CP1465 - Windows Server Administration Mod 1-3 Definitions

Workgroup

Default network setup for small environments, where each computer manages its own resources.

Domain

A network model where computers authenticate to a central database (domain controller)

Single Sign-On (SSO)

Users authenticate once and gain access to all resources across the domain.

Active Directory

Software that facilitates central management of users, resources, and security across the network.

Azure Active Directory

Cloud based version of Active Directory.

Microsoft Defender

Anti-Virus software that is built into Windows 10, 11, & Windows Server 2019

File and Folder Permissions

Manage access to files for enhanced security.

Security Policies

Set policies to safeguard server data and network resources.

Encryption

Protects data both at rest and in transit.

Event Auditing

Monitors and logs system activities for compliance and troubleshooting.

Authentication Methods

Provides multiple ways to authenticate users securely.

Server Management & Monitoring Tools

Ensure secure and efficient administration.

Active Directory Certificate Services (AD CS)

Allows the building of a Public Key Infrastructure (PKI)

Active Directory Domain Services (AD DS)

Provides a scalable, secure infrastructure for user and resource management.

Active Directory Federation Services (AD FS)

Enables secure identity solutions for Internet-based clients across different operating systems.

Active Directory Lightweight Directory Services (AD LDS)

A Lightweight Directory Access Protocol (LDAP) service for directory-enabled applications

Active Directory Rights Management Services (AD RMS)

Provides management and development tools for encryption, certificates, and authentication.

Domain Name Service (DNS)

Converts computer names for FQDNs to IP addresses.

Hyper-V

Allows administrators to create and manage virtualized environments.

Windows Server 2019 Essentials Edition

Ideal for businesses with up to 25 users.

Windows Server 2019 Standard Edition

Designed for most businesses. Provides file and print services, secure internet connectivity, and centralized management.

Windows Server 2019 Datacenter Edition

Designed for mission-critical applications, large databases, cloud computing, and high availability.

Windows Storage Server 2019

Cannot be purchased from microsoft directly.

Windows Hyper-V Server 2019

Free to download for creating and hosting virtual machines.

Windows Server 2019 (Desktop Experience)

Provides a GUI for the OS.

Windows Server 2019 (Core)

Bare-bones installation of Windows Server 2019. No GUI, only a window with a command prompt.

Windows Server 2019 (Nano Server)

Designed for private clouds, minimal hard drive usage, supports only 64-bit applications.

Authentication

The process of proving your identity to access a Windows system.

Local Users

Stored in the Security Accounts Manager (SAM) Database. Examples are: Administrator and Guest.

Local Administrator

Full rights and permissions.

Local Guest

Minimal rights; disabled by default for security.

Leaf Objects

Represent user, group, or computer account.

Container Objects

Group leaf objects for management.

Organizational Units (OUs)

Logical grouping of objects.

Sites

Represent physical locations for efficient replications.

Active Directory Schema

Store object types and their attributes. can be extended for applications.

Distinguished Names (DN)

Unique identifiers for objects.

Example:

• CN=K.Ryan, OU=R&D, OU=Production, DC=Domain1,DC=COM

Forest

Contains multiple domains within an organization.

Trusts

Enable access to resources across domains.

Global Catalog

Stores object names for quick access. Facilitates cross-domain permissions.

Distribution Groups

Group for email systems.

Security Groups

Groups for assigning permissions.

Global Groups

Members from the same domain; accessible across the forest.

Domain Local Group

Members from any domain; permissions apply to local domain.

Universal Groups

Members and permissions across the forest.

Global Catalog

Facilitates locating objects across domains.

Spanning

Combines multiple devices into a single volume. Provides zero fault tolerance.

Raid 0 (Striping)

Divides files into sections saved across multiple devices. Improves speed, but lacks fault tolerance.

Raid 1 (Mirroring)

Writes identical data to two devices simultaneously. Provides fault tolerance, but is costly.

Raid 3 (Striping with Parity)

Uses a parity bit for data reconstruction. requires at least 3 devices.

Raid 4

Variant of Raid 3 with improved read speed.

Raid 5 (Striping with Parity)

Most common raid configuration. Distributes information across all devices.

Software RAID

RAID configured via Windows Server 2019 OS

Hardware RAID

RAID managed by storage controller BIOS

Firmware RAID

Configured via System BIOS

Disk Management

Manage basic disks and dynamic disks.

Storage Pools

Combine storage devices into one pool. Supports thin or thick provisioning.

Virtual Disks

Use space from the pool for RAID levels. Enable storage tiers for SSD optimization.

Forward Lookup

Resolves FQDN to IP addresses.

Reverse Lookup

Resolves IP address to FQDN.

A Record

Maps FQDN to IPv4 address.

AAAA Record

Maps FQDN to IPv6 address.

CNAME Record

Defines aliases.

MX record

Identifies mail servers

PTR Record

Supports reverse lookups.