Reference no: EM133099859

Activity 5-1: Installing Windows Search Service

Time Required: Approximately 10 minutes
Objective: Install Windows Search Service for faster folder and file searches.

Description: Having Windows Search Service installed on a server can save time and energy for server administrators and operators in an organization. In this activity, you install the Windows Search Service feature, which complements the File and Storage Services role. The File and Stor- age Services role should already be installed, which is the default when you install Windows Server 2016.

1. Open Server Manager, if it is not open.
2. Click Manage under the title bar in Server Manager and click Add Roles and Features.
3. If you see the Before you begin window in the Add Roles and Features Wizard, click Next.
4. Ensure Role-based or feature-based installation is selected in the Select installation type window and click Next.
5. Ensure your server is selected in the Select destination server window and click Next.
6. Ensure that File and Storage Services (x of 12 installed) is already marked as installed and click Next (where the x stands for the number of role services installed).
7. In the Select features window, scroll to and then click Windows Search Service (see Figure 5-3). Click Next.
8. Click Install in the Confirm installation selections window.
9. Ensure that the installation succeeded and click Close in the Installation progress window.
10. Make sure that the Windows Search service is started by clicking Tools in Server Manager and clicking Services.
11. In the Services Window, double-click Windows Search under the Name column.
12. In the Windows Search Properties (Local Computer) dialog box, ensure that the Startup type is set to Automatic. Click Apply.
13. Click Start in the Windows Search Properties (Local Computer) dialog box.
14. Wait for the Service Control box to show the service is started. Click OK in the Windows Search Properties (Local computer) dialog box.
15. Close the Services window.
Once Windows Search Service is installed and started, Windows Server 2016 automatically creates an index of files. The indexed files include files in the Documents folder for an account, email files, photos, multimedia files, and any files that are commonly accessed. Some files that are not conducive to searches, such as system files, are not flagged for indexing by default (although you can configure them to be indexed). These files are excluded by default to help reduce the size of the index catalog as a way to keep searches as fast as possible.

Whenever you open a window, such as File Explorer, that has a Search box with a magnifying glass icon, you can use that box to perform a fast search using the Windows Search Service.

Also, when a Windows 10 client searches for a file on Windows Server 2016, the Windows Search Service is used. Having fast client searches alone is a compelling reason for installing the Windows Search Service in Windows Server 2016. This makes users more productive and reduces time using the network that connects to a server.

You can maintain the Windows Search Service through Control Panel as follows:
1. Right-click Start and click Control Panel.
2. In the Large or Small icons view, click Indexing Options.
3. To select a new folder or volume to index (or stop indexing a folder or volume), click the Modify button, and select or deselect the appropriate volume(s) and folders (see Figure 5-4) and click OK.
4. Click the Advanced button to configure advanced indexing options from the Index Settings and File Types tabs. For example, you can index encrypted files, rebuild the index, change where the index is stored, or select certain file types to index. Click OK after making your
selections.
5. Close the Indexing Options dialog box and Control Panel when you are finished.

Activity 5-2: Encrypting Files
Time Required: Approximately 10 minutes
Objective: Encrypt files in a folder.
Description: The news media have reported on cases about theft in organizations in which a computer's drive has been stolen because of its valuable contents, such as business secrets or information crucial to national security. One way to provide security in these situations is to use the Encrypting File System to protect files. In this activity, you practice encrypting the contents of a folder.
1. Use File Explorer to create a new folder. For example, click the File Explorer icon in the taskbar, click a local drive, such as Local Disk C:, navigate to the Documents folder in your account or in the Administrator account, such as \Users\Administrator\Documents. Right-click an open area, click New, click Folder, and enter a folder name that is a combination of your first initial and last name, such as JRyan, and press Enter. Find a file to copy into the folder, such as a text-based document or another file already in the root of drive C. To copy the file, right-click it and click Copy. Open the new folder you created, right-click in an open area, and click Paste to copy the file into the new folder.
2. Right-click your new folder, such as JRyan, and click Properties. Make sure that the General tab is displayed, and if it is not, then click it.
• What attributes are already checked?
3. Click the Advanced button.
• Which attributes are already checked in the Advanced Attributes dialog box?
4. Check Encrypt contents to secure data, and then click OK.
5. Click Apply.
6. Be certain that Apply changes to this folder, subfolders and files is selected, and click OK.
• Make a note of how you would verify that the file you copied into the folder is now
encrypted. How would you decrypt the entire folder contents?
7. Click OK again to exit the Properties dialog box. Move the pointer to a blank area and click so that your folder is no longer highlighted. Now notice that the folder name appears in green (as long as Show encrypted or compressed NTFS files in color has previously been configured in File Explorer Options via Control Panel).
8. Decrypt the folder so that you can use it for another activity.
9. Close the folder's Properties dialog box and leave open File Explorer for the next activity.

