Administration of Windows Server 2022

Analyze how CPU, disk, memory, and network bottlenecks impact Active Directory performance and apply multi-resource solutions, including SSD storage, extra RAM, and read-only domain controllers.

Demonstrates basic Windows Server performance monitoring tools, using Task Manager for real-time CPU, memory, disk, and network metrics, and Performance Monitor counters like processor time and average disk queue length.

Demonstrate practical server performance testing by running scripts to induce CPU, memory, and disk load while using Task Manager, Resource Monitor, Event Viewer, and Perfmon to observe metrics.

Explore Active Directory database structure, including NT file, entities folder with EDB log files, and EDB dot check file and EDB rez files for integrity, change management, and disk space.

Explore NTDSUtil, a powerful Active Directory maintenance tool for database operations (snapshots, offline defragmentation), metadata cleanup, and DSRM password management, including reset commands for domain controllers.

Create, mount, and verify active directory snapshots with NTDS util, then export or recover data from the snapshot, and inspect drive info and log paths for maintenance and auditing.

Run integrity verification to check the NTDS database health, create a defragmented copy with compact2, and perform recovery. Back up first, then move database and logs to storage, documenting maintenance.

Understand restartable ads and its three states—ads started, ads stopped, and directory services restore mode—and manage them via MMC snap-ins or PowerShell to minimize downtime on domain controllers during maintenance.

Delete objects by moving them to the deleted objects container, losing attributes. Assess recovery on recycle bin status; tombstone lifetime is 180 days, linked attributes cannot be preserved, and garbage collection operates.

Explore Active Directory object deletion without Recycle Bin, recovery with the LDP tool, and why enabling the Active Directory Recycle Bin and using PowerShell or Active Directory Administrative Center matters.

Enable the Active Directory Recycle Bin through the Active Directory Administrative Center, delete test accounts, recover them with simple restore or restore to a specific location, and verify successful recovery.

Enable the active directory recycle bin to recover deleted objects and save time. This demo covers prerequisites, PowerShell commands, and troubleshooting to enable the feature at forest scope.

Demonstrates practical object recovery in Active Directory using the recycle bin and PowerShell, from creating a test user with New-ADUser to restoring with Restore-ADObject.

Examine object lifetime management in Active Directory, including tombstone and MSDS deleted object lifetimes, configured via PowerShell or LDP, and overview Windows Server Backup for bare-metal and system state recovery.

Explore Azure Backup and Data Protection Manager (DPM) for enterprise systems, leveraging block-level incremental backups, encryption, and verification, with cloud storage, retention policies, and tape export options.

Trace the evolution of Active Directory backups from system state to full server backups, and explain non-authoritative and authoritative restores with DSM and Dsrm, including replication considerations.

Explore step-by-step authoritative restore in Active Directory, using DSRM, NTDSUtil, and restore subtree or object commands to preserve selected objects across domain controller restarts.

Plan IPv4 addressing and design subnets for Windows Server 2022, configure IPv4 hosts, troubleshoot connectivity, and manage public, private, and APIPA addresses with IPv4 notation, default gateways, and subnet aggregation.

Identify the optimal subnet mask to place two given IPv4 addresses in the same network while minimizing address waste for organizational networks, using a /22 subnet as the sweet spot.

Learn how IPv4 addresses are represented in binary and dotted decimal notation, and how subnet masks define network boundaries for the 32-bit address across four octets.

Practice converting binary to dotted decimal notation for IP addresses by evaluating each octet from right to left and summing the bit values that are one.

Identify how ip addresses split into network id and host id using subnet masks and cidr notation. Explain how default gateways bridge local and external networks and use routing tables.

Master binary conversion of IP addresses, apply the 255.255.255.0 subnet mask to identify network IDs like 192.168.1.0, and compare cedar notation with traditional subnet masks.

Learn cidr notation for flexible subnetting with variable length subnet masks, reducing waste versus classful addressing, easing routing, and supporting IPv4 exhaustion, cloud computing, and virtualization.

Explore IP address classes and subnet masks, including class defaults, subnetting impacts, and advanced masks like 255.255.252.0, plus how misconfigured default gateways affect remote communication.

Explore IPv4 classful addressing, covering class A, B, C networks and their default masks, plus class D multicast and class E experimental usage, and learn subnetting by borrowing host bits.

Borrow bits from the host portion to create subnets, calculate the new subnet mask such as 255.255.224.0 slash 19, determine the increment, and design networks for improved performance and security.

Explain simple versus complex IPv4 networks with full-octet masks and intermediate host bits, and show how VLSM enables wearable-length subnetting to efficiently divide 192.168.1.0/24.

Borrow three bits to create eight subnets, producing a 255.255.255.224 (/27) mask and an increment of 32; first three subnets use 192.168.1.1–30, 192.168.1.33–62, and 192.168.1.65–94.

Learn how public IPv4 addresses are allocated by IANA to regions and ISPs, how private IPv4 ranges use NAT to share a single public IP, and APIPA when DHCP fails.

Discover how Windows devices use APIPA to self-assign IPs when DHCP fails, using 169.254.0.1 to 169.254.255.254 with 255.255.0.0 subnet. Learn when APIPA helps and its limitations, including no internet access.

Explain how NAT enables 50 devices to share a single public IP, translating private 192.168.1.0/24 addresses to 203.0.113.1, and note APIPA 169.254.10.5 with DHCP troubleshooting and subnetting.

Design a subnet scheme for four buildings and a data center, ensuring five subnets with 714 usable addresses each, and choose a suitable mask like /22 for scalability.

Learn how supernetting merges adjacent networks into a larger /23, expanding address space without extra routers, by satisfying contiguity and equal-size requirements, as in 192.168.6.0/24 and 192.168.7.0/24 (192.168.6.0-192.168.7.255).

Understand how supernetting simplifies routing and enables efficient, continuous IP address use for scalable networks. Contrast subnetting and supernetting: subnetting divides networks into smaller subnets, while supernetting merges contiguous networks.

Identify Class A, B, and C IP address ranges and private addresses (10.x, 172.16.x.x, 192.168.x.x), and understand how private ranges conserve public IPv4 addresses.

Explore NAT translating private IPs to public addresses to access the internet, and examine loopback testing with 127.0.0.1 and subnetting for organized networks.

Calculate the minimum host bits to support 714 addresses, showing 10 bits are sufficient, then determine a subnet mask of 255.255.248.0 for five subnets with 700 users and 14 printers.

Explore default subnet masks for Class C, the network and host portions, and why Class C has 254 usable addresses, plus how borrowing bits creates more subnets.

Plan an IPv4 addressing scheme for LearnItLessons.com branch offices—Houston, Mexico City, and Portland—separating wired and wireless devices into dedicated subnets from the 172.16.18.0/18 Toronto base, focusing on scalability.

Plan a scalable IPv4 address scheme for the Houston, Mexico City, and Portland offices using separate /24 subnets, accounting for wired and wireless devices and two IPs per laptop.

Analyze device requirements and allocate contiguous /24 subnets for wired and wireless clients across branch offices, ensuring scalable, dedicated networks for each branch and straightforward routing.

Explore configuring and troubleshooting IPv4 addressing on mixed device networks, comparing static and DHCP approaches, using Network and Sharing Center, PowerShell, and Command Prompt for manual and automatic IP configuration.

Explore manual versus automatic IPv4 configuration in Windows Server, compare static IPs for servers and printers with DHCP, and learn essential settings like subnet mask, gateway, and DNS.

Configure IPv4 on Windows Server by manually setting IP address, subnet mask, default gateway, and DNS, or enable automatic DHCP, while considering alternate configurations for outages.

Configure ipv4 addresses on Windows Server 2022 using manual and automatic methods, set IP, subnet mask, and gateway, and access network settings via NCP dot cpl, Server Manager, or ipconfig.

Explore advanced IPv4 configuration on Windows Server 2022 using command line tools, including Netsh and PowerShell, with hands-on steps for configuring multiple IP addresses.

Configure DNS settings and troubleshoot errors on Windows Server 2022 using command line tools such as ipconfig and netsh to set IPv4 DNS servers, gateways, and subnet mask.

