Study notes covering On-Premises Windows Server.
📖 Useful Vocabulary / Acronyms
| Terminology | Definition |
|---|
Server Installation
Windows Server Facts
- Windows Network Models
| Model | Description |
|---|---|
| Stand-Alone | East host functions independently, Communication takes place using a commonly available network like the internet, Hosts are not connected by a LAN |
| WORKGROUP | Peer-to-peer Networking, All hosts can function as a worksation or server, Hosts in the WORKGROUP can share and access resources from each other, They are less scalable, No Centralized Control, Complex Data Backup |
| Client-Server | Each Host has a specific role either Client or Server, Clients Request services from the server, Most commonly known as a domain, A windows domain is a collection of security principles that share a centralized authentication database (Active Directory), There is an increased implementation cost, More complex |
Server Installation Facts
Windows Server Editions
| Function | Description |
|---|---|
| Active Directory Domain Services | Organize users, computers, and other resouces into logical groups |
| Windows Defender | Built-In Security Software |
| Hyper-V | Windows Server's HyperVisor role allowing you to create Virtual Machines |
| Internet Information Services (IIS) | Web Server for Windows |
| Windows Deployment Services | This is used to deploy windows operating system to computers on the network |
| DHCP Services | Assignes IP Addresses to endpoints on the network |
| DNS Server | Essential to an active directory environemnt, it is used to translate a domain name into its associated IP Address |
| File and Storage Services | Used to centrally manage files on a network |
| Network Load Balancing | Used to distribute traffic accross servers. |
| Windows Server Update Services | Allows administrators to centrally manage Windows updates across a network |
Additional features of each edition
| Edition | Features |
|---|---|
| Windows Server 2022 Standard | Access Licenses (CALS), 48TBs of RAM, 64 64-bit sockets, Unlimeted number of cores, Storgae Replica |
| Windows Server 2022 Datacenter | Unlimited VM's, Shieled Hyper-v VMS, Software defined networking, Unlimited Storage Replica, Storage Spaces Direct, Network Controller, Features included in server 2022 standard |
| Windows Server 2022 DataCenter: Azure Edition | Azure extended Network, Hotpatching, Storage Spaces Direct |
System Requirments
| Requirment Type | Description |
|---|---|
| Processor | 1.4 GHz 64 bit, x64 instruction set, Must support NX and DEP, CMPXCHG16b, LAHF/SAHF, PrefetchW, Second level address translation (EPT or NPT) |
| Network Adapter | 1GBps Nic, PCI Express Compliant, Support for PXE, KDNet debugging is recommended |
| Storage | Storage adapter needs to be PCI Express Compliant, HDD's can not be PATA, Boot, page, and data drives can not be ATA, PATA, EIDE, or IDE, The System partition must be at least 32 GB's |
| RAM | 512 MB, Desktop requires at least 2GB, ECC for physical host deployments |
| Additional Requirments | TPM, Graphics Devices with 1024X768, UEFI 2.3.1 c-based system and secure boot |
Installation Options
| Option | Description |
|---|---|
| Server Core | Includes basic server components, Supports all server roles, No GUI, Can be managed remotely with Powershell or Windows admin center, Recommended instalation type for most organizations |
| Server with Desktop Experience | Includes all server Components, Supports all server Roles, Inludes GUI, Takes more spaces then standard |
Licensing
- Dependent on
- Number of cores
- Number of users connecting to it or Active Directory
- Administrators can use (KMS) to activate client licenses across a network. Generic Colume License Keys (GVLK) activate client operating system and licesning is assigned to server
Windows Server Roles
Server Roles and Features Facts
- Functionality and services are added to a server using the "Add Roles and Features Wizard"
- A "Server Role" describes the primary function of a server, think Domain Controller, Hypervisor ect.
