Windows Deployment Service (WDS)

Convert ESD to WIM

Locate and look into .ESD file

dism /Get-WimInfo /WimFile:install.esd

Export to .WIM format

dism /export-image /SourceImageFile:install.esd /SourceIndex:1 /DestinationImageFile:install.wim /Compress:max /CheckIntegrity

 

Windows Server Update Services (WSUS)

Add GPO to allow all client PCs to point to WSUS server

Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates

Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update > Specify intranet Microsoft Update Service Location

Disable WSUS

Stop-Service wuauserv
Remove-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\*' -recurse -force
Start-Service wuauserv

View client’s WSUS setting with regedit

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

View client’s WSUS server address

Get-ItemProperty "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"
or
gpresult /h report.html

File Server Resource Manager (FSRM)

 

Distributed File System (DFS)

 

Advanced Auditing

 

DNS in Win Server 2012

 

Maintaining Active Directory Domain Services

Redirect the CN=Users container

#Check current location
Get-ADDomain | select UsersContainer

#Set new location (Must run as Administrator)
redirusr "OU=NewUsers,DC=domain,DC=sg"

 

Redirect the CN=Computers container

#Check current computer container
Get-ADDomain | select computersContainer

#Change default container (Must run as Administrator)
redircmp "OU=NewComputers,DC=domain,DC=sg"

 

Read-Only Domain Controllers

 

Group Policy

 

VPNs and Routing

 

DirectAccess

 

Network Policy Server

 

Network Access Protection (NAP)

Check on client PC

# Win7
napclcfg.msc

# Win10. The Network Access Protection (NAP) is not available starting with Windows 10