A.2.2 Pro Domain 2: Windows Server File and Storage Services

You are configuring the file system of a Windows Server computer named CorpFiles. The D:\Users folder has already been shared using the share name Users. In this lab, your task is to: Add an additional share, named Home Folders, to the D:\Users folder. Keep the default user limits, share permissions, and offline files settings that were set when the original share was created.

Connect to the CorpFiles virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles to connect to the virtual server. Add a share name of Home Folders for the D:\Users folder. On the taskbar, select File Explorer. From the left pane, expand and select This PC > Data (D:). From the right pane, right-click Users and select Properties. Select the Sharing tab. Select Advanced Sharing. Select Add. Enter Home Folders in the Share name field. Select OK to add the new share. Select OK to save the changes.

You are configuring the file system for the CorpFiles Windows server. You have shared the D:\Shared folder for common file access. The group named Everyone has complete NTFS permissions to the folder (except permission to change file and folder permissions). Network users report that they can only read data in the Shared folder. They should be able to create, edit, and delete all folders and files. You want to enable these permissions using the least administrative effort. In this lab, your task is to fix the user access problem by granting the Everyone group the Change share permission for the Shared folder.

Access the CorpFiles virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles to access the virtual server. Grant the Change share permission for the Shared folder. On the taskbar, select File Explorer. From the left pane, select This PC. From the right pane, double-click Data (D:). Right-click Shared and select Properties. Select the Sharing tab. Select Advanced Sharing. Select Permissions. Under Group or users names, make sure that Everyone is highlighted. Under Allow, select Change and then select OK. Select OK to save the changes.

You are the IT administrator for a small corporate network. You need to simplify file access for various departments using the Distributed File System (DFS). Your implementation should be configured as follows: The CorpDC2 server will host a domain namespace and several replicated folders. The server will replicate with other servers running DFS. In this lab, your task is to: Add the DFS Namespace role services. Add the DFS Replication role services. Create a namespace using the following parameters: Use the CorpDC2 server. Name: SharedFiles Use a domain-based namespace. Configure the namespace to use access-based enumeration. Create folders with targets as follows:

Access the CorpDC2 virtual server. From Hyper-V Manager, select CORPSERVER. Double-click CorpDC2 to access the virtual server. Add the DFS role services. From Server Manager, select Manage > Add Roles and Features. Select Next to begin the Add Roles and Features Wizard. Select Next to use Role-based or feature-based installation. Select Next to accept the default options of:Select a server from the server poolName: CorpDC2.CorpNet.local Expand and select File and Storage Services > File and iSCSI Services > DFS Namespaces. Select Add Features to include the management tools. Select Next. Select Next. Select Install. After the role services install, select Close Create a domain-based DFS namespace. From Server Manager, select Tools > DFS Management. Right-click Namespaces and select New Namespace. In the Server field, enter CorpDC2 and then select Next. In the Name field, enter SharedFiles and then select Next. Select Enable Windows Server 2008 mode to allow access-based enumeration. Select Next. Select Create. Select Close. Add folders. Right-click \\CorpNet.local\SharedFiles and select New Folder. In the Name field, enter the folder name and then select Add. Enter the path to the target folder. Select OK. Select OK. Repeat steps 4a - 4e to add the additional folders.

You are using the CorpFiles16 server as a virtual file server. You can do basic file server management for network users, but you need to be able to perform the following file server management tasks: Define policies that prevent users from saving .wmv files in the home folders stored on the server. Share files with UNIX-based clients. In this lab, your task is to: Add the File Server Resource Manager (FSRM) role service, which allows you to configure file screens to prevent users from saving specific file types in specific folders. Add the Server for NFS role service to be able to share files with UNIX-based clients.

