برنامه‌نویسی برای کودکان: راهنمای جاوااسکریپت، پایتون و C++ برای کودکان و مبتدیان (برنامه‌نویسی برای مبتدیان مطلق)

Cover Copyright Contributors Table of Contents Preface Chapter 1: Getting Started with Windows Server 2022 The purpose of Windows Server It’s getting cloudy out there Public cloud Private cloud Windows Server versions and licensing Standard versus Datacenter Windows Server 2022 Essentials Windows Server 2022 Datacenter: Azure Edition Three different user interfaces Desktop Experience Server Core Nano Server – now only for containers Licensing models – what happened to SAC? Long-Term Servicing Channel (LTSC) Semi-Annual Channel (SAC) (now retiring) License purchase and packs Core Packs At what point do I turn to Datacenter? Client Access Licenses (CALs) Overview of new and updated features Hardware security Network security Protocol updates DNS-over-HTTPS Azure integrations An Azure-specific version of the OS Azure Stack HCI Hotpatching SMB over QUIC Windows Admin Center Storage Containerization The Windows 10 experience continued Hyper-Converged Infrastructure Microsoft Edge Windows Defender Advanced Threat Protection Integration with Linux System Insights Features deprecated in Server 2022 Semi-Annual Channel (SAC) releases Windows Internet Name Service (WINS) Internet Storage Name Service (iSNS) servers Guarded fabric and shielded VMs Windows Deployment Services (WDS) partial deprecation Navigating the interface The updated Start menu The Quick Admin Tasks menu Using the Search function Pinning programs to the taskbar The power of right-clicking Using the newer Settings screen Two ways to do the same thing Creating a new user through Control Panel Creating a new user through the Settings menu Task Manager Task View Summary Questions Chapter 2: Installing and Managing Windows Server 2022 Technical requirements Installing Windows Server 2022 Burning that ISO Creating a bootable USB stick Running the installer Installing roles and features Installing a role using the wizard Installing a feature using PowerShell Centralized management and monitoring Server Manager Remote Server Administration Tools (RSAT) Does this mean RDP is dead? Remote Desktop Connection Manager Windows Admin Center (WAC) Installing Windows Admin Center Launching Windows Admin Center Adding more servers to WAC Managing a server with WAC Changes are easy as pie Azure integrations Enabling quick server rollouts with Sysprep Installing Windows Server 2022 onto a new server Configuring customizations and updates onto your new server Running Sysprep to prepare and shut down your master server Creating your master image of the drive Building new servers using copies of the master image In-place upgrading to Windows Server 2022 Download and run the installer Summary Questions Chapter 3: Active Directory What is a domain controller? Active Directory Domain Services Creating your first domain Prep your domain controller Install the AD DS role Configure the domain Trees, forests, and...domains? Multiple domain controllers for redundancy Active Directory Users and Computers User accounts Security groups Prestaging computer accounts Active Directory Domains and Trusts Building a trust Network connectivity Conditional DNS forwarding Configuring the trust Test it out! Active Directory Sites and Services Active Directory Administrative Center Dynamic Access Control Fine-Grained Password Policy Active Directory Recycle Bin Read-only domain controllers FSMO Roles Viewing current FSMO role holders RID, PDC, and Infrastructure master Schema master Domain naming master View them all in one place FSMO role visibility through PowerShell Transferring FSMO roles Transferring FSMO roles via PowerShell Demote an old domain controller Demoting while the old server is still online Clean up AD Sites and Services Demoting when the old server is gone Move FSMO roles Delete it Clean up Sites and Services and DNS Group Policy Summary Questions Chapter 4: DNS and DHCP The purpose of DNS Types of DNS records Host record (A or AAAA) Alias record – CNAME Mail Exchanger (MX) record Microsoft 365 MX records TXT record SPF record Enforcement rule -all Name Server (NS) record Public name server records ipconfig /flushdns Split-brain DNS Types of DNS zones Active Directory Integrated Zones Forward Lookup Zones Reverse Lookup Zones Primary Zone Secondary Zone Stub Zone Creating a new zone IP addressing with DHCP Creating a DHCP scope Authorize the DHCP server Scope Options DHCP reservations DHCP failover Two DHCP servers Hot standby mode Load sharing mode Configuring DHCP failover IPAM Summary Questions Chapter 