Microsoft Infrastructure Foundamentals

Some references I gathered over time on Microsoft Windows Administration.

Happy reading,
Yuriy

Server Limits Specifications:
https://msdn.microsoft.com/en-us/library/windows/desktop/aa366778(v=vs.85).aspx#physical_memory_limits_windows_server_2012

Logical CPU Limits:
https://blogs.technet.microsoft.com/matthts/2012/10/13/windows-server-sockets-logical-processors-symmetric-multi-threading/

Windows Server Comparison:
https://www.thomas-krenn.com/en/wiki/Windows_Server_2012_Editions_comparison


Articles:
Default gateways
https://technet.microsoft.com/en-us/library/cc779696(v=ws.10).aspx

DNSSEC:
https://technet.microsoft.com/en-us/library/jj200221.aspx

DNS Records:
https://technet.microsoft.com/en-us/library/cc958958.aspx

Domains:
https://technet.microsoft.com/en-us/library/cc780856(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/bb629410.aspx
https://technet.microsoft.com/en-us/library/dd197461
https://technet.microsoft.com/en-us/library/cc780661
https://technet.microsoft.com/en-us/library/cc730756
https://technet.microsoft.com/en-us/library/cc754345.aspx
https://technet.microsoft.com/en-us/library/cc725590.aspx
https://technet.microsoft.com/en-us/library/cc771255(v=ws.11).aspx
https://technet.microsoft.com/en-us/library/cc755131.aspx
https://technet.microsoft.com/en-us/library/ee683907(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc753579.aspx

Zones:
https://technet.microsoft.com/en-us/library/cc771898.aspx
https://technet.microsoft.com/en-us/library/cc816885(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc779197(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/ee649181(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc775397(v=ws.10).aspx

Cache Locking:
https://technet.microsoft.com/en-us/library/ee649148(v=ws.10).aspx

IP Addreses:
https://technet.microsoft.com/en-us/library/cc958825.aspx
https://technet.microsoft.com/en-us/library/bb726995.aspx
https://technet.microsoft.com/en-us/library/cc958834.aspx
https://technet.microsoft.com/en-us/library/cc940018.aspx

DHCP:
https://technet.microsoft.com/en-us/library/cc738472(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc783103(WS.10).aspx
https://technet.microsoft.com/en-us/library/hh831825.aspx
https://technet.microsoft.com/en-us/library/cc958946.aspx
https://technet.microsoft.com/en-us/library/cc958935.aspx
http://www.tcpipguide.com/free/t_DHCPLeaseRenewalandRebindingProcesses-2.htm
http://www.thenetworkencyclopedia.com/entry/dynamic-host-configuration-protocol-dhcp/
https://technet.microsoft.com/en-us/library/cc779610(v=ws.10).aspx

What Are Domains and Forests?
https://technet.microsoft.com/en-us/library/cc759073(v=ws.10).aspx

Active Directory Administrative Center: Getting Started:
https://technet.microsoft.com/en-us/library/dd560651(v=ws.10).aspx

Understanding Sites, Subnets, and Site Links:
https://technet.microsoft.com/en-us/library/cc754697.aspx

Privileged Access Management for Active Directory Domain Services:
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/privileged-identity-management-for-active-directory-domain-services

Install and Deploy Windows Server 2012 R2 and Windows Server 2012:
https://technet.microsoft.com/en-us/library/hh831620.aspx

Migrating Roles and Features in Windows Server:
https://technet.microsoft.com/en-us/windowsserver/jj554790.aspx

Linking GPOs to Active Directory Containers:
https://msdn.microsoft.com/en-us/library/aa374339(v=vs.85).aspx

Designing OU Structures that Work:
https://technet.microsoft.com/en-us/magazine/2008.05.oudesign.aspx

Active Directory Best Practice: OUs and Containers:
http://www.trivalentgroup.com/2015/11/active-directory-best-practice-ous-and-containers/

Active Directory Schema Tools and Settings
https://technet.microsoft.com/en-us/library/cc757747(v=ws.10).aspx

What Is the Global Catalog?
https://technet.microsoft.com/en-us/library/cc728188(v=ws.10).aspx

