Module 14: Managing a Windows Network: Tools, Tasks & Best Practices for Admins

Managing a Windows Network involves configuring and maintaining services such as Active Directory, DNS, DHCP, security policies, file sharing, performance monitoring, and user access to ensure stable and secure network operations.

1. User and Group Management

Use Active Directory Users and Computers (ADUC) to:
- Create and manage users, groups, and OUs
- Set group policies and access rights
- Enforce password and login rules

2. Computer and Device Management

Join computers to the domain
Use Group Policy to enforce security settings
Monitor client systems via Remote Desktop or PowerShell

3. DNS and DHCP Configuration

Ensure correct DNS records for name resolution
Use DHCP to assign IPs dynamically
Implement DHCP reservations for printers and servers

4. File and Print Services

Set up shared folders with NTFS and share permissions
Configure print servers and manage queues
Apply quotas using File Server Resource Manager (FSRM)

5. Network Security Management

Configure Windows Firewall rules
Set up IPSec, SSL certificates, and BitLocker
Apply security baselines via Group Policy

6. Monitoring and Performance

Use Performance Monitor, Event Viewer, and Task Manager
Track logs, services, and application behavior
Schedule alerts for thresholds like CPU, memory, or disk usage

7. Backup and Disaster Recovery

Use Windows Server Backup or third-party tools
Schedule regular backups and test restore operations
Configure Shadow Copies and replication

8. Software and Patch Management

Deploy software via Group Policy (GPO)
Use WSUS (Windows Server Update Services) for patch control
Monitor update status and compliance reports

Top Administrative Strategies for Managing Windows Server 2019 Efficiently

Windows Server 2019 administrative strategies involve a set of best practices, tools, and configurations that help IT administrators efficiently manage, secure, and optimize Windows Server environments across enterprise networks.

1. Implement Role-Based Server Management

Use Server Manager and Windows Admin Center
Assign and manage server roles (e.g., AD DS, DNS, DHCP, File Server)
Delegate responsibilities using role-based access control (RBAC)

2. Use Windows Admin Center (WAC)

Centralized web-based tool for managing multiple servers
Perform updates, monitor performance, and manage roles
Lightweight alternative to traditional MMC consoles

💡 WAC is ideal for managing hybrid environments (on-prem & Azure)

3. Automate Tasks with PowerShell

Use PowerShell scripts for:
- Creating users/groups
- Managing services and event logs
- Applying security configurations
Combine with Task Scheduler for automation

4. Secure the Server with Group Policy and Defender

Apply Group Policy Objects (GPOs) for:
- Password policies
- Software restrictions
- RDP and firewall settings
Enable Windows Defender ATP, antivirus, and exploit protection

5. Utilize Active Directory Efficiently

Maintain a clean OU structure
Audit and clean inactive accounts
Enable LDAP over SSL (LDAPS) for secure authentication

6. Enable High Availability and Backup

Configure failover clustering or Storage Replica
Set up Windows Server Backup or integrate with Azure Backup
Test restore scenarios regularly

7. Implement Patch and Update Management

Use WSUS (Windows Server Update Services) or WAC
Schedule maintenance windows
Regularly review update compliance reports

8. Monitor System Health and Logs

Use Performance Monitor, Resource Monitor, and Event Viewer
Track CPU, RAM, storage, and network usage
Set up alerts for hardware or service failures

9. Enable Remote Administration Securely

Use Remote Desktop Services (RDS) with security best practices:
- Limit user access
- Use RDP Gateway and 2FA
- Restrict access by IP

10. Integrate Cloud Services (Hybrid Strategy)

Join on-prem AD to Azure Active Directory
Use Azure Site Recovery for disaster recovery
Configure cloud-based file sync with Azure File Sync

How to Perform Remote Administration Using Terminal Services in Windows Server

Terminal Services, now known as Remote Desktop Services (RDS), allow administrators to perform remote administrative tasks on Windows Servers, including managing users, services, and applications via Remote Desktop Protocol (RDP).

Step-by-Step Guide: Using Terminal Services for Remote Administration

1. Enable Remote Desktop on the Server

Go to:
Start → Server Manager → Local Server
Click on Remote Desktop: Disabled
Select Allow remote connections to this computer
Ensure the firewall allows RDP traffic (TCP port 3389)

2. Add Users to Remote Desktop Users Group

Go to System Properties → Remote → Select Users
Add the domain or local users allowed to connect remotely
Administrative users have access by default

3. Connect to the Server Using RDP

On the administrator’s machine:

Press Win + R, type:

nginx mstsc

Enter the server IP or hostname
Provide credentials when prompted

4. Perform Remote Admin Tasks

Once connected:

Use tools like:
- Active Directory Users and Computers
- Server Manager
- PowerShell
- Task Scheduler
- Group Policy Management Console
Manage services, check event logs, apply updates, and more

🔐 Admins can remotely manage roles and features just like they’re on the physical machine.

Remote Administration Licensing Notes

You do not need RDS CALs (Remote Desktop Services Client Access Licenses) if you’re using Admin Mode (2 concurrent admin sessions).
For more than 2 concurrent users, install RDS roles and purchase licenses.

SNMP Explained: Simple Network Management Protocol Overview and Use Cases

SNMP (Simple Network Management Protocol) is a standard internet protocol used to monitor, manage, and configure network devices such as routers, switches, servers, and printers from a central location.

How SNMP Works:

SNMP Manager sends a request (GET, SET) to an SNMP Agent
SNMP Agent gathers the requested data from its MIB
Agent sends back a response
Devices can also send unsolicited alerts (called SNMP traps) to the manager

Internet MIB II-Defines objects essential for fault or configuration analysis
LAN Manager MIB II-Defines objects on computers running Windows 2019, Windows NT or LAN Manager
DHCP MIB-Defines objects to monitor DHCP activity
WINS MIB-Defines objects to monitor WINS activity

How SNMP Works: Understanding the Operation of Simple Network Management Protocol

SNMP operation involves the interaction between an SNMP manager and SNMP agents on network devices to monitor, configure, and control network infrastructure using structured data from a Management Information Base (MIB).

How SNMP Works – Core Operational Model

SNMP (Simple Network Management Protocol) operates on a client-server model:

Manager (Client): Sends requests, collects data, receives alerts
Agent (Server): Resides on the device and responds to manager’s requests
MIB (Management Information Base): A database schema that defines what can be monitored

SNMP Operational Flow:

1. Data Request from Manager to Agent

The SNMP Manager sends a GET or GET-NEXT request to the device’s agent
The Agent reads the required value from its MIB (e.g., CPU load, interface status)
The Agent replies with a RESPONSE message

2. Changing Configuration (SET Command)

The Manager can send a SET request to the Agent
The Agent updates the value in its MIB (e.g., change port status)

3. Unsolicited Alerts (TRAPS & INFORMs)

If a fault occurs (e.g., link down), the Agent sends a TRAP or INFORM message to the Manager
These alerts are event-driven, requiring no polling