Windows Server 2012 R2

Client /Server Network Operating
System Configuration
Addis Ababa, Ethiopia

2016 EC
By : kelemework Dagne Alemu

+251947400195/4
+251901013870
Kelemework2011@outlook.com
Kelemework2011@gmail.com
Window 2012 server /// Saturday, December 2, 2023
Contents
1. Install Windows Server 2012 R2 ........................................................................................................... 4
2. Initial setting ......................................................................................................................................... 8
2.1 Add Local User .................................................................................................................................... 9
2.2 Change Admin User Name ............................................................................................................... 12
2.3 Computer Name .............................................................................................................................. 14
2.4 Set Static IP Address ........................................................................................................................ 17
2.5 Windows Update............................................................................................................................. 20
2.6 Allow ICMP Echo Reply .................................................................................................................... 21
3. Configure NTP Server .......................................................................................................................... 26
3.2 Configure NTP Client ......................................................................................................................... 30
4. Remote Desktop: Server Settings ....................................................................................................... 35
4.1 Remote Desktop: Server side Settings .............................................................................................. 35
4.2 Remote Desktop: Client Settings ...................................................................................................... 38
4.3 Remote Desktop Service: Install ....................................................................................................... 40
4.4 Remote Desktop Service: Create Session Collections ....................................................................... 46
4.5 Remote Desktop Service: Publish RemoteApp ................................................................................ 50
4.6 Remote Desktop Service: Connect to RemoteApp ........................................................................... 53
5. DNS Server: Install............................................................................................................................... 57
5.1 Install DNS Server .............................................................................................................................. 57
5.2 DNS Server: Add Forward lookup Zone............................................................................................ 62
5.3 DNS Server: Add Reverse lookup Zone ............................................................................................. 68
5.4 DNS Server: Add A/PTR record ......................................................................................................... 73
5.5 DNS Server: Add MX record .............................................................................................................. 75
6.6 DNS Server: Add CNAME record ....................................................................................................... 77
6. Active Directory: Install ....................................................................................................................... 80
6.1 Install AD DS ...................................................................................................................................... 80
7. Active Directory: Configure ................................................................................................................. 88
7.2. Active Directory: Add User Accounts .......................................................................................... 96
7.3. Active Directory: Add Group Accounts ....................................................................................... 99
https://www.server-world.info/en/note?os=Windows_Server_2012&p=remotedesktop&f=1 2
By:kelemework.Dage
7.4. Deletion of Organizational Unit ................................................................................................ 102

7.5. Active Directory: Add Computer Accounts ............................................................................... 104
7.6. Active Directory: Add Users with a Batch ................................................................................. 105
7.7. Active Directory: Join in Domain from Clients .......................................................................... 109
8. DHCP Server: Install .......................................................................................................................... 115
8.2. Install DHCP ............................................................................................................................... 115
8.3. DHCP Server: Configure ............................................................................................................ 121
8.4. Configure DHCP Client. ............................................................................................................. 132
9. iSCSI: Install iSCSI Target ................................................................................................................... 134
9.1. Install iSCSI Target ..................................................................................................................... 134
9.2. Configure iSCSI Target ............................................................................................................... 139
9.3. Configure iSCSI Initiator (Server OS) target #1 ......................................................................... 146
9.4. Configure iSCSI Initiator (Client OS) Target #2 .......................................................................... 152
10. NFS Server ..................................................................................................................................... 158
10.1. Install NFS Server to share folders. ....................................................................................... 158
10.2. Configure NFS Shared Folder ................................................................................................ 163
10.3. Configure NFS Client (Server OS) .......................................................................................... 169
10.4. Configure NFS Client (Client OS) ........................................................................................... 175
11. Basic File Sharing ........................................................................................................................... 177
11.1. Basic File Sharing settings. .................................................................................................... 177
11.2. Access to Shared Folder ........................................................................................................ 179
11.3. File Server: Install .................................................................................................................. 183
11.4. File Server: Configure Shared folder ..................................................................................... 186
11.5. File Server: Access Permission .............................................................................................. 192
11.6. File Server: Object Access Audit............................................................................................ 196
12. Install OpenSSH ............................................................................................................................. 201
12.1. Use SysPrep ........................................................................................................................... 209
By:kelemework.Dage
1. Install Windows Server 2012 R2

[1] Insert Windows Server install media and start the Computer, Then, Following
screen is displayed, Proceed next to click "Next" button.
[2] Click "Install Now" to start installation.
By:kelemework.Dage
[3] Select the edition of Windows server you'd like to install.

It selects "Datacenter with Graphical ***" version on this example.
[4] Read License Terms Well and check a box "I acceppt ***" to proceed next.
By:kelemework.Dage
[5] For newly installation of Windows server, select "Custom: Install Windows only".
[6] Select a partition to install Windows Server.
[7] Installation of Windows Server starts. During installation, computer restarts for few times.
By:kelemework.Dage
[8] After restarting for few times, following screen is shown, then Set Administrator password.
[9] Push Ctrl+Alt+Del key to sign -in.
[10] Input the Administrator password you set on section [8] to sign -in.
[11] Just logon to Windows Server.
By:kelemework.Dage
[12] This is the Desktop on Windows Server 2012R2. Installation of Windows Server com pletes.
2. Initial setting
(01) Add Local User
(02) Change Admin User Name
(03) Set Computer Name
(04) Set Static IP Address
(05) W indows Update
(06) Allow ICMP Echo Reply
By:kelemework.Dage
2.1 Add Local User
Add Local Users.
[1] Click Windows icon with Right button and open [Computer Management].
[2] Click [Users] with Right button under the [Local Users and Groups] section and
select [New User].
[3] Input User-Name and Password for new user and click [Create] button. Other intems are optiona
By:kelemework.Dage
[4] After creating normally, New user is shown on the list like follows.
[5] If you'd like to set administrative priviledge to the new user, click the user with
Right button and open [Properties].
By:kelemework.Dage
[6] Move to [member of] tab and click [Add] button.
[7] Specify [Administrators] group like follows.
By:kelemework.Dage
[8] Make sure [Administrators] group is added and click [OK] button.
2.2 Change Admin User Name