5: Group Policy Group Policy Objects Group Policy background refresh cycle Building a GPO Adding Trusted Sites Mapping network drives Installing registry keys Prevent shut down of system Disable removable USB drives Scoping a GPO Links Gpresult Continuing with the link Group Policy processing order Local Policy Site-level policies Domain-level policies OU-level policies Security Filtering WMI Filtering Item-level targeting Delegation Computer settings and user settings Computer Configuration User Configuration Linking GPOs accordingly Group Policy loopback processing Policy versus preference Policies Preferences Default Domain Policy Administrative Templates Implementing ADMX/ADML files The Central Store Enable the Central Store Populate the Central Store Summary Questions Chapter 6: Certificates Common certificate types User certificates Computer certificates SSL certificates Single-name certificates Multi-domain or subject alternative name certificates Wildcard certificates Planning your PKI Role services Enterprise versus standalone Root versus subordinate (issuing) Naming your CA server Can I install the CA role onto a domain controller? Creating a new certificate template Issuing your new certificates Publishing the template Requesting a certificate from MMC Requesting a certificate from the web interface Creating an auto-enrollment policy Obtaining a public authority SSL certificate Public/private key pair Creating a certificate signing request Submitting the certificate request Downloading and installing your certificate Re-keying certificates Exporting and importing certificates Exporting from MMC Exporting from IIS Importing into a second server OpenSSL for Linux webservers Generate a CSR Acquire the certificate Install the certificate Summary Questions Chapter 7: Networking with Windows Server 2022 Introduction to IPv6 Your networking toolbox ping tracert pathping Test-Connection Telnet Test-NetConnection Packet tracing with Wireshark TCPView netstat Building a routing table Multi-homed servers Only one default gateway Building a route Adding a route with Command Prompt Deleting a route Adding a route with PowerShell NIC Teaming Software-defined networking Hyper-V Network Virtualization Private clouds Hybrid clouds How does it work? System Center Virtual Machine Manager Network Controller Generic Routing Encapsulation Microsoft Azure Virtual Network RAS Gateways/SDN Gateways Virtual network encryption Bridging the gap to Azure A VPN gateway Azure ExpressRoute Third-party options Azure Network Adapter Summary Questions Chapter 8: Remote Access Regular ol’ VPN Routing and Remote Access Service (RRAS) Configuring a VPN inside RRAS Securing your VPN Always On VPN Types of AOVPN tunnels User tunnels Device tunnels Device tunnel requirements AOVPN client requirements Domain-joined Rolling out the settings AOVPN server components Remote Access server Certification Authority (CA) Network Policy Server (NPS) DirectAccess The truth about DirectAccess and IPv6 Prerequisites for DirectAccess Domain-joined Supported client operating systems DirectAccess servers – one or two NICs? To NAT or not to NAT? Network Location Server Certificates used with DirectAccess Do not use the Getting Started Wizard (GSW)! The Remote Access Management Console Configuration Dashboard Operations Status Remote Client Status Reporting Tasks DA, VPN, or AOVPN? Which is best? Domain-joined or not? Auto or manual launch Software versus built-in Password and login issues with traditional VPNs Port-restricted firewalls Manual disconnect Native load-balancing capabilities Distribution of client configurations Web Application Proxy WAP as AD FS Proxy Requirements for WAP Latest improvements to WAP Pre-authentication for HTTP Basic HTTP to HTTPS redirection Wildcard domain publishing Client IP addresses forwarded to applications Publishing Remote Desktop Gateway apps Improved administrative console Summary Questions Chapter 9: Hardening and Security Microsoft Defender Antivirus Installing Microsoft Defender Antivirus Exploring the user interface Disabling Microsoft Defender Antivirus What is ATP anyway? Windows Defender ATP Exploit Guard Windows Defender Firewall – no laughing matter Three Windows Firewall administrative consoles Windows Defender Firewall (Control Panel) Firewall & network protection (Windows Security Settings) Windows Defender Firewall with Advanced Security (WFAS) Three different firewall profiles Building a new inbound firewall rule Creating a rule to allow pings (ICMP) Managing WFAS with Group Policy Encryption technologies BitLocker and the virtual TPM Shielded VMs