Jordan Krause - Windows Server 2016 Security, Certificates, and Remote Access Cookbook

Copyright 2018 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author(s), nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

Commissioning Editor: Vijin Boricha
Acquisition Editor: Vinay Argekar
Content Development Editor: Aditi Gour
Technical Editor: Sushmeeta Jena
Copy Editor: Safis Editing
Project Coordinator: Hardik Bhinde
Proofreader: Safis Editing
Indexer: Aishwarya Gangawane
Graphics: Disha Haria
Production Coordinator: Deepika Naik

First published: April 2018

Production reference: 1250418

Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham
B3 2PB, UK.

ISBN 978-1-78913-767-5

www.packtpub.com

Mapt is an online digital library that gives you full access to over 5,000 books and videos, as well as industry leading tools to help you plan your personal development and advance your career. For more information, please visit our website.

• Spend less time learning and more time coding with practical eBooks and Videos from over 4,000 industry professionals

• Improve your learning with Skill Plans built especially for you

• Get a free eBook or video every month

• Mapt is fully searchable

• Copy and paste, print, and bookmark content

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at service@packtpub.com for more details.

At www.PacktPub.com , you can also read a collection of free technical articles, sign up for a range of free newsletters, and receive exclusive discounts and offers on Packt books and eBooks.

Jordan Krause is a six-time Microsoft MVP, currently awarded in the Cloud and Datacenter Management category. He has the unique opportunity to work daily with the Microsoft networking and remote access technologies as a Senior Engineer at IVO Networks. Jordan specializes in Microsoft DirectAccess and Always On VPN. Committed to continuous learning, Jordan holds certifications as an MCP, MCTS, MCSA, and MCITP Enterprise Administrator, and regularly writes articles reflecting his experiences with these technologies. Jordan lives and works in beautiful west Michigan (USA).

Florian Klaffenbach is a solutions architect and consultant for Microsoft Infrastructure and cloud, specialized in Microsoft Hyper-V, Fileservices, System Center Virtual Machine Manager, and Microsoft Azure IaaS. He is also a cochairman of the Azure Community Germany. In April 2016, Microsoft awarded Florian the Microsoft Most Valued Professional for Cloud and Datacenter Management. Currently, he is working at MSG service AG as a senior consultant of Microsoft cloud infrastructure. He has also worked on many books by Packt Publishing.

If you're interested in becoming an author for Packt, please visit authors.packtpub.com and apply today. We have worked with thousands of developers and tech professionals, just like you, to help them share their insight with the global tech community. You can make a general application, apply for a specific hot topic that we are recruiting an author for, or submit your own idea.

Microsoft is the clear leader of server racks in enterprise data centers across the globe. Walk into any backroom or data center of any company and you are almost guaranteed to find the infrastructure of that organization being supported by the Windows Server operating system. We have been relying on Windows Server for more than 20 years, and rightfully so-nowhere else can you find such an enormous mix of capabilities all provided inside one installer disc. Windows Server 2016 continues to provide the core functionality that we have
come to rely upon from all previous versions of Windows Server, but in better and more
efficient ways. On top of that, we have some brand new capabilities in Server 2016 that are
particularly mind-bending, new ways to accomplish more efficient and secure handling of
our network traffic and data.

There is a relevant question mixed into all this server talk, "We hear so much about the
cloud. Isn't everyone moving to the cloud? If so, why would we even need Windows Server
2016 in our company?" There are two different ways to answer this question, and both
result in having huge benefits to knowing and understanding this newest version of
Windows Server. First, there really aren't that many companies moving all of their
equipment into the cloud. In fact, I have yet to meet any business with more than 10
employees who has gone all-in for the cloud. In almost all cases, it still makes sense that you would use at least one on premise server to manage local user account authentication, or DHCP, or print services, or for a local file serverthe list goes on and on. Another reason companies aren't moving to the cloud like you might think they are is security. Sure, we
might throw some data and some user accounts to the cloud to enable things like federation
and ease of accessing that data, but what about sensitive or classified company data? You
don't own your data if it resides in the cloudyou don't even have the capability to
manage the backend servers that are actually storing that data alongside data from other
companies. How can you be guaranteed of your data's security and survival? The ultimate
answer is that you cannot, though there are steps being made in this direction. This alone keeps many folks that I have talked to away from moving some of their information to a cloud service provider.