Errata

(page 1.1 listed in 'Page number of error:*' section above is referencing section as seen on safari site as opposed to an actual page number which is not available on site)

Question 5 - "which of the following are valid reasons why administrators might want to install their windows server 2012 servers by using the server core option? (Choose all that apply)"

one of the correct options:
B- The Window Powershell 3.0 interface in windows server 2012 has many more cmdlets tham windows powershell 2.0

The inclusion of 'b' as a valid reason for a CORE SERVER option may be a bit confusing as this is a general benefit of running windows server 2012, whether server core or full gui, and not an exclusive benefit of core installation. Even more to the point with powershell 3.0 being available to win 7, win 2008 this is not a benefit exclusive to srv 2012.

The correct answers themselves seem more suited for a different general question of benefits of win 2012 while the bullet points under 'Using server core/The advantages of running servers using server core' feel like the correct answer to the question as it is asked.

Note from the Author or Editor:
p67 (PDF) change q5 correct answers to read A and C

change answer B to read as follows:

B. Incorrect: The inclusion of additional cmdlets in Windows PowerShell 3.0 is not a benefit exclusive to Server Core..

"In practice, you are unlikely to come across a computer with 32 GB of RAM and only 32 GB of disk space."

I believe this should be 512MB RAM as this sentence seems to be talking about finding a server with the min. specifications.

Note from the Author or Editor:
Change sentence in second to last para on p5 to read as follows:
"In practice, you are unlikely to come across a computer with 512 GB of RAM and only 32 GB of disk space."

This two column list is forced into a table and therefore makes no sense. It should be two separate lists.
OR should be in the form of a comparison table.
Also, the lists are incorrect, showing Remote Desktop on both sides.
Someone else made reference to Technet reference and here is another I found helpful with the correct list:
http://technet.microsoft.com/en-us/library/hh831786.aspx

Note from the Author or Editor:
Remove the following from the Roles Available In Server Core Installation column of the table on p9:

Remote Desktop Services
Remote Desktop Connection Broker
Remote Desktop Desktop Licensing
Remote Desktop Virtualization Host

In Server Manager, the MMCs started from Tools are not directed at the selected servers. One has to manually connect to the appropriate server from within MMC.

Note from the Author or Editor:
p37 para 3
should be:

"After selecting a server from the Servers pane in any group home page, click the Tools menu to display a list of the utilities and MMC snap-ins, including the Services snap-in. To manage a remote server with an MMC snap-in, you must manually connect it.

the example for new-storagepool cmdlet will not work as specified. As outlined in the technet article for new-storagepool (http://technet.microsoft.com/en-us/library/hh848689) , the -phsyicaldisks parameter requires a CIMInstance[] not a string[].

"-PhysicalDisks<CimInstance[]>

Accepts one or more PhysicalDisk objects as input. The Physical Disk CIM objects represent the physical disks to be added to the storage pool.
"

-physicaldisks <disknames> will not work, as given in the example on page 52.

What will work, is for example,
-physicaldisks (get-physicaldisk physicaldisk1, physicaldisk2)

Note from the Author or Editor:
in New-StoragePool command line, change <disk names> to <CIM instances>

On page 70, the stated 'correct' answers to question 4 are actually the incorrect ones.

The correct answers should be A and B, unless question 4 on page 64 is changed to which volume types DO provide fault tolerance.

Note from the Author or Editor:
Change q4 on p64 to read as follows:
Which of the following volume types supported by Windows Server 2012 provide fault tolerance?

More concise list of PowerShell commands for 3rd task of 'Objective 1.2: Thought experiment' would be:

Install-WindowsFeature FS-DFS-Namespace
Install-WindowsFeature FS-DFS-Replication
Install-WindowsFeature Print-Internet
Install-WindowsFeature Print-LPD-Service
Install-WindowsFeature Web-FTP-Service

because:

Install-WindowsFeature FS-Fileserver (installs as dependency for DFS)
Install-WindowsFeature FS-NFS-Service (Unix NFS service not required to complete task)
Install-WindowsFeature Print-Services -allsubfeatures (also installs Distributed Scan Server, not required to complete task)
Install-WindowsFeature Web-Server (installs as dependency for Print-Internet)
Install-WindowsFeature Web-Windows-Auth (installs as dependency for Print-Internet)

Note from the Author or Editor:
change answer to question 3 as follows

Install-WindowsFeature FS-FileServer
Install-WindowsFeature FS-DFS-Namespace
Install-WindowsFeature FS-DFS-Replication
Install-WindowsFeature FS-NFS-Service
Install-WindowsFeature Print-InternetServices ?allsubfeatures
Install-WindowsFeature Web-Server
Install-WindowsFeature Web-Windows-Auth
Install-WindowsFeature Web-Ftp-Service
The Install-WindowsFeature FS-Fileserver command is not necessary, as it installs as dependency for DFS. The Install-WindowsFeature Web-Server and Install-WindowsFeature Web-Windows-Auth commands are not necessary, as they install as dependencies for Print-Internet.