Activity 5-3: Configuring Folder Permissions
Time Required: Approximately 10 minutes
Objective: Configure permissions on a folder so that users can modify its contents.
Description: Some organizations employ a group of server operators who perform the day-to-day management of servers. Assume that you need to create a Utilities folder for the server operators so that they can place new utilities in the folder, plus list the folder's contents and exe-cute utilities out of that folder.

1. Open File Explorer (click its icon in the taskbar), if it is not already open. In the Documents folder of your account or of the Administrator account (see Step 1 of Activity 5-2), create a folder called Test plus your initials, such as TestJR. Inside the folder you just created, create
a subfolder called Utilities plus your initials, such as UtilitiesJR.
2. Right-click the new Utilities folder, click Properties, and then click the Security tab.
• What users and groups already have permissions to access the folder? Click each group
and user to determine what permissions they have and record your results.
3. Click the Edit button. Click each group and user again, and notice that some boxes are checked and deactivated because they represent inherited permissions.
4. Click the Add button.
5. Click the Advanced button in the Select Users, Computers, Service Accounts, or Groups dialog box. Click Find Now. Double-click Server Operators in the list at the bottom of the box (see Figure 5-6). Click OK.
6. In the Permissions dialog box, ensure that Server Operators is selected.
• What permission do the Server Operators have by default?
7. Click the Allow box for Modify.
8. Click OK in the folder's Permissions dialog box and click OK in the Properties dialog box.
9. Leave open File Explorer (the window with the folder containing the Utilities folder you have been working on) for the next activity, unless you need to stop working now.
As you noticed in Step 3 of Activity 5-3, some of the Allow boxes for permissions are checked and deactivated (refer to Figure 5-5). These are inherited permissions, which means that the same permissions on a parent object, such as the root folder in this case, apply to the child
objects such as files and subfolders within the parent folder. If you want to change inherited permissions that cause Allow or Deny boxes to be deactivated (and checked), you can do this by removing the inherited permissions.

Activity 5-4: Removing Inherited Permissions
Time Required: Approximately 10 minutes
Objective: Remove inherited permissions on a folder.
Description: Often you want to remove inherited permissions for specific situations. In this activity, you learn how to turn off inherited permissions, so that permissions can be changed or even so that a specific group can be removed from accessing a folder. In this activity, you use the Utilities folder that you created earlier.
1. Use File Explorer to display the Utilities folder that you created in the last activity. Right-
click the folder, and click Properties.
2. Click the Security tab.
3. Click the Advanced button.
4. Review the groups that have permissions for the folder. Click the Disable inheritance button (see Figure 5-7).
5. Notice that you can select to convert inherited permissions to specific permissions for the folder or you can select to remove all inherited permissions. Click Remove all inherited permissions from this object.
6. In the Advanced Security Settings window, you'll now see that all other groups and user accounts with permissions have been removed, except for the Server Operators group that you configured manually and that does not use inherited permissions. Click Cancel.
7. In the folder Properties dialog box, notice that because you canceled the operation in Step 6, the default inherited groups are still listed.
8. Click OK in the folder's Properties dialog box.
9. Leave File Explorer open for the next activity, unless you need to stop working now. If you need to customize permissions, you have the option to set up advanced permissions for a particular group or user. Figure 5-8 illustrates the advanced permissions that you can set up, and Table 5-2 explains each of the advanced permissions.

