Distributed File System (DFS) is a technology that lets you group shared folders on different servers into one logically structured namespace. As the name suggests, the files are distributed across various file servers and locations, and you can use DFS to access the shared folders of those servers from a single path. The components of DFS are Namespace and Replication. This article covers the DFS Namespace. Additionally, we are using two servers running Windows Server 2022 (SR1-technig and SR2-technig) to install and configure the distributed file system namespace.

Install Distributed File System (DFS) on Windows Server 2022

The DFS technology is part of the File and Storage Services, and you need to install this role on your system. I will install the DFS Namespace using the Server Manager.

1. Open Server Manager.
2. Click Manage > Add Roles and Features.
3. Click Next on the Welcome screen.
4. Select Role-based or feature-based installation and click Next.
5. Select the server where you want to install DFS and click Next.
6. On the Server Roles page, expand File and Storage Services and select DFS Namespaces.
7. Click Add Features and then click Next.
8. On the Features page, select the features that you want to install and click Next.

9. Click next on the Select feature wizard, and confirm the installation selection. Review the installation summary and click Install.
10. Wait for a few seconds. The installation might take some time. Click Finish to close the wizard.

Note: You must install the Distributed File System (DFS) on all the servers where you want to implement DFS.

How to configure distributed file system namespace

After the installation, you can create your Namespace following the below procedures. But, first of all, let’s create a folder on each server and share them in the network. To do that, I create a new folder on each server and put a text file in it.

Once the installation is complete, you will need to configure the DFS namespace. Here are the steps on how to do it:

1. Open the DFS Management console.
2. Right-click Namespaces and select New Namespace.
3. In the New Namespace Wizard, enter the namespace name and click Next.
4. Select the type of namespace that you want to create and click Next.
5. Select the servers that will host the namespace and click Next.
6. Review the configuration settings and click Create.

The following are the real example:

1. On server SR1-technig, I create a new folder SR1-Sales, and a text file SR1-TextFiles.
2. On server SR2-technig, I create another folder, SR2-Sales, and a text file, SR2-TextFiles.

Moreover, I share these folders on the network. If you do not know how to share files on the network, please read the Share Files over the Network:

To see whether your folder is shared on the network, press the Windows +R buttons and write the \ServerName in the Run and enter. You see the shared folder appear.

How to create Distributed File System (DFS) Namespace

Once the namespace is created, you can start adding shared folders to it. Here are the steps on how to do it. Now let’s create a namespace by the name of Sales in the DFS Management.

1. Right-click the namespace that you want to add the shared folder to and select New Folder.
2. In the New Folder Wizard, enter the folder name and click Next.
3. Select the shared folder that you want to add to the namespace and click Next.
4. Review the configuration settings and click Create.

Following are the real scenario of adding shared folders to the namespace.

1. In the server manager window, click on administrative tools.
2. Find the DFS Management and open it.
3. You see the two components of the DFS on the left-hand side; right-click on the Namespace> New Namespace.

4. Write or browse the server’s name to host the Namespace and click next.

5. Enter the name of the Namespace. I name the namespace Sales.

6. Click on the Edit Settings button to customize the users’ permissions for the shared folders in the Namespace, and then click the Ok button. Click next.

There are two types of namespaces: domain-based namespaces and standalone namespaces. Domain-based namespaces can be stored on one or multiple namespace servers and in Active Directory Domain Services (AD DS). Standalone namespaces, on the other hand, are stored on one namespace server. If you choose to create a domain-based namespace, you will need to enable Windows Server 2008 mode.

7. Select the type of Namespace and click next.

8. After reviewing all the settings, click on the Create button.

9. Finally, you have created the Namespace and now close the Wizard by clicking on the Close button.

Create DFS Folders

It is time to bring together all those shared folders from different servers under one Namespace in one server. To do that:

1. In the DFS Management, open the Namespace.
2. Right-click on the newly created Namespace and then New Folder.

3. Click on the Add button to connect the folder to the target path.

4. Browse for the target path, select the shared folder, and click the Ok button.

5. Click on the Ok button to return to the New Folder Wizard, give the folder name, and click the Ok button.

6. Again, right-click on the Namespace, Create New Folder > Add button, browse or write another server’s name, select their shared folder, give it a name, and then click on the OK button.

You can add multiple shared folders from multiple servers and add them into one Namespace.

Press Windows + R to open the Run dialog box. Type ComputerName and press Enter to check the new namespace you created. If you open that namespace folder in the network, you will see subfolders that are shortcuts to the folders you added to your namespace. These subfolders are linked to the shared folders on other servers. Now, you can access all of those shared folders from different locations under a single path.

Conclusions

In this article, you learned how to install the Distributed File System (DFS) namespace on Windows Server 2022 and configure the DFS namespace to group shared folders from different servers into one namespace. Since this article is already long, we will cover DFS replication in another session. Please feel free to share your thoughts and questions in the comment section below.

