Windows Server 2019 & PowerShell All-in-One For Dummies

Sara Perrott is an information security professional with a systems and network engineering background. She teaches classes related to Windows Server, Amazon Web Services, networking, and virtualization. Sara addressed the AWS Imagine conference in 2018 and presented at the RSA conference in 2019.

• Introduction 1About This Book 1Foolish Assumptions 2Icons Used in This Book 2Beyond the Book 3Where to Go from Here 3Book 1: Installing and Setting Up Windows Server 2019 5Chapter 1: An Overview of Windows Server 2019 7Extra! Extra! Read All About It! Seeing What’s New in Windows Server 2019 8Deciding Which Windows Server 2019 Edition Is Right for You 12Essentials 12Standard 13Datacenter 13Walking the Walk: Windows Server 2019 User Experiences 13Desktop Experience 13Server Core 14Nano 15Seeing What Server Manager Has to Offer 15Windows Admin Center: Your New Best Friend 17Chapter 2: Using Boot Diagnostics 21Accessing Boot Diagnostics 21From the DVD 22From the boot menu 24Using a Special Boot Mode 25Safe Mode 25Enable Boot Logging 27Enable Low-Resolution Video 27Last Known Good Configuration 27Directory Services Restore Mode 28Debugging Mode 28Disable Automatic Restart on System Failure 29Disable Driver Signature Enforcement 29Disable Early Launch Anti-Malware Driver 29Performing a Memory Test 30Using the Command Prompt 32Working with Third-Party Boot Utilities 32Chapter 3: Performing the Basic Installation 35Making Sure You Have What It Takes 36Central processing unit 36Random access memory 38Storage 38Network adapter 39DVD drive 39UEFI-based firmware 39Trusted Platform Module 39Monitor 39Keyboard and mouse 40Performing a Clean Install 40Upgrading Windows 43Performing a Network Install with Windows Deployment Services 46Chapter 4: Performing Initial Configuration Tasks 47Understanding Default Settings 48Getting an Overview of the Configuration Process 49Providing Computer Information 50Windows Server 2019 with Desktop Experience 50Windows Server 2019 Core 54Updating Windows Server 2019 60Windows Server 2019 with Desktop Experience 60Windows Server 2019 Core 62Customizing Windows Server 2019 64Windows Server 2019 with Desktop Experience 64Windows Server 2019 Core 67Configuring Startup Options with BCDEdit 70Book 2: Configuring Windows Server 2019 73Chapter 1: Configuring Server Roles and Features 75Using Server Manager 75Roles and features 76Diagnostics 77Configuration tasks 78Configure and Manage Storage 79Understanding Server Roles 80Active Directory Certificate Services 80Active Directory Domain Services 81Active Directory Federation Services 81Active Directory Lightweight Directory Services 81Active Directory Rights Management Services 82Device Health Attestation 82Dynamic Host Configuration Protocol 82Domain Name System 83Fax Server 83File and Storage Services 84Host Guardian Service 84Hyper-V 85Network Controller 85Network Policy and Access Services 85Print and Document Services 86Remote Access 86Remote Desktop Services 86Volume Activation Services 86Web Services 87Windows Deployment Services 87Windows Server Update Services 87Understanding Server Features 87.NET 3.5 88.NET 4.7 88Background Intelligent Transfer Service 88BitLocker Drive Encryption 88BitLocker Network Unlock 89BranchCache 89Client for NFS 89Containers 89Data Center Bridging 90Direct Play 90Enhanced Storage 90Failover Clustering 90Group Policy Management 91Host Guardian Hyper-V Support 91I/O Quality of Service 91IIS Hostable Web Core 91Internet Printing Client 91IP Address Management Server 92Internet Storage Name Server Service 92LPR Port Monitor 92Management OData IIS Extension 92Media Foundation 92Message Queueing 93Multipath I/O 93Multipoint Connector 93Network Load Balancing 93Network Virtualization 93Peer Name Resolution Protocol 94Quality Windows Audio Video Experience 94RAS Connection Manager Administration Kit 94Remote Assistance 94Remote Differential Compression 94Remote Server Administration Tools 94RPC over HTTP Proxy 95Setup and Boot Event Collection 95Simple TCP/IP Services 95SMB 1.0/CIFS File Sharing Support 95SMB Bandwidth Limit 96SMTP Server 96Simple Network Management Protocol Service 96Software Load Balancer 96Storage Migration Service 97Storage Migration Service Proxy 97Storage Replica 97System Data Archiver 97System Insights 98Telnet Client 98TFTP Client 98VM Shielding Tools for Fabric Management 98WebDAV Redirector 98Windows Biometric Framework 99Windows Defender Antivirus 99Windows