Activity 5-5: Configuring Advanced Permissions
Time Required: Approximately 15 minutes
Objective: Configure advanced permissions for a folder to grant a group expanded access.
Description: Sometimes the regular NTFS permissions do not enable you to create exactly the type of access you want on a folder. In this activity, you set up advanced permissions on a new folder for use by all users in your organization.
1. Using File Explorer, create a new folder (under the \Users\Youraccount\Documents folder or in another location specified by your instructor, such as for the Administrator account) called Documentation plus your initials, such as DocumentationJR.
2. Right-click the new folder, and click Properties.
3. Click the Security tab.
4. Click Edit.
5. Click Add.
6. Click Advanced in the Select Users, Computers, Service Accounts, or Groups dialog box.
7. Click Find Now (refer to Figure 5-6).
8. Double-click the Domain Users group under Search results.
9. Click OK in the Select Users, Computers, Service Accounts, or Groups dialog box.
10. Click OK in the Permissions dialog box.
11. Ensure that Domain Users is selected under Group or user names in the Properties dialog box.
12. Click the Advanced button.
13. Select Domain Users under Permission entries in the Advanced Security Settings window, and click the Edit button.
14. Click Show advanced permissions in the Permission Entry window (see Figure 5-9).
• Record the permissions that are selected by default for the Domain Users group.
15. Click the Allow box for each of the following advanced permissions entries: Create files/ write data, Create folders/append data, Delete subfolders and files, and Delete.
16. Click the box for Only apply these permissions to objects and/or containers within this container.
17. Click OK in the Permission Entry window.
18. Click OK in the Advanced Security Settings window.
19. Click OK in the Properties dialog box.
20. Leave File Explorer open for the next activity (unless you need to stop working).

Activity 5-6: Auditing a Folder
Time Required: Approximately 20 minutes
Objective: Configure auditing on a folder to monitor how it is accessed and who is making changes to the folder.
Description: Now that you have created the Documentation folder, you decide to monitor how people are using the folder as well as the frequency of use. To do this, you set up auditing on that folder. To start, you must first enable auditing through a Group Policy in Active Directory, which is a one-time setup (you learn more about configuring group policies in Chapter 10, Securing Windows Server 2016). Once auditing is enabled, you can audit many types of objects, including specific folders. After you enable auditing, you configure the Documentation folder you created so that activity in the Documentation folder can be audited.

To enable auditing in Active Directory:
1. Right-click Start and click Run, enter mmc in the Run box, and click OK.
2. Click File and click Add/Remove Snap-in.
3. Click the Group Policy Management Editor (the second Group Policy option under available
snap-ins) and click Add.
4. In the Select Group Policy Object dialog box, click the Browse button.
5. In the Browse for a Group Policy Object dialog box, click Default Domain Policy and click OK.
6. Click Finish in the Select Group Policy Object dialog box.
7. Click OK in the Add or Remove Snap-ins dialog box.
8. In the left pane, click the right pointing arrow in front of Default Domain Policy [computer-
name.domainname] to display the items under it.
9. In the left pane, click the right pointing arrow in front of Computer Configuration.
10. Double-click the Policies folder in the left pane.
11. Double-click Windows Settings in the left pane.
12. Double-click Security Settings in the left pane.
13. Double-click Local Policies in the left pane.
14. Double-click Audit Policy in the left pane.
15. In the middle pane, notice the audit policies you can enable.
• What would you select to audit logons? What would you select to audit account management activity, such as account creation and changing a password for a user?
16. In the middle pane, double-click Audit directory service access (see Figure 5-10).
17. Click Define these policy settings. Next click Success and click Failure (to audit successful completion of an action and failure of an action; see Figure 5-11). Click OK. Notice the right portion of the middle pane shows you have configured Success, Failure for this option.
18. In the middle pane, double-click Audit object access.
19. Click Define these policy settings. Next click Success and click Failure. Click OK.
20. Close the Console1 MMC window. Click Yes, provide a name for the console, such as
Default Domain Policies, click Desktop to save it on the desktop, and click Save.

Activity 5-7: Enabling File and Folder Sharing

Time Required: Approximately 5 minutes
Objective: Turn on file sharing and public folder sharing as well as network discovery.
Description: Before you can share files over a network, ensure that Windows Server 2016 is enabled for file sharing. In this activity, you make sure that both network discovery and file sharing are turned on. Your computer should be connected to a network for this activity.