- Role Services are the applications combined to provide the functions of a role. Some roles like DNS only have one service while Print and Document services have multiple
- A "feature" a software/program that is not directly related to a server role but adds more functionality to the server
Server Roles and Role Service
| Server Role | Description |
|---|---|
| Acive Directory Domain Services (ADDS) | ADDS is a distributed database to manage network resources, Simplifies sharing resources over the network, and is required for directory-enabled applications such as exchange or group policy |
| Active Directory Certificate Services (ADCS) | ADCS is an identity and acces control feature that creates and manages PKI certificates, Enhances security by binding the identity device or service to a private key,Includes Role Services of: Certificate Authority, Certificate Enrollment Policy Web Service, Certificate Enrollment Web Service, Certificate Enrollment Authority Web Enrollment, Online Responder. |
| Active Directory Federation Service | Allows Directory Federation and enables an organization to share identity inofmration out side of its network |
| Active Directory Rights Managment Services | Specifies permissions for accessing folders and files Role Services include: Active Directory Rights Managment Server, Identity Federation Support |
| DNS Server | DNS Service maps IP adress to logical hostnames. |
| DHCP Server | Provides netowkr hosts IP Addresses and other configuration information |
| File and Storage Services | Allows you to share files on the network and allows you to: Create storage spaces and storage pools, Centrally manage access to files and folders. Roles and Services include: File and iSCSI Services, File Server, DFS Replication, Server for NFS, Storage Services. |
| Host Guardian Service | Provides attestation and key protection services that shield virtual machines from malicious software |
| Hyper-V | Windows Hypervisor |
| Print and Document Services | Provides a print managment console to manage printers on multiple servers, Role Services include: Printer Server, LPD Service. |
| Remote Access | Administrators use Remote Access to configure and manage systems acroos the network. Role Services include: DirectAccess and VPN (RAS), Routing, Web Application Proxy. |
| Remote Desktop Services | Allows clients access to server-hosted desktops and applications. Role Services include: Remote Desktop Virtualization Host, Remote Desktop Connection Broker, Remote Desktop Gateway, Remote Desktop Licesning, Remote Desktop Web Access. |
| Volume Activation Services | Used to automate the delivery and managment of Microsoft Software volume licenses |
| Web Server (IIS) | Used to host internal and external web sites or applications served over http https, Role Services include: Web server, Directory browsing, HTTP errors, Static Content, HTTP redirection, HTTP Logging, Tracing, Preformance, URL Autorization, IP and domain restrictions, ASP, FTP server, Mangagment service. |
| Windows Deployment Services (WDS) | A disk imaging solution that you can use for remote deployment and automated installation of Microsoft Windows |
| Windows Server Update Server (WSUS) | The WSUS server allows administrators to manage and distribute updaes throuhg a managment console. Role Services include: WSUS Services, SQL Server Connectivity, WID Connectivity. |
Features
| Features | Description |
|---|---|
| Failover Clustering | Provides high availability and scalability to your network by grouping servers |
| Group Policy Managment | Allows you to specify configurations for users and computers |
| Network Load Balancing (NLB) | NLB enhances the availability and scalability of internet server applications. |
| Bitlocker Drive Encryption | A security feature that protects a server by encrypting the operating system volum. |
| Windows Server Backup | Provides backup and recovery for Windows Server Systems |
PowerShell Facts
Terminology
| Term | Definition |
|---|---|
| Command Line | Command-Line Interface (CLI), text based, uses command consruction or syntax, uses flags or switches to specify an option while running the command |
| Cmdlets | Commands that are entered at the Powershell Prompt uses command construction in the format of Verb-Noun-Adverb. When using Powershell cmdlets usually not case-sensitive, designed to be light weight, easy to recognize, and easy to use, Use the Tab key to cycle through available options. |
| Providers | Windows Powershell providers are .NET programs that allow you to access data stores, such as the registry or certificate store. |
Modules
| Module | Description |
|---|---|
| ActiveDirectory | Active Directory Domain Services Administration |
| ADCSAdministration | Active Directory Certificate Services Administration |
| ADCSDeployment | Active Directory Certificate Services Deployment |
| ADFS | Active Directory Federation Services |
| BitLocker | BitLocker |
| Defender | Windows Defender |
| DHCPServer | DHCP Server |
| FailoverClusters | Failover Clusters |
| Hyper-V | Hyper-V |
| IpamServer | IP Address Management Server |
| KDS | Key Distribution Server |
| NetAdapter | Network Adapter |
| NetConnection | Network Connection |
| NetLbfo | NIC Teaming |
| NetNat | Network Address Translation |
| NetSecurity | Network Security |
| NetworkController | Network Controller |
| NFS | Network File System |
| NPS | Network Policy Server |
| RemoteAccess | Remote Access |
| DemoteDesktop | Remote Desktop |
| RemoteDesktopServices | Remote Desktop Services |
| ScheduledTasks | Schedules Tasks |
| WDS | Windows Deployment Services |
| WindowsErrorReporting | Windows Error Reporting |
| WindowsServerBackup | Windows Server Backup |
| WindowsUpdate | Windows Update |
Help
| Cmdlet | Description |
|---|---|
| Save-Help | Use to download help files from the internet onto a local file share |
| Update-Help | Use to download updates to help files from the internet onto a local file share |
| Get-Help | Use to access help files downloaded onto the local file share. These help topics include cmdlets, scripts, workflows, functions, and more. If help files have not been downloaded this command displays auto-generated help topics and gives you the option to download help files or access them online |
Windows Server Core Facts
Server Core Benefits
- Stable environment
- Reduced system requirmnts
- Less Ram required
- OS files use less disk space
- Fewer components
- Reduced servicing requirments