What Is the Active Directory Schema?
https://technet.microsoft.com/en-us/library/cc784826(v=ws.10).aspx

Resets the Directory Services Restore Mode (DSRM) password
https://technet.microsoft.com/en-us/library/cc754363(v=ws.11).aspx

Performing an Authoritative Restore:
https://technet.microsoft.com/en-us/library/cc940334.aspx

Performing a Nonauthoritative Restore of a Domain Controller
https://technet.microsoft.com/en-us/library/cc784922(v=ws.10).aspx

Understanding Trusts:
https://technet.microsoft.com/en-us/library/cc736874(v=ws.10).aspx

Ntdsutil
https://technet.microsoft.com/en-us/library/cc753343.aspx

Server Manager Technical Overview:
https://technet.microsoft.com/en-us/library/cc753319.aspx

Managing Windows Server 2012 and Windows Server 2012 R2 with Remote Server Administration Tools:
https://blogs.technet.microsoft.com/ausoemteam/2015/03/21/managing-windows-server-2012-and-windows-server-2012-r2-with-remote-server-administration-tools/

Recovering Active Directory Domain Services:
https://technet.microsoft.com/en-us/library/cc816751(v=ws.10).aspx

Requirements for Active Directory Recycle Bin:
https://technet.microsoft.com/en-us/library/dd379484(v=ws.10).aspx

Active Directory Recycle Bin Step-by-Step Guide:
https://technet.microsoft.com/en-us/library/dd392261(v=ws.10).aspx

Group types:
https://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx

Default groups:
https://technet.microsoft.com/en-us/library/cc756898(v=ws.10).aspx

Nesting groups:
https://technet.microsoft.com/en-us/library/cc776499(v=ws.10).aspx

Active Directory Security Groups:
https://technet.microsoft.com/en-us/library/dn579255(v=ws.11).aspx

Managing Computers:
https://technet.microsoft.com/en-us/library/cc771682.aspx

Detailed Concepts: Secure Channel Explained
http://social.technet.microsoft.com/wiki/contents/articles/24644.detailed-concepts-secure-channel-explained.aspx

Group Policy Overview
https://technet.microsoft.com/en-us/library/hh831791.aspx

Performance Team Blog:
https://blogs.technet.microsoft.com/askperf/

SMB:
https://blogs.technet.microsoft.com/josebda/2013/10/02/windows-server-2012-r2-which-version-of-the-smb-protocol-smb-1-0-smb-2-0-smb-2-1-smb-3-0-or-smb-3-02-are-you-using/

Bitlocker:
https://technet.microsoft.com/en-us/library/cc766200%28v=ws.10%29.aspx

https://technet.microsoft.com/en-us/library/cc732774.aspx

https://technet.microsoft.com/en-us/library/jj679890.aspx

Storage Technologies:
https://technet.microsoft.com/en-us/library/dn610883.aspx
https://technet.microsoft.com/en-us/library/hh831739.aspx
https://blogs.technet.microsoft.com/josebda/2014/11/19/storage-spaces-survival-guide-links-to-presentations-articles-blogs-tools/
https://technet.microsoft.com/windows-server-docs/storage/storage-spaces/storage-spaces-direct-windows-server-2016
https://blogs.technet.microsoft.com/askpfeplat/2012/10/10/windows-server-2012-storage-spaces-is-it-for-you-could-be/
https://technet.microsoft.com/windows-server-docs/storage/software-defined-storage/storage-quality-of-service
https://technet.microsoft.com/en-us/library/hh831602.aspx


Hands on:

Deduplication:
https://blogs.technet.microsoft.com/canitpro/2013/04/29/step-by-step-enabling-data-deduplication-on-windows-server-2012-volumes/

iSCSI:
https://blogs.technet.microsoft.com/filecab/2012/05/21/introduction-of-iscsi-target-in-windows-server-2012/

Bitlocker:
http://accc.uic.edu/answer/how-do-i-configure-active-directory-store-bitlocker-recovery-information

