Index

A

ABE (Access Based Enumeration), 272

Acar, Tolga, 7, 409

Access Based Enumeration (ABE), 272

account lockout settings, 169 to 170

action processes, for Identity Lifecycle Manager, 156

Active Directory

installing role on Windows server core installations, 134

in Windows 2000 Server, 150 to 151

in Windows Server 2003, 151 to 153

in Windows Server 2008, 4, 153 to 154

Active Directory Application Mode (ADAM), 152 to 153, 172. See also Active Directory Lightweight Directory Services

Active Directory Certificate Services (AD CS)

availability, 91

defined, 10, 73, 154

enhancements in Windows Server 2008, 176 to 182

enrollment process, 176 to 177

formerly Certificate Services, 154

Network Device Enrollment Service support, 177

Online Certificate Status Protocol support, 177 to 178

role services, 73

Web enrollment changes, 177

Active Directory directory services, 150. See also Active Directory Domain Services

Active Directory Domain Controller role service, 73

Active Directory Domain Services (AD DS)

auditing enhancements, 158 to 163

availability, 91

defined, 10, 73, 154

enhancements in Windows Server 2008, 158 to 172

formerly Active Directory directory services, 154

Read-Only Domain Controller, 164 to 165

restartable, 13, 168 to 169

role services, 73 to 74

Started State, 169

Stopped State, 169

Active Directory Federation Services (AD FS)

defined, 10, 74, 153, 154

improved import/export functionality, 183

limiting deployment using Group Policy, 184

overview, 182

role services, 74

Web Agents, 74

Active Directory Installation Wizard, 165 to 166

Active Directory Lightweight Directory Services (AD LDS)

availability, 91

creating instances, 172 to 176

defined, 74

formerly Active Directory Application Mode, 154

overview, 172 to 173

Setup Wizard, 173 to 176

Active Directory Rights Management Services (AD RMS)

availability, 91

defined, 10, 74, 154

enhancements in Windows Server 2008, 186

formerly Windows Rights Management Services, 114

overview, 186

role services, 74 to 75

Active Server Pages (ASP) role service, 80

AD CS. See Active Directory Certificate Services

AD DS. See Active Directory Domain Services

AD FS. See Active Directory Federation Services

AD FS Web Agents role service, 74

AD LDS. See Active Directory Lightweight Directory Services

AD RMS. See Active Directory Rights Management Services

ADAM (Active Directory Application Mode), 152 to 153, 172. See also Active Directory Lightweight Directory Services

Add Feature Wizard (AFW), 54, 102 to 103

Add Roles Wizard (ARW), 98 to 101

/admin switch, 206 to 207

Administrator Password, changing on Windows server core installations, 118

ADMX/ADML files, 58 to 59

ADSI Edit snap-in, 170, 175

Advanced Encryption Standard (AES), 181

Adventures in Server Land blog, 453

(AES) Advanced Encryption Standard, 181

AFW (Add Feature Wizard), 54, 102 to 103

Antonov, Sergei, 66

AppCmd.exe tool, 354 to 357

Application Development role service, 80 to 81

application pools, 350, 370

Application Server Core role service, 75

Application Server role

defined, 75

installing, 372 to 374

overview, 371 to 373

PowerShell as multitool for managing, 374

role services, 75 to 76

applications

clustering, 15

deploying to Web, 14

installing on Windows server core installations, 135

approval actions, 157

approval processes, for Identity Lifecycle Manager, 156

Arunkundram, Rajiv, 6, 34, 35

ARW (Add Roles Wizard), 98 to 101

Ask the Performance Team blog, 452

ASP (Active Server Pages) role service, 80

ASP.NET, integrating with IIS 7.0, 348, 369

ASP.NET role service, 80

Audit Directory Service Access, 158, 161

audit policies, Windows Server 2008

Detailed Directory Service Replication, 161

Directory Service Access, 161, 162

Directory Service Changes, 161, 162, 163

Directory Service Replication, 161

authentication processes

for 802.1X NAP enforcement, 337 to 339

for Identity Lifecycle Manager, 155 to 156

Authorization Manager, 151

authorization policies

connection, 236

creating for TS Gateway, 236 to 237

resource, 236

autoenrollment, defined, 176 to 177

automatic remediation, NAP support for, 288 to 289

automatic updates, enabling for Windows server core installations, 126 to 129, 146