Server Basics 02: First steps after Windows Server 2019 installation | IT Blog

After we are done with the Windows Server 2019 installation – watch here what shell we do next ? There are a couple of things that I found utilitarian for every Server installation, so I will share that with you…

For many of these steps, internet connection will be all-important, so create sure your server has internet association for this short-change tutorial.

Create New Administrator Account

first gear step will be creation of the new administrative account. many times attacks on your Server will assume that you use “ Administrator ” as your main admin report. So we want to use something else. I will create account named “ InfoAdmin ” and use it for every scenario we will do in Server basics series .
type in into search – Control Panel, choose Control Panel
AfterWindowsServerInstall
In the acme right corner view will be set as “ Category ”, switch that to “ Large icons ”
AfterWindowsServerInstall1
then head to Administrative Tools | Computer Management | new Window will open, select under System Tools – Local Users and Groups | expand it, and choice Users | When you selected Users menu, correct snap into center window and blue-ribbon New User
AfterWindowsServerInstall2
Under User list record desired identify for your drug user, you can besides specify full name if you wish. You can besides enter Description, this is utilitarian, specially if you will have different report for many services .
Select strong password, and mark “ password never expires ”. even Microsoft does not see rehearse of frequent password changes as good one .
hypertext transfer protocol : //arstechnica.com/information-technology/2019/06/microsoft-says-mandatory-password-changing-is-ancient-and-obsolete/
When you are done – click on Create release .
AfterWindowsServerInstall3
User InfoAdmin is now created. Right click on it and blue-ribbon Properties .
AfterWindowsServerInstall4
blue-ribbon “ Member Of ” yellow journalism and snap on Add at the bottom of the blind .
AfterWindowsServerInstall5 1
type into “ Enter the object names… ” field – Administrators | then click on “ Check Names ”, you should get something like this under ( WIN-SVK… is list of my waiter 2019 VM, wear ’ deoxythymidine monophosphate let that bother you, that will be unlike in your case ). confirm with oklahoma if everything is oklahoma .
AfterWindowsServerInstall6
Remove Users so that your “ Member Of ” tab looks like this below – merely has Administrators group on it. Confirm with Apply, OK .
AfterWindowsServerInstall7
now, this beginning undertaking was actually step by step, far on, I won ’ thymine screenshot every single detail. I Will give you way and actions, and you can follow them .
Log out from Administrator Account and login into your new account – that is InfoAdmin in my lab.
Go back to the – Control Panel | Administrative Tools | Computer Management | System Tools | Local Users and Groups | Users | right suction stop on Administrator | Properties | Go to tab Member Of | Select Account is disabled | Apply | OK
AfterWindowsServerInstall8
Ok, now the only account that is enabled and available is InfoAdmin .
AfterWindowsServerInstall9
now, after this essential step we can go promote .

Install Drivers or Virtualization Software Tools

If you installed your Windows server 2019 on physical car, make sure you have drivers for every crucial component ( video, chipset, repositing, network ) and install all drivers necessary. If you installed in VirtualBox or some of the VMware virtualisation software, it would be great for you to install Tools that are included with your virtualisation software .
In case of VMware – VMware Tools will give your Windows Server 2019 maximal compatibility with your VMware virtualisation platform .
AfterWindowsServerInstall11

Set fixed IP address

Servers should have fixed IP addresses. It is requirement for many services ( active Directory, High Availability ) and you should make that a practice in every lab or production you do .
Dedicate range of local fixed IPs to crucial IT equipment. I will assign IP address 10.0.0.30 to my first server .
IP address : 10.0.0.30 Subnet masquerade : 255.255.255.0 Gateway : 10.0.0.1
DNS waiter : 8.8.8.8
These DNS servers will change on our other server machines late on in this lab .
To set fix IP, head to Control Panel | Network and Sharing Center | Left chink on your net arranger located in the central blind under “ View your active networks ” in Connections separate. Click on Properties when new windows opens .
AfterWindowsServerInstall10
choose Internet Protocol Version 4 ( TCP/IPv4 ) and cluck on Properties
Select “ Use the follow IP address ” and insert IP addresses you have in your local anesthetic range. These are my settings .
besides select “ Use the keep up DNS server addresses : ” and insert DNS servers you like ( I used DNS provided by Google ) OK when you are done .
AfterWindowsServerInstall12 1
Before we close wholly Networking windowpane, deselect “ Internet Protocol Version 6 ( TCP/IPv6 ) ” under “ This connection uses the following items : ”
AfterWindowsServerInstall13
After you done that, click on close .
many services still have problems with IPv6, so it is chic to turn it off .

