Windows Server 2019 Overview and Management

Server 2019 Versions

• Server 2019 comes in different editions with varying features and prices
• Essentials edition supports up to 25 users and is more affordable
• Standard edition supports two Hyper-V virtual machines
• Datacenter edition supports unlimited virtual machines and is the most expensive

Upgrading/Downgrading

• Upgrading from 2012 R2 or 2016 to 2019 requires backing up the server first
• Then mount the installation ISO, run setup, and choose to keep settings
• Downgrading to Server 2016 is possible only if you have the downgrade rights from Microsoft
• Backing up the server is required before downgrading

BitLocker/EFS

• All Server 2019 versions support BitLocker, but it needs enabling (in PowerShell or Server Manager)
• A full volume encryption feature is included starting with Windows Vista
• BitLocker encrypts entire volumes to protect data
• BitLocker on a file makes it a small volume accessible only to authorized users
• EFS (Encrypting File System) is a filesystem-level encryption feature introduced in version 3.0 of NTFS

BOOT/INSTALL.WIM

• Default boot and wim images are available from the DVD
• The windows image (boot.wim) is for booting the operating system
• The boot file (Windows PE) is used to facilitate system installation

WDS Terminology

• A standard image used for deployment with WDS is created on a reference computer
• PXE-compliant network cards are needed for discover images (rarely used now)
• Install.wim contains the full operating system and settings; boot.wim is for operating system boot

DNS Records

• DNS zones used for AD DS are forward lookup zones to convert host names to IP addresses
• A DNS zone named contoso.com is needed for a domain named contoso.com
• DNS record types include A (IPv4), AAAA (IPv6), CNAME, MX, NS

AD CS (Certificate Services)

• Standalone certificate servers are often kept offline and are root authority
• Subordinate certificate servers only trust the root CA
• Enterprise certificate servers are within a domain and are intermediate

SCCM

• System Center Configuration Manager allows software deployment on a schedule
• Administrators can deploy applications and report on deployment success/failure
• SCCM is a paid service not readily available in labs
• SCCM allows remote installation, patch management, and OS deployment
• It can also create reports monitoring storage usage

FSRM Role

• FSRM (File Server Resource Manager) role is for managing and classifying data
• It also handles automatic file classification, quota setting and report creation for storage usage
• Quota management specifies allowed storage per directory
• File screening manages data types allowed in directories
• Classification management allows for different criticality levels for files
• File management tasks occur automatically, based on file classification

FSRM Use Cases

• Establishes quotas for user home directories in megabytes, alerting when limits are breached
• Precludes music files from shared folders
• Generates reports of the most accessed files over the past two days (on Sundays at midnight)

Print Spooler

• Print spooler manages print jobs currently being sent to printers
• It is recommended to install the spooler on a different drive (from printer or user machine, in cases of massive workloads)
• The spooler allows for deletion of waiting print jobs or management of print queues

RAID

• RAID (Redundant Array of Inexpensive Disks) optimizes data storage using multiple drives.
• RAID configurations like RAID 0, RAID 1, RAID 5 and RAID 10 are provided but are not explained in detail

Accessing Resources through RDS

• RDS (Remote Desktop Services) allows remote user access to network resources and local drives
• Remote desktop connection can facilitate remote access for users to connect with office resources

NTFS Data Compression

• NTFS data compression is a built-in file system tool to compress files for archival purposes
• Data deduplication eliminates duplicate data patterns in files

Automating Tasks

• PowerShell is used for automating tasks through cmdlets, scripts, or executables
• Install-WindowsFeature replaces the old servermanagercmd.exe tool for adding roles to the server

DHCP Process

• DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses to clients
• DHCP servers respond to DHCP Discover packets with DHCP Offer packets containing IPs for client selection
• Clients accept the DHCPOffer using DHCP Request, and the first offer is accepted
• DHCP acknowledges successful IP assignment
• DHCP leases are standard at 8 days, and clients attempt to renew every 4 and 7 days, respectively, with possible IP address loss and reassignment

DHCP Options

• DHCP reservations assign specific IP addresses to specific clients based on MAC addresses
• DHCP options include time offset, router, NTP server, DNS servers, and DNS domain name for redundancy

Delegation of Control Wizard

• Allows administrators to delegate control of Active Directory's parts (like OUs) to other users
• Simplify the Active Directory administration tasks by allowing administrators to assign permissions at organization level (OU)
• Simplify the process of assigning permissions to specific directory objects

Enable the Windows Defender GUI

• Microsoft Defender Antivirus is pre-installed on server 2016 and 2019
• The GUI allows for management; use PowerShell or other methods in the absence of the GUI
• Active Directory objects contain information about resources, such as printers, and security principals like users and groups