Section 2.

2 Windows Server Roles

In this lesson, you will learn to:
 Install and manage server roles and features
 Install and configure the File Server Role
Learning Outcomes
As you study this lesson, answer the following questions:
 What is the relationship between server roles and features?
 How is a new role installed on a server?
 How do you remove a server role?
 What is the benefit of removing an unused role?
Key Terms
The key terms for this lesson include:
Server role
A server role describes the primary function of a server. A server role is a set of applications or
services that enable a server to perform a very specific function on the network.
Role services
Role services are specific programs that provide the functions of a role, and are sub-
components of a role. Some roles, like DNS Server, have a single role service. Other roles, like
Print and Document Services, have multiple role services, such as the Distributed Scan Server
and Internet Printing.
Feature
A feature is a software program that is not directly related to a server role but adds functionality
to the entire server. Features include management tools, communication protocols or clients,
and clustering support.

Section 2.2 Windows Server Roles

In this lesson, you will learn to:
 Install and manage server roles and features
 Install and configure the File Server Role
Learning Outcomes
As you study this lesson, answer the following questions:
 What is the relationship between server roles and features?
 How is a new role installed on a server?
 How do you remove a server role?
 What is the benefit of removing an unused role?
Key Terms
The key terms for this lesson include:
Server role
A server role describes the primary function of a server. A server role is a set of applications or
services that enable a server to perform a very specific function on the network.
Role services
Role services are specific programs that provide the functions of a role, and are sub-
components of a role. Some roles, like DNS Server, have a single role service. Other roles, like
Print and Document Services, have multiple role services, such as the Distributed Scan Server
and Internet Printing.
Feature
A feature is a software program that is not directly related to a server role but adds functionality
to the entire server. Features include management tools, communication protocols or clients,
and clustering support.

2.2.4 Server Roles and Features Facts

This lesson covers the following topics:
 Server roles
 Role services
 Features
 Roles and feature management
Functionality and services are added to a server using the Add Roles and Features wizard. The
software is categorized as follows:
 A server role describes the primary function of a server. A server role is a set of
applications or services that enable a server to perform a specific function on the
network.
 Role services are the applications combined to provide the functions of a role. Role
services are sub-components of a role. Some roles, like DNS Server, have a single role
service. Other roles, like Print and Document Services, have multiple role services.
 A feature is a software program that is not directly related to a server role but adds
functionality to the entire server. Features include management tools, communication
protocols or clients, and clustering support.

Server Roles and Role Services

Available server roles and role services include:
Server Role Description
Active Directory AD DS is a distributed database that stores and manages network resources, such as users and
Domain Services computers. The AD DS role:
(AD DS)

Helps administrators securely manage information.

Facilitates resource sharing and collaboration between users.
Is required for directory-enabled applications, such as Microsoft Exchange Server, and for applying
technologies, such as Group Policy.
Active Directory AD CS is an identity and access control feature that creates and manages public key certificates used in
Certificate Services software security systems. The AD CS role:
(AD CS)

Provides customizable services for creating and managing public key certificates.
Enhances security by binding the identity, device, or service to a corresponding private key.
Includes features that allow you to manage certificate enrollment and revocation in various scalable
environments.

Role services include:

Certificate Authority
Certificate Enrollment Policy Web Service
Certificate Enrollment Web Service
Certificate Enrollment Authority Web Enrollment
Network Device Enrollment Service
Online Responder

Active Directory Active Directory Federation Services enables an organization to share identity information outside its
Federation network. This service allows users access to a partner organization using their login.
Services
Active Directory Active Directory Rights Management specifies permissions for accessing folders and files. Role services
Rights include:
Management
Services
Active Directory Rights Management Server
Identify Federation Support

DNS server The DNS service maps IP addresses to logical hostnames. DNS servers provide name resolution services,
providing IP addresses for known hostnames, or hostnames for known IP addresses. The Windows DNS
service provides support for IPv6 addresses.
DHCP server The DHCP service provides network hosts IP addresses and other IP configuration information. Host
computers contact the DHCP server at startup to obtain an IP address, default gateway address, DNS
server address, and other configuration information. The Windows DHCP service supports IPv6 addressing
and configuration information.
File and Storage File and Storage Services include technologies that help you set up and manage file servers. This role is
Services valuable when users need access to the same files and applications, or if centralized backup and file
management are essential to the organization. New features/functionality include:

Storage spaces and storage pools, which enable you to virtualize storage.
Unified remote management of File and Storage Services in Server Manager enables you to manage
multiple file servers remotely.
Windows PowerShell cmdlets for File and Storage Services allow you to perform most administration
tasks for file and storage servers.

Role services include:

File and iSCSI services

File server
DFS replication
Server for NFS
Storage services
 Note:
The File and Storage Services role installs by default.