Encrypted virtual networks Encrypting File System IPsec Configuring IPsec Azure AD Password Protection Fine-grained password policy Advanced Threat Analytics – end of support What is (was) ATA? Microsoft Defender for Identity General security best practices Getting rid of perpetual administrators Using distinct accounts for administrative access Using a different computer to accomplish administrative tasks Never browse the internet from servers Role-Based Access Control (RBAC) Just Enough Administration (JEA) Adjust RDP away from 3389 Disable external RDP... NOW Disable insecure encryption protocols Windows Registry IIS Crypto Summary Questions Chapter 10: Server Core Why use Server Core? No more switching back and forth Interfacing with Server Core PowerShell Using cmdlets to manage IP addresses Setting the server hostname Joining your domain Remote PowerShell Server Manager Remote Server Administration Tools Accidentally closing Command Prompt Windows Admin Center to manage Server Core The Sconfig utility Roles available in Server Core Building a Server Core domain controller Install the AD DS role Promote this server to a domain controller Verify that it worked What happened to Nano Server? Summary Questions Chapter 11: PowerShell Why move to PowerShell? Cmdlets PowerShell is the backbone Scripting Server Core Working within PowerShell Launching PowerShell Default execution policy Restricted AllSigned RemoteSigned Unrestricted Bypass mode Using the Tab key Useful cmdlets for daily tasks Query user or quser IP addressing cmdlets Using Get-Help Formatting the output Format-Table Format-List Visual customizations Importing a module Using a pipeline Export to CSV Pipes can invoke action PowerShell Integrated Scripting Environment PS1 files Working with PowerShell ISE Remotely managing a server Preparing the remote server The WinRM service Enable-PSRemoting Allowing machines from other domains or workgroups Connecting to the remote server Using -ComputerName Using Enter-PSSession Desired State Configuration Windows Terminal Summary Questions Chapter 12: Redundancy in Windows Server 2022 Network Load Balancing (NLB) Not the same as round-robin DNS What roles can use NLB? Virtual and dedicated IP addresses NLB modes Unicast Multicast Multicast IGMP Configuring a load-balanced website Enabling NLB Enabling MAC address spoofing on VMs Configuring NLB Configuring IIS and DNS Testing it out Flushing the ARP cache Failover clustering Clustering Hyper-V hosts Virtual machine load balancing Clustering for file servers Scale-out file server Clustering tiers Application-layer clustering Host-layer clustering A combination of both How does failover work? Setting up a failover cluster Building the servers Installing the feature Running Failover Cluster Manager Running cluster validation Running the Create Cluster wizard Clustering improvements in Windows Server 2022 AutoSites Clustering Affinity Improvements to BitLocker protected cluster storage Slightly older improvements (but still cool) True two-node clusters with USB witnesses Higher security for clusters Multi-site clustering Cross-domain or workgroup clustering Cluster operating system rolling upgrades Storage Replica (SR) Configuring Storage Replica Initializing disks as GPT Testing preparedness for Storage Replica Configuring Storage Replica Shifting the primary server to FS02 Storage Spaces Direct (S2D) New in Server 2022 and 2019 Summary Questions Chapter 13: Containers Understanding application containers Sharing resources Isolation Scalability What’s new in Server 2022? Smaller image size for Server Core Virtualized time zones Initial IPv6 support HostProcess containers Enhanced management through Windows Admin Center A new base image option Container base images Nano Server Server Core Windows Server Windows Server containers versus Hyper-V containers Windows Server containers HostProcess containers Hyper-V containers Docker and Kubernetes Linux containers Docker Hub Docker Trusted Registry Kubernetes Working with containers Installing the role and feature Installing Docker for Windows Docker commands docker version docker info docker --help docker images docker search docker pull docker run docker ps -a Downloading a container image Running a container Where is Azure in all this? Azure Container Registry Azure Kubernetes Service (AKS) Azure Kubernetes Service for Azure Stack HCI Summary Questions Chapter 14: Hyper-V Designing and implementing your Hyper-V Server Installing the Hyper-V role Nested virtualization AMD processors are now supported Virtual switches External virtual switch Internal virtual