6419 - Configuring Managing and Maintaining Windows Server 2008

6419B Introduction

Course Description
http://www.microsoft.com/learning/en/us/course.aspx?ID=6419b

Course Prerequisites
http://www.microsoft.com/learning/en/us/course.aspx?ID=6419b#tab3

Before attending this course, students must have:
•At least one year experience operating Windows Servers in the area of account management, server maintenance, server monitoring, or server security.
•A+, Server+, hardware portion of Net+, and familiarity with Windows (client side).
•Working knowledge of networking technologies.
•Intermediate understanding of network operating systems.
•Working experience with Windows Server 2003 and Windows Server 2008.
•Basic knowledge of Active Directory.
•An understanding of security concepts and methodologies (for example, corporate policies).
•Basic knowledge of TCP/IP.
•Basic knowledge of scripting tools such as PowerShell and WMI.
Exam 70-640 Learning Plan
Suggested Additional Material 6426 Course
http://www.microsoft.com/learning/en/us/course.aspx?id=6426c


Module 1 - Server 2008 Overview
2008 Server Info
http://technet.microsoft.com/en-us/windowsserver/cc304052.aspx
2008 Server R2 Info
http://technet.microsoft.com/en-us/windowsserver/bb310558.aspx
What's New
http://technet.microsoft.com/en-us/library/dd282984(v=ws.10).aspx
RSAT – Remote Server Administration Tools
http://support.microsoft.com/kb/958830/en-us

Module 2 - Infrastructure
Roles and Features
http://technet.microsoft.com/en-us/library/jj134039.aspx
PowerShell v2.0 OS info (XP, Vista …)
http://support.microsoft.com/kb/968929
Moving DNS Checklist
http://technet.microsoft.com/en-us/library/cc755303.aspx

Module 3 – Access to File Services
File Services for Windows Server 2008 R2
http://technet.microsoft.com/en-us/library/dd463985(v=ws.10).aspx
File and Storage Overview
http://technet.microsoft.com/en-us/library/hh831487.aspx
Share and Storage Management
http://technet.microsoft.com/en-us/library/cc731574.aspx

Module 4 – DFS
Replication Migration Guide: FRS to DFS Replication
http://technet.microsoft.com/en-us/library/dd640019(WS.10).aspx
Should you use DFS-R
http://blogs.technet.com/b/notesfromthefield/archive/2008/04/27/upgrading-your-sysvol-to-dfs-r-replication.aspx
DFS FAQ
http://technet.microsoft.com/en-us/library/cc773238(WS.10).aspx
Access-based enumeration hides files and folders that users do not have permission to access
http://support.microsoft.com/kb/961658

Module 5 - FSRM - File Server Resource Manager
FSRM
http://technet.microsoft.com/en-us/library/cc754810(v=WS.10).aspx
Old FSRM
http://technet.microsoft.com/en-us/library/cc755603(v=WS.10).aspx
Delegation and Access Control
http://technet.microsoft.com/en-us/library/cc772723(WS.10).aspx
Working with File Management Tasks
http://technet.microsoft.com/en-us/library/dd758756(WS.10).aspx
Automatically Move All Files
http://technet.microsoft.com/en-us/library/dd758756(WS.10).aspx#BKMK_CreateExpire

Module 6 - Remote Access
Routing and Remote Access
http://technet.microsoft.com/en-us/library/cc754634(v=WS.10).aspx
Old RRAS info
http://technet.microsoft.com/en-us/library/cc787456(v=ws.10).aspx
Security Tools
http://www.backtrack-linux.org/downloads/

Direct Access
http://technet.microsoft.com/en-us/library/dd758757(v=WS.10).aspx

Module 7 & 8 – AD – Active Directory
Forest Domains OUs – Oh My (What Are Domains and Forests?)
http://technet.microsoft.com/en-us/library/cc759073(v=ws.10).aspx
AD – Active Directory
http://technet.microsoft.com/en-us/library/cc758107(v=WS.10).aspx
Compare Forest and Domain Function Levels
http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(v=ws.10).aspx
AD PowerShell
http://technet.microsoft.com/en-us/library/ee617195.aspx
ADAC Regressions
http://blogs.msdn.com/b/lixiong/archive/2011/08/21/two-years-review-look-back-with-active-directory-administrative-center.aspx