Host Guardian The Host Guardian Service provides attestation and Key Protection Services that shield virtual machines
Service from malicious software or a potentially compromised host.
Hyper-V The Windows Hyper-V hypervisor provides the layer of software necessary for installing virtual guest
operating systems within virtual machines.
Print and The Print and Document Services role provides the print management console to manage printers on
Document Services multiple servers. Role services include:

Printer server
LPD service

Remote Access Administrators use Remote Access to configure and manage systems across the network from a
centralized location. Role services include:

DirectAccess and VPN (RAS)

Routing
Web Application Proxy

Remote Desktop Remote Desktop Services allows clients access to server-hosted desktops and applications, reducing the
Services need to install software on individual workstations. Role services include:

Remote Desktop Virtualization Host

Remote Desktop Connection Broker
Remote Desktop Gateway
Remote Desktop Licensing
Remote Desktop Web Access

Volume Activation Volume Activation Services can be used to automate the delivery and management of Microsoft software
Services volume licenses.
Web Server (IIS) Web Server (IIS) is the web server service. Use IIS to host internal and external web sites or services that
communicate using HTTP and support [Link] applications accessed through a web browser. Many
other roles also use IIS to provide web-based administration or access. Role services include:

Web server
Directory browsing
HTTP errors
Static content
HTTP redirection
HTTP logging
Tracing
Performance
URL authorization
IP and domain restrictions
ASP
FTP server
Management service
 Windows WDS is a disk imaging solution that you can use for remote deployment and automated installation of
Deployment Microsoft Windows operating systems.
Services (WDS)
Windows Server The WSUS server allows administrators to manage and distribute updates through a management console.
Update Server A WSUS server can also update other WSUS servers within the organization. Role services include:
(WSUS)

WSUS services
SQL server connectivity
WID connectivity

Features
Server features include:
Features Description
Failover clustering Provides high availability and scalability to your network by grouping servers into clusters.
Group Policy Allows you to specify configurations for users and computers through Group Policy settings.
Management
Network Load By managing two or more servers as a single virtual cluster, NLB enhances the availability and scalability of
Balancing (NLB) internet server applications such as those used on web, FTP, firewall, proxy, virtual private network (VPN),
and other mission-critical servers.
BitLocker Drive A security feature that protects a server by encrypting the operating system volume and verifying the integrity
Encryption of other startup components. BitLocker is also called full volume encryption.
Windows Server Provides backup and recovery for Windows Server systems.
Backup

Roles and Feature Management

Roles, role services, and features can be added using:
 The Roles and Features wizard.
 The Install-WindowsFeature PowerShell cmdlet.
 A PowerShell script to install roles and features on several servers at once.
Roles, role services, and features can be removed using:
 The Remove Roles and Features wizard.
 The Uninstall-WindowsFeature PowerShell cmdlet.

2.2.5 Install and Configure the File Server Role

You are using the CorpFiles16 server as a virtual file server. You can do basic file server
management for network users, but you need to be able to perform the following file server
management tasks:
 Define policies that prevent users from saving .wmv files in the home folders stored on
the server.
 Share files with UNIX-based clients.
In this lab, your task is to:
  Add the File Server Resource Manager (FSRM) role service, which allows you to
configure file screens to prevent users from saving specific file types in specific folders.
 Add the Server for NFS role service to be able to share files with UNIX-based clients.
Score: 2/2 (100%)
TASK SUMMARY
Required Actions
Add the File Server Resource Manager role service
Add the Server for Network File System role service
EXPLANATION
Complete this lab as follows:

1. Access the CorpFiles16 virtual server.

a. From Hyper-V Manager, select CORPSERVER.
b. Maximize the window to view all virtual machines.
c. Double-click CorpFiles16 to access the server.
2. Add the File Server Resource Manager (FSRM) role service.
a. From Server Manager, select Manage > Add Roles and Features.
b. From the Add Roles and Features Wizard, select Next.
c. Make sure Role-based or feature-based installation is selected
and then select Next.
d. Make sure [Link] is selected in the Server Pool
area and then select Next.
e. Expand File and Storage Services > File and iSCSI Services.
f. Select the File Server Resource Manager role.
g. Select Add Features.
3. Add the Server for NFS role service.
a. Under File and iSCSI Services, select the Server for NFS role.
b. Select Add Features.
c. Select Next.
d. On the Select features window, select Next.
e. Select Install.
f. When the installation is complete, select Close.

2.2.6 Practice Questions

Question 1 - Your manager has asked you to install the Web Server (IIS) role on one of your
Windows Server 2022 systems so it can host an internal website.
Which Windows feature can you use to do this?
Add Roles and Features
Question 2 - Which role or feature protects a server by encrypting the operating system volume
and verifying the integrity of other startup components?
BitLocker Drive Encryption
Question 3 - Drag the type of server software listed on the left to its appropriate description on
the right.
A set of software features that provides a specific server function. - Role
A software program that adds functionality to all server functions. - Feature
A specific program that adds functions to a role. - Role service
Question 4 - Which of the following provides network host IP addresses and other IP
configuration information?
DHCP Server
Question 5 - Which of the following enables an organization to share identity information
outside its network?
Active Directory Federation Services
Question 6 - You've been assigned to manage a Windows Server system named AccServer. This
server was deployed using a Server Core installation.
You need to make several configuration changes to the system.
Which utility could you use to do this?
PowerShell
Question 7 - Which of the following are roles of Remote Access? (Select two.)
DirectAccess and VPN (RAS), Web Application Proxy
Question 8 - To save disk space on your Windows Server 2022 system, you decide to remove
unneeded roles and features.
Which Windows feature can you use to do this?
Remove Roles and Features
Question 9 - You are at the PowerShell command line, and you need to enter the command that
will remove the Telnet Client feature from the server.
Use the drop-down list to fill in the blank with the part of the command that is missing:
_______________________ -Name Telnet-Client -Restart
remove-windowsfeature

Question 10 - Which of the following is a disk imaging solution that you can use for remote
deployment and automated installation of Microsoft Windows operating systems?
Windows Deployment Services