Server Basics

Official walkthrough for installing and removing server roles and features with the Server Manager wizard or PowerShell, on a local server, a remote server or an offline VHD. It also shows how to export the wizard choices to an XML file so the same roles can be pushed to several servers.

Shows how to switch on Remote Desktop in Settings, add other users who may connect, and connect with the Remote Desktop Connection app. It recommends keeping Network Level Authentication on; do not publish RDP directly to the internet without a VPN or gateway in front.

Explains the choice you make in Windows Server setup between the command-line-only Server Core and the full graphical install. Microsoft recommends Server Core unless you need the GUI tools, and you cannot convert between the two later without a clean install.

Explains what Server Manager is for: managing local and remote servers from one console, grouping servers, and viewing or changing installed roles. It includes a table showing which tasks need Administrators rights and which a standard user can do.

Describes SConfig, the text menu used for first setup of a Server Core machine: networking, domain join, updates, Remote Desktop, restart and an exit to PowerShell. From Windows Server 2022 it launches automatically at sign-in on Server Core, and it cannot be used from a remote PowerShell session.

Covers installing the OpenSSH client and server as optional Windows features, starting the sshd service, and connecting from another machine. Installing the server opens inbound TCP 22 in the firewall, so think twice before making that port reachable from the internet.

A short procedure from the Windows Server core network guide for adding the Web Server (IIS) role with Server Manager, with the one-line PowerShell equivalent. It assumes the server name and IP address are already set and the machine is domain joined.

Explains how to install the browser-based Windows Admin Center on a PC or server, with the desktop installer or silently from PowerShell on Server Core. A self-signed certificate is fine for testing (valid 60 days) but production should use one from a trusted CA, and Microsoft's installation-options page says installing it on a domain controller is not supported.

Reference for the cmdlet that publishes a folder as an SMB file share on Windows Server, including examples that grant full or change access to specific accounts and create an encrypted share. Useful for scripting a file server instead of clicking through the share wizard.

Accepted answer saying there is no single official best practice, and that giving Everyone access at the share level while controlling access with NTFS permissions keeps administration in one place. A commenter argues the same approach with groups at the NTFS level and one share using access-based enumeration. Neither side cites Microsoft documentation, so weigh it against your own risk needs.

Walks through installing the DHCP Server role, authorizing it in Active Directory when you have a domain, and creating an IPv4 scope with the GUI or PowerShell. It requires a static IPv4 address on the server and notes that an unauthorized DHCP server in a domain will not hand out leases.

Troubleshooting guide for failed RDP connections. The firewall section tells you to check that the Remote Desktop inbound rules are enabled and gives a PowerShell one-liner to enable them, and the page also points at antivirus interference.

Shows how to add the AD DS role and then run the configuration wizard that promotes a server to a domain controller, via Server Manager or PowerShell. It lists the credentials needed for a new forest versus an extra domain controller and warns not to put the AD database, logs or SYSVOL on a ReFS volume.