Even though you follow the steps to turn on network discovery and save your changes, Windows Server 2016 might not actually implement your changes. Before configuring network discovery, open Server Manager, click Tools, and click Services. Make sure that each of the following services are set to start automatically and that they are started: DNS Client, Function Discovery Resource Publication, SSDP Discovery, and UPnP Device Host.

1. In the right side of the taskbar, find the network connection icon in the tray. Right-click the icon and click Open Network and Sharing Center. (Alternatively, you can right-click Start, click Control Panel, use the Large icons or Small icons view, and click Network and Sharing Center.)

2. In the left side of the Network and Sharing Center window, click Change advanced sharing settings.

3. In the Advanced sharing settings window, notice that the current profile is Domain for a server that is a DC in a domain. The arrow for Domain (current profile) should be pointing up, and if it is not, click the down arrow to view the configuration options.

4. Ensure that Turn on network discovery is selected.

5. Next, ensure that Turn on file and printer sharing is selected (see Figure 5-14).

6. Click the down arrow for All Networks.

7. Click Turn on sharing so anyone with network access can read and write files in the Public folders. This enables network clients to access the Public folders in Windows Server 2016 over the network to read or copy files.

8. Click Save changes.

9. Close the Network and Sharing Center window and any other open windows.

Activity 5-8: Configuring a Shared Folder

Time Required: Approximately 15 minutes

Objective: Configure a shared folder, share permissions, and offline access.
Description: As a server administrator, one of the most important tasks you perform is to enable folder sharing. In this activity, you configure a folder to be shared over the network.
1. Use File Explorer (click the File Explorer icon in the taskbar) to locate the Documentation folder you created in Activity 5-5, such as DocumentationJR.
2. Right-click the folder, point to Share with, and click Specific people to see the File Sharing window (see Figure 5-15).
3. Click the down arrow next to the Add button and click Find people.
4. Click the Advanced button in the Select Users or Groups dialog box.
5. Click Find Now.
6. Double-click the DomainMgrs group you created in Activity 4-9 in Chapter 4, such as
DomainMgrsJP (DomainMgrs with your initials). Click OK.
7. Click the down arrow for the Permission Level for the DomainMgrs group and click Read/Write.
8. Click the Share button at the bottom of the File Sharing window.
9. The File Sharing window indicates the folder is shared and enables you to email the link for
the shared folder or to copy the link into a program (see Figure 5-16). Click Done.
10. In File Explorer, right-click the folder you just shared and click Properties.
11. Click the Sharing tab.
12. Click the Share button.
• What window is now displayed? How would you remove a user or group from those sharing the folder?
13. Click Cancel.
14. Click the Advanced Sharing button in the Properties dialog box.
15. In the Advanced Sharing dialog box, click the box for Share this folder. Notice that the
Share name is the same name as the shared folder (see Figure 5-17).
• How can you change the name of the share? How can you set the limit of users who can access the share at the same time?
16. Click the Permissions button in the Advanced Sharing dialog box. Notice that the permissions are now displayed as Full control, Change (same as Contribute), and Read. Also, you can select the Allow or Deny boxes for any of the permissions. Further, you can add or remove users and groups. Click Cancel.
17. In the Advanced Sharing dialog box, click Caching.
18. To configure full offline use, click All files and programs that users open from the shared folder are automatically available offline. Notice that Optimized for performance is enabled by default. Click OK.
19. Click OK in the Advanced Sharing dialog box.
20. Click Close in the Properties for the folder dialog box. Close File Explorer.

Client computers can now access the shared folder through the network, such as through the Network window available from Windows Explorer in older versions of Windows or File Explorer in Windows 8.1 and Server 2012 R2 and later versions.

Activity 5-9: Configuring a Shared Folder Using Server Manager
Time Required: Approximately 15 minutes

Objective: Configure a shared folder from Server Manager.