Related: How to Install and Enable Data Deduplication on Windows Server 2022

The post Install and Configure Distributed File System in Windows Server 2022 appeared first on TECHNIG.

In the previous article, we described how to create a child domain using the Server Manager console. In this article, we will show you how to do the same thing using Windows PowerShell. PowerShell is a powerful tool that can be used to automate many tasks in Windows Server. It is also a great way to create child domains, as it can save you time and effort.

To install AD DS and create a forest, you can follow the instructions in the article “Install Active Directory On Windows Server 2022 Using PowerShell“.

Steps to Create a Child Domain Using PowerShell

The creation and configuration of a child domain is part of the post-installation process of Active Directory Domain Services (AD DS). This process also includes promoting the server to a domain controller. First, the AD DS role must be added to the server. Once the role is added, you can create and add a child domain to the parent domain.

Add AD DS Role Using Windows PowerShell

Follow the steps below to add the Active Directory Domain Services (AD DS).

1. Open Windows PowerShell as administrator.
   • If you are working with Windows Server Desktop Experience, right-click on Windows PowerShell in the Start Menu and select Run as Administrator.
   • If you are working with Windows Server core, run powershell the command in the command prompt. It opens PowerShell. Once the PowerShell is opened, use Start-Process PowerShell -Verb runAs to open it as administrator.

2. Before installing the AD DS role, let’s first see if it is available. To do so, run Get-WindowsFeature AD-Domain-Services. As shown in the below command, it is not already installed and it is available.

3. To install the AD DS role, run the Install-WindowsFeature AD-Domain-Services -IncludeManagementTools command. Wait for a moment until it finishes the installation, and it will show the result as shown in the picture below.

The Active Directory Domain Service role is by now added to our Server. You can verify it using the Get-Windows-Feature AD-Domain-Services command. If it is properly installed, It will not be available for installation anymore. Now, in the second section, let’s go through the steps to creating and configuring a Child Domain using Windows Powershell in Server 2022.

Create a Child Domain Using Windows PowerShell

Now that we have the AD DS role added, we can create and configure a Child Domain using PowerShell in the AD DS post-installation process. Below are the steps.

1. Import AD DS module. To do so, run the Import-Module ADDSDeployment command.

2. Provide the credential to specify the user name and password of an admin used to accomplish this configuration. Use it only if you are not logged in with administrative privilege. To do so, use the Get-credential cmdlet and fill the pop-up window with an administrator’s username and password.

3. To create a Child Domain, use the Install-ADDSDomain cmdlet followed by the following mandatory arguments and their values.
   • -DomainType followed by the “ChildDomain” value.
   • -NewDomainName followed by the single-labeled (left-most part of a domain) child domain name which is “ca” in our example.
   • –ParentDomainName followed by the Fully Qualified Domain Name (FQDN) of the parent which is “technig.lab” in our example.

Note: the above arguments are the mandatory arguments that we must specify when we create a Child Domain. For more optional parameters click HERE.

So, considering the cmdlet and the required arguments, our whole line of code becomes: Install-ADDSDomain -DomainType ChildDomain -NewDomainName ca -ParentDomainName technig.lab

4. Now, it prompts us to specify the safe mode administrator password. Enter the password and confirm it. Then, type down Y and press enter. Wait for a while until it finishes the Child Domain installation and configuration process. Once the process completes, it will restart the machine.

Once the machine restarts, the Child Domain is created on it. To this end, we are all done with the child domain configuration.

Steps on how to create a child domain in Server 2022 using PowerShell:

1. Open PowerShell as an administrator.
2. Run the following command to install the ADDSDeployment module:

Install-Module ADDSDeployment

3. Create a variable to store the parent domain name and the child domain name. For example:

$parentDomainName = "technig.com"
$childDomainName = "lab.technig.com"

4. Run the following command to create the child domain:

Install-ADDSDomain -NewDomainName $childDomainName -ParentDomainName $parentDomainName

5. Enter the SafeModeAdministratorPassword when prompted.
6. The child domain will be created.

Here is an explanation of the command:

• Install-ADDSDomain is the PowerShell cmdlet that creates an Active Directory domain.
• -NewDomainName specifies the name of the child domain.
• -ParentDomainName specifies the name of the parent domain.
• -SafeModeAdministratorPassword specifies the password for the Directory Services Restore Mode (DSRM).

Here are some additional details that might be helpful for a beginner:

• The child domain name must be a single-label domain name.
• The child domain name must not already exist.
• The parent domain name must be a valid domain name.
• The SafeModeAdministratorPassword must be a strong password.

Summary

In this article, we installed the Active Directory Domain Services (AD DS) role on a Windows Server 2022 server using PowerShell. We then created a child domain using PowerShell cmdlets. The steps involved in creating a child domain using PowerShell are as follows:

• Install the ADDSDeployment module.
• Create variables to store the parent domain name and the child domain name.
• Run the Install-ADDSDomain cmdlet to create the child domain.
• Enter the SafeModeAdministratorPassword when prompted.