Access the CorpFiles16 virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles16 to access the server. Add the File Server Resource Manager (FSRM) role service. From Server Manager, select Manage > Add Roles and Features. From the Add Roles and Features Wizard, select Next. Make sure Role-based or feature-based installation is selected and then select Next. Make sure CorpFiles16.CorpNet.local is selected in the Server Pool area and then select Next. Expand File and Storage Services > File and iSCSI Services. Select the File Server Resource Manager role. Select Add Features. Add the Server for NFS role service. Under File and iSCSI Services, select the Server for NFS role. Select Add Features. Select Next. On the Select features window, select Next. Select Install. When the installation is complete, select Close.

You are configuring the file system on the CorpFiles16 Windows Server. The H:\Archives folder has been previously shared, and users have read-only access to the Archives shared folder. When a client computers accesses a file in the Archives shared folder, you want to automatically cache a copy to the user's workstation. This will optimize system performance by preventing unnecessary network use when files are accessed in the future. In this lab, your task is to: Make all files and programs that users open from the H:\Archives shared folder automatically available offline. Optimize performance by caching programs and files.

Access the CorpFiles16 virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles16 to connect to the virtual server. Configure offline file caching. From the taskbar, open File Explorer. From the left pane, expand and select This PC > Projects (H:). Right-click the Archives and select Properties. Select the Sharing tab. Select Advanced Sharing. Select Caching. Select All files and programs that users open from the shared folder are automatically available offline to enable automatic caching of files. Optimize performance by caching programs and files. Make sure Optimize for performance is enabled. Select OK to close the Offline Settings dialog. Select OK to save your setting changes.

You need to configure the file system of a Windows Server computer named CorpFiles16. You want to make sure that no data from the D:\Confidential shared folder ever gets cached to local computers. In this lab, your task is to: Disable caching for the D:\Confidential folder.

Access the CorpFiles16 virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles16 to connect to the virtual server. Disable caching for the D:\Confidential folder. On the CorpFiles16 server, open File Explorer. From the left pane, expand and select This PC > Data (D:). From the right pane, Right-click Confidential and select Properties. Select the Sharing tab. On the Sharing tab, select Advanced Sharing. Select Caching. Select No files or programs from the shared folder are available offline to disable caching. Select OK to close the Offline Settings dialog. Select OK to close the Advanced Sharing dialog and to save your changes.

You are the network administrator for your company. You are using Azure Arc to help manage your servers. To be able to view compliance, you have decided to assign a guest configuration policy to your server. In this lab, your task is to assign an Azure policy using the following information: Azure Arc server: NYC-SRV1 Policy definition: Configure Log Analytics extension on Azure Arc enabled Windows servers Log Analytics workspace: ws-corp-cloud-log-analytics

Access the NYC-SVR1 Azure server. Maximize the Google Chrome window for better viewing. Under Azure Services, select Azure Arc. From the left pane, under Infrastructure, select the Servers blade.A list of previously added servers is displayed. Select the server named NYC-SRV1. Assign an Azure policy. From the left, under Operations, select the Policies blade. Select Assign policy. Under Basics, to the right of Policy definition, select the box containing "...". Type windows servers in the Search field. Select Configure Log Analytics extension on Azure Arc enabled Windows servers. From the bottom, click Select.The Policy definition and Assignment name fields are populated. From the bottom, select Next. Use the Log Analytics workspace drop-down menu to select ws-corp-cloud-log-analytics. Select Review + create. Select Create.

You are the network administrator for your company. You are configuring Azure to help manage your network. You are synchronizing on-premise files to the cloud. The last step is to add the Server Endpoint. You have already downloaded the Azure File Sync agent and installed it on your on-premise server CorpFiles. The Azure File Sync agent registers the server with Azure. In this lab, your task is to: Add CorpFiles as a Server Endpoint to CorpFilesSyncGroup. Synchronize the entire D:\ drive from CorpFiles with the Azure file share. Browse the folders to see what files have been synced from the on-premise server.