AD Auditing
Audit Policy
http://technet.microsoft.com/en-us/library/dd941595(v=ws.10).aspx
Building a Case
http://blogs.msdn.com/b/ericfitz/archive/2008/08/20/tracking-user-logon-activity-using-logon-events.aspx
Security Events
http://support.microsoft.com/kb/947226
AD Diagnostic Logging
http://technet.microsoft.com/en-us/library/cc961809.aspx
Audit AD User Creation/Deletion
http://social.technet.microsoft.com/wiki/contents/articles/17055.event-ids-when-a-new-user-account-is-created-on-active-directory.aspx
http://social.technet.microsoft.com/wiki/contents/articles/17056.event-ids-when-a-user-account-is-deleted-from-active-directory.aspx

Module 9 10 & 11 – GPO
GPO for the IT Pro
http://windows.microsoft.com/en-US/windows7/Group-Policy-management-for-IT-pros
What's New
http://technet.microsoft.com/en-us/library/dd367853(v=ws.10).aspx
Windows 7 and cached credentials
http://support.microsoft.com/kb/172931
GPO Refresh Policy
http://technet.microsoft.com/en-us/library/cc757597(WS.10).aspx
GPO Reference Tools
http://gps.cloudapp.net/
http://gpsearch.azurewebsites.net/default.aspx
http://www.microsoft.com/en-us/download/details.aspx?id=25250
Windows 7 clients and 2003 Domain Controllers with 2003 Function Level
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/dc5ee374-56ba-4a6c-aaee-2ee7137f166a
GPO Issues Problems and Potential Fixes
VPN GPO issues - due to cached credentials – Possible solution - to avoid that select logon using dial-up connections check box
http://technet.microsoft.com/en-us/library/cc736905(WS.10).aspx
Remove Run Once for IE
http://randelhall.blogspot.com/2010/07/remove-run-once-from-ie.html

Module 12 - Branch Office
RODC – Read Only Domain Controller
http://technet.microsoft.com/en-us/library/dd734758(v=WS.10).aspx
Password Replication
http://technet.microsoft.com/en-us/library/cc753470(v=ws.10).aspx
QoS – Quality of Service
http://technet.microsoft.com/en-us/network/bb530836.aspx
BranchCache
http://technet.microsoft.com/en-us/network/dd425028.aspx

Module 13 - Performance
Performance Guidelines
http://msdn.microsoft.com/en-us/windows/hardware/gg463394.aspx
PAL (Performance Analysis of Logs) tool
http://pal.codeplex.com/
http://www.petri.co.il/analyze-windows-performance-logs.htm
Relog
http://blogs.technet.com/b/richard_macdonald/archive/2008/04/08/3032386.aspx

Module 14 - Backup and Recover
Step by Step Guide
http://technet.microsoft.com/en-us/library/cc770266(v=WS.10).aspx

Extras

More from PowerShell 101
http://powershell101.blogspot.com

Copy User
http://randelhall.blogspot.com/2011/04/are-you-copying-user-in-active.html
Active Directory Replication 2008
http://technet.microsoft.com/en-us/library/cc772726(WS.10).aspx
Active Directory Replication (old 2003 but good reference)
http://technet.microsoft.com/en-us/library/cc782376(WS.10).aspx
Replication Topology (old 2003 but good reference)
http://technet.microsoft.com/en-us/library/cc755994(WS.10).aspx
Technet guide to assist you upgrade to 2008
http://technet.microsoft.com/en-us/library/cc731188(WS.10).aspx
AD recycle bin in 2008 R2
http://technet.microsoft.com/en-us/library/dd392261(WS.10).aspx
Free AD Tool to help recover users
http://www.ldapexplorer.com/en/lazarus.htm
More PowerShell ISE - free
http://powergui.org/index.jspa
http://www.idera.com/Free-Tools/PowerShell-Plus/
Create AD using PowerShell 2008 R2
http://blogs.metcorpconsulting.com/tech/?p=517
http://lyncdup.com/2013/06/setup-a-2008-r2-domain-controller-with-powershell-install-tafirst2008r2domaincontroller/

GPO – Group Policy Objects

Group Policy

https://gpsearch.azurewebsites.net

Latest Windows and Windows Server
https://www.microsoft.com/en-us/download/details.aspx?id=25250

1803/1709

https://www.microsoft.com/en-us/download/details.aspx?id=56946

Popular GPO List

https://gpsearch.azurewebsites.net/#1843

Group Policy 2012

New Features in 2012 http://technet.microsoft.com/en-us/library/hh831791.aspx

“In the Cloud” - Group Policy Search http://gpsearch.azurewebsites.net/

Group Policy 2008

There is a new tool named ControlUp by Smart-X (search for it) using which you can perform stuff like GP refresh remotely on multiple targets (computers or users) and verify the policy application by comparing the following registry value across all users:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System\DisableTaskMgr