I hope you found this article helpful. Please share your thoughts and queries in the comment section below.

The post Create a Child Domain in Server 2022 Using PowerShell appeared first on TECHNIG.

Backup and restore are the processes of creating and retrieving copies of data. This can be done to external or internal storage and is useful in the event of data loss or corruption. In this article, we will build on our previous article on Windows Server Backup installation and configuration by discussing how to restore a backup in Windows Server 2022.

For the purposes of this article, we will assume that you have a server running Windows Server 2022 that is also a domain controller. We will also assume that you have already taken a full backup of your server.

To restore the backup, you will need to follow these steps:

1. Open Server Manager.
2. Click Tools > Windows Server Backup.
3. Click Recover.
4. Select the backup that you want to restore.
5. Choose the location where you want to restore the backup.
6. Click Next and follow the instructions.

Once the restore process is complete, your server will be restored to the state it was in at the time of the backup.

Note: It is important to test your backups regularly to ensure they work properly. You can do this by restoring a backup to a test server.

Restore the Active Directory Backup on Windows Server

If your backup contains the Active Directory Services, you will get the below notification saying the AD DS only can be recovered when the computer is in DSFM mode.

In this case, you need to enable the Directory Services Restore Mode first. To do that, press Windows + R buttons to open the Run box. Write the MSCONFIG command and enter.

In the System Configuration wizard, click on the Boot option on the top menu.

Click on the Safe boot option, and choose the Active Directory repair. Click on the Apply button and restart your computer.

Restore Backup in Windows Server 2022

If a data loss occurs, you can manually recover the data using the backup data. To recover the data with the Windows Server backup, follow the below steps:

1. Open the Windows Server Backup from the Start Menu or Server Manager > Tools
2. Click on the Local Backup on the left-hand side
3. On the right-hand side, click on the Recover option.

4. The Recovery Wizard asks where the backup is stored: this server or another location. Since I have kept the backup on the local drive, I select this server option. To continue, click Next.

5. Select the backup according to the date to use for the recovery. If you have only one copy, that is automatically selected. Click next.

6. The new recovery wizard asks what you want to recover. If you select the Folders and files, you must specify the specific files and folders for the recovery. Else, if you choose the Volume, you can restore the entire Volume. Moreover, select the Applications if you want to recover the applications. I prefer the System State to restore system state data.

7. Select a location for system state recovery. I select the original location and check the authoritative restore of Active Directory files.

8. Finally, click on the Recover button to confirm the recovery and start the Recovery process. The process takes a few seconds, and the computer will restart automatically when it is done.

In a nutshell, the steps to back up and restore Windows Server 2022 are as follows:

To back up Windows Server 2022:

1. Open Server Manager.
2. Click Tools > Windows Server Backup.
3. Click Local Backup.
4. Click Backup Once in the Action section to open the wizard.
5. In the Backup Options dialog, select the files, folders, or volumes that you want to back up.
6. In the Backup Destination dialog, select the location where you want to store the backup.
7. Click Next and follow the instructions.

To restore Windows Server 2022:

1. Open Server Manager.
2. Click Tools > Windows Server Backup.
3. Click Recover.
4. In the Getting Started dialog, select the location where the backup is stored.
5. In the Specify Location Type dialog, select the location type.
6. In the Specify Remote Folder dialog, type the backup path.
7. In the Select Backup Date dialog, select the date of the backup that you want to use for recovery.
8. In the Select Recovery Type dialog, select what you want to recover.
9. Click Next and follow the instructions.

Here are some additional tips for backing up and restoring Windows Server 2022:

• It is important to test your backups regularly to ensure they work properly. You can do this by restoring a backup to a test server.
• You should back up your data frequently, especially if you have important files or folders.
• You should store your backups in a safe location, such as an external hard drive or a cloud storage service.

Conclusions

To conclude, if you have backed up your files and folders, you can restore them on Windows Server 2022. This article has provided you with the steps on how to do so. I hope this has sharpened your skills, and I welcome your thoughts and questions in the comment section.

The post How to Restore Backup in Windows Server 2022 appeared first on TECHNIG.

PowerShell Remoting allows you to manage a remote computer from your local computer. You type commands on your local computer, and the changes are made on the remote computer. When you set up a PowerShell Remoting connection, you can execute commands remotely, and the changes will be made on the remote computer. The remote computer is the computer that you want to manage, and your local computer is the computer that you are using to manage the remote computer.

Here are some important points to keep in mind before setting up a PowerShell Remoting connection:

1. Both the local and remote computers must be in the same domain or workgroup. This is because PowerShell Remoting uses Windows Remote Management (WinRM), which is a feature of Active Directory.
2. Both computers must have PowerShell installed. PowerShell is a command-line shell and scripting language that is included with Windows.
3. AD-DS, DHCP, and DNS servers must be configured and running on your network. These servers are used by WinRM to authenticate users and resolve hostnames.
4. The IP address configuration on both computers must be correct. The remote computer’s IP address must be reachable from the local computer.
5. The network adapter connection type for all network adapters on both computers must be set to Private. If any of the network adapters are set to Public, you will receive an error when you try to connect to the remote computer.