Use Windows PowerShell to manage IPv4 configurations, assigning a static IP with New-NetIPAddress, specifying interface alias, IP address, prefix length, and default gateway while running as administrator.

Learn to use PowerShell to remove and reconfigure a default gateway, update IP settings, and configure DNS servers via interface index and destination prefix 0.0.0/0.

Learn to manage Windows Server 2022 networking with PowerShell: view and configure IPv4/IPv6, set, modify, or remove IP addresses, and configure DNS and default gateways.

Explore ipv4 routing in windows server 2022 and how data travels between networks. Modify routes in the routing table and use tracert, netstat, and Microsoft Message Analyzer to troubleshoot connectivity.

Explore how IPv4 routing directs traffic between networks and how routing tables use destination, netmask, gateway, interface, and metric to choose the path; configure Windows Server as a router.

Configure Windows Server as a router to manage traffic between a local network and a DMZ, using the remote access role, routing settings, and advanced firewall rules with least privilege.

Design a multi-subnet Windows Server 2022 network, configuring IP addressing, routing, and inter-subnet communication across 192.168.1.0/24, 192.168.2.0/24, and 10.0.0.0/24 with a central router and domain controller setup.

Use PowerShell Direct to connect to Hyper-V VMs and configure their network settings during initial setup, including IP, gateway, and DNS with Enter-PSSession and Get-NetIPAddress.

Configure a multi-interface router VM in Windows Server 2022 by provisioning LeadSVR2, applying IP 10.0.0.10 with gateway 10.0.0.1 and prefix 24, and adding adapters for external, 10.0.0, and 192.168.2 networks.

Configure hyper-v switches for multi-network environments by creating external, internal, and private virtual switches, then assign IP addresses to three adapters using PowerShell for the lit router virtual machine.

Configure Windows Server 2022 routing by setting default gateways on the WAN interface and LAN interfaces, renaming adapters, assigning IP addresses, and enabling IP forwarding via PowerShell.

Learn how switches operate at the data link layer, forwarding frames via MAC addresses to enable VM communication in a Hyper-V lab with external, internal, and private switches.

Configure virtual machine network adapters by setting internal or external switches, then identify switch types with PowerShell Direct using Get-VMNetworkAdapter and Get-VM to map MAC addresses.

Administer Windows Server 2022 by configuring three servers across two subnets, setting IPs, gateways, and temporary DNS, and establishing a three-interface router for inter-subnet access.

Install the routing role via server manager, then configure NAT using the remote access GUI by setting a public WAN interface and private LAN interfaces, and test connectivity across subnets.

Automate Windows router configuration with PowerShell and Netsh to enable IP forwarding, install remote access, and configure internal and external networks, validating connectivity across hosts.

Master Windows Server 2022 network adapter management with PowerShell and Netsh. View, rename, restart, and configure adapters using Get-NetAdapter and IP config, including MAC addresses and link speed.

Configure and verify IPv4 and IPv6 addresses on Windows Server 2022 using PowerShell and Netsh, including interface alias, address family, prefix length, and DHCP settings.

Explore configuring static routes between two windows server 2022 test servers on different subnets using powershell, netsh, and route commands, then test and troubleshoot connectivity.

Configure multiple IP addresses on Windows Server 2022, add static routes with PowerShell, Netsh, and route commands, and verify inter-subnet connectivity between test servers.

Master advanced routing with the route command and persistent routes, learn to add, delete, and troubleshoot IPv4 routes and IP addresses using PowerShell, Netsh, and routing tables to interconnect subnets.

Explore best practices for planning, implementing, and troubleshooting IPv4 networks on Windows Server 2022, including subnet growth, private addresses, NAT, supernetting, and essential diagnostic tools.

Learn how the DHCP server role automates IP address assignment and core network settings on Windows Server 2022, and how to deploy, configure, and troubleshoot DHCP for seamless networks.

Discover how DHCP automates IP address assignment and network configuration, reducing administrative complexity through scalable, centralized management and automatic lease-based IP deployment for IPv4 and IPv6.

Verify dhcp server configurations to prevent misconfigurations and ensure accurate ip and dns; compare ipv4 and ipv6 addressing and how microsoft dhcp supports both with automation and centralized control.

Learn how DHCP dynamically assigns IP addresses through discover, offer, request, and ack, renews leases at 50 percent, and enables cross-subnet communication with relay agents and RFC 1542 routers.

Explore how DHCP dynamically allocates IP addresses, manages lease durations, uses MAC-based reservations, and contrasts static versus dynamic configurations across subnets with relay agents.

Explore the dhcp four-step process—discover, offer, request, and acknowledge—that assigns ip addresses and network details (subnet mask, default gateway, dns server) to clients.

Explore how DHCP lease renewal maintains uninterrupted IP addresses by renewing at 50% and 87.5% of the lease, during startup, or after network changes, using unicast and broadcast methods.

Install, configure, and manage the DHCP server role in Windows Server 2022, create scopes, configure options, and understand authorization and relay agents in multi subnet environments.

Configure dhcp in a domain environment through a simulated multi-VM lab, installing and managing the dhcp server role on a domain controller, and validating scope creation, authorization, and troubleshooting.

Install the DHCP server role on Windows Server via Server Manager or PowerShell, assign a static IP, create security groups, authorize in AD, and verify via the management console.

Install and configure the DHCP server role in a non domain environment using GUI and PowerShell, test client connectivity, and verify automatic IP address assignment.

Create an IPv4 dhcp scope with range 10.0.0.121–125 and a 24-bit network mask, activate the scope, and renew client IPs. Then revert the server and install the role with PowerShell.

Install the DHCP server role with PowerShell, restart the service, and complete post deployment security steps. Then create and activate an IPv4 scope named main scope in the 10.0.0.0/24 network.

Install and configure the DHCP server on Windows Server 2022, test client IP assignment with ipconfig, and troubleshoot by validating service status, scope, connectivity, relay agents, and firewall rules.

Authorize DHCP servers through Active Directory to prevent rogue DHCP servers from leasing IP addresses and causing misconfigurations, duplicate addresses, or redirecting traffic to malicious DNS servers or gateways.

Authorize DHCP servers within Active Directory to prevent rogue distributed servers; detect unauthorized servers with ipconfig /all, audit networks, and restart DHCP service after post-install configuration using GUI or PowerShell.

Authorize a DHCP server in a domain using PowerShell or Server Manager, add security groups, run add-dhcpserver with the DNS name and IP, verify with get-dhcpserver, then restart the service.

Explore how to create and manage IPv4 dhcp scopes, including address ranges, subnet masks, exclusions, reservations, and lease durations. Leverage PowerShell: Get-DhcpServerv4Scope and Set-DhcpServerv4Scope.

Learn how to use DHCP allocations with scopes, exclusions, and reservations to ensure devices like printers and servers keep fixed IPs, while optimizing lease durations and security.

Configure dhcp scopes on windows server 2022 using gui and PowerShell to create main office scope, exclude 192.168.2.62–64, set a 3-day lease, define a /24, create reservations, and activate.

Use PowerShell to manage dhcpv4 scopes on Windows Server, creating or modifying scopes, setting start and end ranges, and applying an eight-day lease. Verify scopes and exclusions to troubleshoot.

Explore configuring DHCP scopes and options to deliver IP addresses along with essential network settings, including default gateway, DNS servers, DNS suffix, and PXE boot options.

Configure pixie boot options in DHCP, enable pixie support, set option 66 and 67, and learn the DHCP options hierarchy from server to reserved client levels.

Learn how dhcp relay agents enable cross-subnet communication by forwarding client broadcasts as unicast to a server, then broadcasting replies back to clients; configure RFC 1542 on routers.

Learn practical PowerShell workflows to configure a Windows Server 2022 DHCP v4 scope, add router, DNS servers, and DNS domain options, review options, and create reservations for devices.

Master advanced DHCP features to secure networks, achieve high availability, and maintain a robust DHCP infrastructure through security options, superscopes, multicast scopes, failover, database maintenance, and troubleshooting.