Identity Foundation 3.5 99Windows Internal Database 99Windows PowerShell 99Windows Process Activation Service 99Windows Search Service 100Windows Server Backup 100Windows Server Migration Tools 100Windows Standards-Based Storage Management 100Windows Subsystem for Linux 101Windows TIFF IFilter 101WinRM IIS Extension 101WINS Server 101Wireless LAN Service 101WoW64 Support 101XPS Viewer 102Chapter 2: Configuring Server Hardware 103Working with Device Manager 104Opening Device Manager 104Configuring how Device Manager displays 104Viewing devices that are not working properly 106Understanding resources 107Viewing hidden devices 108Scanning for new devices 109Working with older devices 109Viewing individual device settings 109Updating drivers 111Configuring power management 111Using the Add Hardware Wizard 112Performing Hard-Drive-Related Tasks 113Choosing basic or dynamic disks 114Using multipath I/O 115Working with storage area networks 116Understanding Storage Spaces Direct 117Working with Storage Replica 123Using Storage Quality of Service 124Encrypting with BitLocker 124Performing Printer-Related Tasks 134Using the Printer Install Wizard 134Configuring print options 136Configuring the Print Server role 137Connecting to a Printer on a Print Server 140Performing Other Configuration Tasks 141Keyboard 141Mouse 141Power management 142Sound 143Language 143Fonts 143Chapter 3: Using the Control Panel 145Accessing the Control Panel 145Configuring the Control Panel 146Understanding Control Panel Items 148Chapter 4: Working with Workgroups 157Knowing What a Workgroup Is 158Knowing If a Workgroup Is Right for You 158Comparing Centralized and Group Sharing 159Configuring a Server for a Workgroup 159Changing the name of your workgroup 160Adding groups 161Creating users and adding users to the group 162Adding shared resources 164Managing Workgroups 168The Computer Management console 168The User Account window 169PowerShell 170Examining the Peer Name Resolution Protocol 172Chapter 5: Promoting Your Server to Domain Controller 173Understanding Domains 173What is a domain? 174Forests and domains and OUs, oh my! 174Understanding privileged domain groups 175Examining Flexible Single Master Operation roles on domain controllers 175Preparing to Create a Domain 177Functional levels 178Forest functional level 179Domain functional level 179Performing Domain Configuration Prerequisites 179Checking for unsupported roles and features 180Installing and configuring Domain Name System 180Installing and configuring Dynamic Host Configuration Protocol 183Configuring the Server as a Domain Controller 187Installing Active Directory Domain Services 188Configuring Active Directory Domain Services 188Converting your DNS Zone to an Active Directory Integrated Zone 190Authorizing your DHCP Server for your Active Directory environment 193Configuring the user accounts 194Sharing resources on a domain 196Joining clients to the domain 197Wrapping Things Up 202Chapter 6: Managing DNS and DHCP with IP Address Management 205Installing IP Address Management 206Configuring IP Address Management 206Using IP Address Management 210Overview 210Server Inventory 211IP Address Space 211Monitor and Manage 213Event Catalog 215Access Control 215Book 3: Administering Windows Server 2019 217Chapter 1: An Overview of the Tools Menu in Server Manager 219Accessing the Server Manager Tools Menu 219Working with Common Administrative Tools 222Computer Management 222Defragment and Optimize Drives 222Disk Cleanup 223Event Viewer 224Local Security Policy 224Registry Editor 226Services 226System Configuration 228Task Scheduler 228Installing and Using Remote Server Administration Tools 229Installing Remote Server Administration Tools 229Using Remote Server Administration Tools 230Chapter 2: Setting Group Policy 233Understanding How Group Policy Works 234Starting the Group Policy Editor 235Performing Computer Management 236Modifying computer software settings 238Modifying computer settings 239Using Administrative Templates 240Performing User Configuration 241Modifying user software settings 241Modifying a user’s Windows Settings 242Using user Administrative Templates 244Viewing Resultant Set of Policy 244Chapter 3: Configuring the Registry 247Starting Registry Editor 248Importing and Exporting Registry Elements 248Exporting Registry elements 249Importing Registry elements 249Finding Registry Elements 250Understanding Registry Data Types 251Understanding the Hives 252HKEY_CLASSES_ROOT 