Course 6425B - Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Class Overview and Prerequisites
6425 Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Lesson 1

Max Number of Objects in AD

http://technet.microsoft.com/en-us/library/active-directory-maximum-limits-scalability(WS.10).aspx

RODC info

adprep http://technet.microsoft.com/en-us/library/cc731728(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc731970(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc771055(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc754889(WS.10).aspx

Lesson 2
How to create OU with script
http://msdn.microsoft.com/en-us/library/aa705902(VS.85).aspx

Lesson 3

You can change the complex password requirements by a password filter

 http://msdn.microsoft.com/en-us/library/ms813420

Fine Grained Password Policy

http://technet.microsoft.com/en-us/library/cc770842(WS.10).aspx

Lesson 5
Reset LSA secret on computer accounts
http://support.microsoft.com/kb/216393

Lesson 6
Copy GPO from forest to forest or domain to domain

http://msdn.microsoft.com/en-us/library/aa814314(VS.85).aspx

UAC control with GPO

http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx

Change GPO refresh interval

http://technet.microsoft.com/en-us/library/cc757597(WS.10).aspx

http://www.windowsecurity.com/articles/Controlling-Group-Policy-Security-Settings-Refresh-Application.html

Group Policy Settings Reference for Windows and Windows Server

http://www.microsoft.com/downloads/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb&displaylang=en

Starter GPO

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ae3ddba7-af7a-4274-9d34-1ad96576e823

Great web site on GPO - great reminder from Derek Rose - thank you

http://www.gpoguy.com/

GPO documentation

http://gps.cloudapp.net/

Lesson 7
Security Configuration and Analysis Tool Step by Step Guide
http://technet.microsoft.com/en-us/library/bb742512.aspx

Lesson 8
Active Directory Auditing Guidelines

AD DS Auditing Step-by-Step Guide

http://technet.microsoft.com/en-us/library/cc731607(WS.10).aspx

Lesson 11
DFS-R FAQ
http://technet.microsoft.com/en-us/library/cc773238(WS.10).aspx
NTDSUTIL
http://support.microsoft.com/kb/255504
RODC
http://technet.microsoft.com/en-us/library/cc732801(WS.10).aspx
Conversion SYSVOL from FRS to DFS Replication
http://technet.microsoft.com/en-us/library/dd641227(WS.10).aspx
SYSVOL migration states
http://technet.microsoft.com/en-us/library/dd641052(WS.10).aspx

Lesson 12

REPADMIN examples
http://technet.microsoft.com/en-us/library/cc773062(WS.10).aspx
Display replication partners
repadmin /showrepl hqdc01.contoso.com
Start a replication event between two replication partners
repadmin /replicate hqdc01.contoso.com hqdc02.contoso.com dc=contoso,dc=com
Start a replication event between all replication partners
repadmin /syncall hqdc01.contoso.com dc=contoso,dc=com
Show connections objects
repadmin /showconn hqdc01.contoso.com
Show replication status in forest
repadmin /replsummary

Extras
Domain Rename
http://technet.microsoft.com/en-us/library/cc794919(WS.10).aspx

FSMO Placement
http://technet.microsoft.com/en-us/library/cc754889(WS.10).aspx
Find all GC's using powershell or dsquery server -forest -isgc

• $forestinfo = [system.directoryservices.activedirectory.forest]::getcurrentforest()
• $forestinfo.findallglobalcatalogs()

http://exchangeshare.wordpress.com/2008/04/05/powershell-forest-information-find-all-gcs/
AD PREP
http://technet.microsoft.com/en-us/library/cc782481(WS.10).aspx
http://technet.microsoft.com/en-us/library/dd464018(WS.10).aspx
AD cleanup
http://support.microsoft.com/kb/216498

Additional Reading
http://www.pbbergs.com/windows/windows.htm

Cool new site - GPO search

Cool new app.  If you want to look up your GPO try this new site.  http://gps.cloudapp.net/

You can still download the excel spreadsheet here or use the new filter option in GPME

Windows Server 2008 R2 Roadshow

Powershell requirements
http://support.microsoft.com/kb/968929

Powershell Library
http://technet.microsoft.com/en-us/library/bb978526.aspx

Running powershell from command line is easy just type powershell.exe or powershell.exe .\script.ps1, but heres more
http://www.leeholmes.com/blog/2006/05/05/running-powershell-scripts-from-cmd-exe/