switch Private virtual switch Creating a new virtual switch Receive Segment Coalescing (RSC) Implementing a new virtual server Starting and connecting to the VM Installing the operating system Managing a virtual server Hyper-V Manager The Settings menu Checkpoints Configuring auto stop and start Expanding a virtual disk Hyper-V console, Remote Desktop Protocol (RDP), or PowerShell Windows Admin Center (WAC) Shielded VMs Encrypting VHDs Infrastructure requirements for shielded VMs Guarded hosts Host Guardian Service (HGS) Host attestations TPM-trusted attestations Host key attestations Admin-trusted attestation – deprecated in 2019 The future of shielded VMs Integrating with Linux ReFS deduplication ReFS Data deduplication Why is this important to Hyper-V? Hyper-V Server...2019? Summary Questions Chapter 15: Remote Desktop Services Wherefore art thou, role? Components of an RDS environment Remote Desktop Session Host Remote Desktop Connection Broker Remote Desktop License Manager Remote Desktop Web Access Remote Desktop Gateway Publishing RDS sessions Creating an RDS environment Your first RDS collection Add RD Gateway and RD Licensing Collection configuration Connecting to it Editing deployment and collection properties Deployment Properties Collection Properties Adding RDSH servers to your collection Drain-stop an RDSH for maintenance Installing applications on an RDSH No users logged in Install mode RDS licensing User CALs Device CALs Specify the RD License server RD Licensing Manager RDS user profiles Local profiles Roaming profiles User Profile Disks (UPDs) FSLogix RemoteApp programs RDS maintenance considerations Install mode Server Manager errors related to RDS Logging directly in to RDSH servers SSL certificate replacements Cloning RDSH servers Sidder GPOs and RDS Summary Questions Chapter 16: Troubleshooting Backup and restore Schedule regular backups Restoring from Windows Restoring from the installer disk Task Manager Resource Monitor Performance Monitor Sysinternals tools Descriptions of popular tools TcpView Disk2vhd Autologon Autoruns Diskmon LogonSessions PsExec PsKill PsShutdown Process Monitor (Procmon) AccessEnum Windows Firewall with Advanced Security System Insights Remote toolsets Event Logs Filtering event logs Exporting Windows event logs with PowerShell Common Event IDs MMC and MSC shortcuts Summary Questions Appendix: Answers to the End-of-Chapter Questions PacktPage Other Books You May Enjoy Index The complete guide for system administrators to install, manage, secure, and squeeze return on investment from their Windows Server 2022 infrastructure Purchase of the print or Kindle book includes a free eBook in PDF format. Key Features Design and implement Microsoft Server 2022 in an enterprise environment and use Windows Server to create secure and efficient networks Concentrated learning on Windows core infrastructure technologies Discover how to harden and secure your Windows Server infrastructure Book Description Written by a 10-time Microsoft MVP award winner with over 20 years of IT experience, Mastering Windows Server 2022 is a hands-on guide to administer any Windows Server environment. Whether new to the server world or working to keep your existing skills sharp, this book aims to be referenced on a regular basis instead of gathering dust on your shelf. Updated with Server 2022 content, this book covers a wide variety of information pertaining to your role as a server administrator. We will expand upon versions and licensing models for this OS, and explore the 'single pane of glass' administration methodology by utilizing tools like Server Manager, PowerShell, and even Windows Admin Center. This book is primarily focused on Windows Server 2022 LTSC version, but follow along as we discuss the latest news for SAC server releases as this impacts Containers, Nano Server, and general OS release cadence. This book covers a range of remote access technologies, and even teaches management of PKI and certificates. You will be empowered to virtualize your datacenter with Hyper-V, and deploy your own Remote Desktop Services "farm". Learn about Server Core, built-in redundancy, and explore troubleshooting skills. All this on top of chapters about core infrastructure technologies such as Active Directory, DNS, DHCP, and Group Policy. What you will learn Build a Windows Server from the ground up and implement your own PKI Manage your servers with Server Manager, PowerShell, and Windows Admin Center Secure your network and data with modern technologies in Windows Server 2022 Understand containers and where Nano Server fits into the equation