from various sources which include VA benefits or asbestos Claim
    trust funds.

  1409. Marta

    Guide To Pavement Mobility Scooters With Suspension:
    The Intermediate Guide Towards Pavement Mobility Scooters With Suspension pavement mobility scooters,
    Marta,

  1427. Asbestos Law

    Many families of those who have been affected by mesothelioma receive compensation as a result of a mesothelioma case verdict or settlement.

    Compensation may also be derived from Asbestos Law trust funds or the Department of Veterans Affairs.

  1472. Maple

    Watch Out: How Coffee Grinders Sale Is Taking Over The World And What You Can Do About It burr grinders – Maple –

  1484. Koby

    Private Adult ADHD Assessment’s History History Of Private Adult ADHD Assessment private adhd assessment adult cost,
    Koby,

  1488. Gia

    Content Marketing Seo Tools To Improve Your Daily
    Lifethe One Content Marketing Seo Trick That Everybody
    Should Know content marketing seo (Gia)

  1518. Enrique

    The No. Question Everybody Working In Affordable SEO Company London Should Be Able To Answer affordable search engine optimization (Enrique)

  1610. Leah

    What’s The Job Market For Backlink Building Software Professionals Like?
    backlink building software (Leah)

  1613. Asbestos Case

    It could take up to half a century between Asbestos Case
    exposure and mesothelioma. Because of the lengthy period of latency, patients and their families need an experienced mesothelioma attorney immediately.

  1634. Lupe

    One Key Trick Everybody Should Know The One Key Fob Repair Trick Every Person Should Learn remote key fob repair near me, Lupe,

  1686. Ebony

    20 Questions You Should Ask About Psychiatrist Private Before You Purchase Psychiatrist Private private consultant
    psychiatrist near me (Ebony)

  1693. Ilene

    Watch Out: How Search Engine Optimisation Agency Is
    Taking Over The World And How To Respond seo agency london – Ilene –

  1728. Harriet

    If you or a loved one has been diagnosed with an asbestos-related condition you might be able to make an asbestos law (Harriet) lawsuit.

  1769. Bud

    The Next Big Trend In The Mobility Scooter Veleco Industry veleco
    faster mobility scooter (Bud)

  1780. Ezra

    A reputable mesothelioma lawyer will provide a free case assessment
    to determine if you are eligible for compensation.
    Additionally, the best mesothelioma attorneys work on a
    contingency basis. This arrangement maximizes compensation for
    clients.

    My site :: asbestos law [Ezra]

  1785. Aracely

    7 Small Changes You Can Make That’ll Make A Big Difference With Your ADHD In Women Symptoms
    attention deficit disorder in adult women, Aracely,

  1797. Sherry

    14 Questions You’re Afraid To Ask About Lightest Automatic Folding Mobility
    Scooter mobility scooter automatic folding – Sherry,

  1804. Sol

    These Are The Most Common Mistakes People Make When Using
    Double Buggy 3 Wheels 3 wheel buggy for sale (Sol)

  1816. Arden

    Are You In Search Of Inspiration? Check Out Incline Treadmill
    Foldable treadmill with incline for small spaces (Arden)

  1817. Aurora

    A Journey Back In Time How People Talked About Retro Red Fridge Freezer 20 Years Ago side by side fridge freezer with temperature control
    (Aurora)

  1820. Asbestos case

    Families of Asbestos case workers are also at risk.
    After exposure, mesothelioma may develop 30 to 60 years later.

    The majority of cases are found in the pleura, which covers the lungs.
    Other forms of the disease can be seen in the peritoneum.

  1821. Valarie

    You Will Meet One Of The Sports Toto Result Latest
    Industry’s Steve Jobs Of The Sports Toto Result Latest Industry 스포츠토토 사이트 (Valarie)

  1831. mesothelioma Law

    Many families of mesothelioma Law patients
    receive compensation through mesothelioma lawsuits or
    trial verdict. The compensation may also come from asbestos trust funds as well as the Department of
    Veterans Affairs.

  1849. Bebe

    What Is Small Chest Freezers Uk And Why
    Is Everyone Speakin’ About It? most energy efficient chest
    freezer uk – Bebe,

  1855. Arlene

    What’s The Reason Sports Toto Check Winning Is Fastly
    Changing Into The Hottest Trend For 2024 토토 꽁머니
    (Arlene)

  1860. Foster

    The 10 Most Terrifying Things About Lightweight Automatic Folding Mobility Scooters automatic folding mobility scooters (Foster)

  1869. Clay

    Quiz: How Much Do You Know About French Style Fridge Freezer With Water And Ice Dispenser?
    french door fridge kitchenaid [Clay]

  1872. Miquel

    Green Mobility Scooters Tools To Streamline Your Everyday Lifethe Only Green Mobility Scooters Trick That Every Person Should Be Able To green mobility
    (Miquel)

  1881. Hilda

    Watch Out: How Wall Fireplace Is Taking Over And How
    To Respond electric fireplaces that hang on the
    wall (Hilda)

  1893. Virgil

    10 Wrong Answers To Common Pragmatic Sugar Rush Questions Do
    You Know The Right Ones? 프라그마틱 슬롯 무료체험 (Virgil)

  1911. Isaac

    Upvc Windows Near Me Tools To Help You Manage Your Daily Life Upvc Windows Near Me Trick Every Individual Should
    Know upvc windows near me, Isaac,

  1912. Doreen

    Responsible For The Stand Alone Electric Fireplace Budget?
    10 Terrible Ways To Spend Your Money freestanding inset electric fires (Doreen)

  1917. Edward

    A knowledgeable mesothelioma lawyer will determine the most effective way to obtain compensation. This could involve
    filing a personal injury lawsuit, a wrongful death lawsuit or a
    claim against an asbestos lawsuit – Edward – trust fund.

  1943. Lou

    The 10 Worst Pragmatic Authenticity Verification Fails
    Of All Time Could Have Been Prevented 프라그마틱 정품
    사이트 (Lou)

  1952. Jetta

    If you or a loved one has been diagnosed with an asbestos-related condition and you are eligible, you could be able to file an asbestos
    lawsuit, Jetta,.

  1958. Billie

    5 Laws That Anyone Working In Assessments For Adhd In Adults Should
    Be Aware Of adhd diagnostic assessment for adults
    (Billie)

  1983. Emilia

    Guide To Auto Folding Mobility Scooter Near Me: The Intermediate Guide Towards Auto Folding Mobility Scooter Near
    Me Auto Folding Mobility Scooter near Me – Emilia –

  2001. Lucie

    French Door Fridge 10 Things I’d Like To Have Known Earlier
    fisher and paykel french door integrated fridge (Lucie)

  2028. Melvina

    Three Common Reasons Your Three Wheel Electric Scooters For Adults For Sale Isn’t
    Working (And How To Fix It) 3 wheel mobility scooters for adults
    (Melvina)

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.