Description: A popular way for a server administrator to configure a shared folder is by using Server Manager. In this activity, you first use Server Manager to install the File Server Resource Manager to enable the use of folder quotas. Next, you use Server Manager to configure a shared folder. The File and Storage Services role should already be installed on the server, which is done by default when you install the operating system.
1. Open Server Manager, if it is not open.
2. Click Manage near the top of the Server Manager window and click Add Roles and Features.
3. Click Next, if you see the Before you begin window.
4. Ensure Role-based or feature-based installation is selected and click Next.
5. In the Select destination server window make sure your server is selected and click Next.
6. Ensure that File and Storage Services is already marked as installed. Click the right-pointing arrow in front of File and Storage Services. Click the right-pointing arrow in front of File and iSCSI Services to view the options under it (see Figure 5-18).
7. Check the box for File Server Resource Manager. (If File Server Resource Manager is already installed, click Cancel and go to Step 13.)
8. If you see the Add Roles and Features Wizard to add additional features, click Add Features.
9. Click Next in the Select server roles window.
10. Click Next in the Select features window.
11. Click Install in the Confirm installation selections window.
12. Make sure the installation was successful and then click Close in the Installation progress window.
13. In the left pane of Server Manager, click File and Storage Services.
14. Click Shares in the left pane.
15. In the middle pane, notice the Documentation folder that you configured in Activity 5-8 is listed under SHARES.
16. In the middle pane, click the down arrow for TASKS. Click New Share.
17. In the Select the profile for this share window, select SMB Share - Advanced (see Figure 5-19).
The profiles are methods established for guiding you through creating shares, presenting options for simple to more advanced situations. Notice that the right pane provides a description of this profile. Click Next.
18. In the Select the server and path for this share window, notice that you can select to share an entire drive, if needed. However, for this activity, select Type a custom path. Click the Browse button and browse to the Utilities folder, such as UtilitiesJR that you created in Activity 5-3.
For example, browse to users/administrator/documents/TestJR/UtilitiesJR. Click the folder and click Select Folder.
19. Click Next in the Select the server and path for this share window.
20. In the Specify share name window, leave the share name of the folder as the default and click Next.
21. Notice the options available in the Configure share settings window.
• Record the options from which to select. Which option would you use to permit users to view only folders and files for which they have permissions?
22. Ensure that Allow caching of share is selected and click Next.
23. Review the permissions already configured in the Specify permissions to control access window. Click Customize permissions.
24. In the Advanced Security Settings for the folder window, click the Share tab.
25. Click Add (see Figure 5-20).
26. In the Permissions Entry window for the folder, click Select a principal.
27. Click Advanced.
28. Click Find Now.
29. Double-click the Server Operators group and click OK in the Select User, Computer, Service Account, or Group box.
30. Ensure that Allow is configured for Type and place a check mark in the box for Full Control.
Click OK in the Permission Entry for the folder window.
31. In the Advanced Security Settings for the folder window, if the Everyone group is shown, click it and click Remove.
32. Click the Permissions tab. Click Server Operators and click Edit. In the Permission Entry for the folder window, be sure that Full control is selected for the Allow Type. This step ensures that both the folder permissions and the share permissions are the same. Click OK.
33. Click OK in the Advanced Security Settings for the folder window.
34. In the New Share Wizard window, click Next.
35. In the Specify folder management properties window, check the boxes for User Files and Application Files (as you will recall the folder is for server operators to use to run utilities).
36. Click Next.
37. In the Apply a quota to a folder or volume window, notice there is an informational note at the bottom of the window that says A quota is already applied to the folder that will be shared. Click Next.
38. In the Confirm selections window, review your choices and click Create.
39. Click Close in the View results window (see Figure 5-21).
40. In Server Manager, confirm that your new share is shown under SHARES.
41. Click the back arrow twice near the top of Server Manager, to return to the main window. Leave Server Manager open for the next activity.