DHCP:
https://technet.microsoft.com/en-us/library/cc732075.aspx
https://technet.microsoft.com/en-us/library/cc757682(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc779507(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/dn425039.aspx
https://technet.microsoft.com/en-us/library/cc786474(v=ws.10).aspx
https://blogs.technet.microsoft.com/teamdhcp/2009/01/22/how-to-configure-split-scope-using-wizard/
https://blogs.technet.microsoft.com/teamdhcp/2012/09/03/dhcp-failover-hot-standby-mode/
http://www.serverlab.ca/tutorials/windows/network-services-windows/step-step-creating-windows-server-dhcp-scope/
https://technet.microsoft.com/en-us/library/dd759168(v=ws.11).aspx
https://technet.microsoft.com/en-us/library/hh831385(v=ws.11).aspx

DNS:
https://technet.microsoft.com/en-us/library/cc754941
https://blogs.technet.microsoft.com/networking/2008/03/19/dont-be-afraid-of-dns-scavenging-just-be-patient/
https://technet.microsoft.com/en-us/library/ff807360(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc816657(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/ee649174(v=ws.10).aspx

Storage Spaces: How to configure Storage Tiers with Windows Server 2012 R2:
https://blogs.technet.microsoft.com/askpfeplat/2013/10/20/storage-spaces-how-to-configure-storage-tiers-with-windows-server-2012-r2/

Installing and Configuring MPIO:
https://technet.microsoft.com/en-us/library/ee619752(v=ws.10).aspx

Installing and Configuring Microsoft iSCSI Initiator:
https://technet.microsoft.com/en-us/library/ee338480(v=ws.10).aspx

Switch between Full and Server Core in Windows Server 2012 using PowerShell 3.0:
https://blogs.technet.microsoft.com/puneetvig/2012/10/15/switch-between-full-and-server-core-in-windows-server-2012-using-powershell-3-0/

How to change default OU for computers in AD:
https://blogs.technet.microsoft.com/canitpro/

Install a New Windows Server 2012 Active Directory Child or Tree Domain (Level 200):
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-ds/deploy/install-a-new-windows-server-2012-active-directory-child-or-tree-domain--level-200-

http://pc-addicts.com/server-2012-change-default-ou/

Step-by-Step: Enabling and Using Fine-Grained Password Policies in AD
https://blogs.technet.microsoft.com/canitpro/2013/05/29/step-by-step-enabling-and-using-fine-grained-password-policies-in-ad/

How To Enable the Active Directory Recycle Bin:
https://redmondmag.com/articles/2015/11/11/enable-the-active-directory-recycle-bin.aspx

Step-By-Step: Setting Up Active Directory Sites, Subnets & Site-Links
https://blogs.technet.microsoft.com/canitpro/2015/03/03/step-by-step-setting-up-active-directory-sites-subnets-site-links/

Getting Started with Nano Server:
https://technet.microsoft.com/windows-server-docs/compute/nano-server/getting-started-with-nano-server

Get started with Setup and Boot Event Collection
https://technet.microsoft.com/windows-server-docs/compute/get-started-with-setup-and-boot-event-collection

Evaluation:
https://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2012?wt.mc_id=DXLEX_EDX_INF500x

ADSI Edit (adsiedit.msc)
https://technet.microsoft.com/en-us/library/cc773354(v=ws.10).aspx

Remote Server Administration Tools for Windows 10

https://www.microsoft.com/en-us/download/details.aspx?id=45520&WT.mc_id=rss_alldownloads_all

How to Install Service Manager on a Single Computer
https://technet.microsoft.com/en-us/library/hh519747(v=sc.12).aspx

Promoting DC:
https://www.interworks.com/blog/ijahanshahi/2014/01/06/promoting-windows-2012r2-server-domain-controller

Configure Remote Desktop Access on Windows 7 Systems:
https://technet.microsoft.com/en-us/magazine/ff404238.aspx

Special Identities
https://technet.microsoft.com/en-us/library/dn617202.aspx

PS AD DS:
https://technet.microsoft.com/en-us/library/hh852274(v=wps.630).aspx

Use the Wbadmin Backup Command Line Utility in Windows Server 2008:
https://technet.microsoft.com/en-us/magazine/dd767786.aspx

