Windows Deployment Service (WDS)
Convert ESD to WIM
Locate and look into .ESD file
dism /Get-WimInfo /WimFile:install.esd
Export to .WIM format
dism /export-image /SourceImageFile:install.esd /SourceIndex:1 /DestinationImageFile:install.wim /Compress:max /CheckIntegrity
Windows Server Update Services (WSUS)
Add GPO to allow all client PCs to point to WSUS server
Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates
Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update > Specify intranet Microsoft Update Service Location
Disable WSUS
Stop-Service wuauserv Remove-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\*' -recurse -force Start-Service wuauserv
View client’s WSUS setting with regedit
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
View client’s WSUS server address
Get-ItemProperty "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" or gpresult /h report.html
File Server Resource Manager (FSRM)
Distributed File System (DFS)
Advanced Auditing
DNS in Win Server 2012
Maintaining Active Directory Domain Services
Redirect the CN=Users container
#Check current location Get-ADDomain | select UsersContainer #Set new location (Must run as Administrator) redirusr "OU=NewUsers,DC=domain,DC=sg"
Redirect the CN=Computers container
#Check current computer container Get-ADDomain | select computersContainer #Change default container (Must run as Administrator) redircmp "OU=NewComputers,DC=domain,DC=sg"
Read-Only Domain Controllers
Group Policy
VPNs and Routing
DirectAccess
Network Policy Server
Network Access Protection (NAP)
Check on client PC
# Win7 napclcfg.msc # Win10. The Network Access Protection (NAP) is not available starting with Windows 10