Activity 5-10: Publishing a Shared Folder
Time Required: Approximately 5 minutes
Objective: Publish a shared folder in Active Directory.
Description: In this activity, you learn how to use the Active Directory Users and Computers tool to publish the shared Documentation folder you configured in Activity 5-8.
1. Open Server Manager, if it is not open.
2. Click Tools and click Active Directory Users and Computers.
3. If necessary, click the right arrow in front of the domain name in the left pane to see the items under the domain. Right-click the Users folder in the tree (or you could right-click an OU at this point to control administration of the published folder from an OU by delegating authority over the OU). Point to New.
• What are two objects that you can publish using this menu?
4. Click Shared Folder.
5. Enter the name for the published shared folder, such as DocumentationJR (the folder you created in Activity 5-5). Enter the network path to the share, such as \\servername\Users\ Administrator\Documents\ DocumentationJR. Click OK. Notice that the shared folder is now one of the objects listed in the right pane within the Users (or OU) folder.
6. Close the Active Directory Users and Computers window. Leave Server Manager open for the next activity.

Activity 5-11: Troubleshooting Permissions
Time Required: Approximately 10 minutes
Objective: View the effective access for a folder.
Description: The Effective Access tab in a folder's properties is an excellent place to start when you are troubleshooting a security conflict, such as when you think someone should be able to access a folder, but the system prevents them from accessing it. In this activity, you use the Effective Access tab to view the effective access for the Administrators group on the Documentation folder you have been configuring.
1. Find the Documentation folder that you created in Activity 5-5, such as DocumentationJR, via File Explorer.
2. Right-click the folder and click Properties.
3. Click the Security tab.
4. Click the Advanced button.
5. Click the Effective Access tab.
6. Click the link for Select a user.
7. In the Select User, Computer, Service Account, or Group dialog box, click Advanced, click
Find Now, and double-click the Administrators group. Click OK.
8. Click the View effective access button in the window for Advanced Security Settings for the folder and, if necessary, scroll through the Effective access box (see Figure 5-22).
9. Click the Select a user link.
10. Click Advanced, click Find Now, and double-click the Everyone group. Click OK.
11. Click the View effective access button.
• What is the effective access for the Everyone group?
12. Click OK in the Advanced Security Settings for the folder window and close the folder Properties window.

Activity 5-12: Installing DFS Namespaces and DFS Replication
Time Required: Approximately 15 minutes
Objective: Install the role services DFS Namespaces and DFS Replication.
Description: To set up domain-based DFS, you'll need to install DFS Namespaces and DFS Replication as role services within the File and Storage Services role. In this activity, you install both role services using Server Manager.
1. Open Server Manager, if it is not open.
2. Click Manage near the top of the Server Manager window and click Add Roles and Features.
3. Click Next, if you see the Before you begin window.
4. Ensure Role-based or feature-based installation is selected and click Next.
5. In the Select destination server window, make sure your server is selected and click Next.
6. Ensure that File and Storage Services is already marked as installed. Click the right-pointing arrow in front of File and Storage Services. If necessary, click the right-pointing arrow in front of File and iSCSI Services to view the options under it (refer to Figure 5-18).
7. Click the checkbox for DFS Replication. If you see the Add Roles and Features Wizard box, click Add Features.
8. Click the checkbox for DFS Namespaces. Click Next in the Select server roles window.
9. Click Next in the Select features window.
10. Click Install in the Confirm installation selections window.
11. Make sure the installation succeeded and then click Close in the Installation progress window.
12. Leave Server Manager open for the next activity.
Now that you've installed DFS Namespaces and DFS Replication, the next step is to configure a namespace root as in Activity 5-13.

Activity 5-13: Creating a Namespace Root
Time Required: Approximately 10 minutes
Objective: Configure a namespace root.
Description: Creating a namespace root is an important configuration step for DFS. In this activity, you create a new namespace root. Don't worry whether a namespace root already exists, because you use the same steps to install the first namespace root and additional ones. Have in mind a name for the namespace, such as Data plus your initials.

Before you start, ensure that Windows Firewall is configured to allow the necessary applications. Right-click the Start button, click Control Panel, set View by to Large icons or Small icons, click Windows Firewall, click Allow an app or feature through Windows Firewall, ensure that the boxes for DFS Management, DFS Replication, and Distributed Transaction Coordinator are checked, click OK, and close the Windows Firewall window.
1. If necessary, open Server Manager. Click Tools in Server Manager and click DFS Management. (Alternatively, you can use the DFS Management MMC snap-in.)
2. In the DFS Management window, click the Action menu at the top of the window or right-click Namespaces in the tree.
3. Click New Namespace (see Figure 5-24) to start the New Namespace Wizard.

