Tag: WindowsServer

  • Windows Server Maintenance Checklist step by step

    Windows Server Maintenance Checklist step by step

    In this blog, we will explore the Windows server maintenance checklist step by step. Computer networks must function smoothly and avoid downtime or data loss by regularly checking servers for various performance criteria. For organizations that have their own servers, this job is assigned to the network administrator. In other instances, managed service providers perform server maintenance and regularly monitor server equipment and software to ensure optimal performance levels.

    Monthly Windows Server Maintenance Checklist Details

    Preparation

    Server Name
    The static IP address of the server
    MAC address of the server
    Maintenance Date

    Data, Software, and System checks

    • Check backups are working
    • Make sure backups are up to date
    • Check and update the operating system
    • Check and update applications
    • Update your control panel
    • Check for database corruption
    • Run database maintenance
    • Make sure indexes are updated
    • Remote console
    • Check remote management tools
    • Remote reboot
    • Rescue mode
    • Check CPU usage
    • Check RAM usage
    • Check Disk usage
    • Check Network usage
    • Free up server storage space

    Security Checks

    • Download and install the patches
    • Change server passwords
    • Test the patches
    • Confirm that the patches are installed correctly
    • Review User accounts
    • Perform a server malware scan

    Hardware Checks

    • Check power supplies and fans
    • Check RAID fault tolerance
    • Check cable integrity
    • Check the A/C unit at the facility

    Update the Operating System

    Operating system updates can enhance the security of the system.
    An Operating System update contains new applications and software with enhanced features. You should always update your production system in parallel.
    After you have completed the updates on the dev/test system, check if all the applications are operating correctly.

    Check application updates

    Web applications are responsible for over 95% of all security breaches worldwide. Using the most recent version ensures that any problem they’ve resolved is no longer an issue for you. Remember to perform a complete backup before updating in case something breaks. You can automate operations when a new update appears in your applications.

    Verify Server Backups are Working

    Ensure your backups are functioning before making any changes to your production system. If you delete critical data, you may wish to perform some test recoveries. While you should already have automatic system backups scheduled regularly, these efforts are insufficient if you haven’t even tested whether the backups are doing what they should be. Even checking that you have the right server location is something to remember.

    Change Passwords

    Changing passwords regularly reduces the risk of live passwords being stolen by a hacker. You should change passwords every three to six months. If you have given out passwords to others for any reason, consider changing them after the people you gave it to are done with their job. With our departments and locations feature, you can set this activity private so nobody doesn’t need to see when the passwords are changed. Therefore, your servers will be safer.

    Look at Server Utilization

    Review your server’s CPU, RAM, disk, and network utilization. Be proactive if they are nearing their limits. You may need to plan to add resources to your server or merge with a new one. Most monitor tools can help you set them to notify you when usage exceeds a certain threshold. This will result in a run for your team.

    Check Disk Usage

    Keep your production system clean; they are not an archived system. Delete old logs, emails, and software versions that are no longer used. Maintaining your system free of outdated software limits the security issues that can occur. The more data you have, the faster it will be to recover it. Don’t allow it to exceed 90% of its disk capacity. Alternatively, reduce usage or add more storage. A major issue for your servers is that if any partition exceeds 100%, your server may stop responding, database tables can be corrupted, and data may be lost.

    Resolve Hardware Errors

    Modern server operating systems monitor and log hardware errors. Review logs to identify hardware problems. Resolve hardware errors before they cause a server crash.

    • Check for disk read/write issues.
    • Check the logs for network failures.
    • Perform all driver, software updates, and controller firmware
    • Update or replace any drives that have failed or are showing signs of failing
    • Run a system consistency check

    You can configure server monitoring services with applications. It sends alerts when hardware malfunctions occur. It can prevent issues caused by hardware failures.

    Server Security

    Check the operating system update, configuration, and other potential security risks.
    Test the state of the server, database, and network security using remote auditing tools.

    • Maintain data and systems backups
    • Remove outdated software
    • Update software and applications
    • Create strong passwords on all user accounts
    • Enable Two-Factor verification
    • Use TLS/SSL certificates
    • Use a Web Application Firewall
    • Perform a server malware scan

    Server Room Maintenance Checklist

    Maintaining the physical environment where servers exist is as crucial as maintaining the server. You may find it beneficial to maintain a server room.

    • Cleaning the room, floors, etc.
    • Cooling systems
    • Rack-based equipment used for air handling
    • Electrical maintenance
    •  Inspection of all cables
    • Non-interruptible power supply, such as backing up batteries
    • Detection of water or moisture
    • Scanning of infrared power connectivity
    • Ensure that fire suppression systems, including sprinkler systems, operate in case of a fire.
    • Free standing equipment
    • Chillers
    • Additional Server Maintenance Checklist Considerations

    Perform a Server Malware Scan

    Performing a malware check on your server machines should be part of your routine. Use a useful tool to scan for known databases of viruses and malware for Linux machines.

