SERVER FEATURES AND
CONFIGURATION
LEARNING OUTCOME
• Discuss about user management
• Group Policy Object
• Folder Redirection
• Printer Deployment
• Remote access
• Backup and restore
• Demoting
MANAGE USER ACCOUNTS IN WINDOWS SERVER
• The Users page of the Windows Server Essentials Dashboard centralizes
information and tasks that help you manage the user accounts on your small
business network
• Add a user account
• Remove a user account
• View user accounts
• Change the display name for the user account
• Activate a user account
• Deactivate a user account
• Understand user accounts
• Manage user accounts using the Dashboard.
MANAGE USER ACCOUNTS IN WINDOWS SERVER
GROUP POLICY IN WINDOWS SERVER
• Group Policy is an infrastructure that enables you to specify managed configurations
for users and computers through Group Policy settings and Group Policy Preferences.
• For Group Policy settings that affect only a local computer or user, you can use the
Local Group Policy Editor.
• Active
Directory Group Policy is a fundamental building block of an enterprise
network.
• Group Policy Objects (GPOs) configure settings, behaviors, and privileges for users
and computers connected to the Active Directory domain.
• Whether you are building a new domain or have an existing domain to manage,
you can follow several group policy best practices to have an efficient deployment.
GROUP POLICY IN WINDOWS SERVER
1. Removable Media - you can use Group Policy to prevent the use of USB drives, run a certain script when
the system starts up or shuts down, deploy software, or force a particular home page to open for every
Active Directory user in the network.
2. Screen Lockout Time - Enable a lock-out time from inactivity on your domain computers to protect data and
privacy. A generally accepted time is 10 – 15 minutes but can be shorter if need be. Teaching your users to
lock their computers when they are walking away from their desks is great. But a backup plan is always
ideal.
3. Password Policy - Enforcing a strong password policy is critical for the security of your domain.
4. Restrict access - Limit access to the command prompt and PowerShell to prevent commands from being run
by regular user accounts.
5. Limit who can install software - All software should be tested and approved before being installed on a
network. Also, regular user accounts should not be allowed to install software.
6. Turn off forced restarts - If you are using Windows Update, disable automatic restarts when users are
logged on. This will prevent a lot of angry emails and phone calls.
GROUP POLICY IN WINDOWS SERVER
FOLDER REDIRECTION
• Folder Redirection and Offline Files are used together to redirect the path of
local folders, such as the Documents folder, to a network location, while
caching the contents locally for increased speed and availability.
• Roaming User Profiles is used to redirect a user profile to a network location.
These features used to be referred to as Intellimirror.
FOLDER REDIRECTION
Practical applications
• Administrators can use Folder Redirection, Offline Files, and Roaming User Profiles to
centralize storage for user data and settings. These features let users access their data while
offline or in the event of a network or server outage. These features can also accomplish these
specific applications:
• Centralize data from client computers for administrative tasks, such as using a server-based
backup tool to back up user folders and settings.
• Enable users to continue accessing network files, even if there is a network or server outage.
• Optimize bandwidth usage and enhance the experience of users in branch offices who access
files and folders that are hosted by corporate servers located offsite.
• Enable mobile users to access network files while working offline or over slow networks.
PRINTER DEPLOYMENT IN WINDOWS SERVER
1. Printer Sharing: First, printers need to be shared from a central print server. This server hosts the printer
drivers and configurations, making it easier to manage and distribute printers to users across the network.
2. Printer Drivers: Ensure that appropriate printer drivers are installed on the print server. These drivers should
be compatible with the printer models being deployed and with the operating systems used by client
computers.
3. Group Policy Deployment: Group Policy can be used to deploy printers to users or computers within Active
Directory domains. Administrators can create Group Policy Objects (GPOs) that specify which printers are
deployed to specific users or computers based on organizational units (OUs) or other criteria.
4. Print Management Console: The Print Management console in Windows Server 2012 provides a centralized
interface for managing printers and printer servers. Administrators can use this console to deploy printers,
manage printer drivers, monitor printer usage, and troubleshoot printing issues.
5. Printer Preferences: Administrators can configure printer preferences, such as default printer settings, duplex
printing, and color options, which are then applied to users when they connect to the deployed printers.
PRINTER DEPLOYMENT IN WINDOWS SERVER
REMOTE IN WINDOWS SERVER
1. In Windows Server 2012, "REMOTE" typically refers to the ability to access and manage
the server remotely. This can be done through various remote access methods and tools
built into the Windows Server operating system, including:
2. Remote Desktop Services (RDS): Windows Server 2012 includes Remote Desktop Services,
which allows users to access the server's desktop remotely. Administrators can configure
RDS to provide remote desktop sessions to users, enabling them to run applications and
access data on the server from remote locations.
3. Remote Management: Windows Server 2012 supports remote management through tools
such as Server Manager, PowerShell, and Remote Server Administration Tools (RSAT).
These tools allow administrators to manage server roles, features, and configurations from
a remote computer, without the need to physically access the server.
REMOTE IN WINDOWS SERVER
CREATING BACKUP AND RESTORE IN SERVER 2012
Creating backups and performing restores in Windows Server 2012 involves
utilizing various built-in tools and features to safeguard data and restore it in
case of system failures or data loss. Here's an overview of the backup and
restore process in Windows Server 2012:
• Windows Server Backup: Windows Server 2012 includes Windows Server
Backup, a built-in backup solution that allows administrators to create backups
of critical data, volumes, or the entire server. Windows Server Backup
supports full server backups, as well as individual file and folder backups.
CREATING BACKUP AND RESTORE IN SERVER 2012
• Restore Process: In the event of data loss or system failure, administrators can initiate
the restore process using Windows Server Backup. They can choose to perform a full
server restore, restore specific files and folders, or recover the system state.
• Recovery Options: Windows Server Backup provides several recovery options,
including bare-metal recovery, which allows administrators to restore the entire
server to new hardware in case of hardware failure.
Overall, creating backups and performing restores in Windows Server 2012 involves
using Windows Server Backup and other built-in tools to protect critical data, ensure
business continuity, and recover from system failures or data loss incidents.
CREATING BACKUP AND RESTORE IN SERVER 2012
DEMOTING A WINDOWS SERVER 2012
• Involves removing the Active Directory Domain Services (AD DS)
role from the server. When you demote a server, it essentially
reverts from being a domain controller back to a standalone
server, removing its association with the Active Directory domain.
• Thisprocess is typically performed when you no longer need the
server to function as a domain controller or when you're
restructuring your Active Directory environment.
DEMOTING A WINDOWS SERVER 2012