Backing Up Active Directory Domain Services:
https://technet.microsoft.com/en-us/library/cc816584(v=ws.10).aspx

Offline Domain Join (Djoin.exe) Step-by-Step Guide
https://technet.microsoft.com/en-us/library/offline-domain-join-djoin-step-by-step(v=ws.10).aspx

Delegate Permissions for Group Policy
https://technet.microsoft.com/en-us/library/dn789195.aspx

Create a new organizational unit
https://technet.microsoft.com/en-us/library/cc785077(v=ws.10).aspx

Creating the Security Group
https://technet.microsoft.com/en-us/library/cc732782(v=ws.10).aspx

Creating Roaming Profiles:
http://www.grouppolicy.biz/2010/08/best-practice-roaming-profiles-and-folder-redirection-a-k-a-user-virtualization/

Power-shell stuff:
https://technet.microsoft.com/en-us/library/ee617253.aspx
https://technet.microsoft.com/en-us/library/ee617258.aspx
https://technet.microsoft.com/en-us/library/ee617210.aspx
https://technet.microsoft.com/en-us/library/ee617245.aspx
https://technet.microsoft.com/en-us/library/jj574143.aspx
https://technet.microsoft.com/en-us/library/jj612821(v=wps.630).aspx
https://technet.microsoft.com/en-us/library/hh826098(v=wps.630).aspx
https://technet.microsoft.com/en-us/library/jj612803%28v=wps.630%29.aspx
https://technet.microsoft.com/en-us/library/hh826099%28v=wps.630%29.aspx
https://technet.microsoft.com/en-us/library/hh848689(v=wps.630).aspx
https://technet.microsoft.com/en-us/library/hh848686(v=wps.630).aspx
https://technet.microsoft.com/en-us/library/hh831434.aspx
https://technet.microsoft.com/en-us/library/hh848450.aspx
https://technet.microsoft.com/en-us/library/hh831700.aspx
https://technet.microsoft.com/windows-server-docs/networking/dns/what-s-new-in-dns-server
https://technet.microsoft.com/en-us/library/jj590751(v=wps.630).aspx
https://technet.microsoft.com/en-us/library/jj590743(v=wps.630).aspx

Windows Administration the hard way

I had several problems recently. 

Issue 1:

The issue was that the software I support was unable to install itself, due to permission. The strangest thing was that cacls was not present and had to get it from somewhere else.

After forcing the temp directory to the system user everything worked as a charm. However before rushing - delete the temporary files. It seems that the program was unable to install due to a corrupt directory and because it was not able to  write to it from the system user.

1. cacls "C:\WINDOWS\Temp"  /G <adminuser>:F

otherwise I can not read the contents of the directory ...
2. Rename the corrupt directory.
3. cacls "C:\WINDOWS\Temp"  /G SYSTEM:F

Note maybe there is a way to add both users from cacls but I was kind of in a hurry.

Issue 2:

I needed to remotely install the software I support so I needed Remote Registry and RPC enabled. The Firewall had to be shut - note if you haven't enabled Remote Desktop - don't disable the firewall, it is better to set it start manually. Other workaround would be to just enable the service in the firewall - in my case it was file and printer sharing see issue 5. So you can do this with this script. Check the references for further info.

net start RemoteRegistry

net start rpcss

net stop mpssvc

sc config RemoteRegistry start=auto

sc config rpcss start=auto

sc config mpssvc start=disable

Issue 3:

How do you fix a messed up installations remotely? This relates to the above Issue 2. You need 3 things only.

1. Admin rights.

2. Remote Registry you can use the connect to PC feature.

3. Services you can connect to remote PCs.

And that's it, then restart and re-install the software.

Issue 4:

How to get the built in administrator:
net user administrator /active:yes
net user administrator password

Issue 5:

How to enable file and printer sharing
netsh firewall set service type=fileandprint mode=enable

References:
http://support.microsoft.com/kb/149427
http://www.wikihow.com/Change-a-Computer-Password-Using-Command-Prompt
http://www.howtogeek.com/howto/windows-vista/enable-the-hidden-administrator-account-on-windows-vista/
http://technet.microsoft.com/en-us/library/cc737069(v=ws.10).aspx