252HKEY_CURRENT_USER 253HKEY_LOCAL_MACHINE 254HKEY_USERS 255HKEY_CURRENT_CONFIG 256Loading and Unloading Hives 256Connecting to Network Registries 258Setting Registry Security 259Setting permissions in the Windows Registry 259Disabling Remote Registry access 259Securing remote administration 260Chapter 4: Working with Active Directory 263Active Directory 101 263Configuring Objects in Active Directory 264Using Active Directory Domains and Trusts 264Using Active Directory Sites and Services 269Using Active Directory Users and Computers 270Using Active Directory Administrative Center 274Chapter 5: Performing Standard Maintenance 277Activating Windows 277Through the graphical user interface 278Through the command line 278Configuring the User Interface 280Working with the Folder Options dialog box 280Setting your Internet Options 282Focusing on your Personalization settings 284Reporting problems 286Setting your Regional and Language Options 286Working with the Performance Options dialog box 287Understanding How User Access Control Affects Maintenance Tasks 288Adding and Removing Standard Applications 289Measuring Reliability and Performance 290Performance Monitor 290Resource Monitor 292Task Manager 293Protecting the Data on Your Server 294System Backup 295System Restore 297Performing Disk Management Tasks 298Managing storage 299Managing disks 299Defragmenting drives 300Automating Diagnostic Tasks with Task Scheduler 301Discovering task status 301Using preconfigured tasks 302Creating your own tasks 304Working with Remote Desktop 305Working with Remote Server Administration Tools 306Figuring out firewall rules 306Connecting to the server 306Managing your servers 307Working with Admin Center 308Focusing on firewall rules 309Connecting to a server 309Using Windows Admin Center to manage your servers 309Creating a Windows Recovery Drive 311Chapter 6: Working at the Command Line 313Opening an Administrative Command Prompt 313Configuring the Command Line 314Customizing how you interact with the Command Prompt 314Changing the font 316Choosing your window layout 317Defining text colors 318Setting Environmental Variables 319Getting Help at the Command Line 320Understanding Command Line Symbols 322Chapter 7: Working with PowerShell 323Opening an Administrative PowerShell Window 324Configuring PowerShell 325Options 325Font 327Layout 328Colors 328Using a Profile Script 330Setting Environmental Variables 330Getting Help in PowerShell 332Understanding PowerShell Punctuation 334Book 4: Configuring Networking in Windows Server 2019 337Chapter 1: Overview of Windows Server 2019 Networking 339Getting Acquainted with the Network and Sharing Center 340Using the Network Connections Tools 342Status 342Ethernet 343Dial-up 344VPN 344Proxy 344Configuring TCP/IP 346Understanding DHCP 349Defining DNS 350Creating a DNS zone 352DNS and Active Directory 353Making DNS fault tolerant 354Chapter 2: Performing Basic Network Tasks 355Viewing Network Properties 355Connecting to Another Network 357Connecting to the Internet 358Setting up a dial-up connection 359Connecting to a virtual private network 360Managing Network Connections 361Understanding the Client for Microsoft Networks feature 362Configuring the Internet Protocol 362Installing network features 364Uninstalling network features 364Chapter 3: Accomplishing Advanced Network Tasks 367Working with Remote Desktop Services 367Installing Remote Desktop Services 368Configuring user-specific settings 369Configuring apps 371Using RD Web Access 372Configuring and using RDS licensing 374Working with Network Policy and Access Services 376Network Policy Server 377Troubleshooting at the Command Line 381Chapter 4: Diagnosing and Repairing Network Connection Problems 383Using Windows Network Diagnostics 384Repairing Individual Connections 386Network Troubleshooting at the Command Line 388Working with Windows Firewall 389Making Sense of Common Configuration Errors 391Duplicate IP addresses 391No gateway address 391No DNS servers set 392An application is experiencing network issues 392Everything should be working, but it’s not 392Working with Other Troubleshooting Tools 392Book 5: Managing Security with Windows Server 2019 395Chapter 1: Understanding Windows Server 2019 Security 397Understanding Basic Windows Server Security 397The CIA triad: Confidentiality, integrity, and availability 398Authentication, authorization, and accounting 399Access tokens 399Security descriptors 399Access control lists 400Working with Files and Folders 