Add the on-premise server as a Server Endpoint. Maximize the Google Chrome window for better viewing. From Recent Resources, select CorpFileSyncService. Select the CorpNetSyncGroup. Select Add server endpoint. Under Registered Server, select CorpFiles. Under Path, type the path to the files you want to sync from the registered server (D:\). Select Create. Verify that files are syncing from the server to the Azure storage account. In the top left, select Home. Under Recent Resources, select corpnetstorageaccount. Under Data Storage, select the File shares blade. Select corpnetfileshare. Browse the folders to see what files have been synced from the on-premise server.

Your company has a Windows server located in the southern UK (United Kingdom). To help you manage this server from multiple locations, you want to add this server to Azure Arc. In this lab, your task is to use Azure Arc to generate a script that will add a single server to Azure Arc using the following information: Project details: Subscription: CorpNet Production Resource group: CorpUK Server details: Region: (Europe) UK South Operating system: Windows Connectivity method: Public endpoint Download the script that was just created to onboard your Windows server. Verify that the OnboardingScript has been downloaded to the Downloads folder.

Add the server with the Azure Arc wizard. Maximize the Azure Services window. Under Azure Services, select Azure Arc. From the left pane, under Infrastructure, select Servers. From the menu bar, select Add. For Add a single server, select Generate script. Configure the resource group details and tags. Review the prerequisites and then select Next. Configure the resource details as follows:Subscription: CorpNet ProductionResource group: CorpUKThis is the resource group that will hold your metadata.Region: (Europe) UK SouthOperating system: WindowsConnectivity method: Public endpoint Select Next. Select Next skip the process of adding tags. Download the script to onboard your Windows server. Review the script that has been generated. Select Download to download the default Azure Arc script. Select Close. From the Add servers with Azure Arc window, select the X in the upper right to close the view. Verify that the script was download. Minimize or close Google Chrome. From the Windows taskbar, select File Explorer. From the left pane of File Explorer, select Downloads. Verify that the OnboardingScript is shown.

For security reasons, you want to know if anyone uses the domain Guest account to save any files on the CorpFiles server D: drive of the CorpFiles server. Disk quotas have already been enabled. In this lab, your task is to: Create a new quota entry for the Guest account. Set the quota limit to 500 MB. Set the warning level to 1 KB.

Connect to the CorpFiles virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles to connect to the server. Maximize the window for better viewing Configure Quota for the Guest account. From the taskbar, select File Explorer. From the left pane, select This PC. From the right pane, right-click Data (D:) and then select Properties. Select the Quota tab. From the Quota tab, select Quotas Entries. Select Quotas > New Quotas Entry. Under Enter the object names to select, enter Guest and then select OK. Select Limit disk space to and then in it's field, enter 500 MB. Select OK. Close the Quota Entries window. From the Data (D:) Properties window, select OK.

You work as the IT administrator for a small business and are responsible for the corporate network. Recently, you installed Windows Server 2022 on a new server called CorpFiles. This server will host the home directories for users. Management is concerned that some users will use a large amount of disk space. To prevent this from happening, you need to enable quota management on the shared drive. In this lab, your task is to: Enable quota management on the D: drive using the following specifications: Limit disk usage to 500 MB per new user Give users a warning at 450 MB. Deny additional space to users exceeding the quota limit. Log an event each time a user hits the warning level.

Connect to the CorpFiles virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles to connect to the server. Maximize the window for better viewing. Enable quota management. From the taskbar, select File Explorer. From the left pane, select This PC. From the right pane, right-click Data (D:) and then select Properties. Select the Quota tab. From the Quota tab, select Enable quota management. Select Deny disk space to users exceeding quota limit to deny additional space exceeding the quota limit. Select Limit disk space to. In the Limit disk space to field, use 500 MB and then use its drop-down to select MB. In the Set warning level to field, use 450 MB and then use its drop-down to select MB. Select Log event when a user exceeds their warning level. Click OK to enable the quota system

While the CorpFiles server was configured, a 5 MB disk quota warning for the D: drive was applied to the Administrators account. As a result, the server logs many warning messages. In this lab, your task is to remove all quota limits for the Administrators account.