Protect your network from unauthorized access by implementing DHCP security options, including DHCP name protection for DNS registrations, ensuring only valid clients receive IP configurations, and enabling DHCP auditing.

Learn how DHCP name protection prevents DNS record conflicts and name squatting by validating requesting machines with DHCID, and enable protection at server and scope levels.

Explore advanced DHCP configurations with user and vendor classes, enabling policy-based IP and option assignments for groups of devices or users, plus setup steps and IPv4 scope limits.

Policy-based assignments enable granular DHCP control by delivering targeted IP addresses. Apply at server or scope level and define user and vendor classes with MAC, FQDN, or relay agent information.

Group multiple logical subnets into super scopes to create a single administrative unit for scalable IP address management and enable multicast scopes for simultaneous client communication.

Define multicast scopes to allocate class D addresses for efficient multicast to multiple clients, enabling video conferencing, live streaming, and Windows deployment services.

Explore high availability options for DHCP in Windows Server 2022, including DHCP clustering, split scopes, and failover, with failover favored for seamless IP address allocation and minimal downtime.

Dhcp failover provides seamless redundancy with real-time synchronization and no shared storage, the gold standard for high availability.

Two DHCP servers share lease information to provide seamless redundancy and IP address allocation, coordinated by a failover relationship with time synchronization and port 647 firewall rules for IPv4 scopes.

Explore DHCP failover modes: load sharing and hot standby, configure parameters like maximum client lead time, auto state switchover interval, and message authentication to ensure high-availability DHCP services.

Master Windows Server 2022 DHCP database maintenance by managing core files, backups, and restorations. Reconcile records to prevent inconsistencies and keep the DHCP database reliable.

Move the dhcp database during server migration: back up, stop, copy to the new server, install the dhcp role, restore, start service, test.

Migrate the DHCP server from the old to the new server, preserving configurations, scopes, leases, and reservations; export via NetSH or PowerShell, transfer, import, verify, and back up.

Export the DHCP database with PowerShell or Netsh, import it to the new server, and verify scopes, leases, and client connectivity.

Identify and resolve common DHCP issues, including IP address conflicts, overlapping scopes, and APIPA fallback, by verifying server status, using the pin test, and configuring exclusions and non-overlapping scopes.

Diagnose and resolve dhcp database corruption and ip pool exhaustion on Windows Server 2022 by repairing databases, restoring backups, reconciling issues, and optimizing scopes and leases.

Explore why IPv6 was developed, how it differs from IPv4, and the 128-bit address space, with types and stateless address autoconfiguration and DHCPv6.

Explore how IPv6 expands address space and auto configuration, simplifies headers, enables native multicast and flow labeling, eliminates NAT, and adds built-in IPsec plus quality of service enhancements for networks.

Explore how IPv6 addresses are structured as 128-bit hex values, expressed in eight 16-bit blocks separated by colons, and learn zero suppression, zero compression, and binary-to-hex conversion.

Explore IPv6 address structure: 128 bits split into a 64-bit prefix and a 64-bit interface identifier, with global unicast, unique local, and link-local types and zone IDs for interfaces.

Explore how IPv6 autoconfiguration enables devices to self-configure with stateless, stateful, and combined methods, guided by router advertisements and DHCPv6, and learn address lifecycle states from tentative to invalid.

Explore the fundamentals of IPv6 addressing and autoconfiguration, including stateless address autoconfiguration, link-local and loopback addresses, router advertisements, DHCPv6, and zero-compression rules.

Explore how to configure IPv6 settings and address assignment, including manual, stateful DHCPv6, stateless autoconfiguration, link-local addresses, and advanced TCP/IP options with DNS and multiple addresses.

Explore tools for configuring IPv6 on Windows Server 2022 using GUI, PowerShell, and Netsh to assign IPv6 addresses, default gateways, and DNS, and verify with get IP address.

Configure IPv6 settings on Windows Server 2022 by using manual, stateful, or stateless auto configuration through graphical and command-line tools, with emphasis on zero compression and DNS configuration.

Configure IPv6 on Windows Server 2022 with PowerShell using new-netipaddress to set address, interface Ethernet, prefix 64, and gateway; verify with get-netipaddress and nslookup.

Configure IPv6 via PowerShell, netsh, or the graphical user interface; add addresses and default gateways, set dns servers and suffixes, and verify IPv6 settings with ipconfig and routing commands.

Configure DHCPv6 in Windows Server 2016+ with IPv6 scopes, exclusions, and lease durations; learn DNS integration via quad A records, dynamic registration, and reverse lookups.

Configure an ipv6 scope in dhcp and create a quad a record in dns to enable dynamic ipv6 address registration and reliable name resolution in a lab environment.

Enable ipv6 forwarding on the domain controller and configure dhcpv6 stateful options for clients. The demo explains router advertisements and the separation of dhcp and routing roles in the lab.

Create and activate an IPv6 scope for a Windows Server 2022 lab, configure a ULA prefix, assign static IPv6 addresses, and setup DNS forward lookup zones with quad A records.

Classify nodes by IP capabilities to define roles and enable IPv4 and IPv6 coexistence, covering IPv4 only, IPv6 only, and dual stack nodes, and noting DNS and prefix policy implications.

Plan a native IPv6 environment by assessing operating system support, router and firewall readiness, device and application compatibility, and IPv6 tunneling strategies for migration.

Learn how Isatap tunnels IPv6 over IPv4 in private networks, enabling unicast IPv6 connectivity between IPv4 and IPv6 hosts, with router roles, address formats, and DNS or PowerShell based configuration.

Enable ipv6 communication over the ipv4 internet with 6to4 by using a public ipv4 external interface and an internal ipv6 site, while noting nat incompatibility and overhead.

Learn how teredo enables ipv6 over ipv4 in nat-heavy networks, using a teredo server and relays, and examine its address structure and configuration.

Learn how port proxy bridges IPv4 and IPv6 traffic, its TCP-only limits, and configure it with netsh, then plan IPv6 transition with dual-stack upgrades to apps, routing, devices, and DNS.

Explore dns name resolution and how the domain name system translates human-readable names into ip addresses, detailing the evolution from a centralized file to a distributed, scalable system.

Explore how dns resolves a domain from local cache to recursive and authoritative servers using nslookup and dig, observing a records, ns records, and mx records, with caching effects.

Explore the dns hierarchical structure from root domains to subdomains and second-level domains. See how name resolution translates hostnames like www.microsoft.com into IP addresses through a chain of servers.

Explore the DNS hierarchy from root to subdomains, including root servers and TLDs, and observe how name resolution uses A records and quad A records in public versus private domains.

Explore how caching and forwarding optimize DNS performance, reduce network traffic, and support advanced DNS functions—including discovery, locating domain controllers, reverse lookups, service location, and internal versus internet deployments.

Explore dns optimization techniques and advanced functions, including caching and ttl values, forwarding, and service discovery with srv records, txt records, and ptr records, using nslookup and powershell.

Explore how DNS translates human names to IP addresses and its evolution from centralized to global distributed naming, covering caching, records, and tools like nslookup and PowerShell.

Explore how DNS name resolution works in a hierarchical, cached system and how resource records and SRV data locate domain controllers. Apply PowerShell tools and TTL concepts to optimize queries.

Explore the building blocks of DNS infrastructure, including servers, zones, and resource records, and how hierarchical namespaces enable scalable, reliable name resolution across private and public namespaces.

Explore how top-level domains are categorized into organizational, geographical, and reverse zones, and how DNS servers manage authoritative data, caching, and forwarding for scalable internet name resolution.

Explore forward lookup zones and reverse lookup zones to understand bidirectional name resolution, administration, and how forwarders, delegation, and resolver cache optimize DNS performance.

Explore DNS resource records, including name, type, and data, enabling IPv4 and IPv6 resolution with CNAME, SRV, and PTR records. Automate DNS management with PowerShell commandlets.

Explore a hands-on DNS lab in Windows Server 2022, configuring a domain controller and DHCP, performing nslookup, and creating a reverse lookup zone to illustrate internal versus public DNS.