Change Administrator User Name for security reason.
[1] Click Windows icon with Right button and open [Computer Management].
By:kelemework.Dage
[2] Open [Local Users and Groups] - [Users] and click [Administrator] with Right
button and select [Rename]. Change any name you like.
[3] Administrator Name is just changed.
By:kelemework.Dage
2.3 Computer Name

The Computer Name is assigned automatically by default, so change it.
[1] Open [Server Manager] and click [Computer Name] section.
[2] Move to [Computer Name] tab and click [Change] button.
By:kelemework.Dage
[3] Input any Computer Name you like in [Computer Name] field and next, click [More] button.
[4] Input Domain name this Computer is in.
By:kelemework.Dage
[5] Restarting Computer is required for applying changes.
[6] Computer Name is changed normally.
By:kelemework.Dage
2.4 Set Static IP Address
IP address is assigned by DHCP by default, so set Static IP address for Server

usage. This example shows to set only IPv4 address.
[1] Open [Server Manager] and click [Ethernet] section.
By:kelemework.Dage
[2] Click [Ethernet] icon with right button and select [Properties].
[3] Select [Internet Protocol Version 4] and click [Properties] button.
By:kelemework.Dage
[4] Set Static IP address and Gateway and others for your local network.
[5] After setting static IP address, changes are enabled on Server Manager.
By:kelemework.Dage
2.5 Windows Update
Apply latest update to the System after installing.
[1] Open [Control Panel] - [Windows Update] and click [Change settings].
[2] Select a way to installing updates for yo ur Server usage. This example selects
[Download updates but let me choose whether to install them].
[3] To install updates, click "** importnat updates are available".
By:kelemework.Dage
[4] After finishing installation, restart your System to apply changes.
2.6 Allow ICMP Echo Reply

The default setting of Windows Firewall blocks ICMP, so the Server will never
reply from other Hosts with ping command. If you'd like to allow ICMP, Set like
follows.
[1] Open [Start] - [Tools] - [Windows Firewall with Advanced Security].
By:kelemework.Dage
[2] Select [Inbound Rules] on the left Pane and click [New Rule] on the right Pane.
[3] Select "Custom".
By:kelemework.Dage
[4] Select "All programs".
[5] Select "ICMPv4" on the [Protocol Type].
By:kelemework.Dage
[6] Specify the range of network for allow ICMP.
[7] Select "Allow the connection".
By:kelemework.Dage
[8] Select the network profiles which you allow ICMP.
[9] Input any name for [Name] field. It's OK all, your Server will reply to ping command from
other Hosts.
By:kelemework.Dage
3. Configure NTP Server
3.1 Configure NTP
Configure NTP Server for Time Sync.
[1] Right-click Windows icon and open [run] and input "gpedit.msc" like follows.
[2] Select [Administrative template] - [System] - [Windows Time Service] [Time

Providers] on the left Pane, and Open [Enable Windows NTP Server] on the right
Pane.
By:kelemework.Dage
[3] Check a box [Enabled] which is upper -left like follows.
[4] Back to [Windows Time Service] on the left Pane, and click to Open [Globa
Configuration Settings].
By:kelemework.Dage
[5] Check a box [Enabled] which is upper-left and change [AnnounceFlag] to [5] like
follows. Then Close Group-Policy-Editor.
By:kelemework.Dage
[6] Open [Server Manager] - [Tools] - [Services].
[7] Select [Windows Time] Service and click [Start the service] or [Restart the
service]. Furthermore, Change [Startup type] to [Automatic] if it is not the value.
[8] If Windows Firewall is enabled, allow 123/UDP like follows.
By:kelemework.Dage
3.2 Configure NTP Client
Configure NTP Client
[1] Right-click Windows icon and open [run] and input "gpedit.msc" like follows.
By:kelemework.Dage
[2] Select [Administrative template] - [System] - [Windows Time Service] [Time

Providers] on the left Pane, and Open [Enable Windows NTP Client] on the right
Pane.
[3] Check a box [Enabled] which is upper -left like follows.
[4] Click to open [Configure Windows NTP Client] on the right Pane.
By:kelemework.Dage
[5] Check a box [Enabled] which is upper -left and change values for your
environment.
[NtpServer] ⇒ Hostname or IP address of your NTP Server.

The value [0x9] is generally OK to keep default. [0x9] means [0x01] + [0x08].
They mean like follows.
0x01 SpecialInterval
0x02 UseAsFallbackOnly
0x04 SymmetricActive
0x08 NTP request in Client mode
For [Type] section, It's OK to keep default [NT5DS] if your computer is in a

Domain, but if not, change to [NTP].
For [SpecialPollInterval], set interval to sync time.
By:kelemework.Dage
[6] Open [Server Manager] - [Tools] - [Services].
By:kelemework.Dage
[7] Select [Windows Time] Service and click [Start the service] or [Restart the
service]. Furthermore, Change [Startup type] to [Automatic] if it is not the value.
By:kelemework.Dage
4. Remote Desktop: Server Settings

(01) Server Settings
(02) Client Settings
(03) Install RDS
(04) Create Collections
(05) Publish RemoteApp
(06) Connect RemoteApp
4.1 Remote Desktop: Server side Settings