Hyper-V can run in core, see here for more
http://technet.microsoft.com/en-us/library/cc794852(WS.10).aspx

New to R2 and Windows 7 is Branch Cache to speed up access to files at corporate, see video below
http://technet.microsoft.com/en-us/edge/branch-cache-in-windows-7.aspx

What's new in Group Policy
http://technet.microsoft.com/en-us/library/dd367853(WS.10).aspx

Need to view events from other servers or concentrate your events on one management server.
http://technet.microsoft.com/en-us/library/cc749183.aspx

Group Policy Refresh - repost from Kurt Roggen

 

With Group Policies (and also Group Policy Preferences), settings are divided into two categories: Computer Configuration and User Configuration.

Computer Configuration settings are applied during startup of the operating system. User Configuration settings are applied during user logon on to a computer.

Once policy settings are applied at startup/logon, the settings are refreshed automatically to ensure they are up-to-date. During Group Policy refresh, the client computer contacts the closest available

domain controller which provides a list of all the policy objects that apply to the computer and user at different levels (site, domain, OUs). The domain controller does this regardless of whether the version numbers on all the summarized policy objects have changed. By default, the computer processes the policy objects only if the version number of at least one of the policy objects has changed. If any one of the related policies has changed, all of the policies have to be processed again because of inheritance and the interdependencies within policies.

You can also force a refresh manually using gpupdate /force. This will process all policies again, even if their version number has not changed.

By default, computer Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes. So, minimum refresh cycle is 90 minutes, maximum refresh cycle is 2 hours (120 min) and assures the load is spread when machines/users contact their domain controllers at the refresh cycle. This policy covers both workstations and member servers and excludes domain controllers.

You can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the computer tries to update Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.

By default, domain controllers Group Policy is updated every 5 minutes.

You can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the domain controller tries to update Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.

Refresh intervals for computers and domain controllers

By default, user Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes.

You can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the user tries to update user Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.

Both User and Computer refresh intervals are typically different. For example, the computer refresh could take place within 95 minutes and the user refresh could take place within 112 minutes.

Refresh intervals for users

Security settings are a exception to the processing rule. By default, these settings are refreshed every 16 hours (960 minutes) regardless of whether policy objects contain changes.

A random offset of up to 30 minutes is added to reduce impact on domain controllers and the network during updates (making the effective refresh window 960 to 990 minutes).

Security settings contain Registry permissions, File System permissions, Restricted Groups, Eventlog, System Services, …

Also, if the client computer detects that it is connecting over a slow network connection, it informs the domain controller and only the Security Settings and Administrative Templates are transferred over the network, which means that by default only the security settings are applied when a computer is connected over a slow link.

The way slow link detection (read: threshold) works, is configurable through Group Policy. However, security settings are always enforced even when a slow network connection is detected.

Group Policy Security CSE (Client Side Extension)

Group Policy Scripts CSE (Client Side Extension)

Group Policy Preference Folder Options CSE

The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line.

Obviously, updates across slow connections can cause significant delays.

With Group Policy Preferences, you are able to go a step further and to configure the priority of the background refresh.

thx Kurt

Group Policy CSE

Below, you can find a sorted list (following the order of application) of all Group Policy CSE (Client Side Extensions) taken from the site of Mark Heitbrink - MVP Group Policy.


All extensions can be found under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions.

Order Client Side Extension (CSE) Name File GP GUID Background Refresh

1 Registry userenv.dll {35378EAC-683F-11D2-A89A-00C04FBBCFA2} Yes

2 Wireless Group Policy gptext.dll {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63} Yes

3 Group Policy Environment gpprefcl.dll {0E28E245-9368-4853-AD84-6DA3BA35BB75} Yes

4 Group Policy Local Users and Groups gpprefcl.dll {17D89FEC-5C44-4972-B12D-241CAEF74509} Yes

5 Group Policy Device Settings gpprefcl.dll {1A6364EB-776B-4120-ADE1-B63A406A76B5} Yes

6 Folder Redirection fdeploy.dll {25537BA6-77A8-11D2-9B6C-0000F8080861} Yes

7 Microsoft Disk Quota dskquota.dll {3610eda5-77ef-11d2-8dc5-00c04fa31a66} No

8 Group Policy Network Options gpprefcl.dll {3A0DBA37-F8B2-4356-83DE-3E90BD5C261F} Yes

9 QoS Packet Scheduler gptext.dll {426031c0-0b47-4852-b0ca-ac3d37bfcb39} Yes

10 Scripts gptext.dll {42B5FAAE-6536-11d2-AE5A-0000F87571E3} Yes

11 Process Group Policy For Zone Map / Internet Explorer iedkcs32.dll {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3} Yes