Demonstrates creating reverse lookup zones and configuring PTR records with PowerShell, verifying DNS zone setup, and resolving records while troubleshooting IPv6 and IPv4 DNS server issues.

Demonstrates configuring the DNS interface and external query forwarding on Windows Server 2022, including toggling IPv6, setting static DNS, testing resolution with nslookup, and tracing queries through the network.

demonstrates authoritative control of the learned lessons.com dns zone by configuring zone boundaries, testing zone authority from a member server, and installing dns server management tools.

Demonstrate creating a subdomain and a primary zone via PowerShell, and test forward and reverse DNS resolution. Configure a forwarder to 8.8.8.8 and verify external resolution.

Demonstrates DNS zone delegation and hosts file override methods using PowerShell on a Windows Server 2022 lab, with practical verification steps.

Master the essential DNS components and administration in Windows Server 2022, covering hierarchical namespaces, forwarders, forward and reverse lookup zones, resource records, and PowerShell management for practical configuration and troubleshooting.

Explore core DNS components, including DNS servers, zones, resource records, and PowerShell management tools; understand the hierarchical namespace, forward and reverse lookups, and DNS administration in Microsoft environments.

Discover how dns zones organize mapping data for network resolution, including forward lookup zones and records such as A, CNAME, SRV, MX, and NS.

Explore reverse lookup zones and PTR records, and how they complement forward lookup zones to translate IP addresses back to host names for troubleshooting and security.

Explore how Active Directory automates DNS record management with dynamic updates for A, PTR, and SRV records, while DNSSEC on Windows Server 2012 adds cryptographic verification and key management enhancements.

Explore hands-on DNS zones and resource records in the learnitlessons domain, create a web server A record and a CNAME alias, and verify resolution with nslookup.

Demonstrate creating and deleting reverse lookup zones and pointer records, validating forward and reverse DNS resolution with nslookup and PowerShell DNS commands.

Explore DNS zones and resource records, including forward and reverse lookup zones, A, CNAME, SRV, MX, SOA, NS, PTR, and DNSSEC, with hands-on Active Directory integration and PowerShell management.

Explore DNS zones, resource record types, and reverse lookups in Windows Server and Active Directory. Learn practical management techniques, DNSSEC concepts, and automated DNS record handling.

Configure Windows DNS clients for optimal name resolution performance using manual and automated deployment, prioritizing the preferred DNS server, per-adapter settings, IPv4 and IPv6 dual-stack, and PowerShell-based management.

Configure manual dns server addresses and advanced tcp/ip settings on the Windows Server network adapter, including dns suffix configuration and dynamic dns registration for topology-driven, policy-aligned hostname resolution.

Explore dhcp-based dns configuration for automated, centralized dns settings in enterprise networks. Understand the dns client's stepwise query order and escalating timeouts that ensure reliable name resolution when servers fail.

Explore how multi-homed clients manage adaptive priority and adapter-based DNS queries to optimize name resolution for laptops, servers, and virtual machines, with timeout strategies from 1 to 8 seconds.

Leverage PowerShell DNS management to configure DNS client servers via the Set-DnsClientServerAddress cmdlet, supporting interactive and automated deployment with interface index and ordered server addresses.

Engage in a hands-on dns client configuration lab on an enterprise network with domain controllers and domain-joined servers, verifying cross-subnet resolution using nslookup and resolve-dnsname, and practicing manual dns changes.

Configure and verify DHCP integration with DNS for Windows Server 2022 by setting up a DHCP scope, assigning router and DNS settings, and troubleshooting with ipconfig and nslookup.

Demonstrate DNS failover testing by simulating a non-existent primary DNS server and observe failover to the secondary, plus cross-segment resolution with dynamic DNS registration and updates via PowerShell.

Configure DNS clients through manual settings and DHCP-based automation for reliable name resolution and centralized enterprise management. Apply PowerShell to verify cross-segment resolution and test failover with escalating timeouts.

Configure dns clients in windows, covering preferred dns servers and manual versus dhcp configuration. Explore query timeouts, multi-homed per-adapter settings, powershell management, and apipa troubleshooting.

Master DNS troubleshooting with enhanced PowerShell statistics, including zone query statistics, zone transfer statistics, and zone update statistics via Get-DnsServerStatistics, and leverage nslookup for traditional diagnostics.

Master DNS troubleshooting with traditional tools like NSLookup, DNS command, DNSLint, and ipconfig, plus modern PowerShell cmdlets, to diagnose resolution issues, manage caches, and automate DNS health monitoring scripts.

Explore dns troubleshooting in Windows Server 2022 by simulating dns cache issues, editing the hosts file, testing hostname resolution, and clearing the dns resolver cache to restore correct ip addresses.

Simulates a DNS server connectivity issue by misconfiguring DNS settings and guides end-to-end troubleshooting with PowerShell and DNS tests.

Simulate dns zone transfer problems between dns servers, configure a secondary dns server on svr1, intentionally restrict transfers on the primary, and troubleshoot using powershell and dns manager.

Troubleshoot name resolution with dns tools, nslookup, ipconfig, and PowerShell commands, plus zone transfer statistics. Apply a four-step process: clear cache, pin by IP, pin by name, debug resolution.

Apply PowerShell diagnostics and traditional tools to troubleshoot DNS performance, client caching, and zone transfers through a systematic, real-world workflow.

Delegate DNS administration, configure DNS login for troubleshooting, manage aging and scavenging, and back up the DNS database to ensure business continuity, with event viewer and optional debug logging.

Enable aging and scavenging to remove stale dynamic DNS records, using a 7-day no-refresh and 7-day refresh window for a 14-day total life, with static records protected.

Back up DNS data according to implementation: Active Directory integrated zones are included in system state backups, while primary zones use .dns files in system32 DNS directory, backed up separately.

Delegate DNS management with a DNS admins group for least privilege, and configure standard and debug DNS login with event viewer monitoring for troubleshooting on a Windows DNS server.

Enable agent and scavenging for the com zone to purge stale dynamic records, then back up AD‑integrated zones with PowerShell export or the classic DNS command tool to backups folder.

Delegate dns management with the dns admins group in a domain local security group to enforce least privilege; enable login, debugging when needed, and implement aging, scavenging, and zone backups.

Test your DNS administration skills in delegation, login practices, agent and scavenging, and backup strategies, including using the DNS admins group, temporary debug logging, and 14 days for dynamic records.

Explore backup strategies for Active Directory integrated DNS, including AD backups covering DNS data, zone exports for flexibility, safe scavenging, and prudent debug logging management.

Build a single VM Windows Server 2022 lab on Azure with PowerShell automation, Azure resources, and GitHub version control, including deployment and removal scripts.

Use PowerShell and Cloud Shell to manage Azure resource groups, remove groups with what-if, then install Az and connect to Azure to script a lab with virtual machines.

Create an Azure VM with PowerShell by declaring resource group, VM, and location variables, converting the password to a secure string, and provisioning public IP, VNet, and NIC.

Create an Azure network security group rule for RDP with PowerShell to enable inbound TCP 3389 access to a Windows Server 2022 VM, then attach it to the NIC.

Learn to script Azure VM OS configuration with PowerShell, provisioning a Windows Server 2020 VM, configuring the network interface and boot diagnostics, and retrieving the public IP for RDP.

Create and manage Azure virtual machines using a PowerShell script, including naming rules, resource groups, and public IPs, then automate lab setup and teardown with scripts.

Learn to create and deploy a rm-single-vm.ps1 PowerShell script that removes Azure resources—vm, nic, public IP, nsg, vnet, and resource group—via codespaces and commit and push.

Learn to update a local repository from the remote, run a Cloud Shell script to remove an Azure resource group and its resources, and verify cleanup with PowerShell and Codespaces.

Deploy multi-region Azure lab using PowerShell to create resource groups, VNets, and six Windows Server 2022 virtual machines with RDP access, NSG, and automated scripting.

Remove a multi-region Windows Server 2022 lab on Azure with a cleanup script that deletes VMs, NICs, public IPs, NSGs, VNets, and resource groups across regions, honoring dependencies and force.

Learn secure vm access options: private access with internal networks, site-to-site or point-to-site vpn, and just-in-time rdp access with prerequisites and cost considerations.

