computing-note/Windows.Server.rst at main · HtwoO/computing-note

Windows server core system requirement:

1.4 GHz, 64-bit CPU and 512 MiB of RAM

The installation process is pretty easy, just boot from a Windows Server 2022 installation media and provide the following required data for the OS:

Option	Default value
Time and currency format	English (United States)
Keyboard or input method	US

Hard drive to install to;

Data decided by the installation media:

Language to install: English (United States)

Optional data (can be provided after installation): product key

Option	Default value
Time and currency format	Chinese (Simplified, China)
Keyboard or input method	Microsoft Pinyin / US

After reboot and login for the first time, you should

Enable Remote Desktop Remote Desktop Protocol (RDP) with the following command

>>> SConfig

WARNING: To stop SConfig from launching at sign-in, type "Set-SConfig -AutoLaunch $false"

 ================================================================================
                     Welcome to Windows Server 2022 Datacenter
 ================================================================================

   1)  Domain/workgroup:                   Workgroup: WORKGROUP
   2)  Computer name:                      WIN-6K2V9EVD61R
   3)  Add local administrator
   4)  Remote management:                  Enabled

   5)  Update setting:                     Download only
   6)  Install updates
   7)  Remote desktop:                     Enabled (more secure clients)

   8)  Network settings
   9)  Date and time
   10) Telemetry setting:                  Required
   11) Windows activation

   12) Log off user
   13) Restart server
   14) Shut down server
   15) Exit to command line (PowerShell)

 Enter number to select an option:

and then choose 7 -> E -> 1

Change or set the product key of your server

>>> slmgr.vbs –ipk<productkey>

Active the server licence

>>> slmgr.vbs -ato

Power management

>>> Restart-Computer -ComputerName Server01, Server02, localhost
>>> Stop-Computer -ComputerName "Server01", "Server02", "localhost"

Local user management

Change password interactively. Like Linux, nothing will be shown when you (re-)type the new password

>>> net user administrator *
Type a password for the user:
Retype the password to confirm:
The command completed successfully.

Networking

List network interface

>>> Get-NetIPInterface
ifIndex InterfaceAlias                  AddressFamily NlMtu(Bytes) InterfaceMetric Dhcp     ConnectionState PolicyStore
------- --------------                  ------------- ------------ --------------- ----     --------------- -----------
6       以太网 3                        IPv6                  1500               5 Enabled  Disconnected    ActiveStore
3       以太网                          IPv6                  1500              25 Enabled  Connected       ActiveStore
1       Loopback Pseudo-Interface 1     IPv6            4294967295              75 Disabled Connected       ActiveStore
6       以太网 3                        IPv4                  1500               5 Disabled Disconnected    ActiveStore
3       以太网                          IPv4                  1500              25 Enabled  Connected       ActiveStore
1       Loopback Pseudo-Interface 1     IPv4            4294967295              75 Disabled Connected       ActiveStore

>>> netsh interface show interface
管理员状态     状态           类型             接口名称
-------------------------------------------------------------------------
已启用            已断开连接          专用               以太网 3
已启用            已连接            专用               以太网

>>> Get-NetIPAddress
.
IPAddress         : fe80::8b80:8828:9ab3:41ff%3
InterfaceIndex    : 3
InterfaceAlias    : 以太网
AddressFamily     : IPv6
Type              : Unicast
PrefixLength      : 64
PrefixOrigin      : WellKnown
SuffixOrigin      : Link
AddressState      : Preferred
ValidLifetime     : Infinite ([TimeSpan]::MaxValue)
PreferredLifetime : Infinite ([TimeSpan]::MaxValue)
SkipAsSource      : False
PolicyStore       : ActiveStore
.
IPAddress         : 10.0.2.15
InterfaceIndex    : 3
InterfaceAlias    : 以太网
AddressFamily     : IPv4
Type              : Unicast
PrefixLength      : 24
PrefixOrigin      : Dhcp
SuffixOrigin      : Dhcp
AddressState      : Preferred
ValidLifetime     : 23:45:48
PreferredLifetime : 23:45:48
SkipAsSource      : False
PolicyStore       : ActiveStore