Enable Remote Desktop to connect to the Server from other Computers.
This exmaple shows to enable single session function of Remote Desktop which
Windows ClientOSs also have.
[1] Run Server Manager and Select [Local Server] on the left Pane, then click
[Disabled] for [Remote Desktop] section.
By:kelemework.Dage
[2] Check a box [Allow remote connections to this computer].
[3] The message that Firewall exception for Remote desktop is enabled, click [OK] button.
By:kelemework.Dage
[4] Click [OK] button to apply settings.
[5] Remote Desktop function has turned to [Enabled].
By:kelemework.Dage
4.2 Remote Desktop: Client Settings

This is how to connect to Remote Desktop session from ClientOS. This exmaple is
on Windows 10 Pro.
[1] Right-click Windows icon and open [run] and input "mstsc" like follows.
[2] Input Hostname or IP address you'd like to connect and click [Conn ect] button.
For other sections, change or set any parameter you like.
[3] Input Username and Password you'd like to logon as.
By:kelemework.Dage
[4] The message for Certificates is shown like follows. Click [Yes] to proceed.
By:kelemework.Dage
[5] Just connected.
4.3 Remote Desktop Service: Install

Install Remote Desktop Service. It can connect to a Server with multi session
from remote Computers.
[1] It needs that the Computer you'd like to install RDS (Remote Desktop Service) is
a domain member Server.
(It is not recommended to install RDS in Domain Controller because of security
risk or performance reasons.)
[2] Run Server Manager and Click [Add roles and features].
By:kelemework.Dage
[3] Click [Next] button.
[4] Select [Remote Desktop Services installation].
By:kelemework.Dage
[5] On this example, select [Standard deployment] to proceed.
[6] On this example, select [Session -based desktop deployment].
By:kelemework.Dage
[8] Specify Remote Desktop connection broker server. The servers in the Domain are
listed, select from it.
By:kelemework.Dage
[9] Specify Remote Desktop Web Access server. The servers in the Domain are listed,
select from it.
[10] Specify Remote Desktop Session Host server. The servers in the Domain are
By:kelemework.Dage
[11] Check a box [Restart the destination server automatically if required] and click
[Deploy] button.
[12] During installation, System will restart once. After finishing installation, Click
[Close] button.
By:kelemework.Dage
4.4 Remote Desktop Service: Create Session Collections

Create Session Collections to manage Remote Desktop Service.
[1] Run Server Manager and Select [Remote Desktop Services] on the left pane.
[2] Click [Create session collections] on the right pane.
By:kelemework.Dage
[4] Specify session collection name.
By:kelemework.Dage
[5] Specify Remote Desktop session Host server. The servers in the Domain are
[6] Specify users or groups you allow to access to session collection.
By:kelemework.Dage
[7] Specify user profile disks. If enable d, it's possible to use the same settings on
other environment.
[8] Confirm selections and click [Create] button if all OK.
By:kelemework.Dage
[9] After finishing all, click [Close] button.
4.5 Remote Desktop Service: Publish RemoteApp
By:kelemework.Dage
Publish RemoteApp to connect to applications remotely from other computers.
[1] Run Server Manager and Click Session Collection you created in previous section .
(the example of it below is "RX-7.srv.world")
[2] Click [Publish RemoteApp programs] on the right pane.
[3] Check boxes of programs you'd like to publish.This example selects "Server
Manager" to proceed.
By:kelemework.Dage
[4] Click [Publish] button to apply settings.
[5] Click [Close] button to finish settings.

For connecting from Clients, refer to the next section .
By:kelemework.Dage
M a t c h e d C o n t e n t
4.6 Remote Desktop Service: Connect to RemoteApp

Connect to published RemoteApp on RDS server from Client computers.
This example is on Windows 10 pro which is not in Active Directory Domain. (but
primary DNS setting is AD)
[1] Run Web Browser and access to [https://(RemoteApp publis hed server)/RdWeb/].
Then, input username and password who is allowed to access by session
collection setting.
By:kelemework.Dage
[2] After signing-in normally, following screen is shown. Click an icon you'd like to
run remote program.
[3] Click [Connect] button if it's OK to connect.
By:kelemework.Dage
[4] Just connected to RemoteApp. RemoteApp shows only application Window not
whole desktop like follows.
[5] By the way, it's possible to connect to whole Desktop. Click [Connect to a remote
PC] and Specify the server or screen resolution and so on.
By:kelemework.Dage
[6] Just connected.
By:kelemework.Dage
5. DNS Server: Install

(01) Install DNS Server
(02) Forward lookup Zone
(03) Reverse lookup Zone
(04) A/PTR record
(05) MX record
(06) CNAME record
5.1 Install DNS Server

Configure DNS Server to resolve Hostname or IP Address.
By:kelemework.Dage
[3] Select [Role-based or feature-based installation].
[4] Select a Host which you'd like to add services.
By:kelemework.Dage
[5] Check a box [DNS Server].
[6] Addtional features are required to add DNS Server. Click [Add Features] button.
By:kelemework.Dage
By:kelemework.Dage
[10] Click [Install] button.
By:kelemework.Dage
[11] After finishing Installation, click [Close] button.
5.2 DNS Server: Add Forward lookup Zone

Add Forward lookup Zone.
[1] Run Server Manager and select [Tools] - [DNS].
By:kelemework.Dage
[2] Select own Hostname on the left pane and right -click the own Hostname to show
menu on the left pane, then select [New Zone...].
By:kelemework.Dage
[4] Check a box [Primary zone] and click [Next] button.
[5] Check a box [Forward lookup Zone] and click [Next] button.
By:kelemework.Dage
[6] Input Zone name. As the description on the screen -shot below, set domain name
or portion of domain name for this zone name.
By:kelemework.Dage
[7] Set zone-file-name and click [Next] button. It's OK to keep default for zone -file-name.
[8] Click [Next] button with keeping default.
By:kelemework.Dage
[9] Click [Finish] button.
[10] A new zone has been created under the Forward lookup Zone.
By:kelemework.Dage
5.3 DNS Server: Add Reverse lookup Zone

