Written by Chris Walker
Assorted video tutorials for the operation of Microsoft Windows Server 2008.
Installation: This is the initial setup for Server 2008. These are the types of tasks that you need to do on every new server.
- Install Windows Server 2008 Part 1
- Install Windows Server 2008 Part 2
- Set a static IP Address
- Enable Remote Desktop
Active Directory: This is a Microsoft technology based on LDAP (Lightweight Directory Access Protocol). It is used for authentication on a network. All clients and users authenticate to a centralized server. This allows users to have a single username and password on every computer and application that you use. This also makes it possible to have the same user experience no matter what computer they use.
- Install Active Directory
- Add an Organizational Unit (OU)
- Delegation of Control wizard
- redirusr, redircmp (Change Active Directory defaults)
- Add a computer
- Add a group
- Add a user
- Query for users
- Active directory templates for users
- DSADD (Add users via command line)
- DSGET (Get info via command line)
- DSMOD (Modify Users via command line)
- DSMOVE (Move users via command line)
- DSRM (Remove users via command line)
- LDIFDE (Add users via command line with LDF file)
- CSVDE (Add users via command line with CSV file)
- Manage groups via command line
- Manage groups via CSV and LDF
Group Policy: Group policy is a feature available on local computers and domain controllers (Active Directory server). Group policy will regulate the user’s experience and permissions. It does numerous things such as control the desktop wallpaper, Internet Explorer home page, and even install software.
- Group Policy Precedence
- Group Policy Results
- Group Policy modeling
- gpresult (Command line results)
- Create a group policy
- backup a GPO
- create a Group Policy Store
- Group Policy Update (gpupdate)
- Restricted Groups (Manage group membership via GPO)
- Install software through GPO
- Update software through GPO
- Control Passwords via GPO
- Password Settings Object
- block USB drive via local GPO
- Block hardware via GPO
- block software with gpo hash rule
- AppLocker to block programs in Windows 7 (requires Server 2008 R2)
DNS: Domain Name Service is a service for translating names (such as .com or .net names) into IP Addresses. Computers speak to each other via IP Addresses, but humans are much better at remembering names. These names are organized into a structure know as a FQDN (Fully Qualified Domain Name). An FQDN will end in a common top level domain name such as Com, Net, or Org. Then sub-domains are assigned such as technoblogical.com, youtube.com, or microsft.com. Those may be further divided into sub domain names to the point that all the resources may be located via this tree-like structure. They are called trees because they branch from a root domain. When your organization contains two trees, it is called a forest.
- DNS console
- Network card binding
- Forwarders, Root Hints, and Recursion
- Round Robin and Netmask Ordering
- Scavenging old records
- Debugging and logging
- Zone Types and Replication
- Start of Authority (SOA)
- Zone transfers and name servers
- Enable WINS (NetBIOS lookups)
- Clear the DNS cache
- Create records
- Reverse lookup zones
- Active Directory Partitions
- Global Name Zones
DHCP: Dynamic host configuration protocol is the method of assigning IP Addresses to devices on the network. Without it, all devices would need to be assigned its IP address manually. Since this would not change it is called a static IP Address. While this is a logical solution for servers and network resources, it is not required that client machines have the same IP Address every time. Therefore the DHCP server’s sole purpose is to assign an IP address to devices that request one. It then keeps track of the leases and should the client not renew that lease, it will make that IP Address available to another device.
Managing Resources: Always an important part to any system administrator’s role. Users need printers and shared folders to do their jobs. It’s your responsibility to know how these things work and keep them running. Then they never have to think about it and can do their work in a care-free environment.
Computer Management: These tasks are available on nearly every operating system that Microsoft has. They serve as regular maintenance and keep your machines running well.
- Add a hard drive
- Defragment a hard drive
- chkdsk (Check Disk)
- MMC (Microsoft Management Console)
- Local Security templates
- Security Template and Analysis
- Security Configuration Wizard
- scwcmd (Security Configuration Wizard via command line)
Server Core: New to Windows 2008, Server Core is a command line only version of Windows Server 2008. It is extremely limited in functionality, but it can do some very critical tasks. Also, since it runs with just a command line, it also requires a much less powerful server.
- Server Core install Part 1
- Server Core install Part 2
- Server Core install part 3
- Server Core install part 4
- Server Core install part 5
Active Directory Forests: Much like DNS forests, but with active directory integrated into it. Each part of the forest has its own domain controller and they must communicate to authenticate each others users.
Read Only Domain Controllers: These are new to Windows Server 2008. They are much like a proxy server to Active Directory. They allow for portions of Active Directory to be stored in a remote location. When a user logs into the remote location, then that user’s information is stored in the RODC located at that remote location.
PowerShell: Much like command line, PowerShell is capable of executing common functions through text. It has a lot more functionality than command line since it also incorporates various programming languages and even Linux commands.
- PowerShell installation
- Add Active Directory users
- Modify Active Directory Users
- Modify Active Directory Users with Visual Basic