Create PowerShell Remoting Sessions

Follow the steps below to set up a PowerShell Remoting connection.

1. Enable Powershell remoting on the remote computer by running the Enable-PSRemoting command.

2. Set up a remote connection by typing the Enter-PSSession -ComputerName [Name of the computer] command in the local computer. The name of the machine that you are connected to will add at the beginning of commands to show that you are running commands on that particular machine.

3. If you want to create multiple sessions, use the command New-PSSession [Computer Name]. Instead of [Computer Name] use the computer name of your own machine.

4. To see the list of created PowerShell sessions, type the command Get-PSSessions. As you can see, I have one PowerShell session in the list and it is available for connection.

5. Type the command Get-Command -Noun PSSession to see the list of PowerShell Remoting session commands.

You don’t have to use PowerShell Remoting for commands that have computer name parameters. You can execute commands that have computer name parameters on the target computer without setting up a PowerShell Remoting session.

PowerShell Remoting is much faster than other remoting tools because it uses commands and scripts to manage the target computer. You can create multiple remoting sessions without loading much on the CPU.

Check out this article to know more about PowerShell Remoting.

The post How to Set up a PowerShell Remoting Connection appeared first on TECHNIG.

As part of our DNS server guides, this article covers how to change the DNS zone settings in Windows Server 2022 after creating and configuring DNS zones. It is a vitally important and often required skill to know how to modify DNS zone configuration. Among other configurations, the three most often required settings that we need to change are the DNS zone type, ADI zone replication scope, and DNS zone dynamic updates. Hence, with a step-by-step approach, we will cover these three topics throughout this article, each in a separate section.

Related articles:

1. How to Install DNS In Server 2022 Using Server Manager And Powershell?
2. Configure DNS Forwarder And DNS Conditional Forwarder In Server 2022.
3. Detailed step-by-step DNS zone configuration.

How to Change a DNS Zone Type?

The DNS zone type definition is the very key setting when we create and configure a DNS zone. It specifies the zone’s function and further configurations options accordingly. It is also possible to change the zone type of a specific zone after it is created and configured. As part of changing DNS zone settings, we can change it anytime we need to in Windows Server 2022 using the below simple steps.

1. Press the Windows Key + R Keys on your keyboard to open the Run dialogue box.

2. Type indnsmgmt.mscand press Enter, consequently.

3. On the DNS Manager console, right-click on the zone you want to change the setting and click on the Properties option from the list.

4. Select the General tab in the zone Properties and click on the Change button associated with the Zone Type, as shown in the below picture.

5. On the Change Zone Type window, choose the new zone type from the available zone types. When it is all set, click on the OK button. Then, click on the Yes button on the warning window.

That is all about how to change a DNS zone type. Straightforward! Now, let’s go with how we can change the replication scope for an Active Directory Integrated (ADI) DNS zone.

How to Change an ADI Zone Replication Scope?

If you already know the difference between the DNS zone types, you know that the replication scope setting is associated only with an Active Directory DNS zone. Similar to the above section, we can change the replication scope of an ADI zone from the Properties window of the zone. Let’s go with the steps.

1. Open DNS Manager console (steps 1 and 2 of the above section)

2. Right-click on the zone you want to change its replication scope and click on the Properties option. (step 3 of the above section)

3. Select the General tab and click on the Change button next to the Replication, as shown in the below picture. This option is available only in the ADI zone and not in other zone types.

4. Now, on the Change Zone Replication Scope window, choose the replication scope for your ADI zone. Once set, click on OK.

With four simple steps, we changed the ADI DNS zone’s replication scope in Windows Server 2022.

How to Change a DNS Zone Dynamic Update?

Before straightly going to the steps to change the dynamic update of the DNS zone, it is necessary to know that this setting is available only with the primary and ADI zones and not with the Secondary and Stub zones. Similar to the above two sections, we can modify this setting in the Properties window of the zone. Let’s walk through all the steps.

1. Open up the DNS Manager console as described in the above sections.

2. On the DNS Manager console, right-click on the zone you want to change its dynamic updates settings and click on the Properties option. ( step 3 of the first section)

3. On the General tab of the zone properties, expand the options associated with the Dynamic updates and select the appropriate option (see the picture below). Once selected, click on OK to save the setting and exit the window.

That is all we need to do to change the Dynamic Update settings of a DNS zone.

Conclusion

So far, in this step-by-step article, we have covered the three most required settings of a DNS zone in Windows Server 2022. We discussed the steps to change a DNS zone type first. Then, we went through the guide to change the replication scope setting of an ADI zone. Finally, we covered the instructions to modify the dynamic update for the Primary and ADI DNS zones.