Azure Bastion provides a platform-as-a-service for secure, browser-based access to Windows VMs via TLS over 443, eliminating public IPs and centralizing access to avoid direct RDP exposure.

Set up six azure ad ds lab VMs across regions, assign IPs, install and promote a forest root domain controller via GUI, and configure domain options, NetBIOS, and data paths.

Configure a static IPv4 address on the server VM. Promote the server to a root domain controller in a new forest named learned lessons.com and install Active Directory Domain Services.

Diagnose and resolve Azure VM network connectivity by configuring IP configurations, public IP addresses, and network interfaces, including attaching and detaching network interface cards and adjusting network security settings.

Configure a static IP for Lone DC2 via PowerShell, setting 10.0.0.5 with gateway 10.0.0.1 and DNS to 10.0.0.5 for both servers, then join the server to an existing forest.

Remove the existing IP, set a static IPv4 address on the Ethernet interface to 10.0.0.5/24, configure DNS to 127.0.0.1 and 10.0.0.4, and verify with ipconfig and Get-NetIPConfiguration.

Set the virtual network interface to a static private IP (10.0.0.5) using Azure PowerShell, verify configurations, apply changes, and restart the domain controller VM.

Learn how to add LearnDC2 as a secondary domain controller to LearnItLessons.com using the GUI, configure DNS to 10.0.0.4, and promote LearnDC2 with Active Directory domain services.

Configures VNet peering across Central India, UK West, and West Europe to support subordinate domain controllers, deploys DNS and promotes DCs for learned lessons.com in a forest.

Promote moomdc2 to a secondary domain controller in the moon.learnedlessons.com subdomain, configure DNS, and establish replication to achieve two domain controllers at each location.

Verify and configure DNS settings across multi-region Active Directory, including DNS zones, forwarders, and delegation objects for AMS and mom subdomains, and test resolution with PowerShell.

Master configuring multi-region Active Directory replication by creating and linking site links, setting replication frequency to 15 minutes, and assigning domain controllers to sites with GUI and PowerShell.

Configure active directory sites for a multi-region lab by creating ukwest, West Europe, and Central India sites, linking for 15-minute replication, and assign domain controllers to sites.

Implement ad sites and subnets for a multi-region environment by configuring dns delegation for ams.com, adding ams dc one and ams dc two, and verifying forwarders and zone transfers.

Configure a West US resource group with a standardized naming convention, create a matching virtual network, and deploy a pooled host pool with a load balancer and a two-user limit.

Explore configuring Azure Virtual Desktop with host pools, choosing load balancing algorithms (breadth first, depth first, resource-based), selecting session host images, sizing VMs, and monitoring performance for cost efficiency.

Learn how to configure Azure Virtual Desktop application groups to deliver desktop experiences, assign users or security groups, and enforce least- privilege access through scalable access control and review processes.

Create and configure the Azure Virtual Desktop workspace, linking host pools and application groups, implement role-based access control for power manage VMs, and assign users to finalize deployment.

Configure Azure Virtual Desktop client connection methods and authentication, including setting up RDP web access, enabling Microsoft Entra ID authentication via aadjoin, and managing session host properties.

Navigate Windows Server 2025 editions, including Essentials, Standard, Datacenter, and Azure edition, and learn pay-as-you-go licensing to optimize virtualization and hybrid cloud deployments.

Explore Windows Server 2025 datacenter edition with unlimited virtualization, software defined storage, shielded VMs, and software defined networking, plus Azure Data Center Asia edition’s cloud-first, pay-as-you-go licensing via Azure Arc.

Master licensing basics for Windows Server 2025 by licensing all physical cores with a 16-core minimum, including CALs, and choosing core or per-VM licensing while planning before hardware procurement.

Analyze Windows Server 2025 edition selection through practical scenarios, applying licensing models, pay-as-you-go options, virtualization rights, and feature requirements to match business needs.

Assess pay-as-you-go licensing for the four additional Windows Server VMs, enabled by Azure Arc and the data center Azure Edition to support a cloud-first hybrid architecture.

Navigate Windows Server 2025 hardware requirements to plan reliable deployments, detailing processor with mandatory instruction sets, memory needs for server core and desktop, and essential storage and networking considerations.

Assess storage and network requirements for Windows Server 2022, from 32 gb to 64 gb, and ensure PCI Express storage controllers, secure boot, TPM 2.0, and 1 Gbps networking.

Evaluate Windows Server 2025 hardware fundamentals by testing processor instruction sets, virtual machine memory, and storage planning beyond the minimum.

Explore Windows Server 2025 hardware compatibility through processor instruction sets, VM memory planning, and storage sizing, plus virtualization requirements, security hardware, and troubleshooting.

Explore Windows Server 2025 installation options, comparing server core and server with desktop experience, and learn how container-focused nano server images optimize footprint and deployment.

Choose server core for maximum efficiency and minimal attack surface with remote management, or desktop experience for GUI-dependent roles like domain controllers, DNS servers, or Hyper-V hosts.

Demonstrate downloading Windows Server 2025 installation media, enabling Hyper-V on Windows 10–11 clients, and creating a virtual machine to install and configure Windows Server with basic networking and server roles.

Learn to create virtual machines with Hyper-V Manager on Windows Server 2022 for lab and testing. Enable nested virtualization via PowerShell and configure virtual switches and default storage locations.

Create a new Hyper-V virtual machine, generation 2, with dynamic memory and 4 GB startup ram, a 60 GB VHD, a default NAT switch, and boot from an ISO.

Compare Windows Server 2025 installation options—server core versus desktop experience—highlighting deployment planning, performance differences, GUI versus PowerShell management, and post-install choices.

Install Docker on a Windows Server 2025 VM, clone the repo, run the install script, and pull Nano Server and Windows Server Core images to compare sizes.

Explore Windows Server 25 with a Windows 11 style interface, redesigned desktop and start menu, modern task manager, and improved file compression to boost administrative efficiency.

Explore windows terminal on servers, featuring a tabbed multi-shell interface, improved readability, and profile and theme customization, plus winget for installing notepad++ and git.

Explore Windows Server 2025's new gui features, including a modern Task Manager with improved readability and enhanced file compression that creates zip, 7z, and tar archives directly.

Validate your understanding of Windows Server 2025 installation options by comparing server core and server with desktop experience, and explore nano server's evolution into container images with features on demand.

Guard installation permanence by choosing server core as default and evaluating gui needs; understand nano server versus server core container sizes to optimize deployment, storage, and performance.

Master remote server administration with RSAT and Server Manager, using PowerShell remoting to manage multiple servers from a single interface, and apply firewall configurations and security practices.

Explore Windows Admin Center as the cornerstone of modern server administration via a web browser. Master PowerShell remoting to manage remote servers, run cross-server scripts, and extend your session.

Explore Windows Admin Center as the browser-based hub for real-time server health, VM management with live migration, storage, networking, and WinRS remote command execution.

Learn to securely enable remote desktop on Windows Server using sconfig.cmd, and balance GUI remoting with PowerShell, Windows Admin Center, and group policy for consistent server management.

Demonstrates installing Windows 11 on Hyper-V, enabling TPM and Secure Boot, and deploying RSAT tools (Active Directory, DNS) via PowerShell or GUI, plus Windows Admin Center on a test server.

Demonstrates deploying Windows Admin Center on a test Windows Server 2025 VM, downloading the MSI, and configuring a self-signed TLS certificate, then connecting via Edge to manage servers locally.

Master modern remote management for Windows Server 2025 by evaluating Windows Admin Center, PowerShell remoting, and security-focused firewall practices in real-world deployment scenarios.

Deploy Windows Admin Center on a Windows Server 2025 system with failover clustering for high availability and centralized access in a 50-server enterprise. Integrate with existing security infrastructure.

Master PowerShell 7 on Windows Server 2025 to remotely manage servers, import modules, and automate tasks with WinRM, headless server deployments, and cross-platform capabilities.

Explore PowerShell direct for host-to-VM management with Hyper-V, enabling remote cmdlets without network setup, and apply DSC to declare and enforce consistent server configurations via push or pull.

