Windows Server 2022 Administration: Infrastructure, Services, and Security

• An understanding of basic networking and IT infrastructure concepts
• Experience using Windows operating systems in a business environment
• Familiarity with IT administration tools and command-line interfaces

Audience

• System administrators
• IT infrastructure professionals
• Network and server engineers

Windows Server 2022 is Microsoft's enterprise-grade operating system for managing on-premises and hybrid infrastructure environments.

This instructor-led, live training (online or onsite) is aimed at intermediate-level IT professionals who wish to install, configure, secure, and manage Windows Server 2022 infrastructure services.

By the end of this training, participants will be able to:

• Set up and manage a secure Windows Server 2022 environment.
• Configure and maintain Active Directory, DNS, DHCP, and Group Policy Objects (GPOs).
• Deploy remote access, certificate services, RDS, Hyper-V, and high-availability features.
• Implement best practices for monitoring, recovery, and system security.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of Windows Server in real-world lab scenarios.
• Guided exercises focused on infrastructure deployment, security, and troubleshooting.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Installation and Environment Preparation

• Installation of Windows Server 2022
• Management with Server Manager, PowerShell, and Windows Admin Center
• Best practices for on-premise environments

Active Directory Domain Services (AD DS)

• Domain installation and configuration
• Management of users, groups, and OUs
• Advanced GPOs – creation, application, and troubleshooting
• Sites, services, and replication between domain controllers
• Auditing and logging

Network Services

• DNS: zones, forwarders, integration with AD
• DHCP: scopes, reservations, options, failover
• NPAS: authentication, network policies, and access control

File and Print Services

• File Server: NTFS permissions, sharing, auditing
• FSRM: quotas, file screening, and reporting
• DFS (Namespace and Replication)
• Print services and centralized management

Virtualization and Hyper-V

• Installation and configuration of Hyper-V
• Standard and Datacenter licensing
• Creation of VMs, virtual switches, checkpoints
• Nested virtualization, VM backups, and best practices
• Migration of VMs from other hypervisors (XCP-ng, XenServer)

High Availability

• Failover Clustering: installation, configuration, validation
• Storage Spaces Direct (S2D)
• Internal load balancing (NLB)

Remote Access Services

• VPN, DirectAccess, and RADIUS configuration
• Secure remote access for employees
• Windows Firewall with advanced rules

Remote Desktop Services (RDS)

• Installation and configuration of RDS (session host, gateway, web access)
• RDS licensing management (CALs)
• Publishing applications and desktops via RDS
• User group setup, redirection, and security

Certificate Services (AD CS)

• Installation and configuration of Certificate Authority (CA)
• Certificate templates and auto-enrollment
• Certificates for authentication, digital signing, and encryption
• Integration with RDS, IIS, and VPN
• Revocation and CRL (Certificate Revocation List)

Application and Update Services

• IIS: site/application installation and publishing
• Integration with SSL certificates
• Distribution and update management
• Windows Autopatch and Microsoft Intune

Backup, Recovery, and Monitoring

• Windows Server Backup: scheduling and granular restore
• Recovery of domain controllers, data, and settings
• Monitoring with Event Viewer and Performance Monitor
• Introduction to Windows Admin Center for centralized management

Hands-on Labs and Practical Activities

• Build a fully functioning AD DS environment with DNS, DHCP, and GPOs
• Configure and deploy advanced GPOs for auditing, application deployment, and access control
• Set up centralized logging and log forwarding using Event Viewer and group policy
• Deploy and test digital certificates for secure access and communication
• Simulate RDS deployment with session hosts and published applications
• Create and validate a failover cluster using Storage Spaces Direct (S2D)
• Publish an internal site with HTTPS and GPO-restricted access
• Simulate system failures (AD, DHCP, File Server) and perform full recovery procedures
• Verify proper configuration of Sites and Services for replication and authentication

Summary and Next Steps