Add Reverse lookup Zone.
[1] Run Server Manager and select [Tools] - [DNS], next right-click [Reverse lookup
Zones...] to show menu on the left pane, then select [New Zone...].
By:kelemework.Dage
[3] Check a box [Primary zone] and click [Next] button.
[4] Check a box [IPv4 Reverse lookup Zone] and click [Next] button.
By:kelemework.Dage
[5] Input [Network ID]. The example follows is for the case 10.0.0.0/24.
[6] Set zone-file-name and click [Next] button. It's OK to keep default for zone -file-name.
By:kelemework.Dage
[7] Click [Next] button with keeping default.
[8] Click [Finish] button.
By:kelemework.Dage
[9] A new zone has been created under the Reverse lookup Zone.
By:kelemework.Dage
5.4 DNS Server: Add A/PTR record

Add A/PTR record.
[1] Run Server Manager and select [Too ls] - [DNS], next right-click the own domain
name to show menu on the left pane, then select [New Host(A or AAA)...].
[2] Input Hostname and IP address you'd like to add.

Furthermore, check a box [Create associated pointer (PTR) record].
By:kelemework.Dage
[3] A new A-record has beed just added.
[4] Make sure with nslookup to resolve Hostname or IP address.
By:kelemework.Dage
5.5 DNS Server: Add MX record

Add MX record to define Mail Server to use.
[1] Run Server Manager and select [Tools] - [DNS], next right-click the own domain
name to show menu on the left pane, then select [New Mail Exchanger(MX)...].
By:kelemework.Dage
[2] Input Hostname and FQDN of Mail exchanger like follows.
[3] A new Mail exchanger record has beed just added.
By:kelemework.Dage
6.6 DNS Server: Add CNAME record

Add CNAME record which is another name of an A -record.
[1] Run Server Manager and select [Tools] - [DNS], next right-click the own domain
name to show menu on the left pane, then select [New Alias (CNAME)...].
By:kelemework.Dage
[2] Input Alias name and FQDN, and a lso target Hostname like follows.
[3] A new CNAME record has beed just added.
By:kelemework.Dage
[4] Make sure with nslookup to resolve the Alias Name.
By:kelemework.Dage
6. Active Directory: Install

(01) Install AD DS
(02) Configure DC
(03) Add User Accounts
(04) Add Group Accounts
(05) Add OU
(06) Add Computers
(07) Add Users with Batch
(08) Clients's Set
6.1 Install AD DS
Install Active Directory Domain Service.
[1] Run [Start] - [Server Manager].
[2] Click [Add roles and features].
By:kelemework.Dage
[3] Clici [Next] button.
By:kelemework.Dage
By:kelemework.Dage
[6] Check a box [Active Directory Domain Services].
By:kelemework.Dage
[7] Addtional features are required to add AD DS. Click [Add Features] button.
By:kelemework.Dage
By:kelemework.Dage
[12] Installation is started.
By:kelemework.Dage
By:kelemework.Dage
7. Active Directory: Configure
Configure New DC (Domain Controller).
[1] Run [Server Manager] and click [AD DS].
[2] Click [More...] link which is upper -right.
By:kelemework.Dage
[3] Click [Promote this server to domain...] link.
By:kelemework.Dage
[4] Check a box [Add a new forest] and input any Domain name you'd like to set for
[Root domain name] field.
By:kelemework.Dage
[5] Select [Forest functional level] and [Domain functional level]. This example
shows to select [Windows Server 2012R2] both. Furthermore, Set any pass word
for Directory Services Restore Mode.
By:kelemework.Dage
By:kelemework.Dage
[7] Set NetBIOS name.
[8] Specify Database folder or Log folder and so on. It's Ok to keep default if you
don't have specific requirements.
By:kelemework.Dage
[9] Check the contents you configured and click [Next] button.
By:kelemework.Dage
[10] Click [Install] button. After finishing installation, System will restart.
[11] After restarting System, logon name is changed as [Domain name] \[User name].
By:kelemework.Dage
7.2. Active Directory: Add User Accounts

Add User Accounts on Active Directory.
[1] Run [Server Manager] and click [Tools] - [Active Directory Users and Conputers].
[2] Click with right button [Users] on left tree and select [New] - [User].
By:kelemework.Dage
[3] Input User name or Logon name for new user.
[4] Set initial password for new User.
By:kelemework.Dage
[5] Check contents you set and click [Finish] button.
[6] A new user is just added.
By:kelemework.Dage
7.3. Active Directory: Add Group Accounts

Add Group Accounts on Active Directory.
[1] Run [Server Manager] and open [Tools] - [Active Directory Users and Conputers],
next, Click with right button [Users] on left tree and select [New] - [Group].
[2] Input a Group name you'd like to add.
[3] A new Group is just added.
By:kelemework.Dage
Add Organizational Unit on

Active Directory.
[1] Run [Server Manager] and open [Tools] - [Active

Directory Users and Conputers], next, Click with right
button your domain name on left tree and select [New] -
[Organizational Unit].
[2] Set any name you like.
By:kelemework.Dage
[3] A new Organizational Unit is just created.
[4] It's possible to configure hierarchical design for Organizational Unit.
By:kelemework.Dage
[5] A new Organizational Unit "development01" is created under the OU "Hiroshima"

as an example.
7.4. Deletion of Organizational Unit

[6] For Deletion of Organizational Unit, it cannot delete by default because it is
protected. For unprotection, select the OU you'd like to delete and right click it
and select [View] - [Detail].
By:kelemework.Dage
[7] Right-click the OU you'd like to delete an d open [Properties].
[8] Move to [Object] tab and uncheck a box [Protect object from accidental
deletion], then you can delete the OU.
By:kelemework.Dage
7.5. Active Directory: Add Computer Accounts