Master PowerShell 7 fundamentals for Windows Server 2025, including remote management, module imports, desired state configuration, and cross-platform capabilities for headless servers.

Configure PowerShell execution policy and enable remoting, then examine modules, import server manager, and test remote sessions to retrieve computer info.

Demonstrates multi-line PowerShell scripting in a script block, using backticks for line continuation, variables, and pipelines to show running services, OS info, top five CPU processes, and troubleshooting errors.

Demonstrates interactive remote management with PowerShell direct and interactive sessions, enabling you to connect to Hyper-V virtual machines, run commands, manage credentials, and install features across remote hosts.

Explore PowerShell-based Windows Server administration, including listing and installing features and remoting for multi-server management. Monitor performance, gather system info, review event logs, and verify services.

Demonstrates basic desired state configuration to ensure telnet client is present on the local server. Create a simple configuration with node localhost, Windows feature telnet client, then compile and apply.

Explore a practical PowerShell troubleshooting workflow for Windows Server, using get-service, get-win-event, time-based filters, and dependency checks to resolve spooler service issues.

Explore practical PowerShell management for Windows Server 2025, from using PowerShell 7 for headless servers to importing modules, enabling remoting, and using PowerShell direct for VM administration.

Master scalable remote management with multi-system PowerShell by using Invoke-Command to run commands on many servers and applying PowerShell desired state configuration for automatic drift prevention.

Trace the evolution of Windows Server 2025, uncovering breakthrough features, security enhancements, and hybrid cloud improvements, with practical admin tools like work folders and dhcp failover.

Explore Windows Server 2025 security updates that enable zero-trust defense with automatic credential guard, enhanced Active Directory security, laps, dmsa, and vbs enclaves, plus hotpatching that reduces reboots.

Discover deep Azure Arc integration and hybrid cloud management for Windows Server 2025, with centralized policy, compliance, monitoring via Azure Monitor, and update management across on premises and multi-cloud environments.

Enable secure file sharing on Windows Server 2025 by adopting SMB over QUIC, hardened firewall defaults, default SMB signing, authentication rate limiting, enhanced auditing, and flexible port configuration.

Boost administrative efficiency with Windows Admin Center version two, integrated security baselines, DTrace performance monitoring, a redesigned task manager, and Azure Arc integration.

Discover Windows Server 2025 enterprise features, including built-in compression, wireless lan, and passwordless authentication. Plan hardware upgrades, five level paging, Defender protection, and deprecated features like WordPad and IIS 6.

Explore Windows Server 2025 updates including zero-trust security, hot-patching, hybrid Azure Arc integration, performance gains, enhanced file services, and streamlined management for enterprise IT.

Discover Windows Server 2025 security features, including automatic Credential Guard, hot patching with four quarterly reboots, and Azure Arc integration for hybrid cloud management.

Demonstrate performance optimization and SMB security in Windows Server 2025, including NVMe storage gains and Quic-based remote file access, plus automated security baseline enforcement via Windows Admin Center version 2.

Explore Windows Server 2025 server core fundamentals, benefits, trade-offs, and management tools. Learn how to deploy server core, assess compatibility, and manage roles using PowerShell, SConfig, and remote tools.

Discover how Windows Server Core supports all server roles, from active directory to hyper-v and iis, with remote administration via Windows admin center, PowerShell remoting, and MMC.

Perform hands-on server core administration with the as config tool to configure network settings, updates, domain join, remote management, and PowerShell tasks on Windows Server 2025 core.

Explore core features of Windows Server Core vs desktop experience, master S-Config, and use PowerShell and remote management options to manage Active Directory, Hyper-V, and IIS.

Identify GUI dependencies as the primary limitation when deploying apps on Windows Server Core. Plan for Desktop Experience, noting reinstallation is required, and leverage reduced maintenance with fewer restarts.

Compare Windows Server 2025 installation options, focusing on server core versus desktop experience, to guide decisions on management approaches, resource needs, security, and application compatibility and support scenarios.

Evaluate application compatibility between server core and desktop experience, testing critical apps in server core. Develop a remote management framework with PowerShell and Windows Admin Center, considering a hybrid deployment.

Explore Windows Server 2025 installation types—server core, desktop experience, and mixed approaches—covering resource efficiency, security, management, and application compatibility.

Master the Windows Server 2025 installation process, including pre-installation tasks, hardware and storage requirements, server core vs desktop experience, media options (ISO, VHD), and deployment methods.

Walk through the Windows Server 2025 installation, from language and key entry to edition and disk choices, then set up network, updates, naming, and credential guard.

Explore Windows Server 2025 post-installation features that streamline administration, including a modern task manager, Bluetooth support, DTrace, and Compress To for ZIP, 7-ZIP, and TAR.

Deploy Windows Server 2025 in virtual environments using Hyper-V or VMware with VHD images, integration services, and PVS-CSI or VMware tools, plus best practices for resources, topology, and snapshots.

Obtain Windows Server 2025 installation media from Microsoft, enable Hyper-V, and configure VM settings (TPM, Secure Boot) to deploy secure Windows Server 2025 or Windows 11 VMs and optimize performance.

Explore Hyper-V, Windows built-in virtualization, including hardware requirements (64-bit with SLAT, VT-x, virtualization enabled in BIOS/UEFI, 4GB+ RAM) and how to enable, verify, and configure global settings and virtual switches.

Use the Hyper-V virtual machine wizard to create a generation 2 VM with UEFI and TPM 2.0, assign memory, mount Windows ISO, and install Windows 11 or Windows Server 2025.

Master post installation tasks for Windows Server 2022 and Hyper-V, including integration services, updates, memory optimization, and basic network and security configuration.

Evaluate Windows Server 2025 installation and Hyper-V planning by examining hardware requirements and memory planning, including four gigabytes minimum ram for desktop experience and host and VM considerations.

Explore flexible installation media strategies for multi-site Windows Server 2025 deployments and install the Hyper-V role with management tools and automatic restart via PowerShell.

Learn why generation 2 is required for Windows 11 in Hyper-V, due to UEFI firmware, Secure Boot, and TPM2, and compare VM generations for OS compatibility.

Enable secure boot and TPM in Hyper-V VMs to ensure Windows 11 security, and configure startup memory at 4 GB with dynamic memory up to 8 GB for VM efficiency.

Explore desktop virtualization options for building professional lab environments, comparing type-2 hypervisors like VirtualBox and VMware Workstation with bare-metal hypervisors, cloud labs, nested and container virtualization, and licensing considerations.

Compare enterprise-grade hypervisors such as Proxmox VE and XCP-ng, highlighting KVM and LXC integration, clustering, live migration, ZFS and Ceph storage, and open-source licensing as VMware alternatives.

Explore cloud-based labs with AWS and Azure virtualization, featuring nested virtualization, elastic scaling, regional deployment, and cost-conscious lab management for development, testing, and training.

Compare containers with virtual machines to build lab environments using Docker and Kubernetes. Leverage Proxmox with KVM VMs and LXC containers, and define environments with code tools like Terraform.

Explore specialized virtualization platforms beyond mainstream hypervisors, including Unraid, Solaris zones with ZFS and DTrace, CAMU and KVM emulation, and OpenStack for large-scale labs.

Assess hypervisor performance and resource optimization across type one and type two platforms—Hyper-V, Proxmox, VMware Workstation, and VirtualBox—using data. Apply rightsizing, dynamic memory and CPU, storage optimization, and VLANs.

Assess total cost of ownership and licensing across free and open-source virtualization—VirtualBox, Proxmox VE, XCP-ng—and paid options like VMware; include Azure and AWS cloud pricing and hybrid strategies.

Configure post-install tasks for Windows Server 2025, including IP address, computer name, AD domain join, time zone, updates, roles, firewall, remote desktop, and management via Windows Admin Center and PowerShell.

Learn to use sconfig and the config tool for guided server core setup, including remote management and 2025 enhancements like Windows Terminal, WinGet, and OpenSSH.