>>> Get-NetIPAddress | Format-Table
ifIndex IPAddress                                       PrefixLength PrefixOrigin SuffixOrigin AddressState PolicyStore
------- ---------                                       ------------ ------------ ------------ ------------ -----------
3       fe80::8b80:8828:9ab3:41ff%3                               64 WellKnown    Link         Preferred    ActiveStore
1       ::1                                                      128 WellKnown    WellKnown    Preferred    ActiveStore
3       10.0.2.15                                                 24 Dhcp         Dhcp         Preferred    ActiveStore
1       127.0.0.1                                                  8 WellKnown    WellKnown    Preferred    ActiveStore

>>> Get-NetIPAddress -AddressFamily IPv4 | Format-Table
ifIndex IPAddress                                       PrefixLength PrefixOrigin SuffixOrigin AddressState PolicyStore
------- ---------                                       ------------ ------------ ------------ ------------ -----------
3       10.0.2.15                                                 24 Dhcp         Dhcp         Preferred    ActiveStore
1       127.0.0.1                                                  8 WellKnown    WellKnown    Preferred    ActiveStore

>>> netsh interface ip show config
接口 "以太网" 的配置
    DHCP 已启用:                          是
    IP 地址:                           10.0.2.15
    子网前缀:                        10.0.2.0/24 (掩码 255.255.255.0)
    默认网关:                         10.0.2.2
    网关跃点数:                       0
    InterfaceMetric:                      25
    通过 DHCP 配置的 DNS 服务器:      180.184.1.1
                                          180.184.2.2
                                          1.2.4.8
    用哪个前缀注册:                   只是主要
    通过 DHCP 配置的 WINS 服务器:     无
.
接口 "Loopback Pseudo-Interface 1" 的配置
    DHCP 已启用:                          否
    IP 地址:                           127.0.0.1
    子网前缀:                        127.0.0.0/8 (掩码 255.0.0.0)
    InterfaceMetric:                      75
    静态配置的 DNS 服务器:            无
    用哪个前缀注册:                   只是主要
    静态配置的 WINS 服务器:           无

>>> netsh interface ip show address "以太网"
接口 "以太网" 的配置
    DHCP 已启用:                          是
    IP 地址:                           10.0.2.15
    子网前缀:                        10.0.2.0/24 (掩码 255.255.255.0)
    默认网关:                         10.0.2.2
    网关跃点数:                       0
    InterfaceMetric:                      25

>>> netsh interface ipv6 show address "以太网"
地址 fe80::8b80:8828:9ab3:41ff%3 参数
---------------------------------------------------------
接口 Luid          : 以太网
作用域 ID          : 0.3
有效生存时间       : infinite
首选生存时间       : infinite
DAD 状态           : 首选项
地址类型           : 其他
跳过作为源         : false

Set static IP, mask, gateway

>>> New-NetIPAddress -InterfaceAlias Ethernet -IPAddress 10.3.3.11 -PrefixLength 24 -DefaultGateway 10.3.3.1
>>> Set-NetIPAddress -InterfaceAlias Ethernet -IPAddress 10.3.3.11 -PrefixLength 24 -DefaultGateway 10.3.3.1

>>> netsh interface ipv4 set address "Local Area Connection" source=static 10.3.3.11 255.255.255.0 10.3.3.1

>>> Get-NetAdapter
Name      InterfaceDescription       ifIndex Status   MacAddress          LinkSpeed
----      --------------------       ------- ------   ----------          ---------
Ethernet  Intel(R) 82574L Gigabit...       6 Up       52-54-00-B3-8F-D6      1 Gbps

Change only the gateway of interface of specified name

>>> netsh interface ip set address name="Ethernet 2" static 10.3.3.6 255.255.255.0 10.3.3.254

>>> Get-DnsClientServerAddress -InterfaceIndex 6
InterfaceAlias  Interface Address ServerAddresses
                Index     Family
--------------  --------- ------- ---------------
Ethernet                6 IPv4    {192.168.122.1}
Ethernet                6 IPv6    {}

>>> Set-DnsClientServerAddress -InterfaceIndex 6 -ServerAddresses ("10.10.10.10")

Set primary DNS server

>>> netsh interface ipv4 add dnsserver "Local Area Connection" address=10.3.3.3 index=1

Set secondary DNS server

>>> netsh interface ipv4 add dnsserver "Local Area Connection" address=10.3.3.4 index=2