In the end, I hope this article could provide you with helpful instructions and insights. Please feel free to share your thoughts and further questions in the comment section below.

The post How to change DNS zone settings in Windows Server 2022? appeared first on TECHNIG.

In a domain-joined networked environment, we always need to restrict users’ access to most PC settings and resources. It is necessary to do so for security and safety reasons. One crucial restriction that we always need to apply is to deny users access to PC Settings and Control Panel. And that is what this article is about. More specifically, this article covers the detailed steps to preventing users’ access to the Control Panel and PC Settings using Group Policy on Windows Server 2022.

In our example, our domain controller machine runs Windows Server 2022, on which we create the group policy. We create an Organization Unit (OU) level group policy directly on the (OU) that contains the users to which we apply the policy.

You may also like to read Install Active Directory On Windows Server 2022 Using PowerShell.

Steps to Deny Access to PC Settings and Control Panel

As we described in the scenario earlier, we create the policy that is linked to an OU, which contains the users to which we apply the restriction. We can create the group policy first and link that to the OU, or we can create the group policy directly on the OU. Either way ends up with the same result. However, we go with the second approach in our example. That being said, let’s go with the steps.

1. Press down the Windows key + R keys on your keyboard to open the Run dialogue box.
2. Type in gpmc.msc and press Enter to open the Group Policy Management console.

3. Right-click on the OU to which you want to associate the group policy. Then, select Create a GPO in this domain,… option.

4. Put a name for the Group Policy Object (GPO) in the relevant box, and click OK.

5. Once the GPO is created, right-click on it, and select Edit from the context menu.

6. On the Group Policy Management Editor window, expand Policies under User Configuration. Then, expand the Administrative Template and click on Control Panel. Finally, double-click on Prohibit access to Control Panel and PC settings.

7. On the configuration window, check the Enabled option. Then, click OK, and close the Group Policy Management Editor window.

To this end, we have created the group policy to prevent users’ access to the Control Panel and PC settings. We created it directly linked to the OU that contains user accounts that we want to restrict. So, it is all done. To verify it, go with the next section.

Verifying the Above Group Policy Configuration

To check the above restriction, we need to log in with a user account that is a member of the OU to which we linked the group policy. Then, we update the group policy and try to open the Control Panel and PC Settings. See the below steps.

1. Login to the client’s computer with a user account that is a member of the OU to which you linked the restriction.
2. Run gpupdate /force in the Run dialog box to perform group policy updates. Wait for a while until the group policy completes.

3. Once the group policy gets updated, try to open the Control Panel or PC Settings. It doesn’t open, and you will face the pop-up window shown in the below pic.

That is all we need to do to check how the restriction we configured works and if it is applied correctly.

Conclusion

It is a common setting in a domain environment to deny users access to the Control Panel and PC settings. It is essential for security and safety reasons. As the steps discussed above, we can apply this restriction simply by defining and configuring a group policy object to an OU that contains the target users.

In the end, I hope you found this article helpful. Do not hesitate to share your thoughts and queries in the comment section.

The post Deny Users Access to PC Settings and Control Panel using Group Policy appeared first on TECHNIG.

Suppose you have one domain controller in your network. In that case, you may wonder how to add a new domain controller to an existing domain to avoid discontinuity in case of server failure. When you add new domain controllers to an existing domain, they replicate the active directory database with each other. If the primary domain controller fails, you can use the second domain controller to respond to authentication requests and perform the DC’s tasks. Overall, multiple domain controllers increase fault tolerance and load balancing. The following article will elaborate on the steps required for adding a new domain controller to an existing domain in Windows Server 2022.

To demonstrate it in detail, I have two servers (SR1-technig and SR2-technig) running Windows Server 2022. The SR1-technig server acts as a primary server and is also a domain controller. Since the SR1-technig is already a domain controller, I will add the new domain controller in the SR2-technig server and make both SR1-technig and SR2-technig domain controllers.

Step One: Join your server in the domain

At first, I will join the SR2-technig (The second server) to the domain and make it a member of the primary domain controller. To do that, I need to assign the IP address of the existing domain controller to the DNS of the second server that I want to make a domain controller.

1. Open Server Manager, and click on the Local Server option on the left-hand side.
2. In the Local Server window, click on IP Address (Ethernet)

3. Double-click on the network to that you are connected.
4. In the Ethernet Status window, click on Properties.

5. Double-click on Internet Protocol Version 4.

6. Set your DNS Server address manually to the IP address of the domain controller you want to join. Click OK.

7. Close the windows and return to the local server window.
8. In the Local Server Window, click on WORKGROUP to join a domain.
9. On the system properties, click on the Change button.
10. Check the domain box, write the domain name you want to join, and click OK.

11. Provide the credential and click ok.
12. Restart your computer.

Step Two: Install Active Directory Domain Services

In the second step, you need to install the Active Directory Domain Services on the server you want to promote to the domain controller.

