Windows Server 2016 – DHCP define User Class and Configure Class Options

Screenshot 20181228 085553

Open DHCP console, expand the server, right-click IPv4/IPv6 and click Defie User Classes Click Add. Specify the name and description. Now click with the mouse below ASCII and give a name, probably the same as before. Click OK. Click Close. You have to use DHCP policies to configure DHCP options to the user class you created. Right-click Policies and then click New Policy… Give a Name and Description and click Next. Click Add Choose User Class at Criteria, Equals at Operator and select the user class you created before from…

Windows Server 2016 – DHCP define User Class and Configure Class Options Read More

Windows Server 2016 – DHCP configure Server and Scope options

Screenshot 20181228 081826

Open DHCP console, expand the server, then the IPv4/IPv6 and right-click Server Options. Click Configure Options. Here you can assign any additional options for the DHCP Server For the Scope options, select and expand the scope you want to configure options, right-click Scope Options and click Configure Options. You will see the same window. You can configure the options with PowerShell: More information here. Use get-dhcpserverv4optionvalue to see all the IPv4 options. Use remove-dhcpserverv4optionvalue to remove IPv4 option. For IPv6 use set-dhcpserverv6optionvalue, get-dhcpserverv6optionvalue and remove-dhcpserverv6optionvalue Windows Server 2016 – DHCP…

Windows Server 2016 – DHCP configure Server and Scope options Read More

Windows Server 2016 – DNS Server Configure Scopes and policies

Screenshot 20181221 193511

Create client subnets: Add-DnsServerClientSubnet -Name “office” -IPv4Subnet “192.168.123.0/24” Create zone Scope Add-DnsServerZoneScope -ZoneName “kronos.local” -Name “officeScope” The next step is to populate the zone scope with records. Add-DnsServerResourceRecord -ZoneName “kronos.local” -A -Name “sql” -IPv4Address “192.168.123.2” -ZoneScope “officeScope” Now you can create policies for the zone Add-DnsServerQueryResolutionPolicy -Name “officePolicy” -Action ALLOW -ClientSubnet “eq,office” -ZoneScope “officeScope,1” -ZoneName “kronos.local” More information: Add-DnsServerClientSubnet Add-DnsServerZoneScope Add-DnsServerResourceRecord Add-DnsServerQueryResolutionPolicy Windows Server 2016 – DNS Server Configure Scopes and policies

Windows Server 2016 – DNS Server Configure Scopes and policies Read More

Windows Server 2016 – Configure Windows defender with Group Policy

Screenshot 20181207 111007

An alternative way to configure Defender is by using Group Policy. Open Group Policy Editor Go to Computer Configuration/Policies/Administrative Templates/Windows Components/Windows Defender. You will find almost 100 policy settings. You have to update the group policy changes with: gpudate /force otherwise, you have to wait to be updated when the Windows periodically updates them.   Windows Server 2016 – Configure Windows defender with Group Policy

Windows Server 2016 – Configure Windows defender with Group Policy Read More

Windows Server 2016 – Configure Windows defender with PowerShell

Screenshot 20181208 074154

Use get-mpcomputerStatus to get the status of antimalware software To configure the preferences for Windows Defender scans and updates use set-mppreference: #Check for definition updates everyday Set-MpPreference -SignatureScheduleDay Everyday #Check for definition updates 120 minutes after midnight Set-MpPreference -SignatureScheduleTime 120 #Check for definition update before every scan Set-MpPreference -checkForSignatureBeforeRunningScan $true #Sets the default action to Remove for low threats Set-MpPreference -LowThreatDefaultAction Remove More information here   Windows Server 2016 – Configure Windows defender with PowerShell

Windows Server 2016 – Configure Windows defender with PowerShell Read More