Speaking of MCSA, where are the notes that Don talks about from time to time in the 411 course?

Thanks

Well I could have sworn you had one on Exchange so when I was trying out the new search facility to search for an Active Sync episode within the Exchange course I assumed the search was broken ;) (I like that it now searches episodes within courses btw - very helpful). As you have courses for pretty much everything I wsa surprised to find tis one missing - add my vote for Exchange to the list please :+1:

@Mike-Rodrick Thanks for clearing that up! Gotta love those double negatives Microsoft seems to like to use...

Justin,

Man, my apologies on not seeing your post, usually, I spot them right away. If you're having a hard time understanding the basic theory of VPNs then I would suggest taking a look into the Network+ show where we cover the VPN technologies. Also there are plenty of links if you just do a browser search for Understanding VPN technologies. If you're talking about implementation of the VPN connections, then this can become granular. Even thought the concepts are the same, the implementation and configuration of VPN tunnels can vary from technology to technology and even type to type (i.e. site-to-site or client remote access). You'll find this also in our Cisco Security Show as well as the Microsoft Client and Server shows that focus on the technologies.

Cordially,
Ronnie Wong
Host, ITProTV

ComputerRob,

Hello, glad you posted! the answers to your questions:

**does 2012 R2 still have Remote Web Workplace? **

This feature. Remote Web Workspace has been replaced in Windows Server 2012R2 with Remote Desktop Web Access. Here's a [link][1] for more details. If the link won't work click at the bottom of the post.

**Can 2012 R2 receive faxes, and if so where does it dump them so users can easily access? **

Yes, 2012R2 can be configured with [Fax Server][2] role to handle faxes. I'm not complete sure about what file path that the faxes are stored but I do know they are easily accessible through theWindows Fax and Scan.

Cordially,
Ronnie Wong
Host, ITProTV

{1]:https://technet.microsoft.com/en-us/library/cc772452.aspx
[2]:https://technet.microsoft.com/en-us/library/jj134193.aspx

@justin-makosky
I would always create a central store even in a one DC environment.
Imagine the following example:
You got 5 admins on 5 workstations. You want them to use a admx file for configuring gpos that hadle Office 2013 behavior.
With central store you just have to copy the admx files to your sysvol central store folder. All admins can use the same same set on policys at once.
Without central store you have to copy the admx files to the lokal store of all 5 workstations.

Todd,

I had to fire up a Hyper-V to test something out here. I had a default Server 2012R2 Gen 2 VM. I created a differencing disk from that VM. Then I was able to go back and create a Gen1 VM from that differencing disk.

I cannot say that a parent VM is independent of Generation (1 or 2) because doesn't give you an option to choose neither.

Other's may have more insight on this since this is based on what I just experimented with about an hour ago.

Cordially,

Ronnie Wong
Host, ITProTV

Sven,

Sorry about the delay in answering, we've been a little busy but I think I understand what is you're asking, please let me know if I'm not answering the question you're asking...I can...I have done that in the past so let me know.

The Network Unlock policy itself enables the client itself to create and implement Network Key Protection as long as your client is TPM enabled to automatically unlock the OS hard drive when you boot the system. Clients using the policy will get the pushed Network Unlock Certificate and that client will CREATE and use the Network Key Protectors. The pushed certificated is used to create the Network Key Protectors that will then unlock the system itself. I emphasize the client side generation of things because you had mentioned pushing the recovery keys to the WDS server because this isn't necessary since everything really resolves around the client getting the cert and doing it's own generation to perform the network unlock.

Everything works fairly well on TPM based systems but what about systems without it? Well they cannot create these Key Protectors.

I would assume also that computers that do not have BitLocker enabled will also not be affected by the policy itself. So I believe you would need some method, regardless of whether it is Group Policy or a manual configuration to enable BitLocker first before applying the unlock policy.

I believe you're correct and the hosts just forgot, most of us got our start with Server 2000, 2003 and 2008, it's in the 2008 environment we saw the Enterprise Editions so it's easy to forget. I will see if I can get some show errata in place on the episode about this.

Cordially,
Ronnie Wong
Host, ITProTV

Thank you.

Jamie,

The password for all the vLabs is: Passw0rd!

You can also see a basic topology of the vLab setup by downloading the PDF diagram from the vLab launcher
page.

Cordially,
Ronnie Wong
Host, ITProTV

Beau,

I will start contact our vLab provider now and see what we can do!
Can you tell me which set of labs you're trying to access was it the Server Labs or the Windows Client labs too...thank you!