1. Click on Manage > Add Roles and Features in the server manager window.
2. Click next on the before you begin Wizard.
3. Select the installation type and click next: Role-based and Feature-based installation.
4. After selecting the destination server, click next.
5. Find the Active Directory Domain Services Roles and, select it, click Add features.

6. Click on the Next button till the installation button activates.
7. Finally, confirm the installation and click on the Install button. The installation takes a few seconds.

Related: How to Install Active Directory Using PowerShell on Windows Server 2022

Step Three: Promote the Server to Domain Controller

Now that your server is a member of the domain controller and you have installed the Active Directory Domain Services roles in your server. It is time to promote or add the new domain controller to the existing domain.

1. In the Server Manager screen, click on the notification flag next to the Manage.
2. Click on the Promote this Server to Domain Controller to open the DC’s promotion wizard.

3. In the Deployment Configuration wizard, select the deployment operation. I CHOOSE THE FIRST OPTION since I add a new domain controller to an existing domain.

4. Specify the domain information: you can click on the Select button next to the text box, select your domain name, and click Ok. If you are already a member of the domain controller, it automatically finds the domain name.
5. After selecting the domain name, click on the Change button to provide credentials to perform the task. Click next.

6. Specify the domain controller capabilities. The DNS server, Global Catalog, and Site Name are already selected by default. I provide the Active Directory Services Restore Mode password and click next.

7. Click the next button to pass the DNS options wizard.
8. Specify from which domain controller it should replicate the Active Directory database, and click next.

9. Although I can change the location of the AD DS database and log files, I keep its default location and click next.
10. After reviewing the configuration, click Next.
11. The Prerequisites Check verifies the prerequisites for domain controller operation. If the prerequisites checks passed successfully, click on the Install button.
12. The installation will complete after a few seconds, and your server will restart automatically.

How to check if the new domain controller has been added?

After installing the Active Directory Domain Services and promoting it to the domain controller, you can check whether the domain controller has been added successfully or not.

1. In the server manager window, click on Tools management.
2. Click on Active Directory Users and Computers.
3. Expand the domain and click on the Domain Controllers Organizational Unit.

You will see the domain controller(s) in your current domain.

Conclusions

To conclude, we talked about the steps required for adding a new domain controller to an existing domain in Windows Server 2022. You can share your thoughts and questions in the comment section of this page.

The post How to Add New Domain Controller to Existing Domain appeared first on TECHNIG.

System admins have the ability to prevent/block users’ access to all removable storage media drives. Such restrictions play an important role in the security and safety of a networked environment. And they are very common and most often used inside almost all organizations. Additionally, the tool that helps us create such restrictions is the Group Policy Management Console (GPMC). It is a feature that we add along with the AD DS role installation. That all being said, this article covers a step-by-step guide to preventing domain-joined users’ access to removable storage media drives using group policy in Windows Server 2022.

In our example, the domain controller machine runs Windows Server 2022 Standard. Additionally, we define the group policy directly on an Organizational Unit (OU) that contains the target users. So, we have already created an OU and moved the target user(s) into it.

You may also like to read DNS Server Guides and DHCP Server Articles.

Steps to Prevent Access to Removable Media

With the above scenario in mind, it is a straightforward process to prevent users’ access to removable media.

1. Press down the Windows Key + R on your keyboard. It opens the Run dialogue box.
2. Type in gpmc.msc and press the enter. It opens the Group Policy Management (GPM) console.

3. On the group policy management console, right-click on the OU that contains the target users. Then, select Create a GPO… from the context menu.

4. Type a name for the new GPO. Then, click OK to continue.

5. Right-click on the GPO that you created. Then, select Edit from the context menu.

6. On the GPM Editor window, expand User Configuration -> Administrative Templates -> System. Then, select the Removable Storage Access folder as shown in the below picture. Finally, double-click on All Removable Storage classes: Deny all access.

7. On the GPO configuration window, check the Enabled option. Then, click OK and close the GPM Editor window.

8. The GPO configuration is all set throughout the previous steps. However, it will affect only after we perform a group policy update on the client machine or restart it. So, to perform a group policy update, use gpupdate /force the Command Prompt or Run dialogue box.

9. Now, if you insert a removable media like a USB drive and try to open it, you will face an error saying the media is not accessible.

That is all with the steps to deny users access to removable storage media using group policy.

Conclusion

To conclude this article, first, we talked about the importance of restricting users’ access and discussed the Group Policy Management tool. Then, we briefly introduced our scenario. Lastly, we covered detailed steps to prevent users’ access to removable storage media.

In the end, as always, I hope you find this article helpful. And feel free to share your thoughts and queries in the comment section.

The post How to Prevent Access to Removable Storage Media Using Group Policy? appeared first on TECHNIG.