Graphical Management Tools provides support for Server Manager, MMC consoles and parts of Control Panel, not the Graphical Server Shell which provides Files Manager, Desktop, Start Menu...

Note from the Author or Editor:
Change answer to 1D on p68 to read as follows:
D. Correct: Server Graphical Shell provides support for the Windows graphical interface, including the desktop and File Explorer. You must remove it to convert to a Server Core installation.

Disk Manager does not allow to use more than two physical disks for Mirrored volume. Tested using OS build 6.2.9200.

Note from the Author or Editor:
chanmge 3c to read as follows
C. Correct: A mirrored volume writes duplicate copies of all data to two disks, thereby providing fault tolerance

Default share permission for special identity Everyone is Read. Tested using Server Manager and Folder Properties/Sharing tab/Advanced Sharing. Build 9200

Note from the Author or Editor:
Change 2nd to last para as follows: "...By default, the Everyone special identity receives the Allow ReadFull Control share permission to any new shares you create using File Explorer. In shares you create using Server Manager, the Everyone special identity receives the Allow Full Control share permission. "

"... to which you want to assign
share permissions ..." should reads as
"... to which you want to assign
NTFS permissions ..."

Note from the Author or Editor:
Step 7. Change "share" to "NTFS"

The book says "NTFS quotas are relatively limited in that you can set only a single limit for all the users of a volume."

While it's true that NTFS quotas can only be set at the volume level, you can set Quota Entries for individual users.

In addition, the text fails to mention one of the big differences with File Resource Manager, which is the ability to set quotas at the folder level.

Note from the Author or Editor:
In Configuring NTFS Quotas, 3rd para, chage the first sentence to read as follows:
"NTFS quotas are relatively limited in that you can only set limits at the volume level.".

The text says "You can connect multiple print servers to a single print device." and later "... you can create a high-priority pint server..." and later "... lower-priority print server..." and later "... if the servers are ..."

In all cases, "print server" or "server" should read "printer." You connect printers to print devices, not print servers.

Note from the Author or Editor:
change bullets on p97 to read as follows:

&#9632;
You can connect a single printer to multiple print devices, creating what is called a printer pool. On a busy network with many print clients, the print server can distribute large numbers of incoming jobs among several identical print devices to provide more timely service and better fault tolerance.
&#9632;&#9632;
You can connect multiple print devices that support different forms and paper sizes to a single printer, which will distribute jobs with different requirements to the appropriate print devices.
&#9632;&#9632;
You can connect multiple printers to a single print device. By creating multiple printers, you can configure different priorities, security settings, auditing, and monitoring parameters for different users. For example, you can create a high-priority printer for company executives and a lower-priority printer for junior users. This ensures that the executives? jobs get printed first, even if the printers are connected to the same print device.

There is not a requirement to install additional printer drivers from a system running alternative platform. If an administrator have access to an unpacked folder containing driver files, he/she can point needed inf file directly from Print Server.

Note from the Author or Editor:
Add the word "optionally" to the step beginning with "click Additional Drivers to open the Additional Drivers dialog box..."

Steps 5 & 6 should be reversed. You must first perform step 6 and select the enable printer pooling check box before it will allow you to perform step 5 to select multiple ports.

Note from the Author or Editor:
p104
reverse steps 5 & 6

Class A addresses can be 1-127 in the first octet. The table says 0-127 and the first paragraph is inconsistent, saying "...Class A address range from 00000000 to 01111111..." and then saying "...values ranging from 1 to 127." Change the 00000000 to 00000001 and change the table to read 1-127.

The text states that "they cannot make computers using private addresses accessible from the Internet." This is technically not true because with NAT and port forwarding, computers with private addresses can be made accessible.

Note from the Author or Editor:
p193, 3rd para, change as follows:
Anyone can use these addresses without registering them, but they cannot make computers using private addresses accessible from the Internet, without using a specialized technology such as network address translation (NAT)..

Last part of last sentence reads ...a 10-bit prefix of 11111110010 followed by 54 zeros,

should read
...a 10-bit prefix of 1111111010 followed by 54 zeros,

In the parentheses, 2 to the 8th should be 2 to the 8th minus 2

In this parragraph it states that "DNS servers use iterative queries when communicating with each other." but then later goes on to say that "The only time a DNS server sends iterative queries to another server is in the case of a special type of server called a forwarder...." Should this second statement refer to recursive queries?