4. Enter the name of the server to hold the namespace (the name of the server you are using) or use the Browse button to locate the server, and click Next.

5. Enter the namespace name, such as DataJR (Data + your initials) and click Next.

6. Leave Domain-based namespace as the default selection. If Enable Windows Server 2008 mode is selected, remove the checkmark from its box. Click Next.

7. In the Review Settings and Create Namespace window, click Create.

8. Click Close.

9. Leave the DFS Management window open for the next activity.
Managing a Domain-Based Namespace Root System
After the namespace root system is set up, several tasks are involved in managing the namespace root. These tasks can include:
• Creating a folder in a namespace
• Delegating management
• Tuning a namespace
• Deleting a namespace root
• Using DFS replication

Activity 5-14: Adding a Folder and Folder Target in DFS
Time Required: Approximately 5 minutes
Objective: Add a folder in DFS.

Description: In this activity, you add a folder under the DFS namespace root you have created.
1. Open the DFS Management tool if it is not already open.
2. Click the right-pointing arrow in front of Namespaces in the left pane to see your new namespace listed. Right-click the namespace you created in the tree under Namespaces.
3. Click New Folder.
4. In the New Folder dialog box, enter Documentation plus your initials as the name of the new folder, such as DocumentationJR.
5. Click the Add button to add the path to the Documentation folder you set up as a shared folder in Activity 5-5.
6. In the Add Folder Target dialog box, click the Browse button to find the Documentation folder you shared and double-click the folder, and it should now appear in the Path to folder target text box, as shown in Figure 5-25. Click OK.
7. Notice that the folder target you configured now appears in the Folder targets box. Click OK in the New Folder dialog box. You'll see the new folder listed under the namespace in the tree (click the right-pointing arrow in front of the namespace name).
8. Close the DFS Management tool and close any open windows.

Activity 5-15: Configuring Disk Quotas
Time Required: Approximately 10 minutes
Objective: Use File Server Resource Manager to configure quotas.
Description: In this activity, you use File Server Resource Manager to manage disk quotas and disk quota templates.
1. Open Server Manager, if it is closed.
2. Click Tools and click File Server Resource Manager.
3. In the left pane, click the right-pointing arrow for Quota Management, to view the items under it.
4. Double-click Quotas in the left pane.
5. In the middle pane, notice the 500 MB quota that was set up automatically for the shared Utilities folder you were configuring in Activity 5-9. This folder has a soft quota, which means that users receive a warning when they exceed the quota, but they are still able to exceed it. This is in contrast to a hard quota, which does not permit the user to go over the quota.
5
6. Click Action under the title bar in the File Server Resource Manager window, and click Create Quota.
7. In the Create Quota dialog box, use the Browse button to find the path to the Documentation folder you have been working on earlier, such as \Documents\DocumentationJR. Click OK in the Browse For Folder box.
8. Make sure that Create quota on path is selected in the Create Quota dialog box.
9. Ensure that Derive properties from the quota template (recommended) is selected.
10. Click the down arrow in the box to set the quota limit. Click 200 MB Limit Reports to User, so that the quota for the Documentation folder is 200 MB with usage reports produced. Your selections should be similar to those in Figure 5-27.
11. Scroll through the Summary of quota properties to confirm the properties associated with this quota setting. Click Create.
12. Verify that the new quota appears in the middle pane under Source Template: 200 MB Limit Reports to User in the File Server Resource Manager window.
13. In the left pane, click Quota Templates.
14. In the middle pane, review the quota templates already available.
15. In the middle pane, double-click the 100 MB Limit template.
16. Review the settings for this template as shown in the Quota Template Properties for 100 MB
Limit dialog box. Click Cancel.
17. Right-click Quota Templates in the left pane and click Create Quota Template.
18. Notice the settings you can configure for a new template.
• Record the settings you can configure.
19. Click Cancel.
20. Close File Server Resource Manager and close Server Manager.

Textbook - Hands-On Microsoft Windows Server 2016 by Michael Palmer