When you store a massive amount of data in your system disks, you may find duplicated data. The duplicated data will impact storage efficiency. This probability is more actual when you save more similar files in your storage. For example, consider an educational center that stores thousands of students’ files with a high volume of similar contents and structures. Fortunately, data Deduplication technology can manage duplicated data and improve storage efficiency. Data Deduplication is a process that eliminates the excessive copies of data and decreases the storage capacity requirements. In this article, we write on How to install and enable data Deduplication on Windows Server 2022. So, tune in with us till the end.

Important note: Data Deduplication can deduplicate data on NTFS and ReFS only.

Install data deduplication on Windows Server 2022

You can install the data deduplication feature on the windows server through the Server Manager, PowerShell, and Windows Admin Center. I will use the Server Manager to install the Dedup roles and features on Windows Server 2022 in this session. Follow me with the steps below to install:

1. Open the Server Manager.
2. On the server manager dashboard, click on Add roles and Features. (Or on the Manage >Add Roles and Features)
3. In the Before You Begin wizard, click on the Next button.
4. Select the installation type: Role-based or feature-based installation, and click next.
5. Select the destination server and click next.
6. Find the File and Storage Services in the Server Roles wizard and expand it. Expand the File and iSCSI Services.

7. Find the Data Deduplication feature and tick it. Click on the Add features button.
8. Click on the Next button till the Installation button activates. And click on the Install button. Wait for a few seconds; the feature will install.
9. Finally, close the wizard.

How to enable data deduplication on Server 2022?

After installing the data deduplication feature on your Windows Server, now you should enable it on a volume.

1. Determine on which volume you are going to apply the data deduplication. (You cannot implement it on the C drive)
2. Open the Server Manager dashboard.
3. On the left-hand side, click on File and Storage Services.

4. Click on the Volumes.
5. Right-click on the desired volumes, and click on the Configure data deduplication.

6. You see, the data deduplication is disabled by default. Click on the drop-down menu to enable it. Select a proper answer from the three options below:
   1. General-purpose file server: it is used for general purpose (I select this one here)
   2. Virtual desktop infrastructure server: choose this option if you use it for virtualization.
   3. Virtualized backup server: Select this option if you use the virtual machine as a backup server.

7. Additionally, You can input a number to tell the server that starts deduplicating your files in a volume after some days. By default, it is three days. Here I want my server to deduplicate right now; that’s why I choose the 0 number.

8. If you want to exclude some files and folders and do not want them to be deduplicated, click on the Add button and select the folder. Or write file extension and click enter.

How to Schedule the Deduplication on Windows Server 2022?

Additionally, in the Deduplication setting wizard, you see the Set Deduplication Schedule button. Click on that to schedule the Deduplication on your server.

You can set the time to start the Deduplication process and specify the Deduplication’s day, hours, and duration. Moreover, you can create a second schedule for throughput optimization. After you set the scheduled time, click Ok.

How to Run Data Deduplication process on Volumes?

Now that you have installed the Data deduplication feature and enabled it on your Windows Server. You should know that it does not start deduplicating immediately. It will start running in the background when the system is idle or according to the time you specified in the schedule. However, you can run the Deduplication job on the targeted volumes manually. To illustrate it further, I have an E: drive on my system and want to implement the Deduplication process. To do that, I run the PowerShell as an administrator and write the following command, and enter.

Start-DedupJob –Volume "Name_of_Volume" –Type Optimization

Conclusions

To conclude, you learned to install and enable data deduplication on Windows 2022. Data deduplication is a great way to enhance the efficiency of your storage on a Windows server. I hope you can benefit from this feature on your server to save storage space. You can write down in the comment section your thoughts and questions.

The post How to Install and Enable Data Deduplication in Windows Server 2022 appeared first on TECHNIG.

Have you noticed a tiny window pops up when opening the Server Manager and asking to use the Windows Admin Center to manage Windows Server? Windows Admin Center is a free and browser-based platform used to manage Windows Server and Windows clients. This app gives complete control over all aspects of Windows Server infrastructure and improves the management environment. Additionally, this app brings together all the features in one platform and allows you to configure them remotely. In this session, We will discuss how to download and install Windows Admin Center on Windows Server 2022. Since the process is the same, you can use and implement it on Windows 11 or other Windows versions with slight differences.

How to download Windows Admin Center?

The Windows Admin Center has not been installed by default; you need to download it first. Open Microsoft Edge to download the windows admin center and click on https://aka.ms/WACDownload. The download will start automatically. Alternatively, you can search Windows Admin Center on other search engines, such as Google Chrome, and download it from docs.microsoft.com.

After the Windows Admin Center download, let’s go ahead with the installation.

How to install Windows Admin Center on Windows Server 2022

After downloading, go to the download directory and follow the steps below to install the setup.

1. Double-click on the setup to start the installation.
2. If you agree with license terms, accept the terms and click next.

3. Select the option to send the diagnostic data to Microsoft to make Windows Admin Center better. I go with the “Required diagnostic data” option and click next.

