| Terminology | Definition |
|---|
| Model | Description |
|---|---|
| Stand-Alone | East host functions independently, Communication takes place using a commonly available network like the internet, Hosts are not connected by a LAN |
| WORKGROUP | Peer-to-peer Networking, All hosts can function as a worksation or server, Hosts in the WORKGROUP can share and access resources from each other, They are less scalable, No Centralized Control, Complex Data Backup |
| Client-Server | Each Host has a specific role either Client or Server, Clients Request services from the server, Most commonly known as a domain, A windows domain is a collection of security principles that share a centralized authentication database (Active Directory), There is an increased implementation cost, More complex |
| Function | Description |
|---|---|
| Active Directory Domain Services | Organize users, computers, and other resouces into logical groups |
| Windows Defender | Built-In Security Software |
| Hyper-V | Windows Server's HyperVisor role allowing you to create Virtual Machines |
| Internet Information Services (IIS) | Web Server for Windows |
| Windows Deployment Services | This is used to deploy windows operating system to computers on the network |
| DHCP Services | Assignes IP Addresses to endpoints on the network |
| DNS Server | Essential to an active directory environemnt, it is used to translate a domain name into its associated IP Address |
| File and Storage Services | Used to centrally manage files on a network |
| Network Load Balancing | Used to distribute traffic accross servers. |
| Windows Server Update Services | Allows administrators to centrally manage Windows updates across a network |
| Edition | Features |
|---|---|
| Windows Server 2022 Standard | Access Licenses (CALS), 48TBs of RAM, 64 64-bit sockets, Unlimeted number of cores, Storgae Replica |
| Windows Server 2022 Datacenter | Unlimited VM's, Shieled Hyper-v VMS, Software defined networking, Unlimited Storage Replica, Storage Spaces Direct, Network Controller, Features included in server 2022 standard |
| Windows Server 2022 DataCenter: Azure Edition | Azure extended Network, Hotpatching, Storage Spaces Direct |
| Requirment Type | Description |
|---|---|
| Processor | 1.4 GHz 64 bit, x64 instruction set, Must support NX and DEP, CMPXCHG16b, LAHF/SAHF, PrefetchW, Second level address translation (EPT or NPT) |
| Network Adapter | 1GBps Nic, PCI Express Compliant, Support for PXE, KDNet debugging is recommended |
| Storage | Storage adapter needs to be PCI Express Compliant, HDD's can not be PATA, Boot, page, and data drives can not be ATA, PATA, EIDE, or IDE, The System partition must be at least 32 GB's |
| RAM | 512 MB, Desktop requires at least 2GB, ECC for physical host deployments |
| Additional Requirments | TPM, Graphics Devices with 1024X768, UEFI 2.3.1 c-based system and secure boot |
| Option | Description |
|---|---|
| Server Core | Includes basic server components, Supports all server roles, No GUI, Can be managed remotely with Powershell or Windows admin center, Recommended instalation type for most organizations |
| Server with Desktop Experience | Includes all server Components, Supports all server Roles, Inludes GUI, Takes more spaces then standard |
| Server Role | Description |
|---|---|
| Acive Directory Domain Services (ADDS) | ADDS is a distributed database to manage network resources, Simplifies sharing resources over the network, and is required for directory-enabled applications such as exchange or group policy |
| Active Directory Certificate Services (ADCS) | ADCS is an identity and acces control feature that creates and manages PKI certificates, Enhances security by binding the identity device or service to a private key,Includes Role Services of: Certificate Authority, Certificate Enrollment Policy Web Service, Certificate Enrollment Web Service, Certificate Enrollment Authority Web Enrollment, Online Responder. |
| Active Directory Federation Service | Allows Directory Federation and enables an organization to share identity inofmration out side of its network |
| Active Directory Rights Managment Services | Specifies permissions for accessing folders and files Role Services include: Active Directory Rights Managment Server, Identity Federation Support |
| DNS Server | DNS Service maps IP adress to logical hostnames. |
| DHCP Server | Provides netowkr hosts IP Addresses and other configuration information |
| File and Storage Services | Allows you to share files on the network and allows you to: Create storage spaces and storage pools, Centrally manage access to files and folders. Roles and Services include: File and iSCSI Services, File Server, DFS Replication, Server for NFS, Storage Services. |
| Host Guardian Service | Provides attestation and key protection services that shield virtual machines from malicious software |
| Hyper-V | Windows Hypervisor |
| Print and Document Services | Provides a print managment console to manage printers on multiple servers, Role Services include: Printer Server, LPD Service. |
| Remote Access | Administrators use Remote Access to configure and manage systems acroos the network. Role Services include: DirectAccess and VPN (RAS), Routing, Web Application Proxy. |
| Remote Desktop Services | Allows clients access to server-hosted desktops and applications. Role Services include: Remote Desktop Virtualization Host, Remote Desktop Connection Broker, Remote Desktop Gateway, Remote Desktop Licesning, Remote Desktop Web Access. |
| Volume Activation Services | Used to automate the delivery and managment of Microsoft Software volume licenses |
| Web Server (IIS) | Used to host internal and external web sites or applications served over http https, Role Services include: Web server, Directory browsing, HTTP errors, Static Content, HTTP redirection, HTTP Logging, Tracing, Preformance, URL Autorization, IP and domain restrictions, ASP, FTP server, Mangagment service. |
| Windows Deployment Services (WDS) | A disk imaging solution that you can use for remote deployment and automated installation of Microsoft Windows |
| Windows Server Update Server (WSUS) | The WSUS server allows administrators to manage and distribute updaes throuhg a managment console. Role Services include: WSUS Services, SQL Server Connectivity, WID Connectivity. |
| Features | Description |
|---|---|
| Failover Clustering | Provides high availability and scalability to your network by grouping servers |