Explore Windows Server 2025 security baselines with OS Config and drift-controlled monitoring. Use Windows Admin Center for browser-based management, and automate deployments with Unattended XML, MDT, Configuration Manager, and DSC.

Learn to join Windows Server 2025 to an Active Directory domain, verify DNS and time synchronization, and deploy roles and features using Server Manager, PowerShell, and Windows Admin Center.

Implement robust security configuration for Windows Server 2025 using osconfig baselines, group policy, and Windows Defender. Manage updates via S-Config or Endpoint Configuration Manager and plan maintenance.

Enable secure remote management for Windows Server 2025 with RDP and network level authentication, optional custom ports; deploy WinRM, PowerShell remoting, OpenSSH, and Windows Admin Center for Perfmon monitoring.

Diagnose Windows server issues, including DNS and firewall problems, domain join failures, and update or roll installation challenges. Use SFC, DISM, Server Manager, and Windows Admin Center for post-installation configuration.

Reinforce Windows Server 2025 post-installation tasks through a knowledge check that covers streamlined setup, sconfig tool usage, security baselines, remote management with OpenSSH, DNS domain joining, and automatic updates.

Explore Windows Server 2025 deployment options, comparing in-place upgrades and migrations, and plan with expanded upgrade paths from 2012 R2, 2016, 2019, and 2022 using migration tools and best practices.

Migrate to windows server 2025 by building new servers and transferring roles, applications, and data with windows server migration tools, including cross-subnet support and phased execution.

Use the decision framework to choose between in-place upgrade and migration, balancing administrative efficiency with infrastructure optimization, upgrading stable servers and migrating legacy x86 systems.

Explore upgrade paths, migration strategies, and deployment decisions for Windows Server 2025 via six real-world scenarios, including two-step upgrades from 2012 to 2012 R2 to 2025 and legacy x86 limitations.

Master Windows Server migration tools to move services across subnets from 2003 and later, enabling cross-subnet migrations and flexible deployment to Windows Server 2025.

Build and validate a Windows Server 2025 Active Directory domain in a Hyper-V lab, promoting W25LITDC1 to domain controller, configuring DNS, and testing with nslookup and ping.

Learn to integrate server core via PowerShell by joining the computer to the domain, enabling remote management, and installing the DNS server role remotely on the domain controller.

Add the member server SVR1 to the learnedlessons.com domain and verify DNS configuration. Join the Windows 11 client to the domain, and enable RSAT tools for remote management.

Install Windows Admin Center on SVR1 using express setup and a self-signed certificate, then sign in with domain credentials and add three servers (dc1, core1, svr1) for centralized management.

Create lab users, organizational units, and a Demo Lab remote users group in an Active Directory domain, then configure remote access via Remote Desktop on Windows 11.

Explore how ADDS uses domains, domain trees, and forests to manage users, computers, and security policies, with sites and subnets optimizing authentication and replication.

Explore organizational units in Active Directory domain services, learn how to delegate administrative rights, apply group policy objects, and design OU structures by geographic, functional, or hybrid strategies.

Explore the physical components of Active Directory, including domain controllers, data stores, and global catalog servers, and learn to monitor health, plan capacity, implement redundancy, and manage backups and recovery.

Explore the logical and physical components of Active Directory Domain Services, including schema, configuration, and domain partitions, and learn how they shape administration, replication, and policy in Windows Server 2022.

Explore global catalog servers and read-only domain controllers in Active Directory, focusing on placement, replication, exchange address book lookups, and planning for scalable, secure infrastructure.

Explore active directory domain services components by designing organizational units for policy and delegation, deploying read-only domain controllers for branch offices, and locating the active ntds.dit via the registry.

Explore Active Directory partitions and trust boundaries by analyzing which partition stores the schema, how schema replication works, and when to choose separate forests for security.

Understand how the Active Directory Domain Services schema serves as a blueprint, defining objects, attributes, and classes. See how rules ensure object creation, with CN and object security identifier mandatory.

Master Active Directory schema changes in Windows Server 2025, plan with schema master replication and AD Prep, and test to safely deploy new classes and attributes.

Reinforce schema fundamentals, object structure, and mandatory attributes (common name and objectSid) for users; explore schema modification permissions, schema admins, enterprise admins, and practical best practices for Active Directory management.

Explore Windows Server 2025 schema updates, including schema version 91 with a minimum Windows Server 2016 functional level, and the 32 kb page size requiring fresh installs.

Explore how Active Directory forests establish security boundaries, the forest root domain, and domain trees. Learn how schema master, domain naming master, and enterprise admins enable centralized forest administration.

Explore how forests define replication and security boundaries for configuration, schema, and global catalog, guiding backup planning, application compatibility, and deployment in Windows Server 2025.

Examine forest architecture and security in active directory. A forest is the top-level container sharing a schema and global catalog, with schema master and enterprise admins, enforcing a security boundary.

Learn how forest trusts auto-establish bidirectional connections, how replication boundaries govern configuration, schema, and the global catalog, and how Windows Server 2025 expands multi-value attributes with 32k pages.

Explore how Active Directory domains function as logical containers for users, computers, and groups, how multi-master replication propagates changes, and how the administrative structure, authentication, and authorization secure Windows Server.

Apply central access rules with dynamic access control to standardize permissions. Explore Windows Server 2025 new enhancements such as multivalue attributes, replication priorities, and delegated managed service accounts with LAPS.

Master Active Directory Domain Services fundamentals, including domain object capacity and multi-master replication. Learn about domain admins, Kerberos authentication, Windows Server 2025 database page size features, functional level requirements.

Explore Active Directory domain services schema concepts in a hands-on lab, learning to view and verify schema information, and identify the schema master while checking the schema version.

Demonstrates configuring the schema snap-in on Windows Server 2022, verifying fsmo role holders with command line and GUI, registering the schema management DLL, and creating a custom MMC console.

Demonstrates exploring AD DS partitions, including the schema partition in ntds.dit, and using PowerShell, dsquery, LDP, ADSI Edit, and Active Directory Administrative Center to inspect domain structure.

Explore an Active Directory forest, domains, organizational units, and trusts. Use Get-ADForest and Get-ADOrganizationalUnit to reveal domain naming master, global catalog, and functional levels up to Windows Server 2025.

Demonstrates promoting a Windows Server 2025 domain controller in a legacy environment by upgrading from 2012 R2 to 2016, raising domain and forest functional levels, and troubleshooting blocking errors.

Demonstrates verifying current functional levels and raising forest and domain functional levels to support promoting Windows Server 2025 domain controllers in a lab using Windows Server 2012 R2.

Demonstrates adding a Windows Server 2016 DC to a Windows Server 2012 R2 legacy forest, verifying functional levels, and addressing prerequisites for a 2025 domain controller.

Shows in-place upgrade from Windows Server 2012 R2 to 2016 on a domain controller, and highlights risks with PDC emulator, functional levels, and FSMO transfer best practices.

Demonstrates troubleshooting post-upgrade issues in Windows Server 2022 by verifying AD prep and schema versions, resolving DNS, and promoting a server to a 2016 domain controller.

Demonstrates the build and migrate method for upgrading Active Directory by creating a new domain controller, transferring Fisma rules, and decommissioning the legacy DC with minimal risk.

Transfer fsmo roles to a newly installed Windows Server 2016 and demote the old Windows Server 2012 R2, validating with netdom query fsmo, to modernize a legacy domain.

Promote a Windows Server 2025 to an Active Directory domain controller for an existing domain, raise forest and domain functional levels, and clean up metadata after demoting the previous DC.

Demonstrate Windows Server 2025 Active Directory enhancements by verifying forest and domain functional levels and enabling the 32k database page size feature across domain controllers.

Enable the database 32K pages feature across the forest using PowerShell. Accept the irreversible change, verify replication, and plan recovery via authoritative forest recovery if needed.

Explore how organizational units and containers organize Active Directory objects for targeted group policy objects (GPOs) and delegated administration, and learn OU versus container design principles.

Coordinate major changes and verify replication to avoid orphaned objects; design OUs for administrative efficiency by separating object types, using clear naming, and delegating with ADAC and ADUC.