Connect to the CorpFiles virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles to connect to the virtual server. Maximize the window for better viewing. Remove all quota limits for the Administrators account On the taskbar, select File Explorer. From the left pane, select This PC. From the right pane, right-click Data (D:) and then select Properties. Select the Quota tab. At the bottom, select Quotas Entries. Right-click the existing Administrator quota entry and then select Properties. Select Do not limit disk usage. Select OK to save the change. Close the Quotas Entries window. Select OK to close the Properties window.

You are configuring the file system of a Windows Server named CorpFiles16. The H:\Projects folder is shared using two share names, Projects and Builds. You no longer want the H:\Projects folder to be accessible through the share name Builds. In this lab, your task is to: Remove the share named Builds from the H:\Projects folder.

Connect to the CorpFiles16 virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles16 to connect to the virtual server. Remove the share named Builds from the H:\Projects folder. From the taskbar, open File Explorer. From the left pane, expand and select This PC > Projects (H:). From the right pane, right-click Projects and select Properties. Select the Sharing tab. Select Advanced Sharing. Use the Share name drop-down list to select Builds.

Confidential personnel data is stored on the CorpFiles16 file server in a shared directory named Personnel. You need to configure NTFS permissions for this folder so that only managers are authorized to access the folder. In this lab, your task is to: Grant the group named Managers the Full Control permission to the H:\Personnel folder. Remove all inherited permissions that are flowing to the H:\Personnel folder.

Connect to the CorpFiles16 virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles16 to connect to the virtual server. Maximize the window for better viewing. Configure NTFS permissions. From the taskbar, select File Explorer. From the left pane, select This PC. From the right pane, double-click Projects (H:). Right-click Personnel and select Properties. Select the Security tab. Select Edit. Select Add. In the Enter the object names to select field, type Managers and then select OK. With the Managers group selected, under Allow, select Full control. Select OK. Prevent inherited permissions from parent objects. From the Security tab, select Advanced. Select Disable inheritance. Select Remove all inherited permissions from this object. Select OK to close the Advanced Security Settings for Personnel dialog. Select OK to close the Properties dialog.

You need to manage the permissions assigned to various folders. Department data is stored on CorpFiles16 in a folder named D:\Departments. Within the Departments folder, each department has a subfolder where they can publish files to the rest of the company. The default permissions inherited by the D:\Departments folder and each subfolder currently allow all users to read and execute files. In this lab, your task is to configure permissions for each departmental subfolder so that only users within each department can change their department's files. To complete this task, assign the permissions specified in the following table:

Connect to the CorpFiles16 virtual server. From Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Double-click CorpFiles16 to connect to the virtual server. Maximize the window for better viewing. Configure permissions for each departmental subfolder. From the taskbar of CorpFiles16, select File Explorer. From the left pane, select This PC. From the right pane, open Data (D:) > Departments. Right-click the folder and select Properties. Select the Security tab. Select Edit. Select Add. In the Enter the object names to select field, type the name of each security principal that receives permission to the shared folder and then select OK. With the security principal still highlighted, under Allow, select Full control. Select OK twice. Repeat steps 2d-2j for each domain local group.

You are the network administrator for your company. You are configuring Azure to help manage your network. You are synchronizing on-premise files to the cloud. The next step is to create an Azure Sync Group. In this lab, your task is to: Create Sync Group using the following parameters: Sync group name: CorpNetFileSyncGroup Subscription: CorpNet Production Storage Account: corpnetstorageaccount Azure File Share: corpnetfileshare

Create a Sync Group. Maximize the Google Chrome window for better viewing. Under Resources > Recent, select CorpFileSyncService. Select + Sync group. From the Sync Group page, configure the following options Sync group name: CorpNetFileSyncGroup Subscription: CorpNet Production Click Select storage account and then select corpnetstorageaccount Azure File Share: Use the drop-down to select corpnetfileshare. Select Create.

