Windows Server 2022 Admin Tasks

• These notes cover various server administration tasks in Windows Server 2022.

DNS Server Setup

• Installation of the DNS Server role is done via Server Manager
• Configuring forwarders involves specifying external DNS servers for unresolved queries
• A records map domain names to IP addresses
• Creating a forward lookup zone defines the primary zone to store DNS records
• Setting up a reverse lookup zone enables DNS to resolve IP addresses back to domain names

Print Server Management

• Installing the Print Server role uses Server Manager to add Print and Document Services
• Printers are added and registered in the Print Management Console
• Managing print jobs and queues involves monitoring and controlling print tasks centrally
• Print permissions configure assigning printing rights to users or groups
• Printer sharing set up involves allowing network users to access the printers

Web Server Security

• Regularly updating the web server software protects against vulnerabilities with patches and updates
• Enabling HTTP to HTTPS redirection forces users to use secure HTTPS connections
• Setting up user authentication for admin access restricts unauthorized access to website settings
• Installing an SSL/TLS certificate encrypts web traffic to enhance security
• Firewall rules should restrict access to only necessary ports like 80 and 443

Active Directory User Account Management

• Open Active Directory Users and Computers (ADUC) to access the AD management console
• Disabling an account prevents the user from logging in without deleting data
• Deleting an account permanently removes the user account from AD
• Moving a user to a "Disabled Users" OU organizes inactive accounts without deletion
• Locating the user account searches for the user to be disabled or removed

Active Directory Domain Services (AD DS) Role Setup

• Configuring a domain name specifies the domain name for the new or existing domain
• Installing the AD DS role uses Server Manager to add the AD DS role to the server
• Promoting the server to a domain controller completes the domain configuration and installs Active Directory
• Setting up DNS integration chooses whether the server will host DNS for the domain
• Restarting the server reboots to apply the changes and complete the setup

DHCP Server Setup

• Installing the DHCP Server role adds the DHCP role using Server Manager
• Authorizing the DHCP Server in Active Directory allows the server to assign IP addresses in an AD environment
• Creating and configuring a new DHCP scope defines the range of IP addresses available for clients
• Activating and restarting the DHCP service ensures the DHCP service is running and available to clients
• Setting up DHCP reservations for specific devices assigns fixed IP addresses to critical devices like printers and servers

Active Directory User Creation

• Right-clicking and choosing "New" → "User" starts the user account creation process
• Selecting the appropriate Organizational Unit (OU) chooses where the user account will be created
• Entering user details provides necessary identification information
• Setting up a strong password and enabling the account defines login credentials and activates the account
• Opening "Active Directory Users and Computers" (ADUC) launches the AD management console

File Server Setup

• Enabling SMB protocol allows shared file access over the network
• Installing the File Server role enables file sharing features using Server Manager
• Creating shared folders designates specific directories for network file sharing
• Setting folder permissions defines access rights for users and groups
• Enabling Shadow Copies allows the ability to revert to older file versions

DNS Server Configuration

• Testing DNS resolution verifies that domain names are correctly resolving
• Configuring A (Address) records maps domain names to IPv4 addresses
• Installing the DNS Server role adds DNS functionality using Server Manager
• Configuring a Reverse Lookup Zone enables IP address-to-hostname resolution
• Creating a new Forward Lookup Zone enables the server to resolve domain names to IP addresses

IIS Web Server Setup

• Installing the IIS role uses Server Manager to add Internet Information Services (IIS) role services
• Configuring an SSL/TLS certificate for HTTPS enables secure HTTPS connections for the website
• Creating a new website sets up a site in IIS Manager with a unique name and directory
• Configuring firewall rules to allow HTTP/HTTPS traffic ensures web traffic is not blocked by the firewall
• Assigning a static IP address or domain name configures DNS or IP settings for site accessibility

Dynamic DNS Updates via DHCP

• Open DHCP Management Console to access the DHCP server settings
• Enable "Dynamically update DNS A and PTR records"* to allow DHCP to register client addresses in DNS
• Verify the setup using ipconfig /registerdns on a client machine
• Ensuring the client properly registers its DNS records ensures the automatic registration
• DHCP lease duration defines how long an IP address is assigned before renewal
• Navigate to IPv4 properties and select "DNS" tab to locate the settings to configure DNS updates

Active Directory Password Reset

• Enable "User must change password at next logon" to force the user to create a new password
• Right-click the user and select "Reset Password" to start the password reset process
• Locate the user account to search for the user needing a password reset
• Enter a new password and confirm it to define a secure new password
• Open "Active Directory Users and Computers" (ADUC) to access the user management console

Email Server Setup

• Install the Mail Server role or Exchange Server using Server Manager or Exchange Server to enable mail services
• Set up DNS MX records to configure Mail Exchanger (MX) records for domain-based email routing for the correct server
• Create and configure mailboxes by assigning mail addresses to users in Active Directory and configure their mailboxes
• Configure SMTP settings to set up the Simple Mail Transfer Protocol (SMTP) for sending emails
• Enable POP3/IMAP services (if required) to allow users to retrieve emails using mail clients by enabling POP3/IMAP

DNS Forwarding Configuration

• Apply and save settings to confirm and finalize the configuration
• Go to the "Forwarders" tab to configure external DNS resolution settings
• Add the IP address of an external DNS server to specify where unresolved queries should be sent
• Open DNS Manager to launch the DNS management console
• Right-click on the server and select "Properties" to access DNS server settings