Discover new ways to integrate your datacenter with Microsoft Azure Virtualize your datacenter with Hyper-V Round out your understanding of Active Directory, DNS, DHCP, and Group Policy Deploy Remote Desktop Services in your environment Who this book is for Anyone interested in Windows Server administration will benefit from this book. If you are proficient in Microsoft infrastructure technologies and have worked with prior versions of Windows Server, then there are some focused topics on the aspects that are brand new and only available in Server 2022. On the other hand, if you are currently in a desktop support role looking to advance, or fresh into the IT workforce, care was taken in the pages of this book to ensure that you will receive a rounded understanding of Windows Server core capabilities that translate into any environment Table of Contents Getting Started with Windows Server 2022 Installing and Managing Windows Server 2022 Active Directory DNS and DHCP Group Policy Certificates Networking with Windows Server 2022 Remote Access Hardening and Security Server Core PowerShell Redundancy in Windows Server 2022 Containers Hyper-V Remote Desktop Services Troubleshooting The complete guide for system administrators to install, manage, secure, and squeeze return on investment from their Windows Server 2022 infrastructure Purchase of the print or Kindle book includes a free eBook in PDF format. Key Features* Design and implement Microsoft Server 2022 in an enterprise environment and use Windows Server to create secure and efficient networks * Concentrated learning on Windows core infrastructure technologies * Discover how to harden and secure your Windows Server infrastructure Book DescriptionWritten by a 10-time Microsoft MVP award winner with over 20 years of IT experience, Mastering Windows Server 2022 is a hands-on guide to administer any Windows Server environment. Whether new to the server world or working to keep your existing skills sharp, this book aims to be referenced on a regular basis instead of gathering dust on your shelf. Updated with Server 2022 content, this book covers a wide variety of information pertaining to your role as a server administrator. We will expand upon versions and licensing models for this OS, and explore the 'single pane of glass' administration methodology by utilizing tools like Server Manager, PowerShell, and even Windows Admin Center. This book is primarily focused on Windows Server 2022 LTSC version, but follow along as we discuss the latest news for SAC server releases as this impacts Containers, Nano Server, and general OS release cadence. This book covers a range of remote access technologies, and even teaches management of PKI and certificates. You will be empowered to virtualize your datacenter with Hyper-V, and deploy your own Remote Desktop Services "farm". Learn about Server Core, built-in redundancy, and explore troubleshooting skills. All this on top of chapters about core infrastructure technologies such as Active Directory, DNS, DHCP, and Group Policy. What you will learn* Build a Windows Server from the ground up and implement your own PKI * Manage your servers with Server Manager, PowerShell, and Windows Admin Center * Secure your network and data with modern technologies in Windows Server 2022 * Understand containers and where Nano Server fits into the equation * Discover new ways to integrate your datacenter with Microsoft Azure * Virtualize your datacenter with Hyper-V * Round out your understanding of Active Directory, DNS, DHCP, and Group Policy * Deploy Remote Desktop Services in your environment Who this book is forAnyone interested in Windows Server administration will benefit from this book. If you are proficient in Microsoft infrastructure technologies and have worked with prior versions of Windows Server, then there are some focused topics on the aspects that are brand new and only available in Server 2022. On the other hand, if you are currently in a desktop support role looking to advance, or fresh into the IT workforce, care was taken in the pages of this book to ensure that you will receive a rounded understanding of Windows Server core capabilities that translate into any environment Table of Contents1. Getting Started with Windows Server 2022 2. Installing and Managing Windows Server 2022 3. Active Directory 4. DNS and DHCP 5. Group Policy 6. Certificates 7. Networking with Windows Server 2022 8. Remote Access 9. Hardening and Security 10. Server Core 11. PowerShell 12. Redundancy in Windows Server 2022 13. Containers 14. Hyper-V 15. Remote Desktop Services 16. Troubleshooting