Implement Windows Server 2016 IP Address Management (IPAM)

This course will teach you how to deploy, manage, and secure Windows Server 2016 IPAM servers.
Course info
Rating
(19)
Level
Intermediate
Updated
Apr 11, 2017
Duration
3h 39m
Table of contents
Course Overview
Course and Scenario Overview
Building the Lab
Introduction to IP Address Management
Provision and Configure IPAM
IPAM, RBAC and JEA
IP Blocks and Ranges
Manage DHCP with IPAM
Managing DNS with IPAM
Audit IPAM
Migrate Existing Workload to IPAM
IPAM in Multiple Forest Environments
IPAM Database Storage and Management
Using IPAM with System Center VMM
Description
Course info
Rating
(19)
Level
Intermediate
Updated
Apr 11, 2017
Duration
3h 39m
Description

This course is useful for those deploying and managing IPAM in their production environments as well as those pursuing the 70-741 exam. In this course, Implement Windows Server 2016 IP Address Management (IPAM), you'll learn, from a basic to advanced level of the Windows Server IPAM role, specifically the implementation available in Windows Server 2016. First, you'll explore IPAM concepts, prerequisites, deployment topologies, and deployment options. Next, you'll discover securing IPAM administration through RBAC and JEA. Then, you'll learn about IPAM blocks, ranges, subnets, IP addresses, and how to manage DHCP scopes, policies, and servers. Finally, you'll learn about managing DNS servers, zones, records using IPAM, how to use IPAM to track IP address usage, how to migrate existing workloads to IPAM, how to integrated IPAM into System Center Virtual Machine Manager, and how to migrate the IPAM database to SQL Server. By the end this course, you’ll know how to get the most out of your Windows Server 2016 IPAM server deployment.

About the author
About the author

Orin Thomas is an MVP, a Microsoft Regional Director, an MCT, and has a string of Microsoft MCSE and MCITP certifications.

More from the author
More courses by Orin Thomas
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
G'day viewers, my name's Orin Thomas, and welcome to my course, Implementing Windows Server 2016 IP Address Management. I'm a decade-long MVP and Microsoft regional director, have written more than three-dozen books for Microsoft Press, have a bunch of certifications, speak all over the world at conferences, and I'm completing a doctor of information technology degree at Charles Sturt University. This course provides you with coverage from a basic to advanced level of Windows Server IP Address Management, or IPAM, specifically the implementation available in Windows Server 2016. Some of the major topics that I'll cover include deploying IPAM to manage DNS and DHCP servers, securing IPAM with role-based access control, migrating existing DNS and DHCP workloads to IPAM, tracking IP address use by user and computer account using IPAM, and integrating IPAM with System Center Virtual Machine Manager. By the end of this course, you'll know how to get the most out of your Windows Server 2016 IPAM server deployment. Before beginning the course, you should be familiar with basic Windows Server administration techniques, and have basic PowerShell skills, basic DNS administration skills, and basic DHCP administration skills. I hope you'll join me on this journey to learn more about IPAM on Windows Server with the Implementing Windows Server 2016 IP Address Management course at Pluralsight.

Building the Lab
G'day viewers, this is Pluralsight, my name's Orin Thomas, and in this module, we're looking at Building the Lab. So in this module, I'll talk about the Pluralsight AutoLab. I'll talk about what the lab actually looks like when it's built, what the requirements are for the AutoLab, how to use nested virtualization with the AutoLab, how to deploy the AutoLab, and how to use the AutoLab. Let's get into it.

Provision and Configure IPAM
G'day viewers, this is Pluralsight, my name's Orin Thomas, and in this module, we're going to cover Provisioning and Configuring IPAM. So in this module, we're going to look at IPAM requirements, we're going to look at IPAM deployment technologies, we're going to look at IPAM components, we're going to talk briefly about what you need to do to provision IPAM manually, we'll talk about provisioning IPAM using Group Policy, I'll talk about the server discovery process, I'll talk about the relevant PowerShell cmdlets, and we'll do a demo sort of pulling this all together. Let's get into it. Okay, first question, why on Earth should I learn this? Well, this is important because you need to know what the requirements are for IPAM, and how you can deploy it and what it involves doing. So that's the sort of stuff that we're going to cover in this module. In terms of pulling this into our, sort of our Globomantics jet ski scenario, let's think about it this way. Before deploying IPAM, there's a method of managing IP addresses and names. Globomantics IT department needs to perform a pilot deployment of IPAM to understand how its components will fit in to the existing network infrastructure. So that's some narrative context for us for this particular module.