Add Computer Accounts on Active Directory.
[1] Run [Server Manager] and open [Tools] - [Active Directory Users and Conputers],
next, Click with right button [Computers] on left tree and select [New] -
[Computer].
[2] Input a new Computer name.
By:kelemework.Dage
[3] A new Computer is just added.
7.6. Active Directory: Add Users with a Batch

If there are many user accounts you must add on AD, then Add them with a
Batch. This is an example.
By:kelemework.Dage
[1] Create a text file and write users you'd like to add on AD with full name like
follows.
[2] Create a batch file like follows ( it's an example, modify if you want).
The batch loads the user-list file created in [1] and add them into OU:Hiroshima -
OU:Development01.
The users's password are set temporarily as their full name and they must
change it for initial logon.
By:kelemework.Dage
[3] The default password policy denies passwords which username is included, so
change policy temporarily (after adding users, Do not forget to go back to default
policy to protect trivial password).
Run [Tools] - [Group Policy Management].
[4] Click with right button [Default Domain Policy] and select [edit...].
[5] Open [Password Policy] like follows.
By:kelemework.Dage
[6] Open [Password must meetcomplexity requirements] and turn to Disabled temporarily.
[7] After few minites later, Run a batch created in [2] to add Users. After finishing
Users, Do not forget to turn to Enabled for [Password must meetcomplexity
requirements].
By:kelemework.Dage
[8] User Accounts are just added with a batch.
7.7. Active Directory: Join in Domain from Clients

Join in Active Directory Dom ain from Other Windows Clients. This example is
based on Windows 10.
[1] Before setting, change to DNS settings to refer Active Directory Host.
By:kelemework.Dage
[2] Open [System] and click [Change settings] link which is lower -right.
[3] Move to [Computer Name] tab and click [Change] button.
By:kelemework.Dage
[4] Check a box [Domain] and input domain name and next, click [OK] button.
[5] Authentication is required, authenticate with Administrator or other priviledged Users.
By:kelemework.Dage
[6] After successing authentication, Welcome message is shown like follows. Restart the Computer o
[7] On the logon screen after restarting Computer, click "another user" to switch
Domain user to logon.
By:kelemework.Dage
[8] Authenticate with a Domain user you added.
[9] Just Logon to Active Directory Domain.
By:kelemework.Dage
By:kelemework.Dage
8. DHCP Server: Install

(01) Install DHCP
(02) Configure DHCP Server
(03) Configure DHCP Client
8.2. Install DHCP

Install DHCP (Dynamic Host Configuration Protocol) Server.
[1] Before settings DHCP, Configure AD DS in your LAN and make the DHCP Host join
the Domain first.
By:kelemework.Dage
By:kelemework.Dage
[6] Check a box [DHCP Server].
[7] Addtional features are required to add DHCP Server. Click [Add Features] button.
By:kelemework.Dage
By:kelemework.Dage
By:kelemework.Dage
By:kelemework.Dage
8.3. DHCP Server: Configure

Configure installed DHCP Server.
[1] Run Server Manager and Click [DHCP] on the left menu.
[2] Click [More...] link which is upper -right.
[3] Click [Complete DHCP configuration] link which is upper -right.
By:kelemework.Dage
[5] Specify the credencials to authorize this DHCP Serve r in AD DS and click [Commit] button.
By:kelemework.Dage
[6] After successing authorization normally, click [Close] button.
[7] Back to Server Manager and open [Tools] - [DHCP].
By:kelemework.Dage
[8] Right-Click [IPv4] on the left pane and select [New Scope...].
By:kelemework.Dage
[10] Input any name and decsription for this scope.
[11] Define IP address range.
By:kelemework.Dage
[12] If you'd like to exclude specific IP address from the range set in previous
section, Configure it on here.
By:kelemework.Dage
[13] Define lease duration.
By:kelemework.Dage
[15] Define default gateway of your network.
By:kelemework.Dage
[16] Define domain name and DNS server of your network.
By:kelemework.Dage
[17] Define WINS Server. It's OK to keep empty here if you don't need it.
By:kelemework.Dage
[19] Click [Finish] button to complete configuration.
[20] New DHCP scope has beed added.
By:kelemework.Dage
8.4. Configure DHCP Client.

This example is based on Windows 10.
[1]Open Network settings and click [Properties] button.
[2] Open [IPv4] Properties and set like follows to assign IP address from DHCP server.
By:kelemework.Dage
[3] After re-configuration of networking, IP address is assigned from DHCP Server.
By:kelemework.Dage
9. iSCSI: Install iSCSI Target

(01) Install iSCSI Target
(02) Configure iSCSI Target
(03) Configure iSCSI Initiator#1
(04) Configure iSCSI Initiator#1 2
9.1. Install iSCSI Target
Configure Storage Server with iSCSI.

A storage on a network is called iSCSI Target, a Client which connects to iSCSI
Target is called iSCSI Initiator.
This example is based on the environment below.
FD3S.srv.world
[10.0.0.100] - iSCSI Target
RX-7.srv.world
[10.0.0.101] - iSCSI initiator
Install iSCSI Target Service first.
By:kelemework.Dage
By:kelemework.Dage
[5] Check a box [iSCSI Target Server].
[6] Addtional features are required to add iSCSI Target. Click [Add Features] but ton.
By:kelemework.Dage
By:kelemework.Dage
By:kelemework.Dage
[10] After finishing installation, click [Close] button.
9.2. Configure iSCSI Target

