Show Menu
Cheatography

Web Server Management Cheat Sheet (DRAFT) by

A cheat sheet for revision purposes. Focused on commands, key steps, definitions, and labs.

This is a draft cheat sheet. It is a work in progress and is not finished yet.

1.De­fin­iti­ons

Windows Server 2019
Enterprise OS for AD DS, DNS, DHCP, File/P­rint, Web, Virtua­liz­ation
Domain Controller (DC)
Server authen­tic­ating users, enforcing policies, replic­ating AD
Active Directory (AD DS)
Directory service for managing users, computers, policies
DNS
Resolves hostnames to IP addresses
DHCP
Automates IP address assignment
GPO
Group Policy Object – rules/­set­tings applied to users/­com­puters
PKI
Public Key Infras­tru­cture – manages digital certif­icates
Windows Defender Antivirus
Built-in malware protection
Windows Firewall with Advanced Security
Stateful firewall with rule-based inboun­d/o­utbound filtering
Remote Toolsets & Event Logs
MMC, RSAT, Event Viewer for monitoring and managing servers
Server Core
Minimal instal­lation with CLI/Po­wer­Shell interface
PowerShell
CLI + scripting enviro­nment for automation
Windows Admin Center
GUI for remote management of Server Core/GUI servers
Nano Server
Lightw­eight container host
Containers
Virtua­lized app enviro­nments: Windows Server or Hyper-V containers
Docker & Kubernetes
Container deployment and orches­tration tools
Shielded VMs
Protect VM data from tampering
NLB
Distri­butes network traffic across multiple servers
Failover Cluster
Ensures high availa­bility for applic­ations

2. Quick Step-b­y-Step Tasks

Task
Steps
Install Server
GUI/Core → IP, hostname, domain join → Updates
Create Domain
Install AD DS → Promote DC → Configure DNS
Create OU/User
ADUC → New OU → Add Users/­Groups → Link GPO
DHCP Scope
DHCP → New Scope → Set IP range → Activate → Reserv­ati­ons­/Fa­ilover
DNS Zone
Create Primar­y/S­eco­ndary → Add A, AAAA, CNAME, MX records
GPO
Create → Link OU → Configure policies → Update with
gpupdate /force
Hyper-V VM
New VM Wizard → CPU/RAM → Virtual Switch → Install OS
Containers
Pull image → Run container → Configure app → Test connec­tivity
NLB
Install NLB → Add servers → Assign VIP → Test
Failover Cluster
Install feature → Validate → Create cluster → Add nodes
Security
Enable Defender, configure Firewall → BitLocker → VPN/Di­rec­tAccess → ATA monitoring
Monitoring
Task Manager, Resource Monitor, Perfor­mance Monitor → Check CPU, memory, disk, network → Event Viewer for logs

4. Scenar­io-­Based Tips

DC Failure: Verify replic­ation → DNS → Restore DC.
Slow Login / High CPU: Task Manager → Resource Monitor → Event Logs → Optimize processes.
Web App HA: NLB or failover cluster → Test load distri­bution.
Remote Branch Access: Configure VPN/AOVPN → Assign certif­icates → Test connec­tivity.
Password Policy / SSL Deploy­ment: GPO → Apply → Issue certif­icates → Install SSL on server.

PowerShell Tips

# List running services
Get-Service | Where-Object {$_.Status -eq "Running"}

# Restart a service
Restart-Service -Name "Spooler"

# DSC Configuration
Start-DscConfiguration -Path "C:\DSC" 
-Wait -Verbose

DHCP

# Add Scope
Add-DhcpServerv4Scope
-Name "OfficeScope"
-StartRange 192.168.1.10 -EndRange 192.168.1.50
-SubnetMask 255.255.255.0

# Reservation
Add-DhcpServerv4Reservation -ScopeId 192.168.1.0
-IPAddress 192.168.1.20
-ClientId "AA-BB-CC-DD-EE-FF"

DNS

# Add A Record
Add-DnsServerResourceRecordA -Name "WebServer" 
-ZoneName "domain.name.com" 
-IPv4Address "192.168.1.100"
 

Active Directory & GPO

# Install AD DS
Install-WindowsFeature AD-Domain-Services

# Create domain
Install-ADDSForest -DomainName "domain.name.com"

# Create GPO
New-GPO -Name "PasswordPolicy" | New-GPLink 
-Target "OU=Users,DC=contoso,DC=com"

Hyper-V

# Create VM
New-VM -Name "WebVM" -MemoryStartupBytes 2GB -Generation 2 
-SwitchName "ExternalSwitch"

# Start VM
Start-VM -Name "WebVM"

Containers

docker pull mcr.microsoft.com/windows/servercore
docker run -it mcr.microsoft.com/windows
/servercore powershell
docker run --isolation=hyperv -it <image>

5. Lab Checklist

Install Server GUI & Core
Configure IP, hostname, join domain
Create OUs, users, groups, GPOs
DHCP scope/­res­erv­ati­on/­fai­lover
DNS zones & records
Hyper-V VM & virtual switch creation
Deploy Windows & Hyper-V containers
Configure NLB & failover cluster
Enable Defender, Firewall, BitLocker, VPN/AOVPN, ATA
Monitor system: Task Manager, Perf Monitor, Event Logs
Use PowerShell for automation & troubl­esh­ooting