Explore the differences between organizational units (OUs) and containers, and apply group policy through OU design. Cover OU hierarchy, default Active Directory objects, and best practices for OU management.

Explore how to use the delegation of control wizard to grant password reset permissions for a sales OU with least privilege, and organize objects by type for efficient policy application.

Create and manage organizational units in Active Directory using graphical, PowerShell, and command-line tools. Build a practical OU structure with company, departments, servers, and service accounts to enable tailored policies.

Use PowerShell to create and manage Active Directory organizational units, including a workstations OU, verify with Get-ADOrganizationalUnit, enable protected from accidental deletion, and export structure with ldifde for documentation.

Move objects from default containers into a new OU structure to apply department policies, using drag-and-drop in Active Directory and PowerShell with new-aduser and move-adobject to relocate users and computers.

Demonstrates moving users and computers from default containers into organizational units using the Active Directory Users and Computers snap-in and PowerShell commands, enabling department-specific policies.

Understand Microsoft Android as a cloud based identity management and federation service that syncs on premises Active Directory with the cloud and supports external identity providers.

Explore how Microsoft Android provides cloud-based identity and access management for cloud applications, complements on-premises Active Directory, and enables single sign-on for Microsoft 365 and other services.

Explore essential Active Directory Domain Services tools, including the Administrative Center, the classic Active Directory Users and Computers, Sites and Services, and the PowerShell module for efficient multi-domain management.

Identify when to use core AD DS tools—Active Directory Administrative Center, Active Directory Users and Computers, and Active Directory Sites and Services—and practice PowerShell equivalents and replication management.

Demonstrate creating Active Directory objects using GUI, PowerShell, and dsadd across the Active Directory Administrative Center, DSAC, and the command line with scripting and one-liners.

Enable advanced features in Active Directory Users and Computers to access the Attribute Editor and Distinguished Name, then use PowerShell history reviewer with nltest, dsget, netdom, and get-addomaincontroller.

Navigate the Active Directory Administrative Center to create objects, view all object attributes, reset passwords, and use the PowerShell History Viewer for AD management.

Explore domain controllers hosting active directory, storing the ntds database and sysvol, and enabling kerberos authentication with multi-master replication for high availability and branch office options.

Explore read-only domain controllers for secure branch office authentication and containment. Learn about NUMA support, replication priority boost, and a 32k database page size.

Test your mastery of domain controllers on Windows Server 2022 with practical questions on replication, high availability, security, and Active Directory fundamentals.

Demonstrate domain controller configuration with hands-on labs, examining core components, verifying replication, configuring high availability, and managing Active Directory using GUI tools, PowerShell, and command-line utilities.

Examine replication health and inbound partners using repadmin and nltest, then promote a second domain controller to ensure high availability and verify both DCs.

Learn how to monitor and verify domain controller load balancing, diagnose replication health, and use PowerShell and command-line tools to validate global catalog connectivity and replication across multiple domain controllers.

Explore deploying a read-only domain controller for a branch office with limited security. Create a branch offices organizational unit and security group, then install and promote AD DS.

Shows how to configure a read-only domain controller (rodc) in Windows Server 2022, including dns server, global catalog, dsrm password, and password replication policy, with delegated administrator options.

Demonstrate how to check an RODC's status and global catalog flags with PowerShell, explore password replication policy, and pre-populate and validate cached passwords for branch office users.

Master the global catalog service in Active Directory to speed cross-domain searches. Understand the partial attribute set and best practices for deploying global catalogs across your forest for authentication.

Master global catalog placement to optimize cross-domain searches, authentication, and roaming user access across single and multi-domain forests, with site-wide global catalogs and strategic exceptions.

Verify and configure global catalog servers across the forest using GUI, Active Directory sites and services, PowerShell, and command-line tools, ensuring replication and DNS registration.

Explore how global catalog servers enable forest-wide searches in a multi-domain Active Directory by using a partial attribute set. Learn best placement in single-domain forests and effects on replication.

Discover how global catalog servers enable email routing and forest-wide authentication by locating recipients, supporting universal group memberships, and guiding infrastructure master decisions in multi-domain environments.

Explore how domain controllers advertise services via SRV records in DNS, enabling site-aware discovery and authentication, with NetLogon maintenance and troubleshooting using restart NetLogon and ipconfig /registerdns for DNS records.

Master advanced srv record management in Windows Server 2022 with Netlogon, automatic site coverage, and manual reregistration controls for reliable domain controller discovery.

Practice test on srv records configuration concepts helps you validate domain controller discovery, Kerberos service queries, and Netlogon behavior for reliable Active Directory authentication.

Explore advanced SRV records troubleshooting for Windows Server 2022, using nltest to force re-registration, analyzing site-specific SRV implications, DNS health checks, and authentication routing to minimize user impact.

View and verify SRV records in DNS Manager, query with nslookup and PowerShell, and examine LDAP, Kerberos, and GC services across domain-wide and site-specific records.

Explore how to use PowerShell to query and analyze SRV records, LDAP and Kerberos data, and Netlogon registrations for domain controllers, enabling automation, documentation, and health monitoring.

Master the two-phase Active Directory Domain Services authentication process by examining authentication and authorization phases, access tokens, and the role of ticket granting tickets and service tickets in Kerberos logons.

Explore the two-phase authentication workflow in Windows Server 2025, from TGT presentation to service ticket authorization by the domain controller, enabling secure resource access and detailed audit trails.

Explore two-phase authentication, security identifiers and access token structures, Kerberos flow with ticket granting tickets and service tickets, computer account authentication mechanisms, Windows Server 2025 security enhancements, and practical troubleshooting.

Explore how domain joined computers authenticate at startup with computer account credentials and how randomly generated computer account passwords enhance Windows Server 2025 security, including Kerberos PKI cryptographic agility improvements.

Demonstrate the two-phase authentication in a real Active Directory domain, monitor Kerberos ticket operations via Event Viewer, and verify authentication events on domain controllers using PowerShell and command-line tools.

Examine security identifiers (SIDs) that uniquely identify users, groups, and computers in a Windows domain; verify SID consistency across PowerShell tools, then trace authentication with Event Viewer and Kerberos.

Demonstrate authentication event monitoring in Windows Server 2022 by tracing Kerberos ticket requests (4768/4769), logon/logoff events, and TGT and service tickets cached on clients via klist.

Demonstrates how computer accounts authenticate automatically at startup, enabling machine-level security operations, service authentication, and group policy application; learn to verify secure channel status and troubleshoot startup issues.

Identify the five fsmo roles and how they partition forest-wide versus domain-specific operations across schema master, domain naming master, infrastructure master, read master, and PDC emulator.

Master the PDC emulator and FSMO roles to ensure time source reliability, urgent password changes, and smooth GPO edits. Learn quick identification methods using PowerShell, NetDom, and GUI tools.

Identify forest-wide and domain-specific FSMO roles, including schema master, domain naming master, RID master, infrastructure master, and PDC emulator. Use get-id forest to locate schema master and understand role availability.

Understand how operations master roles govern FSMO availability, read pools, and cross-domain references, and learn when to seize roles with force to maintain domain health.

Learn the five FSMO roles: schema master, domain naming master, RID master, PDC emulator, and infrastructure master, and how to transfer or seize them across domain controllers using PowerShell.

Learn to deploy a domain controller using cloning for rapid virtual deployment in Hyper-V, cover ADDS installation options, upgrades, and Azure considerations such as rollback and vmgenerationid.

Install the domain controller role with server manager, then use the AD DS Configuration Wizard to add a domain to an existing forest or create a new forest.

Install a domain controller at a remote site by using install from media, create an ADDS snapshot with ntdsutil, and promote via Server Manager, reducing WAN traffic.

Discover how to clone domain controllers for rapid provisioning and private cloud deployments using Hyper-V, PDC emulator considerations, and virtual machine cloning.

Demonstrates preparing a source domain controller for cloning, exporting the VM, and creating a cloned domain controller using Hyper-V and PowerShell, including cloning prerequisites and verification.

Maintain at least two virtual domain controllers across different hosts and data centers to avoid single points of failure. Ensure time services are unified, and use cloning safeguards.