- Fewer updates
- Reduced Attack surface
- Fewer services
- Fewer open ports
Server Core Limitations
- No GUI managment tools
- No accesibility tools
- No audio support
- Graphical applications are not supported
- Only clean installations are possible
- Can not upgrade to a newer server version
Server Core Default Roles
- Active Directory Certificate Services
- Active Directory Domain Services
- Active Directory Federation Services
- Active Directory Lightweight Directory Services
- Device Healh Attestation
- DHCP Server
- DNS Server
- File and Storage Services
- Host Guardian Service
- Hyper-V
- Print and Document Services
- Remote Access and Remote Desktop Services
- Web Server IIS
- Windows Server Essentials Experience
- Windows Server Update Server
Server Core Managemenr Facts
Initial Configurations
| Task | Process |
|---|---|
| Name the Computer | Use hostname command to display the generated server name, Use netdom renamecomputer to rename, reboot server with shutdown -r, verify change with hostname. |
| Set the time and time zone | Use the control timeddate.cpl to display the Date and Time dialog, Adjust the date time and time zone. |
| Assign the static IP address to the server | use netsh to determine the adapters index number, set the IP address subnet mask and default gateway, Add a DNS Server that has addresses for the domain. |
| Join the server to the domain | Use a netdom command to join the server to the domain, reboot the computer |
PowerShell Cmdlets
| Task | Commandlets (cmdlets) |
|---|---|
| General | PowerShell starts a powershell session on Server Core, Get-Help <cmdlet> displays th help screen for the specified Powershell cmdlet. |
| System Information and Configuration | Get-DisplayResolution displays the current screen resolution, Get-Service displays a list of each service installed on the system and there status, Rename-Computer sets the computer name, Restart-Computer reboots the computer, Set-DisplayResolution sets the screen resolution, sconfig displays the server configuration utility, Set-TimeZone assigns the desired time zone, Stop-Service stops a running service, Start-Service starts a service. |
| Network and Domain Configuration | Add-Computer provides a prompt to enter credentials needed to join a domain, Get-DNSClientServerAddress displays the current DNS server address configured, Get-NetIPInterface displays the network interfaces installed on the system, Get-NetIPConfiguration displays the current network configuration, Netdom Remove <computername> removes a computer from a domain, New-NETIPAddress assigns a new ip, Set-Date assigns the system date and time, Set-DNSClientServerAddress assigns a DNS server address to a network interface. |
| Local user and group managment | Net localgroup Administrators /add <domain\username> adds a user to the local admin group, Net localgroup Administrators /delete <domain\username> removes a user from the local admin group, Net localgroup <groupname> /add adds a local group. Net User administrator **** sets a new local admin password. |
| Active Directory (AD) User and Group Management | New-ADGRoup creates an AD Group, Set-ADGroup modifies and active AD group, Remove-ADGroup removes an AD group, New-ADUser create and AD user, Set-ADUser modifies and active AD user, Remove-ADUser removes and AD user, Set-ADAccountPassword sets a password for an AD user account |
Windows Server Configuration and Management Facts
Server Manager Considerations
- Server Manager is built into Remote Server Administration Tools
- Depending on the Server load and the amount of data Server Manager can support up to 100 years
- Server Manager is installed and enabled by defualt with the windows Server (2016 and beyond)
- The Server Manager console can only be used to manage Windows Server and not local or remote client machines
Running Server Manager
- Install Remote Server Administration Tools on your windows client
- Access the Server Management tile on your start screen if you cannot view the Server Management setting has been enabled. This option can be found by hovering your mouse over the right corner of the start screen and selecting Settins
- Open the Add Servers dialog box
- add the servers you wish to manage using one of the following methods
- UserActive Directory Domain Services to add a server located on the same domain as the local computer
- Use DNS to search for a server by name or IP address
- Import multiple servers using a file that lists each computers name and IP address
Managing the Console
- Set refresh limitations
- add or remove roles and features
- Prevent Server manager rom opening automatically at logon
- Create Server groups
- Manage Roles
Managing the Local Server
| Setting | Description | Link |
|---|---|---|
| Computer Name | Computer Name | Opens the System Properties dialog box |
| Time Zone | Local Servers time Zone | Opens the Date and Time dialog box |
| Domain or Workgroup | Domain or workgroup that the local server is a member of | Opens the System Properties dialog box |
| Windows Firewall | Status of Windows Firewall for the local server | Opens the System Properties dialog box |
| Remote Management | Windows Server Manager and PowerShell remote management status | Opens the Configure remote managment dialog box |
| Hardware information | Local server manufacturer model name and number | Read-only field |
| Total disk space | Amount of available disk space on the local server | Read-only field - No link |
| Installed memory | Amount of available RAM on the local server | Read-only field - No link |
| Processors | Information about a local serers processor | Read-only field - No link |
| Operating system version | Windows operating system version running on the local server | Read-only field - No link |
| Windows Update | Windows Update settings for the local server | Opens the Control Panel\System and Security\Windows Update |
| Product ID | Windows activation status and product ID number | Opens windows activation dialog box |
Managing Remote Servers with Server manager
- Restart remote servers
- Add remote servers and groups of servers to the server pool
- Install and uninstall features, roles and role services
- Edit serer roles and features for remote and local servers
- Start management tools
- Preform management tasks
- Analyze and troubleshoot potential problems
- identify failures and other critical events
- Export Server manager settings to computers running the same versions of Server Manager