2. Upgrading the Platform - How to Get There!

4. http://twtpoll.com/79pisy

5. User + Resources User resource User + Resources User + Resources U1 R1R2R3 U2 R4R5R6 UR4 UR1 UR2 UR5 UR3

7. Easiest path to Windows Server 2012 R2

10. X86 = NO DIRECT “in place” UPGRADE PATH

11. Pre-Migration Migration Migration planning Number of network interface cards (NICs) Number of network interface cards (NICs) Prepare source server Back up Back up Collect migration data Collect migration data Prepare destination server Install Windows Server 2012 Install Windows Server 2012 Assign temporary server name Assign temporary server name Assign temporary IP address Assign temporary IP address Join domain Join domain Make destination server a domain controller Post-Migration (Optional) Manually migrate DNS server settings Transfer FSMO roles Migrate IP address and rename servers Perform verification steps Retire source server Roll back migration Troubleshoot migration

16. Timeline of events TIME: T2TIME: T3TIME: T4 Create Snapshot T1 Snapshot Applied! USN: 100 ID: A RID Pool: 500 - 1000 USN: 100 ID: ARID Pool: 500 - 1000 USN: 250 ID: ARID Pool: 650 - 1000 +150 more users created DC1(A) @USN = 200 DC2 receives updates: USNs >200 DC1(A) @USN = 250 USN: 200 ID: A RID Pool: 600- 1000 +100 users added DC2 receives updates: USNs >100 DC1 DC2 TIME: T1 USN rollback NOT detected: only 50 users converge across the two DCs All others are either on one or the other DC 100 security principals (users in this example) with RIDs 500-599 have conflicting SIDs

22. ~1GB

27. Easily resolve end-user permission issues Centrally manage access control from Active Directory Pre-stage and simulate the effect of changes to access policy Automatically identify and classify data based on content Policy-driven access to data with Dynamic Access Control Desired Access policy For access to financial information that has high business impact, a user must be a finance department employee with a high security clearance, and must use a managed device registered with the finance department.

28. User claims User.Department = Finance User.Clearance = High Access policy For access to financial information that has high business impact, a user must be a finance department employee with a high security clearance, and must use a managed device registered with the finance department. Device claims Device.Department = Finance Device.Managed = True Resource properties Resource.Department = Finance Resource.Impact = High Active Directory Domain Services 28 File server

29. Active Directory Domain Services Create claim definitions Create file property definitions Create central access policy Group Policy Send central access policies to file servers File Server Apply access policy to the shared folder Identify information User’s computer User tries to access information 29 Active Directory Domain Services User File server Allow or deny Claim definitions Audit policy File property definitions

30. (MDC-B323) Re-Architecting Your Infrastructure with Windows Server 2012 and Microsoft System Center 2012 SP1 (WCA-B336) Reimagining and Migrating Your Active Directory (MDC-B348) Networking Infrastructure and Management (MDC-B349) Your Fileservers and Storage Options

31. http://microsoft.com/msdn www.microsoft.com/learning http://channel9.msdn.com/Events/TechEd http://microsoft.com/technet