12 Group Policy Drive Maps gpprefcl.dll {5794DAFD-BE60-433f-88A2-1A31939AC01F} No

13 Group Policy Folders gpprefcl.dll {6232C319-91AC-4931-9385-E70C2B099F0E} Yes

14 Group Policy Network Shares gpprefcl.dll {6A4C88C6-C502-4f74-8F60-2CB23EDC24E2} Yes

15 Group Policy Files gpprefcl.dll {7150F9BF-48AD-4da4-A49C-29EF4A8369BA} Yes

16 Group Policy Data Sources gpprefcl.dll {728EE579-943C-4519-9EF7-AB56765798ED} Yes

17 Group Policy Ini Files / INI gpprefcl.dll {74EE6C03-5363-4554-B161-627540339CAB} Yes

18 Windows Search Group Policy / WDS srchadmin.dll {7933F41E-56F8-41d6-A31C-4148A711EE93} Yes

19 Security scecli.dll {827D319E-6EAC-11D2-A4EA-00C04F79F83A} Yes

20 Deployed Printer Connections gpprnext.dll {8A28E2C5-8D06-49A4-A08C-632DAA493E17} Yes

21 Group Policy Services gpprefcl.dll {91FBB303-0CD5-4055-BF42-E512A681B325} Yes

22 Internet Explorer Branding / Internet Explorer iedkcs32.dll {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B} Yes

23 Group Policy Folder Options gpprefcl.dll {A3F3E39B-5D83-4940-B954-28315B82F0A8} Yes

24 Group Policy Scheduled Tasks gpprefcl.dll {AADCED64-746C-4633-A97C-D61349046527} Yes

25 Group Policy Registry / Registry gpprefcl.dll {B087BE9D-ED37-454f-AF9C-04291E351182} Yes

26 EFS recovery scecli.dll {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A} Yes

27 802.3 Group Policy dot3gpclnt.dll {B587E2B1-4D59-4e7e-AED9-22B9DF11D053} Yes

28 Group Policy Printers gpprefcl.dll {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D} Yes

29 Group Policy Shortcuts gpprefcl.dll {C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7} Yes

30 Microsoft Offline Files cscobj.dll {C631DF4C-088F-4156-B058-4375F0853CD8} Yes

31 Software Installation appmgmts.dll {c6dc5466-785a-11d2-84d0-00c04fb169f7} Yes

32 IP Security polstore.dll {e437bc1c-aa7d-11d2-a382-00c04f991e27} Yes

33 Group Policy Internet Settings / Internet gpprefcl.dll {E47248BA-94CC-49c4-BBB5-9EB7F05183D0} Yes

34 Group Policy Start Menu Settings gpprefcl.dll {E4F48E54-F38D-4884-BFB9-D4D2E5729C18} Yes

35 Group Policy Regional Options gpprefcl.dll {E5094040-C46C-4115-B030-04FB2E545B00} Yes

36 Group Policy Power Options gpprefcl.dll {E62688F0-25FD-4c90-BFF5-F508B9D2E31F} Yes

37 Group Policy Applications gpprefcl.dll {F9C77450-3A41-477E-9310-9ACD617BD9E3} Yes

38 Enterprise QoS gptext.dll {FB2CA36D-0B40-4307-821B-A13B252DE56C} Yes

Course 5118B: Supporting Windows Vista and Applications in the Enterprise

Online Live
Eval http://www.metricsthatmatter.com/cincy12nh

Vista Features and Compare Editions
http://www.microsoft.com/windows/windows-vista/compare-editions/default.aspx

Vista Security
http://www.microsoft.com/windows/windows-vista/features/security-center.aspx
http://technet.microsoft.com/en-us/library/cc507844.aspx

MAP
http://www.microsoft.com/downloads/details.aspx?FamilyID=67240b76-3148-4e49-943d-4d9ea7f77730&displaylang=en

Easy Transfer for XP
http://www.microsoft.com/downloads/details.aspx?familyid=2B6F1631-973A-45C7-A4EC-4928FA173266&displaylang=en

User state migration
http://technet.microsoft.com/en-us/library/cc507855.aspx
http://technet.microsoft.com/en-us/library/dd883247(WS.10).aspx
 http://technet.microsoft.com/en-us/library/cc749015(WS.10).aspx
 http://technet.microsoft.com/en-us/library/cc766226(WS.10).aspx
http://technet.microsoft.com/en-us/library/cc722032(WS.10).aspx