Configure Storage Server with iSCSI.
A storage on a network is called iSCSI Target, a Client which connects to iSCSI
Target is called iSCSI Initiator.
FD3S.srv.world
RX-7.srv.world
Configure installed iSCSI Target to provide network storage.
[1] Run Server Manager and Click [File and Storage Services].
By:kelemework.Dage
[2] Select [iSCSI] on the left pane and click [To create an iSCSI.....] link on the right pane.
[3] Specify the server and volume for setting iSC SI disk. This example shows to
configure a disk on a custom path (C: \vdisks\).
By:kelemework.Dage
[4] Specify any name for virtual disk.
[5] Specify the disk size for virtual disk.
By:kelemework.Dage
[6] Specify the iSCSI Target to assign this virtual disk. If the Target is n ew, select
like follows.
By:kelemework.Dage
[7] Specify any name for iSCSI Target.
[8] Specify access servers to this iSCSI Target. Click [Add...] button.
[9] Select a method to identify the initiator. This example shows to set initiators by
IP address like follows.
By:kelemework.Dage
[10] If it's OK all, click [Next] button.
[11] Configure authentication method between Target and Initiator. This example
shows to configure CHAP. If select CHAP like follwos, set username and
password too that are used for connecting to Target from Initiator.
By:kelemework.Dage
[12] If it's OK all, click [Create] button.
By:kelemework.Dage
[13] After finishing creating, click [Close] button.
[14] A new virtual disk has been listed like follows.
9.3. Configure iSCSI Initiator (Server OS) target #1

Configure iSCSI Initiator (Windows Server OS).
FD3S.srv.world
By:kelemework.Dage
RX-7.srv.world
[1] Open [Control Panel] - [iSCSI Initiator].
[2] Click [Yes] button to proceed.
By:kelemework.Dage
[3] Input Target's Hostname or IP address on [Target] field and click [Quick Connect] button.
[4] iSCSI Target has been detected like follows, click [Done] button.
[5] Click [Connect] button.
By:kelemework.Dage
[6] Click [Advanced] button.
[7] Check a box [Enable CHAP log on] and specify username and password on the
fileds. They are the just one you set on iSCSI Target's configuration.
By:kelemework.Dage
[8] Click [OK] button.
[9] If it's no ploblem, the status turns to [Connected] like f ollows. It's OK to
configure iSCSI initiator settings.
By:kelemework.Dage
[10] On the [Disk Management] tool, the iSCSI Disk has been attached like follows.
[11] After changing online and initializing iSCSI disk, it's possible to use it like follows.
By:kelemework.Dage
9.4. Configure iSCSI Initiator (Client OS) Target #2

Configure iSCSI Initiator (Windows Client OS). This example is based on Windows 10 Pro.
FD3S.srv.world
RX-7.srv.world
[1] Open [Control Panel] - [Administrative Tools] - [iSCSI Initiator].
By:kelemework.Dage
[2] Click [Yes] button to proceed.
[3] Input Target's Hostname or IP address on [Target] field and click [Quick Connect] button.
By:kelemework.Dage
[4] iSCSI Target has been detected like follows, click [Done] button.
[5] Click [Connect] button.
By:kelemework.Dage
[6] Click [Advanced] button.
[7] Check a box [Enable CHAP log on] and specify username and password on the
fileds. They are the just one you set on iSCSI Target' s configuration.
By:kelemework.Dage
[8] Click [OK] button.
[9] If it's no ploblem, the status turns to [Connected] like follows. It's OK to
configure iSCSI initiator settings.
By:kelemework.Dage
[10] On the [Disk Management] tool, the iSCSI Disk has been attached like follows .
[11] After changing online and initializing iSCSI disk, it's possible to use it lie follows.
By:kelemework.Dage
10. NFS Server

(01) Install NFS Server
(02) Configure NFS Shared
(03) Configure NFS Client#1
(04) Configure NFS Client#2
10.1. Install NFS Server to share folders.

By:kelemework.Dage
By:kelemework.Dage
[5] Check a box [Server for NFS].
[6] Addtional features are required to add NFS Server. Click [Add Features] button.
By:kelemework.Dage
By:kelemework.Dage
By:kelemework.Dage
10.2. Configure NFS Shared Folder

Configure NFS Shared Folder.
For example on here, create a shared folder which requires no authentication.
By:kelemework.Dage
[2] Select [Shares] on the left pane and click [TASKS] - [New Share...].
[3] For example, select [NFS Share - Quick] on here.
By:kelemework.Dage
[4] For example, configure a specific folder as shared one, so check a bo x [Type a
custom path] and input the path for specific folder you'd like to set as shared
folder. (set as "NFS-Share" on this exmaple)
[5] Input local and remote share path.
By:kelemework.Dage
[6] Specify authentication methods.
[7] Set the share permissions. Click [Add...] button.
[8] Specify the Hosts you'd like to grant access permissions like the example below.
By:kelemework.Dage
[10] Specify permissions to control access on here.
By:kelemework.Dage
[11] Confirm selections and it's no ploblem, Click [Create] button.
[12] After finishing creating, Click [Close] button.
By:kelemework.Dage
[13] NFS shared folder has been just configured.
10.3. Configure NFS Client (Server OS)

Configure NFS Client (Windows Server OS).
This example is based on Windows S erver 2012 R2.
By:kelemework.Dage
By:kelemework.Dage
By:kelemework.Dage
[6] Check a box [Client for NFS].
By:kelemework.Dage
[9] Run Command Prompt and input commands like follows.

⇒ mount [NFS server's Hostname or IP address]:/[share name ] [Local Drive to mount]:\
By:kelemework.Dage
[10] Run Explorer, then NFS share folder is displayed.
[11] It's possible to read/write files or folders by access control.
By:kelemework.Dage
10.4. Configure NFS Client (Client OS)

Configure NFS Client (Windows Client OS).
This example is based on Windows 10 Pro.
[1] Open [Control Panel] - [Programs and Features].
[2] Check a box [Client for NFS] and click [OK] button.
By:kelemework.Dage
[3] Run Command Prompt and input commands like follows.