403Setting file and folder security 403Creating a Local Security Policy 406Paying Attention to Windows Security 408Virus & Threat Protection 408Firewall & Network Protection 408App & Browser Control 410Device Security 411Chapter 2: Configuring Shared Resources 413Comparing Share Security with File System Security 413Shared folder permissions 414File system security 415Effective permissions validation 415Sharing Resources 417Storage media 417Printers 418Other resources 419Configuring Access with Federated Rights Management 419Working with Active Directory Federation Services 420Working with Active Directory Rights Management Services 424Chapter 3: Configuring Operating System Security 433Understanding and Using User Account Control 433Using User Account Control to protect the server 434Running tasks as administrator 434Watching out for automatic privilege elevation 435Overriding User Account Control settings 435Managing User Passwords 438Understanding Credential Guard 439How Credential Guard works 440Credential Guard Hardware Requirements 440How to enable Credential Guard 441Configuring Startup and Recovery Options 444Chapter 4: Working with the Internet 447Firewall Basics 447Getting acquainted with the Windows Defender Firewall profiles 448Enabling and disabling the Windows Defender Firewall 448Configuring Windows Defender Firewall with Advanced Security 451Working with profile settings 452Working with inbound/outbound rules 454Understanding IPSec 457Configuring the IPSec settings 458Chapter 5: Understanding Digital Certificates 461Certificates in Windows Server 2019 462Cryptography 101 462Certificate-specific concepts 464Types of Certificates in Active Directory Certificate Services 465User certificates 465Computer 466Chapter 6: Installing and Configuring AD CS 469Introducing Certificate Authority Architecture 470Root certificate authorities 470Issuing certificate authorities 471Policy certificate authorities 471Installing a Certificate Authority 471Creating the CAPolicy.inf file 471Installing the root certificate authority 473Installing the issuing certificate authority 477Enrolling for certificates 478Setting up web enrollment 481Installing Online Certificate Status Protocol 482Configuring Certificate Auto-Enrollment 485Configuring the template 485Configuring Group Policy 486Chapter 7: Securing Your DNS Infrastructure 489Understanding DNSSEC 489The basics of DNSSEC 490Records used for DNSSEC 490Configuring DNSSEC 491Understanding DANE 495The basics of DANE 495Configuring DANE 496Book 6: Working with Windows PowerShell 501Chapter 1: Introducing PowerShell 503Understanding the Basics of PowerShell 503Objects 504Pipeline 504Providers 505Variables 506Sessions 506Comments 507Aliases 507Cmdlets 507Using PowerShell 509Writing PowerShell commands and scripts 509Working with objects 513Working with the pipeline 514Working with modules 516Working with comparison operators 518Getting information out of PowerShell 519Scripting logic 521Other cool tricks 522Running PowerShell Remotely 527Invoke-Command 527New-PSSession 527Enter-PSSession 527Getting Help in PowerShell 528Update-Help 528Get-Help 529-Detailed and -Full 529Identifying Security Issues with PowerShell 530Execution Policy 530Code signing 531Firewall requirements for PowerShell remoting 534Chapter 2: Understanding the NET Framework 535Introducing the Various Versions of NET Framework 535Focusing on New Features in NET 4.7 538Viewing the Global Assembly Cache 539Understanding assembly security 540Identifying the two types of assembly privacy 540Viewing assembly properties 541Understanding NET Standard and NET Core 541.NET Core 542.NET Standard 542Tying it all together: NET and PowerShell 542Chapter 3: Working with Scripts and Cmdlets 543Introducing Common Scripts and Cmdlets 543Executing Scripts or Cmdlets 544Working with COM objects 545Combining multiple cmdlets 545Working from Another Location 546Performing Simple Administrative Tasks with PowerShell Scripts 548Adding users in Active Directory 548Creating a CSV file and populating it with data from Active Directory 548Checking to see if a patch is installed 550Checking running processes or services 550Chapter 4: Creating Your Own Scripts and Advanced Functions 551Creating a PowerShell Script 552Creating a simple script 552Running the script 557Defining a Script Policy 558Signing a PowerShell Script 559Creating a PowerShell Advanced Function 559Playing with parameters 560Creating the advanced function 561Using the advanced