You are the network administrator for a small company. The sales department has grown recently, and they would like additional disk storage space on the CorpiSCSI server. You have decided to provide this storage using storage spaces. In this lab, your task is to complete the following: Using Server Manager, create a new storage space pool. Type: Physical disks Name: CorpiSCSI Pool Use all available disks Create a new virtual disk for the pool just created. Name: CorpiSCSI Virtual Disk Storage Layout: Parity (single) Provisioning type: Thin Size: 10 TB Create a volume and assign a drive letter to the new virtual disk using the following: Drive letter: S File system: NTFS Allocation unit size: Default Volume label: Sales Verify the creation of the new virtual storage space drive and create a new folder. Create the S:\Clients folder on the new volume.

Create a new storage space pool. From the left pane of Server Manager, select File and Storage Services. Maximize the window for better viewing. From the left navigation pane, select Storage Pools. Under PHYSICAL DISKS, use the TASKS drop-down list to select New Storage Pool. From the Before you begin page, select Next to start the wizard. From the Specify a storage pool name and subsystem page, enter CorpiSCSI Pool in the name field. Select Next. Select all available disks and then select Next. Select Create. Select Close. Create a new virtual disk. Under STORAGE POOLS, select the CorpiSCSI Pool. Under VIRTUAL DISKS, use the TASKS drop-down list to select New Virtual Disk. Select OK to use the CorpiSCSI Pool. Select Next to begin the New Virtual Disk Wizard. In the Name field, enter CorpiSCSI Virtual Disk and then select Next. Select Next to use the default Enclosure Awareness options. Select Parity for the Storage Layout and then select Next. For the Resiliency type, make sure Single parity is selected and then select Next. Select Thin for the provisioning type and then select Next. For Specify size field, use 10 and change the drop-down to TB. Select Next. Select Create. Select Close.The New Volume Wizard starts automatically. Create a volume and assign a drive letter to the new virtual disk. Select Next to start the New Volume Wizard. Select Next to use the default server and virtual disk. Select Next to use the default volume size. Under Assign to, use the drop-down list to select S as the drive letter and then select Next. Configure the File System Settings as follows:File system: NTFSAllocation unit size: DefaultVolume label: Sales Select Next. Review your configuration and select Create. Select Close. Verify the creation of the new virtual storage space drive and create a new folder. From the taskbar, select File Explorer. From the left pane, select This PC. From the right pane, double-click Sales (S:). Right-click in the white space and select New > Folder. Name the new folder Clients.

You are the network administrator for your company. You are configuring Azure to help manage your network. You are synchronizing on-premise files to the cloud. The next step is to create an Azure Storage Account with a File Share to sync the files to. In this lab, your task is to: Create a storage account with the following options: Subscription: CorpNet Production Resource group: CorpNetCloud Storage account name (case sensitive): corpnetstorageaccount Region: (US) West US2 Redundancy: Geo-redundant storage (GRS) Create a file share named corpnetfileshare from within the storage account you created.

Create a storage account. Maximize the Google Chrome window for better viewing. Under Resources > Recent, select CorpNetCloud. From the CorpNetCloud menu bar, select Create. Under Popular Products, select the Storage account. From the Create a storage account page, configure the following options:Subscription: CorpNet ProductionResource group: CorpNetCloudStorage account name: corpnetstorageaccountRegion: (US) West US2Redundancy: Geo-redundant storage (GRS) Select Review. Review the options and then select Create. When deployment is complete, select Go to resource. Create a File Share. From within the new storage account, under Data Storage, select the File shares blade. From the top row, select + File share. In the Name field, enter corpnetfileshare as the name of the new file share. Select Create. Select the new file share (corpnetfileshare).There are currently no files in this share.