Change your server name

Before you start your lab ( or output environment ) it would be courteous to define server and computer appellative policy. I will name this machine SBasicsHyperV. This will be HyperV virtualisation host for my Server Basics serial lab.

!!!! Name your machines only with characters and with less than 15 signs. Throughout this tutorial you will see that I named sometimes machines with more than 15 signs – that is lone for this tutorial, to make you easier follow it, it real life, long names of the machines can tied cause troubles
Control Panel | System | on the main screen under “ Computer diagnose, knowledge domain, and workgroup settings ” choice “ Change Settings
AfterWindowsServerInstall14
Under “ Computer Name ” tab key cluck on “ Change ” button. New window will open and under “ Computer name : ” record name you like for your server. After you are done, click on OK. New window will appear prompting you to reboot. Select OK, and after that – boot you server and then we can continue .
AfterWindowsServerInstall15

Install Antivirus

This should be gradation zero, most crucial of all the steps, but steps above besides can be done first base, specially if you don ’ t have drivers on your machine .
In most of my projects I use Symantec, but if you find something else that suits you, go ahead .
AfterWindowsServerInstall16

Patch you Windows Server (regularly)

Patching your Windows Server facility is one of the most important tasks. You need to patch your software on monthly basis. Microsoft has “ plot Tuesday ” and int occurs regularly every calendar month on second Tuesday. If the eyepatch is extremely critical you will want to patch right aside, if not, you can wait and see experience of others ( or test in your test environment ) and then patch when you are sure you won ’ t break something in production .
Click on Start push button in down leave corner and click on Settings
AfterWindowsServerInstall17
Select Update & Security
AfterWindowsServerInstall18
download and install all available patches
AfterWindowsServerInstall19
At the bottom of Windows Update sieve there is choice “ Change Active Hours ”. Set this choice, otherwise you will witness reboots of your production server during working hours .
AfterWindowsServerInstall20
besides, under “ Advanced options ” which is besides located on the buttocks of Windows Update menu you can delay updates for 35 days, set Windows Update to download patches for early Microsoft products, and sol on…
AfterWindowsServerInstall21

Basic Security Settings

First of all, leave your Windows Firewall always ON, do not turn it off, learn what ports your services need to go through it, set it up accordingly, but do not turn firewall down .
Next we will head to Control Panel | Administrative Tools | Local Security Policy
AfterWindowsServerInstall22
In Local Security Policy, we will set few things under Account Policies and Local Policies
first – Account Policies | Password Policy.
I will set Minimum Password Age to 0 ( zero ) and Minimum password length to 12 characters .
AfterWindowsServerInstall23
Account Policies | Account Lockout Policy – Account lockout threshold – 3 disable logon attempts – Account lockout duration and reset report lockout is set to 30 minutes. You can set how you like it. If person tries to brute force your Windows Server password, after three misses, that IP address will be ineffective to try logon for 30 minutes .
AfterWindowsServerInstall24
We will move on to the Local Policies | Audit Policy. here we will set logging parameters for few things .
Every of the options I set below has a description wag you can see for more details .
AfterWindowsServerInstall25
When you click, for model on “ Audit history logon events ”, explain check looks like this .
AfterWindowsServerInstall26
about every token in Local Security Policy has explain tab, so you can go through settings that you find interest, read more, and if you find them useful – enable them .
You can see how I set audit for few things that I find authoritative in my everyday use, you are rid to configure all to your needs, of course. This is fair my generic/basic work flow .
The last thing we will set here is in Local Policies | Security Options
foremost thing we done in this tutorial was to change main administrative bill, right ? It does not matter much if it is displayed on login screen .
AfterWindowsServerInstall28
This is specially crucial for web services. You don ’ metric ton want usernames on your login screen door .
so, go to Local Policies | Security Options | Interactive logon : Don ’ triiodothyronine display stopping point signed-in and Enable it .
AfterWindowsServerInstall27
When you reboot ( or log-out ) next time, your login filmdom will look like this .
AfterWindowsServerInstall29
much better .

Conclusion

These are most basic things I do to every Windows Server 2019 install. Of course there are a batch more things to do, but this is my necessity work flow for every Windows Server installation .
When we move on to more complex configurations, things will add up, but for a clean install – this is it .
If you are concerned in television version of this article, here it is on YouTube

disclaimer

source : https://thefartiste.com
Category : Tech

About admin

I am the owner of the website thefartiste.com, my purpose is to bring all the most useful information to users.

Check Also

articlewriting1

Manage participants in a zoom meeting webinar

Call the people who attend the meet as follows Alternate host host Who scheduled the …

Leave a Reply

Your email address will not be published.