Complete Windows Server Administration Guide

Everything You Need to Know About Installing, Managing, and Securing Windows Server

Introduction

Windows Server is the backbone of many corporate networks. From handling user authentication to providing DNS, DHCP, file storage, virtualization, and enterprise-level security, it serves as the core system for IT infrastructure.

[Server Rack / Windows Server Image]

In this blog, we provide a **highly detailed, step-by-step demonstration** of Windows Server administration—perfect for beginners and professionals.

1. Understanding Windows Server Editions

Before installation, choose the correct edition:

Standard: Best for small/medium businesses with limited virtualization.
Datacenter: Ideal for cloud/datacenter with unlimited virtualization.
Essentials: Max 25 users; suitable for small offices.
Server Core: No GUI; lightweight, secure, ideal for advanced administrators.

💡 Tip: Always select Datacenter for large VM deployments using Hyper-V or containers.

2. Installing Windows Server

You can install Windows Server through:

ISO image
Bootable USB
PXE Network Boot

[Windows Setup Screen Image]

Installation Steps (Demonstration)

Insert bootable media and start the server.
Select language and keyboard layout.
Choose Windows Server Standard / Datacenter (Desktop Experience).
Select “Custom Install”.
Create partitions and install.
After reboot, set the Administrator password.

⚠️ Warning: Installing with Server Core requires PowerShell and command-line administration.

3. Initial Configuration (Post-Install)

After installation, configure the server using Server Manager or sconfig (Server Core).

3.1 Rename Server

Rename-Computer -NewName "SERVER01" -Restart

3.2 Assign Static IP Address

New-NetIPAddress -InterfaceAlias "Ethernet" -IPAddress 192.168.1.10 -PrefixLength 24 -DefaultGateway 192.168.1.1

3.3 Configure DNS Server

Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses 192.168.1.5

[Network Settings Screenshot]

4. Active Directory Domain Services (AD DS)

Active Directory is the main identity management service in Windows Server.

4.1 Install AD DS Role

Install-WindowsFeature AD-Domain-Services -IncludeManagementTools

4.2 Create a New Domain (Forest)

Install-ADDSForest -DomainName "example.local"

[ADDS Installation Wizard Screen]

4.3 Create Organizational Units (OUs)

New-ADOrganizationalUnit -Name "Staff" -Path "DC=example,DC=local"

4.4 Create a User

New-ADUser -Name "John Doe" -SamAccountName "jdoe" -AccountPassword (Read-Host -AsSecureString) -Enabled $true

4.5 Join Client Computers to Domain

Go to:

Settings → System → About → Domain Join
Enter domain name → example.local
Provide domain credentials

5. DNS Server Administration

DNS is automatically installed with AD and handles hostname resolution.

Create a Primary DNS Zone

Add-DnsServerPrimaryZone -Name "example.local" -ReplicationScope "Forest"

Create A Records

Add-DnsServerResourceRecordA -Name "fileserver" -ZoneName "example.local" -IPv4Address "192.168.1.50"

[DNS Manager Screenshot]

6. DHCP Server Administration

Install DHCP

Install-WindowsFeature DHCP -IncludeManagementTools

Create a DHCP Scope

Add-DhcpServerv4Scope -Name "OfficeLAN" -StartRange 192.168.1.100 -EndRange 192.168.1.200 -SubnetMask 255.255.255.0

Configure Router & DNS Options

Set-DhcpServerv4OptionValue -Router 192.168.1.1 -DnsServer 192.168.1.5 -DnsDomain "example.local"

💡 Tip: Always authorize the DHCP server in Active Directory before clients start receiving IPs.

7. Group Policy Management (GPO)

GPOs control user/computer behavior, security settings, software deployments, and more.

Create a GPO

New-GPO -Name "SecurityPolicy"

Link GPO

New-GPLink -Name "SecurityPolicy" -Target "OU=Staff,DC=example,DC=local"

Common GPO Tasks

Enforce Firewall
Disable USB Storage
Deploy printers
Apply password complexity rules

8. File Server & Storage Management

Create File Shares

New-SmbShare -Name "Public" -Path "D:\Public" -FullAccess "Everyone"

Set NTFS Permissions

icacls "D:\Public" /grant "Staff:(OI)(CI)M"

[File Server Resource Manager Screenshot]

Enable Storage Quotas

fsutil quota enforce C:

9. Hyper-V Virtualization

Install Hyper-V Role

Install-WindowsFeature Hyper-V -IncludeManagementTools -Restart

Create a Virtual Switch

New-VMSwitch -Name "LAN" -NetAdapterName "Ethernet" -AllowManagementOS $true

Create a Virtual Machine

New-VM -Name "ServerVM" -MemoryStartupBytes 4GB -NewVHDPath "C:\VMs\ServerVM.vhdx" -NewVHDSizeBytes 60GB

10. Security Hardening

Important Security Practices

Enable Firewall for all profiles
Install Windows Defender Antivirus
Enable BitLocker
Disable SMBv1 protocol
Use Complex Password Policies
Enable Credential Guard

Disable SMBv1

Disable-WindowsOptionalFeature -Online -FeatureName "SMB1Protocol"

⚠️ SMBv1 is outdated and vulnerable to ransomware attacks like WannaCry.

11. Monitoring & Performance Optimization

Monitoring Tools

Task Manager
Performance Monitor
Resource Monitor
Event Viewer
Windows Admin Center

Check CPU Usage

Get-Counter '\Processor(_Total)\% Processor Time'

Analyze Disk I/O

Get-Counter '\PhysicalDisk(_Total)\Disk Read Bytes/sec'

12. Backup & Disaster Recovery

Install Windows Server Backup

Install-WindowsFeature Windows-Server-Backup

Perform Full Backup

wbadmin start backup -backupTarget:E: -include:C: -quiet

Restore System

You can restore using:

Windows Recovery Environment (WinRE)
Backup console
wbadmin restore commands

Conclusion

Windows Server administration is a vital skill for IT professionals. This detailed guide covered installation, Active Directory, DNS, DHCP, GPOs, file services, Hyper-V, security, and disaster recovery—providing a strong foundation for managing enterprise environments.