Sysprep
 http://technet.microsoft.com/en-us/library/cc766049(WS.10).aspx
 http://technet.microsoft.com/en-us/library/cc721973(WS.10).aspx

Link Layer Topology Discovery (LLTD) responder for XP sp2
http://www.microsoft.com/downloads/details.aspx?familyid=4F01A31D-EE46-481E-BA11-37F485FA34EA&displaylang=en

Vista Security Guide
http://www.microsoft.com/downloads/details.aspx?FamilyId=A3D1BBED-7F35-4E72-BFB5-B84A526C1565&displaylang=en

Change GPO refresh interval
http://technet.microsoft.com/en-us/library/cc757597(WS.10).aspx
http://www.windowsecurity.com/articles/Controlling-Group-Policy-Security-Settings-Refresh-Application.html

Group Policy Settings Reference for Windows and Windows Server
http://www.microsoft.com/downloads/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb&displaylang=en

2003 and vista gpo issues
 http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/0a9124d8-6c91-442d-8564-cb92164386d0

Managing Group Policy ADMX Files Step-by-Step Guide:
http://technet2.microsoft.com/WindowsVista/en/library/02633470-396c-4e34-971a-0c5b090dc4fd1033.mspx?mfr=true

ADMX Schema:
http://msdn2.microsoft.com/en-us/library/aa373476(VS.85).aspx

ADMX Technology Review:
http://www.microsoft.com/technet/windowsvista/library/ef346453-eee8-4abe-ba6c-2160fee3be46.mspx

ADMX Migrator (this tool is used for converting existing Group Policy ADM Templates to the new ADMX format):
http://www.microsoft.com/downloads/details.aspx?familyid=0F1EEC3D-10C4-4B5F-9625-97C2F731090C&displaylang=en

Process Explorer and other great tools at sysinternals
http://technet.microsoft.com/en-us/sysinternals/default.aspx

Virtual Tools
http://www.virtualbox.org/
http://www.microsoft.com/windows/virtual-pc/
http://technet.microsoft.com/en-us/library/cc732470(WS.10).aspx

VHD
http://technet.microsoft.com/en-us/bb738372.aspx

Planning and Managing Windows 7 Desktop Deployments and Environments

Activation in Disconnected locations
http://technet.microsoft.com/en-us/library/dd981010.aspx

 Activation Planning Guide
http://technet.microsoft.com/en-us/library/dd878528.aspx


Build a better image
http://technet.microsoft.com/en-us/magazine/ff721826.aspx

USMT - Scanstate and Loadstate return codes
http://technet.microsoft.com/en-us/library/dd823291(WS.10).aspx

How to restore your personal files after you perform a custom installation of Windows Vista or of Windows 7
http://support.microsoft.com/kb/932912

Image X - http://technet.microsoft.com/en-us/library/cc722145(WS.10).aspx

more imagex - capture hard drive http://technet.microsoft.com/en-us/library/dd744320(WS.10).aspx

GPO control for Active X
http://technet.microsoft.com/en-us/library/dd631688(WS.10).aspx

Updated list of setup options as you move from Office 2007 to 2010
http://technet.microsoft.com/en-us/library/cc179018.aspx

Info on Windows Update agent aka WSUS client
http://technet.microsoft.com/en-us/library/cc720477(WS.10).aspx

XP to Windows 7 issues
http://windows.microsoft.com/en-US/windows7/help/upgrading-from-windows-xp-to-windows-7

System Center Info
http://www.microsoft.com/systemcenter/en/us/suitetrials.aspx

No floppy - No problem - Copy the Autounattend.xml file to the root directory of a USB flash drive
http://technet.microsoft.com/en-us/library/dd349348(WS.10).aspx

BCDedit

good tutorial on bcdedit http://www.sevenforums.com/tutorials/2676-bcdedit-how-use.html

A free BCDEDIT tool called EasyBCD - http://neosmart.net/dl.php?id=1

Great boot from VHD tutorial
http://www.sevenforums.com/tutorials/2953-virtual-hard-drive-vhd-file-create-start-boot.html

Ultimate list of Windows 7 guides http://www.sevenforums.com/tutorials/257-windows-7-tutorial-index.html

Best of ... Windows7 FAQ
http://social.answers.microsoft.com/Forums/en-US/w7desktop/thread/45799d0c-38f2-40fc-b42b-4b53ef7c798f