function 563Chapter 5: PowerShell Desired State Configuration 567Getting an Overview of PowerShell Desired State Configuration 567Configurations 568Resources 569Local Configuration Manager 571Creating a PowerShell Desired State Configuration Script 572Applying the PowerShell Desired State Configuration Script 573Compiling into MOF 574Applying the new configuration 575Push and Pull: Using PowerShell Desired State Configuration at Scale 575Push mode 576Pull mode 577Book 7: Installing and Administering Hyper-V 579Chapter 1: What Is Hyper-V? 581Introduction to Virtualization 581Type 1 and Type 2 Hypervisors 582Type 1 hypervisors 583Type 2 hypervisors 583Installing and Configuring Hyper-V 583Installing Hyper-V 584Configuring Hyper-V 586Virtual Switch Manager 591Virtual SAN Manager 591Chapter 2: Virtual Machines 593Creating a Virtual Machine 593Configuring a Virtual Machine 597Add Hardware 598Firmware 598Security 598Memory 599Processor 600SCSI Controller 601Network Adapter 602Name 603Integration Services 603Checkpoints 603Smart Paging File Location 603Automatic Start Action 604Automatic Stop Action 604Shielded Virtual Machines 604Chapter 3: Virtual Networking 605Identifying the Types of Virtual Switches 606External 606Internal 606Private 606Creating a Virtual Switch 607Hyper-V Manager 607PowerShell 608Getting into Advanced Hyper-V Networking 610Virtual local area network tagging 610Bandwidth management 613Network interface card teaming 614Looking at single-root I/O virtualization 619Chapter 4: Virtual Storage 621Understanding Virtual Disk Formats 621Considering Types of Disks 622Fixed 622Dynamic 622Differencing 623Pass-through 623Adding Storage to the Host 623Adding the drives 623Changing the default save locations of virtual disk files 625Adding Storage to the Virtual Machine 626Adding a new virtual drive 626Expanding a disk drive 629Adding a pass-through disk 630Converting a VHD disk file to a VHDX disk file 631Attaching the converted drive to the virtual machine 632Chapter 5: High Availability in Hyper-V 635Hyper-V Replica 635Setting up Hyper-V Replica on the Hyper-V hosts 636Setting up replication on the virtual machines 638Live Migration 640Setting up live migration 641Kicking off a live migration 643Storage Migration 644Failover Clustering 645Installing Failover Clustering 645Configuring Failover Clustering 646Configuring a witness for your failover cluster 647Book 8: Installing, Configuring, and Using Containers 649Chapter 1: Introduction to Containers in Windows Server 2019 651Understanding Containers 652Knowing what a container looks like 652Defining important container terms 653Seeing how containers run on Windows 653Considering Use Cases for Containers 654Developers 654System administrators 654Deciding What Type of Containers You Want to Use 655Windows Server containers 655Hyper-V containers 655Managing Containers at Scale 656Chapter 2: Docker and Docker Hub 657Introduction to Docker 657Docker architecture 658Basic Docker commands 658Introduction to Docker Hub 659Finding public images 659Creating a private repository 662Using a private repository 664Chapter 3: Installing Containers on Windows Server 2019 667Installing Windows Containers 668Installing Hyper-V Containers 669Installing Docker 670Testing Your Container Installation 672Windows container 672Hyper-V container 672Chapter 4: Configuring Docker and Containers on Windows Server 2019 675Working with Dockerfile 675Applying Custom Metadata to Containers and Other Objects 678Creating labels 679Viewing labels 679Configuring Containers 680Starting containers automatically 680Limiting a container’s resources 681Configuring the Docker Daemon with daemon.json 682Chapter 5: Managing Container Images 685Making Changes to Images and Saving the Changes You Make 685Pushing Images to Docker Hub 689Pulling Images from Docker Hub 691Handling Image Versioning 693Chapter 6: Container Networking 695Considering the Different Types of Network Connections 696Viewing Your Network Adapters and Virtual Switches 697Configuring a Network Address TranslationNetwork Connection 698Configuring a Transparent Network Connection 699Configuring an Overlay Network Connection 700Configuring an l2bridge Network Connection 701Configuring an l2tunnel Network Connection 702Connecting to a Network 703Chapter 7: Container Storage 705Getting Acquainted with Container Storage 705Creating a Volume Inside of a Container 706Working with Persistent Volumes 709Looking at volume types 709Removing volumes 712Index 713