Server Manager - Paiet/Windows-Server-Wiki GitHub Wiki

What you can do with Server Manager

Configure the local server
Add roles and Features (we will get to)
Add other Servers to manage
Create a Server group

The Dashboard
--First view within Server Manager for speed--information gathering/Health, documenting Currently installed roles, Server groups, local server.

Managing Multiple Servers
--View the status of all servers in the group

--Open an interactive PowerShell prompt on all servers in the group. After you highlight servers in a server group, you can right-click them and bring up a large task menu. From there, you can launch a PowerShell prompt across all the highlighted servers. This can be helpful, especially when you need to run a command on each computer.

--Configure and view performance alerts across all servers in the group.
DC RAM 95% vs Web Server RAM 98%

Configuring Local Server Settings

focus on the core configuration areas, Med/Large use System Center Configuration Manager (enterprise class console)/Sysprep

Computer name
Choose logical host name. Usually, you never want to rename a domain controller. you should think hard about what you want it to be named and stick with it.

Domain or Workgroup
SHOW in LAB
If you are currently joined to a domain, then the domain name will be shown in the Local Server workspace. If you aren't, then Server Manager will show the name of the workgroup, which is WORKGROUP by default. Before you can join a domain, there are some prerequisites that you must meet:
--You need to know the FQDN of the domain
--You need to have permission to join the domain
--You need to ensure that the computer can resolve the FQDN of the domain by using DNS
--You need to have administrative permissions on the server that are you configuring to join the domain.

Windows Firewall
SHOW in LAB pg.51

Remote Management
Windows Server 2012 R2 and Windows Server 2016 are configured to be remotely managed by default https://technet.microsoft.com/en-us/library/hh921475(v=ws.11).aspx
Server 2012, Windows Server 2008 R2, or Windows Server 2008 need .NET Framework 4.5 & Windows Management Framework 4.0 (above link)
Enable-PSRemoting -force

https://technet.microsoft.com/en-us/library/ff700227.aspx

Remote Desktop
By default, Windows Server does not accept Remote Desktop connections. Thus, one of your first tasks after installing Windows Server is to turn on and configure Remote Desktop. There are some important things to know about enabling Remote Desktop: By default, local administrative users (the local Administrator account and any user accounts that are members of the local Administrators group) have permissions to connect to a server by using Remote Desktop. You can configure additional users and groups if desired.

Ethernet SHOW IN LAB GUI, PowerShell & NETSH

Windows Update Windows Software Update Services (WSUS) or System Center Configuration Manager (ConfigMgr) Windows Server Antimalware
Windows Server Antimalware is the new name for Windows Defender, as of Windows 10 and Windows Server 2016
Real-time protection and scheduled malware scans
Update the virus and spyware definitions
Perform a scan of the computer
CPU Utilization to consider during a scan
IE Enhanced Security Configuration (IE ESC) is a security feature that Microsoft first added to Windows Server for Windows Server 2003. IE ESC provides additional security for the Internet Explorer (IE) browser to help minimize a server's exposure to malware. By default, IE ESC is turned on for administrative users and non-administrative user.

Controlling Server Manager Startup Behavior
By default, Server Manager is shown each time you sign in to a Windows server. Sometimes, this is convenient. Other times, especially after a server has been fully configured, you may not want it to be shown each time you sign in.

LAB --Add servers to Server Manager
--Create a Server group
--Disable IE ESC for administrators