server administration by saadzaf via cheatography.com/24404/cs/6023/ Recovery AD Restore Remote management (cont) The Diskpa​ rt.exe command utility can be used To find the Windows feature name of the Get-Com​ mand | Where {$_.par​ ame​ ter​ s.keys - to manage hard drives and volumes on the Windows Server Backup, type: Get- like "*​ Co​ mpu​ ter​ Nam​ e*​ "} ​ ​ ​ ​ ​ ​ ​ local machine. WindowsFeature "*backup*" Get-ser​ vice –Comput​ erName Acmeserver To get help with a specific command type the This should return a single feature, the Get-Wmi​ Object Win32_C​ omp​ ute​ rSy​ stem – ​ ​ ​ ​ command with /?. For example, to get help with Windows-Server-Backup feature. To install the Comput​ ername Acmeser​ ver, ​ ​ ​ ​ ​ ​ ​ the ‘list’ Diskpart command type: list /? feature, type: Get-WindowsFeature "*backup*" WINDOWS​ COR​ ESE​ RVER | Install​ -Wi​ ndo​ wsF​ eature Use the list volume option to display netsh advfire​ wall firewall set rule ​ information about the disk volumes To start a System State backup of the Domain group="​ W​ indows Management ​ To get help on how to load a registry hive into controller, type: wbadmin start Instrum​ ent​ ation (WMI)" new enable=yes systems​ tat​ eba​ ckup -backup​ Tar​ get:E: -quiet memory from disk, type: reg load /? Enable-​ PSR​ emo​ ting The following command will load the HKLM To start the server in DSRM mode, non From the Acmeserver virtual machine, start an ​ registry hive file located in type the following command: bcdedit authori Interac​ tive PowerShell session on the ‘D:\Win​ dow​ s\​ Syst​ em32\ config\​ sof​ tware’ into a /set safeboot dsrepair and then tative Windows​ 81-PC Enter-P​ SSe​ ssion Windows​ 81- key file called Windows​ Sof​ tware reg load reboot pc HKLM\Wi​ ndo​ wsS​ oft​ ware The following command will list all of the Install the Web Access gateway role. Install​ - D:\Wind​ ows​ \Sy​ ste​ m32​ \co​ nfi​ g\​ soft​ ware backup file versions available on the local Wi​ ndo​ wsF​ eature –Name ​ ​ ​ ​ machine. wbadmin get versions - Unload the HKLM\WindowsSoftware registry Windows​ Pow​ erS​ hel​ lWe​ bAc​ cess ​ ​ hive. reg unload HKLM\Wi​ ndo​ wsS​ oft​ ware backuptarget:E: To configure the Windows PowerShell Web wbadmin start systems​ tat​ ere​ covery - Access gateway with the default settings using Reg backup and restore versio​ n:<​ MM/​ DD/​ YYY​ Y-H​ H:M​ M> - a self-si​ gned certifi​ cate, type the following: backup​ tar​ get:E: -quiet Backup the entire HKLM registry key to a file Install​ -Ps​ waW​ ebA​ ppl​ ica​ tion - Start another command prompt and authori​ called HKLM.reg in the C:\Backup directory. reg UseTes​ tCe​ rti​ ficate type: ntdsutil tative export HKLM C:\Back​ up\​ HKL​ M.reg To see a list of all PSWA cmdlets, type: Get- Set the local NTDS store as the active instance To create a Registry Hive file backup of the Com​ mand PSWA -Comman​ dType cmdlet activate instance NTDS HKLM\So​ ftware registry keys reg save The following command will create an ​ HKLM\So​ ftware C:\Back​ up\​ HKL​ MSo​ ftw​ are​ .hiv This will start the interactive command authori​ zation rule that will allow the members of environ​ ment. Type the following command: Display all the currently available registry the domain admins group access to all of the authori​ tative restore PSDrives: Get-PSD​ rive –PSProv​ ider registry Domain Control​ lers in the domain using the Restore Subtree “OU=Cus​ tomer default Microso​ ft.Pow​ ers​ hell configu​ rat​ ion: Display the keys and values under the Support​ ,OU​ =Ha​ mil​ ton​ ,DC​ =Ac​ me,​ DC=​ Com” Add-Psw​ aAu​ tho​ riz​ ati​ onRule –userGr​ oup​ Name HKCU\Co​ ntrol Panel key Get-Chi​ ldItem “acme\​ domain admins” - “HKCU:\​ Con​ trol Panel” -recurse To remove the ‘safeboot’ boot option and ​ ​ ​ ​ restart the server normally, open a command ComputerGroupName “acme\Domain Display the keys and values under the ​ ​ ​ ​ prompt and type the following commands: Controllers” –ConfigurationName HKCU\Co​ ntrol Panel key whose name contains ​ ​ ​ bcdedit /delete​ value safeboot shutdown /r /t 0 Microsoft.Powershell the string “Mouse”. Get-Chi​ ldItem “HKCU:\​ Con​ trol Panel” -recurse | where name – like "M​ ou​ se​" Remote management Display the content of the HKCU\Co​ ntrol New-Net​ IPA​ ddress –interf​ ace​ Alias “Ethernet” – Panel\​ Mous​ e\​ Doub​ leC​ lic​ kSpeed value. Get- IPAddress 192.168​ .10​ 0.13 –Prefix​ Length 24 Ite​ mPr​ operty “HKCU:\​ Con​ trol Panel\​ Mous​ e" - Set-DNS​ Cli​ ent​ Ser​ ver​ Add​ ress –Interf​ ace​ Alias name DoubleC​ lic​ kSpeed “Ethernet” –Server​ Add​ resses 192.168​ .10​ 0.10 Notice this value is set to 500. Change the Add-Com​ puter –Domain​ Name acme – value to 700. Set-Ite​ mPr​ operty Creden​ tial acme\ad​ min​ ist​ rator –restart “HKCU:\​ Con​ trol Panel\​ Mouse” –name Type the following commands to enable remote DoubleC​ lic​ kSpeed –value 700 event log management firewall rules: netsh advfire​ wall firewall set rule group=”​ Remote Event Log Managem​ ent” new enable=Yes By saadzaf Published 9th November, 2015. Sponsored by CrosswordCheats.com cheatography.com/saadzaf/ Last updated 9th November, 2015. Learn to solve cryptic crosswords! Page 1 of 1. http://crosswordcheats.com.