Note from the Author or Editor:
change the last sentence in the Iterative Query para to read as follows:
The only time a DNS server sends recursive queries to another server is in the case of a special type of server called a forwarder, which is specifically configured to interact with other servers in this way

The network address for this thought experiment is different in the question on page 206 compared to the answer on page 244 ie 172.16.8.0 and 192.16.8.0. Also as Arthur was only given a /25 network he can only create 8 subnets not 16 as shown in the answer.

Note from the Author or Editor:
p206 thought experiment
change 2nd para to read as follows:
"The enterprise administrator has assigned Arthur the network address 172.16.8.0/24 for the branch office network that he is constructing. Arthur calculates that this gives him 254 (2^8) IP addresses, which is enough for his network, but he has determined
that he needs six subnets with at least 10 hosts on each one."

p244 thought experiment
change text to read as follows:
"Arthur can subnet the address he has been given by using four host bits to give him eight subnets with up to 14 hosts on each."

change all addresses to read 172 not 192

Answer does not relate to material covered in the chapter.

Note from the Author or Editor:
P246, Question 2, Answer B should read as follows:
"Incorrect. The least significant bits in the IP address (that is, 88) should come first in the FQDN."

Beginning of 4th paragraph states that you use a command line tool called "ndtsutil.exe" when the name is actually ntdsutil.exe

The last lines shows the options to New-ADGroup's -GroupCategory switch as Distribution|Category instead of Distribution|Security

Note from the Author or Editor:
p296 last line on page should read:
?GroupCategory Distribution|Security

The question on page 265 does not ask for multiple answers and only C is correct. A, B, and D are all true, and the question asked which of the choices is NOT true.

Note from the Author or Editor:
p303 q3 should read as follows

3. Correct answers: D
A. Incorrect: Some attributes are created automatically, whereas administrators must
supply information for other attributes manually.
B. Incorrect: A container object has, as one of its attributes, a list of all the other
objects it contains.
C. Correct: Leaf objects have attributes that contain information about the specific
resource the object represents.
D. Incorrect: Some attributes are created automatically, such as the globally unique
identifier (GUID) that the domain controller assigns to each object when it creates
it.

The answer says there are three types of accounts that can be created yet page 267 says there are two types of account on Windows Server 2012. The comment for D states that Built-in accounts can be created.... yet how can you create something that is already Built-in?

Note from the Author or Editor:
p305 q4 should read:

4. Correct answer: C
A. Incorrect: Local accounts can be created and configured in Windows Server 2012.
B. Incorrect: Domain accounts can be created and configured in Windows Server
2012.
C. Correct: There are three types of user accounts in Windows
Server 2012: local accounts, domain accounts, and built-in user accounts.
D. Incorrect: Built-in accounts can be configured, but not created in Windows Server
2012.

None of the suggested anwers are correct because they all do not include the mandarory switch -samid to create the account name using the specified format of First Initial followed by Surname.

Note from the Author or Editor:
p287 thought exp
change answers to read as follows
1. dsadd ?Oliver Cox? -samid ocox ?company ?Fabrikam, Inc.? ?dept ?Inside Sales?
2. dsadd user CN=Oliver Cox,CN=Inside Sales,DC=fabrikam,DC=com -samid ocox ?company
Fabrikam, Inc. ?dept Inside Sales
3. dsadd ?company ?Fabrikam, Inc.? -samid ocox ?dept ?Inside Sales? ?CN=Oliver Cox,CN=Inside
Sales,DC=fabrikam,DC=com?
4. dsadd user ?CN=Oliver Cox,CN=Inside Sales,DC=fabrikam,DC=com? -samid ocox ?company
?Fabrikam, Inc.? ?dept ?Inside Sales?

Answer 3 C : "Universal to Global group conversions are not permitted"
I have tested this, and it worked fine for me to convert a Universal group to a Global group.

Note from the Author or Editor:
Change question 3 on p301 to read "Which of the following group scope modifications are never permitted?"

Change question 3 answer of p306 to read as follows:

3. Correct answer: B
A. Incorrect: Global to universal group conversions are sometimes permitted.
B. Correct: Global to domain local group conversions are never permitted.
C. Incorrect: Universal to global group conversions are sometimes permitted.
D. Incorrect: Domain local to universal group conversions are sometimes permitted.

Question 1 asked about deploying a security template using GPO which would imply that the template had not already been imported otherwise it would only need to ask about deplying a GPO. The answer therefore is incomplete as answer D only talks about using GPMC to deploy the policy; C also needs to be included as correct because you must use GPO Editor to import the template into the GPO before deploying it.

Note from the Author or Editor:
p361 q1 should read:

1. Correct answer: C and D

C. Correct: You must use the Group Policy Object Editor to import a template into a GPO before you apply it to a domain.