Remove DNS server from interface

>>> netsh interface ipv4 delete dnsservers "Local Area Connection" 10.3.3.4 (or all)

Set interface to DHCP

>>> netsh interface ipv4 set address "Local Area Connection" source=dhcp

Disable interface

>>> netsh interface set interface "Local Area Connection" disabled (or enabled to re-enable)

Get route table

>>> Get-NetRoute
ifIndex DestinationPrefix                              NextHop
------- -----------------                              -------
3       255.255.255.255/32                             0.0.0.0
.
1       ::1/128                                        ::

Get very verbose route information

>>> Get-NetRoute | Format-List -Property *

>>> New-NetRoute -DestinationPrefix "10.0.0.0/24" -InterfaceIndex 12 -NextHop 192.168.0.1 [-RouteMetric 128]

show current IPv4 route, 查看当前 IPv4 路由

>>> route -4 PRINT
===========================================================================
接口列表
  6...16 e5 43 27 fc bb ......Microsoft Wi-Fi Direct Virtual Adapter
.
  1...........................Software Loopback Interface 1
.
IPv4 路由表
===========================================================================
活动路由:
网络目标        网络掩码          网关       接口   跃点数
          0.0.0.0          0.0.0.0     192.168.43.1   192.168.43.187     55
        127.0.0.0        255.0.0.0            在链路上         127.0.0.1    331
.
  255.255.255.255  255.255.255.255            在链路上         127.0.0.1    331
  255.255.255.255  255.255.255.255            在链路上    192.168.43.187    311
===========================================================================
永久路由:
  无

Add a new route, -p means persistant, 选项使以下路由配成持久生效（即重启后此路由仍在）

>>> route ADD 10.3.3.0 mask 255.255.255.0 10.3.3.254
 操作完成!

>>> route -4 print
===========================================================================
接口列表
  6...16 e5 43 27 fc bb ......Microsoft Wi-Fi Direct Virtual Adapter
.
IPv4 路由表
===========================================================================
活动路由:
网络目标        网络掩码          网关       接口   跃点数
          0.0.0.0          0.0.0.0     192.168.43.1   192.168.43.187     55
         10.3.3.0    255.255.255.0       10.3.3.254   192.168.43.187     56
.
  255.255.255.255  255.255.255.255            在链路上    192.168.43.187    311
===========================================================================
永久路由:
  无

remove route 删除路由

>>> route delete 10.3.3.0
 操作完成!

removes all of the IP routes that have a next hop of 192.168.0.1

>>> Remove-NetRoute -NextHop "192.168.0.1"

>>> route ADD 3ffe::/32 3ffe::1

>>>  help curl
名称
    Invoke-WebRequest
.
语法
    Invoke-WebRequest [-Uri] <uri>  [<CommonParameters>]
.
别名
    iwr
    wget
    curl

Firewall

>>> New-NetFirewallRule -DisplayName "Allow inbound ICMPv4" -Direction Inbound -Protocol ICMPv4 -IcmpType Any -RemoteAddress LocalSubnet -Action Allow
>>> New-NetFirewallRule -DisplayName "Allow inbound ICMPv6" -Direction Inbound -Protocol ICMPv6 -IcmpType Any -RemoteAddress LocalSubnet -Action Allow

Service management

List running service

>>> sc query

Start / stop a service

>>> sc start (service name)
>>> sc stop (service name)

Disable a service

>>> sc config (service name) start=disabled

Security

>>> $User = "Domain01\User01"
>>> $PWord = ConvertTo-SecureString -String "P@sSwOrd" -AsPlainText -Force
>>> $credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $User, $PWord

Interactively ask for a credential, and use the credential by using the variable

>>> $Cred = Get-Credential

Hardware (driver) management

Query active drivers

>>> sc query type=driver

Install a driver

>>> pnputil -i -a oemdriver.inf

Storage management

Find out available space on a drive

>>> Get-PSDrive C
>>> Get-CimInstance -ClassName Win32_LogicalDisk | Select-Object DeviceID, FreeSpace, Size
>>> fsutil volume diskFree C:

List PowerShell cmdlets in the Storage module (used for disk management)

