Windows Server on myblog

Windows Server Terminal (RDS)

Thu, 01 May 2025 21:29:01 +0800

Termenal for Free

Add Terminal to Domain

set DNS of DC server (if not work disable IPv6)
Change
Choose domain my domain dan.local
Done !

Troubleshooter Problems

If doesn’t connect to domain - disable ipv6
Network Level Authentication
Run sysdm.cpl
Disable NLA

Create Terminal and Adds Roles

Manage > Add Roles and Features
Next
Select Role-based or feature-based installation and Next
Next
Remote Desktop Services , Next
NET. Framework 4.8 Features, Next

Windows Server

Thu, 13 Mar 2025 21:29:01 +0800

First i need change on server dns on localhost

After change the name of server and restart

Add DC

Install

Wait

Promote this server to a domain controller

dan.local name of my dc

Install

Wait

Done !

DNS Reverse IP

DNS > Reverse Lookup Zone > New Zone

Enter Zone IP my its 192.168.1

Exchange 2019

Fri, 13 Dec 2024 21:29:01 +0800

Add New User to AD for Exchange

Tools > Active Directory Users and Computers
Create New User exchange
Password never expires

Users > exchange > Right click > Member of > Add Domain Admins, Schema Admins, Enterprise Admins> OK

On Echange 2019 Server

Add to DNS DC to server for me its 192.168.1.220

Dont forget disable dhcpv6 and join to domain

Download and Install Net Framework 4.8

https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-8-offline-installer-for-windows-9d23f658-3b97-68ab-d013-aa3c3e7495e0

Windows Server 2025 LAPS

Fri, 13 Dec 2024 21:29:01 +0800

Local Administrator Password Solution (LAPS)

The “Local Administrator Password Solution” (LAPS) provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset.

Download Legacy LAPS for old windows servers

https://www.microsoft.com/en-us/download/details.aspx?id=46899

Important

The legacy Microsoft LAPS product is deprecated as of Windows 11 23H2 and later. Installation of the legacy Microsoft LAPS Microsoft Installer (MSI) package is blocked on newer OS versions, and Microsoft no longer considers code changes for the legacy Microsoft LAPS product.

Windows Server Core

Fri, 13 Dec 2024 21:29:01 +0800

Only for proxmox

egrep -wo 'vmx|svm' /proc/cpuinfo

vmx — Intel VT-x
svm — AMD-V

Enable nested virtualization for KVM

Intel:

cat /sys/module/kvm_intel/parameters/nested

AMD:

cat /sys/module/kvm_amd/parameters/nested

need be 1

nano /etc/pve/qemu-server/100.conf

need be

cpu: host

💥 Command will enable the RDP connections through the firewall on Server Core:

netsh advfirewall firewall set rule group="remote desktop" new enable=Yes

💥 Command Edit the value in the registry to enable remote desktop :

cscript C:\Windows\System32\Scregedit.wsf /ar 0

Install Hyper-V

install hyper-v and management tools

Windows Server Domain Change

Fri, 13 Dec 2024 00:00:00 +0000

DNS

Add New Name

Add new name my name its mynewzone.local

Add new _msdcs

Add new name my name its _msdcs.mynewzone.local

Windows Server

Sun, 01 May 2022 21:29:01 +0800

Before

Server Manager > Local Server > Computer name > Change > YOUR_NAME > [OK]

Firewall off

Ethernet > (Right click on) Ethernet > Properties > Internet Protocol Version 4 IPv4

IP address: 192.168.1.3

Subnet Mask 255.255.255.0

Default gateway: 192.168.1.1

DNS: 8.8.8.8

Create Active Directory

Manage > Add Roles and Features Wizard >

Next > Next > Next >

[x] Active Directory Domain Services

[x] include management tools (if applicable)

Windows Server CA

Sun, 01 May 2022 21:29:01 +0800

In this Tutorial we’re going to configure a Two-Tier Enterprise PKI with Microsoft Server 2019 intended for Lab use. The advantage of a Two-Tier Enterprise PKI Hierarchy is that clients only trust the Root CA. So if a Subordinate server gets compromised the Root CA does not have to be replaced. During normal operation the Root CA will be offline and Certificate requests are handled by the Subordinate CA. The Root CA is a non-domain joined device and will only be turned on issue a certificate for the Subordinate CA or to update the Certificate Revocation List (CRL).

Windows Server WDS

Sun, 01 May 2022 21:29:01 +0800

Windows Server WDS

Create Automatically Install Images

First download “ADK download for Windows 10” from Microsoft
Install adksetup.exe
Select the features you want change

- Deployment Tools

Need Take install.wim from windows_10.iso but we have only in … source\install.esd
Mount windows.iso go to folder “souces” and copy install.esd to c:\

We need cover from install.esd to install.wim and we need know index of windows version

open Deployment and Images Tools Environment

dism /get-wiminfo /wimfile:c:\install.esd

after take your nember of index what you want and cover from .esd format to .vim

dism /export image /sourceimagefile:c:\install.esd /sourceindex:3 /destinationimagefile:c:\install.wim /compress:mix /checkintegrity

now we need create file config for it go to site1 or site2 after generate file config and download with name “Autounattend.xml”

Windows Server APP-V

Sun, 01 May 2022 00:00:00 +0000

Tools for Create APP-V & and Office

Download ADK for Windows.

https://learn.microsoft.com/en-us/windows-hardware/get-started/adk-install

Download Office Deployment Tool

https://www.microsoft.com/en-us/download/details.aspx?id=49117

install and open
outlook.xml its config for 32 bit outlook

<!-- Office 365 client configuration file sample. To be used for Office 365 ProPlus apps, 
     Office 365 Business apps, Project Pro for Office 365 and Visio Pro for Office 365. 

     For detailed information regarding configuration options visit: http://aka.ms/ODT. 
     To use the configuration file be sure to remove the comments

     The following sample allows you to download and install the 64 bit version of the Office 365 ProPlus apps 
     and Visio Pro for Office 365 directly from the Office CDN using the Current Channel
     settings  -->

<Configuration>
  <Add OfficeClientEdition="32" Channel="PerpetualVL2024">
    <Product ID="Outlook2024Volume">
      <Language ID="he-il" />
    </Product>
  </Add>

  <!--  <Updates Enabled="TRUE" Channel="Current" /> -->

  <!--  <Display Level="None" AcceptEULA="TRUE" />  -->

  <!--  <Property Name="AUTOACTIVATE" Value="1" />  -->

</Configuration>

(all file download files in folder office)