IPAM, RBAC and JEA
G'day viewers, this is Pluralsight, my name's Orin Thomas, and in this module, we're going to cover IPAM-based role-based access control, and how you can use it to secure your organization's IPAM deployment. In this module, we'll look at understanding RBAC, we'll look at roles, access scopes, and access policies, we'll talk about the built-in roles, we'll talk about just enough administration, and we'll talk about Privileged Access Management. Let's get into it. Okay, the first question is, why on Earth should I learn about this? Okay, so one of the things about centralizing everything into IPAM is that you get to have one pane of glass to go and manage everything. The problem with it is if you've got a decentralized administration model where you want people in Brisbane to only be able to manage Brisbane stuff, and people in Darwin to only be able to manage Darwin stuff, and people in Sydney to only be able to manage Sydney stuff, centralizing things makes it challenging, when you've got a distributed model, it's easy to sort of lock down permissions so that people can only muck around with stuff that's in their own backyard. So with role-based access control, you've got the ability of basically locking them down to their own backyard even though you're using a centralized tool such as IP address management. So in terms of the scenario, although Globomantics is centralizing the management of their DNS and DHCP servers using IPAM, they want to make sure that branch office staff are still able to perform some tasks, but rather than allowing them to perform any tasks, they want to limit their administrative privileges to managing specific DNS zones or DHCP scopes.

IPAM Database Storage and Management
G'day viewers, this is Pluralsight, my name's Orin Thomas, and in this module, we're going to cover IPAM backup and restore, we'll talk about configuring IPAM database storage by transferring it across to SQL Server, I'll give you some hints on troubleshooting IPAM, how to purge utilization data, and the relevant PowerShell cmdlets. So first thing, why do you need to know this? Well backing up and restoring, usually a good idea to know how to do. There's no point setting this all up, and then having it fall over and you can't recover it. So backup and restore, obviously something important. SQL, very important if you are basically doing this in an enterprise environment, Windows Internal Database will take you so far, but if you really want all of those enterprise features, then you're really going to think about moving to SQL Server. Troubleshooting tips, well that is generally hopeful, so hopefully you'll find something that might help you if you do run into some problems with IPAM. And purging utilization data is one of those things that you might want to do just as part of, you know, getting rid of data that you don't need any more. Generally if you're going to move across to SQL or something, or if you've allocated enough space, it's not going to be an issue, but if you're in an environment where a lot of leases are going on, and you're looking after many, many tens of thousands of IP addresses, that maybe you might want to clean up that database from time to time.

Using IPAM with System Center VMM
Good Day viewers, this is Pluralsight and my name is Orin Thomas. And in this module we're going to cover Virtual Machine Manager and IPAM integration. I'll talk about the requirements for the Virtual Machine Manager and the IPAM integration. And then I'll give you a big demonstration on how to configure that integration. Okay, so why do you need to know this? Well, increasingly what we're seeing is that we're seeing more and more workloads put into virtual machines. In fact, most organizations these days have the entirety of their infrastructure except for the virtual machine host as virtual machines. And many organizations especially in the Microsoft world use a tool like a Virtual Machine Manager to go and manage the entirety of their virtual machine fabric. Simply because if you've got a license like Super Enterprise license, or even an execle license, that's a Star Trek joke, you are most likely licensed for VMM. And it makes sense if you're that committed to the Microsoft ecosystem that you are using Microsoft solutions to manage your virtual machine fabric. Anyway, so talking about a scenario, let's imagine that Globomantics have a VMM deployment that's part of their management infrastructure with their private cloud. Globalmantics would like to use IPAM to keep track of the visualized addresses used by VMM in the same way the keeps track of the physical address spaces used at Gloabalmantics branch offices.