⇒ mount [NFS server's Hostname or IP address]:/[share name] [Local Drive to mount]: \
[4] Run Explorer, then NFS share folder is displayed.
By:kelemework.Dage
11. Basic File Sharing

Windows Server 2012 R2 : File Server
(01) Basic File Sharing
(02) Access to Shared
(03) Install File Server
(04) Configure Share folder
(05) Access Permission
(06) Object Access Audit
11.1. Basic File Sharing settings.

For example, Set Shared folder for [C: \Share] as everyone can read and write.
[1] Right-Click target folder and select [Share with] - [Specific People].
By:kelemework.Dage
[2] Select a user (everyone on this example) and click [Add] button.
[3] Select Permission level for the user you just added (Read/Write on this example)
and then click [Share] button.
By:kelemework.Dage
[4] Click [Done] button to finish configuration.
11.2. Access to Shared Folder

Access to Shared Folder from Clients. This example is on Windows 10 Pro.
[1] Run Explorer and right-click [Network] which is on left side and select [Map
network drive].
By:kelemework.Dage
[2] Select a Drive for [Drive] section to map netowrk drive and input share name for
[Folder] section.
[3] For this case of example, the Server and Client are not in the same Domain, so
authentication is required like follows.
By:kelemework.Dage
[4] Just accessed.
[5] Shared Folder is maped to Z:\ drive.
By:kelemework.Dage
[6] If you'd like to access without mapping drive letter, run directly like follows.
By:kelemework.Dage
11.3. File Server: Install

Install File Server Role to configure network sharing.
By:kelemework.Dage
[5] Check a box [File Server].
By:kelemework.Dage
[6] Click [Next] button to keep default.
By:kelemework.Dage
11.4. File Server: Configure Shared folder

Configure a Shared folder as an example.
By:kelemework.Dage
[2] Select [Shares] on the left pane and click [TASKS] - [New Share...].
[3] For example, select [SMB Share - Quick] on here.
By:kelemework.Dage
[4] For example, configure a specific f older as shared one, so check a box [Type a
custom path] and input the path for specific folder you'd like to set as shared
folder. (set as "Share" on this exmaple)
[5] Input local and remote share path.
By:kelemework.Dage
[6] Configure Share settings. This examp le shows to keep default.
[7] Set the share permissions. Configure it for your requirements.
By:kelemework.Dage
[8] Confirm selections and click [Create] button if all OK.
[9] After finishing, Click [Close] button.
By:kelemework.Dage
[10] New share has been listed like follows and it's possible to access from Clients.
By:kelemework.Dage
11.5. File Server: Access Permission

Modify Access Permission for a shared folder.
[1] Run Server Manager and Click [File and Storage Services], and next, right -click a
Share you'd like to modify and se lect [Properties].
[2] Select [Permissions] on the left pane and click [Customize permissions] on the left pane.
By:kelemework.Dage
[3] Click [Add] button.
[4] Click [Select a principal] link.
[5] Input username or group name you'd like to add access permission and click [OK] button.
On this example shows to add "Domain Users" group.
By:kelemework.Dage
[6] Check boxes you'd like to add permissions and click [OK] button.
[7] Confirm settings and click [OK] button if all OK.
By:kelemework.Dage
[8] New access permission has been just added.
By:kelemework.Dage
11.6. File Server: Object Access Audit

Configure Object Access Audit.
[1] Enable Object Access Audit setting first. Run [gpedit.msc] like follows.
[2] Select [Audit Policy] on the left pane like follows, click to open [Audit Obje ct
Access] on the right pane.
By:kelemework.Dage
[3] Check boxes of atempts you'd like to audit.
[4] Confirm settings and close Group Policy Editor.
By:kelemework.Dage
[5] Open the property of a Share you'd like to audit and move to [Auditing] tab and
click [Add] button.
[6] Input username or group name you'd like to add auditing and click [OK] button.
On this example shows to add "Domain Users" group.
By:kelemework.Dage
[7] Check boxes you'd like to add auditing and click [OK] button.
[8] Confirm settings and click [OK] button if all OK.
By:kelemework.Dage
[9] When audit target users or groups access to the Share, the action will be loged like follows.
By:kelemework.Dage
12. Install OpenSSH

Install OpenSSH Server/Client on Windows Server.
[1] Access to the site below and download OpenSSH. Generally on W indows 2012R2,
choose [OpenSSH-Win64.zip] to download.
⇒ https://github.com/PowerShell/Win32 -OpenSSH/releases
[2] Extract ZIP file and move the extracted folder to any location you like. This
example shows to put into [C:\Program Files\] like follows.
[3] Open [System Properties] and click [Environment Variables] button.
By:kelemework.Dage
[4] Select [Path] in [System variables] section and click [Edit...] button.
[5] Add OpenSSH folder PATH you located in [Variables value] section. After adding
it, Close [System Properties] window.
By:kelemework.Dage
[6] Run [Powershell] and move to OpenSSH folder you located. Next, run a command
'.\install-sshd.ps1' to install sshd service like follows. If successfully message is
shown, it's OK to install.
By:kelemework.Dage
[7] Next, Generate SSH host-key. Run a command '.\ssh-keygen.exe -A' like follows.
By:kelemework.Dage
[8] It's OK to install sshd. Next, Open [Services] and start sshd. And also change to
[Automatic] for [Startup Type] like follows.
[9] If Windows Firewall is running, add 22/TCP port to allow SSH connection like follows.
By:kelemework.Dage
[10] For connecting from Windows Server to Linux Server, it's possible to do on
Powershell or Command Prompt like follows.
By:kelemework.Dage
[11] For connecting from Linux Server to Windows Server, it's possible to do like follows.
[root@dlp ~]#
ssh Administrator@10.0.0.100
Administrator@10.0.0.100's password:
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.
By:kelemework.Dage
Administrator@FD3S C:\Users\Administrator>dir
Volume in drive C has no label.
Volume Serial Number is 0000-0000
Directory of C:\Users\Administrator
02/08/2017 05:19 PM <DIR> .
02/08/2017 05:19 PM <DIR> ..
02/08/2017 05:19 PM <DIR> Contacts
02/08/2017 05:33 PM <DIR> Desktop
02/08/2017 05:19 PM <DIR> Documents
02/08/2017 05:19 PM <DIR> Downloads
02/08/2017 05:19 PM <DIR> Favorites
02/08/2017 05:19 PM <DIR> Links
02/08/2017 05:19 PM <DIR> Music
02/08/2017 05:19 PM <DIR> Pictures
02/08/2017 05:19 PM <DIR> Saved Games
02/08/2017 05:19 PM <DIR> Searches
02/08/2017 05:19 PM <DIR> Videos
0 File(s) 0 bytes
13 Dir(s) 75,735,973,888 bytes free
By:kelemework.Dage
12.1. Use SysPrep