4. If your server is not up to date or you want to check for the update, select the “Use Microsoft Update” option. Otherwise, check the “don’t want to use the Microsoft update” and click next. I go with the second option.

5. Generally, Desktop (Local) mode and gateway mode are supported on Windows Admin Center for the operating system. In the image below, the wizard summarizes the gateway mode; click next.

6. The “Use WinRM over HTTPS only” is a new option with the latest updated Windows Admin Center versions. It is used to encrypt the data being sent across the wire. Since it is a broad subject and needs another article, I will use the default settings now.

7. The new wizard asks to enter the port number and certificates. By default, in gateway mode, it uses the 443 port number. Although, you can change the port number according to the requirement. Moreover, if you have installed the SSL certificate on your computer, select the second option and provide the thumbprint for the gateway SSL certificate. Since I have not installed the SSL Certificate on my system, I will use the default setting and click the Install button.

Manage Windows Admin Center

After seeing the final wizard, “Ready to Connect from a PC,” you have successfully installed the Windows Admin Center. In the last wizard, you see a URL that you can use that link to open the Windows Admin Center on a browser. If you click on this URL, it asks about the credential. Enter the user name and password, then click ok.

Another URL in the final wizard lets you know which browsers support the Windows Admin Center. Microsoft Edge and Google Chrome are primarily the two browsers supporting this app.

Another direct way to open the Windows Admin Center is through the browsers. Open Microsoft edge or google chrome and write the URL (https://localhost/full_Server_Name) and enter. Click on the server name to connect. You are in the Windows Admin Center environment. Now you can manage your servers from the Windows Admin Center.

Conclusions

This article discussed how to download the Windows Admin Center and install it on your Windows Server 2022. I hope the article could sharpen your skills further and If you have questions, write them in the comment section of this page.

The post How to Download and Install Windows Admin Center on Windows Server 2022 appeared first on TECHNIG.

Whenever a new server administrator or user comes on board, you need to get him a new user account to let them join the network and start his/her job. In the following article, I will create a new user account by the name of Ali Hasnain using Server Manager and PowerShell. By the end of this article, I hope you can easily add a new user to Windows Server 2022.

Related: Download Windows Server 2022 ISO File for Free

Add new user on Windows Server 2022

You can add a new user account on Windows Server either through PowerShell or Server Manager.

How to add a new user using Server Manager?

To add a new user via the Server Manager, follow the steps below:

1. Open the Server Manager (You can search it in the Search Box or open it from the Start Menu)
2. Click on the Tools on the top right-hand side of the Server Manager Dashboard window. Find, Active Directory Users and Computers from the drop-down menu and click on it.

3. On the Active Directory Users and Computers window, you will see the domain name on the top left-hand side. Click on the domain name to expand it.
4. There are multiple folders (containers) and organizational units. Find the Users container and left-click on it. You will see all the existing users and groups.

5. If you right-click on the Users folder, a right-click menu shows up. Then click on the New > Users to add a new user.

6. Fill in the new user’s first name, last name, and user login name in the new dialog box and click next.

7. Enter the new password, and confirm it. Moreover, there are four options that you can check or uncheck according to your wish. If you want the user to change the password at the next login, tick the first option. Select the second option if you do not allow the user to change the password. You can read each option’s instructions and act according to your wish.

You have created a new user account, go back to the Users container, and see the new user added to the list. If you want to edit the user information, you can double-click on the user and add or change the user information from the user’s properties.

How to create a Local User Account on Windows Server from PowerShell?

The second way to create a user account on Windows Server 2022 is through PowerShell. To do that, you must run PowerShell ISE as an administrator. In the PowerShell window, write the following commands and enter:

New-LocalUser –Name “Name_of_the_User” –NoPassword  

The above command creates a new user without a password. Remember to write the new user’s name between the quotation marks. If you want to add more details of the new user, such as full name and description, write the command below:

New-LocalUser –Name "Name_of_The_User" –FullName "Full_Name_of_User" –Description "write the description for the user" –NoPassword.

This command adds a description and full name for the new user. (Write the description and full name between the quotation marks).

If you want to create a new user with a password, first, you must define a variable ($Password Statement) to store the password securely as a secure string. Write the below command and enter. A password box pops up, enter the password and click OK.

$Password = Read-Host –AsSecureString

The $Password statement defines a variable to save the password as a secure string. Now write the command below to create a new user.

New-LocalUser –name “Name_of_User” –Password $Password

Instead of giving a password directly, you may notice that we used the variable name ($password), and this variable name contains the password.

Now you created a user with PowerShell. To see the list of users, write the command below and enter:

Get-LocalUser

Conclusion

In this article, you have learned to create a new user using the Server Manager and PowerShell. You can now create a new user on your Windows Server system and use that account easily to log into your system.

You may like: How to Disable Server Manager Auto-Launch in Windows Server 2022

The post How to Add New User Account on Windows Server 2022 appeared first on TECHNIG.