Server Core 2012 R2 Thoughts

Server 2012 R2 Core Thoughts

1. Auto configured IP address is preferred – Solved Duplicated IP PoshFix
2. Enable Remote Administration – Done – sconfig OR
   1. Check Firewall– Get-NetFirewallProfile
   2. Set Firewall – Set-NetFirewallProfile –Name Domain –Enabled False
   3. Check Remote Desktop -Get-ItemProperty -Path “HKLM:\System\CurrentControlSet\Control\Terminal Server”
      the one we’re interested is “fDenyTSConnections” – must be 0
   4. Set Remote Desktop – Set-ItemProperty –Path HKLM:\System\CurrentControlSet\Control\Terminal Server” -Name “fDenyTSConnections” –Value 0
3. Set IP/DNS – sconfig OR
   1. Check – ipconfig /all OR Get-NetIPAddress
   2. Get Adapter index – Get-NetAdapter (ifIndex)
   3. Set – Set-IPAdd                ress 1.1.1.1 –InterfaceIndex (ifIndex) –AddressFamily IPv4 –Type Unicast –PrefixLenght (prefixlenght)
   4. Set-DnsClientServerAddress –InerfaceIndex (ifIndex) –ServerAddresses 1.1.1.1,2.2.2.2 (separated by comma, if DC I would put it’s own IP address as first, existing DC as second and 127.0.0.1 as third)
4. Proxy With Authentication – Working On it…….Seems impossible………but I did it, deserve an additional article
5. Run Update-Help
6. Firewall – Set Firewall – Set-NetFirewallProfile –Name Domain –Enabled False
7. Install Additional DC to an existing forest – Optional Step, self-explaining script on the second page
8. Updates Verification – Done Through PowerShell Modules (PSWindowsUpdates)
9. Upgrade PowerShell to 5.1 –
   1. Copy-Item “ \\netshare\Software\Microsoft\Powershell v5.0\ Win8.1AndW2K12R2-KB3134758-x64.msu” C:\Temp
   2. run wusa Win8.1AndW2K12R2-KB3134758-x64.msu /quiet from C:\temp folder
10. Install SCCM Client – Done through SCCM Console

#Install-WindowsFeature AD-Domain-Services -IncludeManagementTools `
Install-ADDSDomainController  `
-CreateDnsDelegation:$false `
-DatabasePath “C:\Windows\NTDS” `
-DomainName “Domain.name” `
-InstallDns:$true `
-LogPath “C:\Windows\NTDS” `
-NoRebootOnCompletion:$false `
-SysvolPath “C:\Windows\SYSVOL” `
-NoGlobalCatalog:$false `
-SafeModeAdministratorPassword `
(ConvertTo-SecureString “SafeModeAdminPassword” -AsPlainText -Force) `