To use SysPrep, specific informations on a System like SID are removed, and it's
possible to configure new Windows settings.
[1] Click with right button on mouse and select [Run], then input "sysprep".
[2] Click and Run "sysprep.exe".
By:kelemework.Dage
[3] Set like follows.

Enter System Out-of-Box Experience ⇒ Enter initial setup
Generalize ⇒ remove specific settings like SID
Shutdown ⇒ Shutdown after finishing Sysprep
[4] When start a System which Sysprep was run, initial setup starts like follows.
By:kelemework.Dage
A Proxy or Proxy Server is an intermediary server, either software or

hardware, the sits between an end user and a website or other
service's server. Proxies are used for different reasons including
efficiency, privacy, and security.
A Proxy or Proxy Server is an intermediary server, either software or hardware, the sits between
an end user and a website or other service’s server. Proxies are used for different reasons
including efficiency, privacy, and security.
With a proxy, web traffic moves through the proxy along its way to its ultimate destination.
Requests are first sent to the proxy server, which handles the request along with the additional
tasks of filtering content, scanning for malware, masking the origin of the request, encrypting
messages, and more.
Proxies are commonly used for information security against threats and for system optimization,
such as load balancing and cacheing similar requests for added speed. They may serve as a
firewall, and handle authentication requests. At a minimum, a proxy would shield an enterprise’s
internal infrastructure from known threats found on the external web.
Proxy servers can have unintended consequences for security. Since they can obfuscate the
true origin of a request, they can also mask the legitimate parties to a dialogue, exchange, or
transaction. PCs all require a unique Internet Protocol (IP) address that serves as its legitimate
identifier. Without the knowledge who the parties are, the masking of parties can result in the
parties being spoofed or suffering a man-in-the-middle (MITM) attack.
Example:
"We're a small business and therefore don't have an elaborate IDPS but our IT vendor does
have us use a proxy that acts as a firewall against commonplace known threats, by filtering
them. As we grow, we'll hire an internal team assesses and build our infrastructure but for the
foreseeable future we'll stick with the IaaS vendor."
By:kelemework.Dage

Windows Server 2012 R2

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Windows Server 2012 R2

Uploaded by

Copyright:

Available Formats

Client /Server Network Operating

Addis Ababa, Ethiopia

By : kelemework Dagne Alemu

7.4. Deletion of Organizational Unit ................................................................................................ 102

1. Install Windows Server 2012 R2

[2] Click "Install Now" to start installation.

[3] Select the edition of Windows server you'd like to install.

[6] Select a partition to install Windows Server.

[9] Push Ctrl+Alt+Del key to sign -in.

[11] Just logon to Windows Server.

(02) Change Admin User Name

(03) Set Computer Name

(04) Set Static IP Address

(05) W indows Update

(06) Allow ICMP Echo Reply

2.1 Add Local User

Add Local Users.

[6] Move to [member of] tab and click [Add] button.

[7] Specify [Administrators] group like follows.

2.2 Change Admin User Name

[3] Administrator Name is just changed.

2.3 Computer Name

[1] Open [Server Manager] and click [Computer Name] section.

[2] Move to [Computer Name] tab and click [Change] button.

[4] Input Domain name this Computer is in.

[5] Restarting Computer is required for applying changes.

[6] Computer Name is changed normally.

2.4 Set Static IP Address

IP address is assigned by DHCP by default, so set Static IP address for Server

[1] Open [Server Manager] and click [Ethernet] section.

[3] Select [Internet Protocol Version 4] and click [Properties] button.

2.5 Windows Update

Apply latest update to the System after installing.

[3] To install updates, click "** importnat updates are available".

[4] After finishing installation, restart your System to apply changes.

2.6 Allow ICMP Echo Reply

[1] Open [Start] - [Tools] - [Windows Firewall with Advanced Security].

[3] Select "Custom".

[4] Select "All programs".

[5] Select "ICMPv4" on the [Protocol Type].

[6] Specify the range of network for allow ICMP.

[7] Select "Allow the connection".

[8] Select the network profiles which you allow ICMP.

3. Configure NTP Server

3.1 Configure NTP

Configure NTP Server for Time Sync.

[2] Select [Administrative template] - [System] - [Windows Time Service] [Time

[3] Check a box [Enabled] which is upper -left like follows.

[6] Open [Server Manager] - [Tools] - [Services].

[8] If Windows Firewall is enabled, allow 123/UDP like follows.

3.2 Configure NTP Client

Configure NTP Client

[2] Select [Administrative template] - [System] - [Windows Time Service] [Time

[3] Check a box [Enabled] which is upper -left like follows.

[NtpServer] ⇒ Hostname or IP address of your NTP Server.

For [Type] section, It's OK to keep default [NT5DS] if your computer is in a

[6] Open [Server Manager] - [Tools] - [Services].

4. Remote Desktop: Server Settings

(02) Client Settings

(03) Install RDS

(04) Create Collections

(05) Publish RemoteApp

(06) Connect RemoteApp