>>> Get-Command -Module Storage | Measure-Object

>>> Get-Command -Module Storage

List Local Disks and Partitions

>>> Get-Disk -Number 6
Number Friendly Name Serial Number HealthStatus OperationalStatus Total Size Partition Style
------ ------------- ------------- ------------ ----------------- ---------- ---------------
0      QEMU HARDDISK QM00001       Healthy      Online                 16 GB MBR

>>> Get-Disk | Where-Object IsSystem -eq $True | ft -AutoSize
Number Friendly Name Serial Number HealthStatus OperationalStatus Total Size Partition Style
------ ------------- ------------- ------------ ----------------- ---------- ---------------
0      QEMU HARDDISK QM00001       Healthy      Online                 16 GB MBR

List physical disk

>>> Get-PhysicalDisk
Number FriendlyName  SerialNumber MediaType   CanPool OperationalStatus HealthStatus Usage        Size
------ ------------  ------------ ---------   ------- ----------------- ------------ -----        ----
0      QEMU HARDDISK QM00001      Unspecified False   OK                Healthy      Auto-Select 16 GB

>>> Get-Partition
   DiskPath: \\?\scsi#disk&ven_qemu&prod_harddisk#4&2749002f&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
.
PartitionNumber  DriveLetter Offset                                        Size Type
---------------  ----------- ------                                        ---- ----
1                           1048576                                     100 MB IFS
2                C           105906176                                 15.39 GB IFS
3                           16629366784                                 523 MB Unknown

List paritions of specified disk

>>> Get-Partition -DiskNumber 1,2

Get all USB or iSCSI disks

>>> Get-Disk | Where-Object -FilterScript {$_.Bustype -Eq "USB"}
>>> Get-Disk | Where-Object -FilterScript {$_.Bustype -Eq "iSCSI"}

List all Windows volume

>>> Get-Volume
DriveLetter FriendlyName         FileSystemType DriveType HealthStatus OperationalStatus SizeRemaining     Size
----------- ------------         -------------- --------- ------------ ----------------- -------------     ----
D           SSS_X64FRE_EN-US_DV9 Unknown        CD-ROM    Healthy      OK                          0 B  5.17 GB
            System Reserved      NTFS           Fixed     Healthy      OK                     68.18 MB   100 MB
                                 NTFS           Fixed     Healthy      OK                     83.41 MB   523 MB
C                                NTFS           Fixed     Healthy      OK                      8.18 GB 15.39 GB

List offline disk (no output when none presents)

>>> Get-Disk | Where-Object IsOffline -eq $True | ft -AutoSize

Bring offline disk online and make it ready to be used

>>> Get-Disk | Where-Object IsOffline -eq $True | Set-Disk -IsOffline $False

Initialize the unused disk

>>> Initialize-Disk -Number <index.of.disk>
>>> Initialize-Disk -Number <index.of.disk> -PartitionStyle MBR

mbr2gpt.exe can be used to convert a MBR disk to a GPT one without moving the data on it

Create a new partition and assign specified driver letter

>>> New-Partition -DiskNumber <index.of.disk> -Size 10gb -DriveLetter L

Create a new partition taken all available space and assign a drive letter automatically

>>> New-Partition -DiskNumber <index.of.disk> -AssignDriveLetter –UseMaximumSize

>>> Get-PartitionSupportedSize -DriveLetter <drive.letter> | Format-List

>>> $MaxSize = (Get-PartitionSupportedSize -DriveLetter <drive.letter>).SizeMax

>>> Resize-Partition -DriveLetter <drive.letter> -Size $MaxSize

>>> Set-Partition -DriveLetter <drive.letter> -IsActive $true

>>> Format-Volume -DriveLetter <drive.letter> -FileSystem NTFS -NewFileSystemLabel Data -Confirm:$false

You can specify multiple disk by comma separated index like 1,3

>>> Get-Partition -DiskNumber <index.of.disk> | Remove-Partition -Confirm:$false

Dangerous command: delete all partition and clear the data on a disk

>>> Clear-Disk -Number <index.of.disk> -RemoveData -Confirm:$false
>>> Clear-Disk -Number 1 -RemoveData -RemoveOEM

Preparing a new empty drive

>>> Get-Disk | Where-Object PartitionStyle -eq 'RAW' | Initialize-Disk -PartitionStyle MBR -PassThru | New-Partition -AssignDriveLetter -UseMaximumSize | Format-Volume -FileSystem NTFS -Confirm:$false