Cordially,
Ronnie Wong
Host, ITProTV

EFS and Data Recovery is now on the Roku! Enjoy!

Brad,

The 70-414 show recordings this past time stopped right before they covered the certificate services. They will continue soon but hasn't been put back on the schedule but it will be completed and will include what I believe you're looking for.

Cordially,
Ronnie Wong
Host, ITProTV

The question is a little misleading. We create virtual switches on the Hyper-V host, we create virtual network adapters within the virtual machines themselves.

Hyper-V does not impose any limits on the number of physical network adapters in the Hyper-V host, and does not impose any limits on the number of virtual switches you can create on the Hyper-V host. The practical limit depends on the available computing resources of the Hyper-V host.

There are some limits when it comes to the virtual machines themselves.

12 Virtual Network Adapters per VM

8 can be the "network adapter" type

4 can be the "legacy network adapter" type

4 Virtual Fiber Channel Adapters per VM

Group Policy Software Installation (GPSI) only supports deploying applications using the MSI format. This is one of the limitations of using GPSI.

Some applications wrap the MSI inside an EXE. In this case, you can use something like 7-Zip to extract the files from the EXE and obtain the MSI. Another method would be to run the EXE, then find the files that were extracted. Common locations to check are:
C:\ProgramData
C:\Users\username\AppData\Local
C:\Users\username\AppData\Locallow

If the EXE doesn't contain an MSI, there are third party tools that will convert an EXE to an MSI.

Once you have an MSI for the application, you can use something like ORCA (part of the Windows Software Development Kit (SDK) for Windows 8.1) to either modify the original MSI file with the required switches, or create a Transform file (MST) that contains the required switches (recommended method).

Creating an MST leaves the MSI unmodified for re-usability, and you can create several different MSTs to accommodate different scenarios. For example, you might create multiple GPOs that use the same MSI, but use different MSTs, to install the application using different language settings in a multi-national office.

It really depends on what method of remote management you are trying to use. If you are using PowerShell, you would run the PowerShell command 'Enable-PSRemoting' on Server1. If you are using Server Manager, you need to add Server1 to Server Manager on DC1. If you are using a MMC, you need to change the focus of the snap-in by right-clicking at the top and changing servers. Some things, like event logs, you will also need to enable the appropriate firewall rules on Server1.

It appears the firewall rules are what is causing the problem. There are several rule groups you can use, depending on what you are trying to do.

To allow all MMC snap-ins to connect, run
Enable-NetFirewallRule -DisplayGroup "Remote Administration"

To allow only specific MMC snap-ins to connect, run:
Enable-NetFirewallRule -DisplayGroup "<rulegroup>"

Here is a list of rulegroups for various MMC snap-in(s)

MMC snap-in Rule group Event Viewer Remote Event Log Management Services Remote Service Management Shared Folders File and Printer Sharing Task Scheduler Performance Logs and Alerts File and Printer Sharing Disk Management Remote Volume Management Windows Firewall with Advanced Security Windows Firewall Remote Management

Just took this screenshot for the other thread on a similar topic, but figured I would post it here too since it shows how it would work from my earlier post:
Hyper-V running as a VM in ESXi running a nested VM

I mentioned in the other thread that dealt with running Hyper-V inside of a VMware VM, but since your asking about hypervisors in general for your HYV1 example, I will point out again that it is possible. Case in point:
Hyper-V running as a VM in ESXi running a nested VM
That screenshot I just took shows a VMware ESXi hypervisor as "HYV1", with a 2012 Server running Hyper-V as a VM inside of it (HYV2). That Hyper-V server is running it's own virtual machine (CL1) successfully.
Granted the performance is going to be sub-par and it takes some tweaking to get working, but it is possible for a lab setup. You basically need to trick Hyper-V to think it's not in a virtual machine itself. Whether or not this is possible at all in a nested Hyper-V in Hyper-V scenario, I do not know and would wager the answer is 'no'.
To your question about direct hardware access, can you be a little more specific? What type of direct hardware access are you trying to achieve? One of the key features of virtualization is a hardware abstraction layer, so the VMs (VMware or Hyper-V) don't really have direct access to the hardware but run through the hypervisor. You can pass some hardware through, such as a USB drive, to an underlying VM. I imagine this would work just fine in the ESX->HYV->VM scenario I outlined above, though I never personally tested it. You could also likely use RDMs to setup a similar access to hard drives. But I'm not sure exactly what you are trying to do.