You are the network administrator for your company. You are configuring Azure to help manage your network. You want to begin synchronizing on-premise files to the cloud. The first step is to create an Azure File Sync service. In this lab, your task is to create an Azure File Sync service using the following information: Recent resource: CorpNetCloud Subscription: CorpNet Production Resource group: CorpNetCloud Storage sync service name: CorpFileSyncService Region: (US) West US2

Create an Azure File Sync service. Maximize the Google Chrome window for better viewing. Under Resources > Recent, select CorpNetCloud. From CorpNetCloud's menu bar, select Create. In the search window, begin typing file sync and then select Azure File Sync when it appears. From the Azure File Sync page, next to Plan, select Create. Configure the Deploy Azure File Sync options as follows:Subscription: CorpNet ProductionResource group: CorpNetCloudStorage sync service name (type in manually): CorpFileSyncServiceRegion: (US) West US2 Select Review + Create. Select Create.Wait for the deployment to complete. Once the deployment is complete, select Go to resource to view the CorpFileSyncService page.

You work as the IT administrator for a small business and are responsible for the corporate network. Until now, the network has consisted only of workstations accessing the internet through a consumer-grade switch. You have convinced management that adding a server would ease your administrative burden. As a result, you are testing various configurations of the Windows Server operating system. You have installed Windows Server on a new computer and named the new server CorpServer2. During installation, you created a single volume for the operating system using 200 GB on the first disk. You also have two additional unused disks installed in the server. In this lab, your task is to: Extend the System (C:) volume to use the remaining space on Disk 0. Create a new volume using Disk 1 and Disk 2 with the following settings: Use all the disk space on Disk 1 and 600 GB (614400 MB) on Disk 2. Use M as the drive letter. Use the NTFS file system. Use Data as the volume label.

Extend the System (C:) volume. Right-click Start and select Disk Management. Select OK to initialize all of the new disks. From the top pane, right-click on the System (C:) volume and select Extend Volume. Select Next to start the wizard. Make sure Disk 0 614050 MB is highlighted and select Next to use the remaining space on Disk 0. Select Finish. Convert disk 1 and 2 to a dynamic disk. From Disk Management, right-click Disk 1 and select Convert to Dynamic Disk. Make sure Disk 1 is marked and select Disk 2. Select OK to convert both disks to dynamic disks. Create a spanned volume. From Disk Management, right-click the unallocated space on Disk 1 and select New Spanned Volume. Select Next. Under Available, select Disk 2 and then select Add. Under Selected, select Disk 2. In the Select the amount of space in MB field, enter 614400 MB to adjust the amount of space used in the new volume. Select Next. Using the drive letter drop-down, select drive letter M. Select Next. In the Volume label field, type Data and then select Next. Select Finish.

You work as the IT administrator for a small business and are responsible for the corporate network. You are creating a share for the H:\Components folder on the CorpFiles16 server. The Research and Development department employees need to store programming components in this shared folder. Data in a shared folder on an NTFS partition has two sets of permissions (share permissions and NTFS permissions). Each user's data access is determined by the most restrictive of these two permissions. You need to secure the data in the folder as follows: Members of the Research Resources group should have full control over the folder. All other users should be able to view the contents of the folder. Permissions should apply to network access through both the share and local access. In this lab, your task is to implement a combined share and NTFS permission strategy as follows: Share the H:\Components folder using the default share name of Components. Configure share permissions by giving the Everyone group Full Control share permissions. Configure NTFS permissions for the H:\Components folder by giving the Research Resources group Full Control permissions. Keep the remaining NTFS permissions. This allows administrators full control and allows all other users to read the folder contents.

Share the H:\Components folder using the default share name. From the taskbar, select File Explorer. From the left pane, select This PC. From the right pane, double-click Projects (H:). Right-click the Components folder and select Properties. Select the Sharing tab. Select Advanced Sharing. Select Share this folder. Use the default name of Components for the Share name field, . Select Apply. Configure the shared folder's permissions. Select Permissions to configure shared folder permissions. With the group named Everyone highlighted, select Full Control and then select OK. Select OK to save the changes and close the Advanced Sharing dialog. Configure NTFS permissions. Select the Security tab. Select Edit. Select Add. In the Enter the object names to select box, enter Research Resources and then select OK. Under Allow, select Full Control. Select OK. Select OK to save the changes.