| Group Policy Managment | Allows you to specify configurations for users and computers |
| Network Load Balancing (NLB) | NLB enhances the availability and scalability of internet server applications. |
| Bitlocker Drive Encryption | A security feature that protects a server by encrypting the operating system volum. |
| Windows Server Backup | Provides backup and recovery for Windows Server Systems |
| Term | Definition |
|---|---|
| Command Line | Command-Line Interface (CLI), text based, uses command consruction or syntax, uses flags or switches to specify an option while running the command |
| Cmdlets | Commands that are entered at the Powershell Prompt uses command construction in the format of [Verb]-[Noun]-[Adverb]. When using Powershell cmdlets usually not case-sensitive, designed to be light weight, easy to recognize, and easy to use, Use the Tab key to cycle through available options. |
| Providers | Windows Powershell providers are .NET programs that allow you to access data stores, such as the registry or certificate store. |
| Module | Description |
|---|---|
| ActiveDirectory | Active Directory Domain Services Administration |
| ADCSAdministration | Active Directory Certificate Services Administration |
| ADCSDeployment | Active Directory Certificate Services Deployment |
| ADFS | Active Directory Federation Services |
| BitLocker | BitLocker |
| Defender | Windows Defender |
| DHCPServer | DHCP Server |
| FailoverClusters | Failover Clusters |
| Hyper-V | Hyper-V |
| IpamServer | IP Address Management Server |
| KDS | Key Distribution Server |
| NetAdapter | Network Adapter |
| NetConnection | Network Connection |
| NetLbfo | NIC Teaming |
| NetNat | Network Address Translation |
| NetSecurity | Network Security |
| NetworkController | Network Controller |
| NFS | Network File System |
| NPS | Network Policy Server |
| RemoteAccess | Remote Access |
| DemoteDesktop | Remote Desktop |
| RemoteDesktopServices | Remote Desktop Services |
| ScheduledTasks | Schedules Tasks |
| WDS | Windows Deployment Services |
| WindowsErrorReporting | Windows Error Reporting |
| WindowsServerBackup | Windows Server Backup |
| WindowsUpdate | Windows Update |
| Cmdlet | Description |
|---|---|
| Save-Help | Use to download help files from the internet onto a local file share |
| Update-Help | Use to download updates to help files from the internet onto a local file share |
| Get-Help | Use to access help files downloaded onto the local file share. These help topics include cmdlets, scripts, workflows, functions, and more. If help files have not been downloaded this command displays auto-generated help topics and gives you the option to download help files or access them online |
| Task | Process |
|---|---|
| Name the Computer | Use hostname command to display the generated server name, Use netdom renamecomputer to rename, reboot server with shutdown -r, verify change with hostname. |
| Set the time and time zone | Use the control timeddate.cpl to display the Date and Time dialog, Adjust the date time and time zone. |
| Assign the static IP address to the server | use netsh to determine the adapters index number, set the IP address subnet mask and default gateway, Add a DNS Server that has addresses for the domain. |
| Join the server to the domain | Use a netdom command to join the server to the domain, reboot the computer |
| Task | Commandlets (cmdlets) |
|---|---|
| General | PowerShell starts a powershell session on Server Core, Get-Help <cmdlet> displays th help screen for the specified Powershell cmdlet. |
| System Information and Configuration | Get-DisplayResolution displays the current screen resolution, Get-Service displays a list of each service installed on the system and there status, Rename-Computer sets the computer name, Restart-Computer reboots the computer, Set-DisplayResolution sets the screen resolution, sconfig displays the server configuration utility, Set-TimeZone assigns the desired time zone, Stop-Service stops a running service, Start-Service starts a service. |
| Network and Domain Configuration | Add-Computer provides a prompt to enter credentials needed to join a domain, Get-DNSClientServerAddress displays the current DNS server address configured, Get-NetIPInterface displays the network interfaces installed on the system, Get-NetIPConfiguration displays the current network configuration, Netdom Remove <computername> removes a computer from a domain, New-NETIPAddress assigns a new ip, Set-Date assigns the system date and time, Set-DNSClientServerAddress assigns a DNS server address to a network interface. |
| Local user and group managment | Net localgroup Administrators /add <domain\username> adds a user to the local admin group, Net localgroup Administrators /delete <domain\username> removes a user from the local admin group, Net localgroup <groupname> /add adds a local group. Net User administrator **** sets a new local admin password. |
| Active Directory (AD) User and Group Management | New-ADGRoup creates an AD Group, Set-ADGroup modifies and active AD group, Remove-ADGroup removes an AD group, New-ADUser create and AD user, Set-ADUser modifies and active AD user, Remove-ADUser removes and AD user, Set-ADAccountPassword sets a password for an AD user account |
| Setting | Description | Link |
|---|---|---|
| Computer Name | Computer Name | Opens the System Properties dialog box |
| Time Zone | Local Servers time Zone | Opens the Date and Time dialog box |
| Domain or Workgroup | Domain or workgroup that the local server is a member of | Opens the System Properties dialog box |
| Windows Firewall | Status of Windows Firewall for the local server | Opens the System Properties dialog box |
| Remote Management | Windows Server Manager and PowerShell remote management status | Opens the Configure remote managment dialog box |
| Hardware information | Local server manufacturer model name and number | Read-only field |
| Total disk space | Amount of available disk space on the local server | Read-only field - No link |
| Installed memory | Amount of available RAM on the local server | Read-only field - No link |
| Processors | Information about a local serers processor | Read-only field - No link |
| Operating system version | Windows operating system version running on the local server | Read-only field - No link |
| Windows Update | Windows Update settings for the local server | Opens the Control Panel\System and Security\Windows Update |
| Product ID | Windows activation status and product ID number | Opens windows activation dialog box |