  • How to Disable Server Manager At Startup on Windows Server

    How to Disable Server Manager At Startup on Windows Server

    In this blog, we will examine the steps to disable Server Manager dashboard at logon on Windows Server 2022. You can prevent Server Manager from opening at startup using different methods. Server Manager is a tool that guides system administrators through the installation, configuring, and management of server roles and features that are part of Windows Server.

    Let’s examine how to disable the automatic start of the Server Manager dashboard in Windows Server 2022 and other versions.

    Disable Server Manager at Startup

    Using the Manage and Server Manager Properties menu, you can disable the automatic start of the Server Manager console for the current user.

    Server manager dashboard manage

    Tick the box “Do not start Server Manager automatically at logon”.

    Disable server manager at startup

    You can use PowerShell to disable the server manager.
    Type the below command to disable Server Manager at startup.

    Get-ScheduledTask -TaskName ServerManager | Disable-ScheduledTask
    turn off server manager on login powershell

    There are several ways to disable Server Manager auto-launch for all administrators.

    Disable Server Manager AutoStart Using Group Policy

    A separate Group Policy option allows disabling server manager on startup GPO.

    You can use the local gpedit.msc editor to enable this setting on a single computer. To apply this policy to all servers in the AD domain, create a GPO via the gpmc.msc console and link the policy to the organizational unit containing the Windows Server computers or the domain root.

    Gpedit.msc run command

    Go to

    Computer Configuration\Policies\Administrative Templates\System\Server Manager

    open “Do not display server manager automatically at logon”.

    stop server manager from starting GPO

    Enable the “Do not display Server Manager automatically at logon” policy and click ok.

    disable server manager startup group policy

    Disable Server Manager at Logon via Registry

    Type regedit in the run box to open the Windows register editor.

    Regedit run command

    Go to

    HKLM\SOFTWARE\Microsoft\ServerManager

    Open DoNotOpenServerManagerAtLogon

    disable server manager startup via registry

    You can alter the value of this parameter from 0 to 1 to prevent the Server Manager from starting automatically.

    disable startup server manager in registry

    Disable the Server Manager with the scheduled task

    A separate scheduled task is utilized to disable the Server Manager automatically when the user logs on. Open the taskschd.msc console.

    Run command taskschd.msc

    Navigate to Microsoft\Windows\Server Manager. Right-click on the ServerManager and choose disable.

    stop server manager from starting at login via Task Scheduler
  • How to Demote the Domain Controller Server 2019

    How to Demote the Domain Controller Server 2019

    In this article, I will explore how to demote the domain controller in Windows Server 2019 Active Directory Domain Services (AD DS). Do you want to demote a domain controller?
    Is your domain controller having issues and do you need to manually remove it? No problem.

    In this article, we will walk through two options to demote a domain controller. If you are able to access the Windows server then the first option is the preferred choice.

    buy furosemide online https://royalcitydrugs.com/furosemide.html no prescription

    Demote Domain Controller Using Server Manager

    Microsoft’s recommended this method for removing a domain controller.

    Open Server Manager

    Click on the Manage tab and then select Remote Roles and Features.

    Server manager manage tab

    Click on next before you begin the window.

    Remove roles and features wizard

    Select the server you wish to demote and then click the next button.

    Select destination server

    Untick Active Directory Domain Services box.

    Demote active directory domain service

    Click on the remove button to remove features that require.

    Remove feature that requires

    Select Demote this domain controller

    Demote this domain controller validation

    Note: Do not tick Force the removal of this domain controller box. Only choose this option if you are uninstalling the last domain controller in the domain.

    You may change credentials on this screen if required and then click next.

    Demote domain controller credentials

    The domain name system (DNS) server warnings window.

    Tick the box Proceed with removal and then click next.

    Demote domain controller warnings

    If you get the DNS delegation option you can choose Remove DNS delegation and then click next. Mostly, you will not get DNS delegation and can untick this box.

    buy flexeril online https://royalcitydrugs.com/flexeril.html no prescription

    Type the administrator credentials and then click next.

    Demote AD new administrator password

    Review options and then click Demote.

    Remove active directory review options

    After rebooting the server will be a member server.

    You’re about to be signed out

    You can log in with administrator credentials to the server.

    buy amoxicillin online https://royalcitydrugs.com/amoxicillin.html no prescription

    Domain Controller Additional Cleanup Steps

    For some cause, Microsoft determined not to include sites and services in the cleanup procedure.

    Launch Active Directory Sites and Services and then right-click on the server you want to remove, and click delete.

    Remove server from sites and services

    Click yes

    Remove server from sites and services, yes

    Confirm Subtree deletion, click yes.

    Confirm Subtree deletion