Miscellaneous

Interior Deco tips: Repainting the walls but it would not stick Have you ever encountered trying to repaint your walls but your paint (especially emulsion (water based) paint) won't stick ? Well, what you need is to paint with a oil based sealer (e.g. Nippon paint oil-based wall sealer - Vinilex 5170 ) first before painting with your emulsion paint ! If you want to save some effort, you don't even have to peel off the old paint - just paint over the old paint with the sealer.

Windows Server 2016: Extend Storage Pool and Storage Space // ----------------------- // Current Storage Pool TestPool1 has Free Space: 0.00 GB     1) [Server Manager - WS2016-DC01] > Dashboard > File and Storage Services > Storage Pool > you'll see: Name: [Windows Storage (1)]  TestPool1 | Type: Storage Pool | Managed by: WS2016-DC01 | Available to: WS2016-DC01 | Read-Wrote Server: WS2016-DC01 | Capacity: 99.3 GB (i.e. total physical capacity of all harddisks added to storage pool | Free Space: 0.00 GB   // ----------------------- // Increase Storage Pool TestPool1 capacity by adding new physical harddisks 1)a) right-click TestPool1 > Add Physical Disk > select new physical harddisk (E.g.:-  (x) Name: VBOX Harddisk | Capacity: 100 GB | Bus: SATA) > OK 1)b) Server Manager - WS2016-DC01] > Dashboard > File and Storage Services > Storage Pool > under Physical Disks, you'll see newly add:- Name: VBOX Harddisk | Capacity: 100

Windows Server 2016: Create Storage Space Pool // -------------------------------- // Create Storage Pool 1) [Server Manager - LAB-DC01] > Dashboard > File and Storage Services > Storage Pool > Tasks > New Storage Pool > under Storage Pool Name, Name: StoragePool1 > under Physical Disks, select available physical disks > Create . // -------------------------------- // Storage Pool is (total) capacity of physical harddisks 2) [Server Manager - LAB-DC01] > Dashboard > File and Storage Services > Storage Pool > you'll see: Name: [Windows Storage (1)]  StoragePool1 | Type: Storage Pool | Managed by: LAB-DC01 | Available to: LAB-DC01 | Read-Wrote Server: LAB-DC01 | Capacity: 298GB (i.e. total physical capacity of all harddisks added to storage pool | Free Space: 297GB | // -------------------------------- // Create Virtual Disk 3) [Server Manager - LAB-DC01] > Dashboard > File and Storage Services > Storage Pool &

Windows Server 2016: Setup roaming user profiles // Metadata: // Security Group Name: Group1 // Members of Group1:  Test User1 | Test User2 | Test User3 | Test User4 | // Test User5   // Note: Adminstrator do not have permission to view roaming user profiles on // server. // ***************** 1) [mylab] Server Manager > Active Directory Users and Computers > mylab.local (as an example) > OU1 (as an example) > check that Test User1 | Test User2 | Test User3 | Test User4 | Test User5 are members of Group1 . // ***************** // The Share Name: Profile$ implies a hidden folder. 2) [mylab] > create D:\Profile > right-click Profile folder > Properties > Sharing > Advanced Sharing > (x) Share this folder > Share Name: Profile$ > Permissions > Allow (x) Full Control   > Apply ( x2 ) . > Security > Advanced > Disable inheritance > Convert inherited permissions into explicit permissions on this object > R

Windows Server 2016: Start Stop services using Powershell // ------------------------------------------- // Commands in Bold are on a single line // ------------------------------------------- 1) Windows Server > Powershell > PS C:\User\Administrator> Enter-PSSession - ComputerName 192.168.0.1 -Credential administrator 2) Enter:-  User Name: administrator | Password : xxxxxxxx (for the Windows Powershell credential request popup dialogue box). // ------------------------------------------- // Get-service lists all (running & stopped) services 3) [192.168.0.1] PS C:\User\Administrator>Documents > Get-service // ------------------------------------------- // Lists all services starting with the character d 4) [192.168.0.1] PS C:\User\Administrator>Documents > Get-service d* // ------------------------------   // Displays the status of service:- docker 5) [192.168.0.1] PS C:\User\Administrator>Documents > Get-service docker

Windows Server 2016: DNS Forwarders (forward local unresolved DNS queries to be resolved by ISP DNS servers) // Metadata // Local DNS Server (LAN) : 192.168.1.5/24 // Local DNS Server forwards dns queries to 8.8.8.8 // External DNS Server (WAN/Internet): 8.8.8.8 1) Windows Administrative Tools > DNS manager > right-click LAB-DC01 (as an example) > properties > Forwarders > Edit > IP Address: 8.8.8.8 (i.e. Google's DNS server) >  Apply .

Windows 10 tips: Install Hyper-V  // Note Enable virtualization on your PC's BIOS 1) Run:- optionalfeatures.exe > under Turn Windows features on and off > select Hyper-V | Hyper-V management tools | Hyper-V platform > Restart now. // Make sure to select Virtual Switch Manager in Hyper-V to turn on your // network adapters (for internet access). 2) Control Panel > Administrative Tools > Hyper-V Manager > click on Computer Name > New Virtual Machine ....

Windows Server 2016: Add a 2nd domain controller in Windows Server 2016 // Note: you can check IP address & netmask by typing:  ipconfig 1) [DC02] Server Manager > Dashboard > Add roles and features > Role-based or feature-based installation > select (x) Select a server from server pool (Name: DC02 IP Address: 192.168.0.2 ) > Active Directory Services > Add Features > Install > Promote this server to a Domain Controller > (x) Add a domain controller to an existing domain > click on Select > Supply Credentials for the deployment operation ( username: widget\administrator | password: xxxxxxxx | Domain: widget ) > Select a domain from the forest:- widget.internal > ignore warnings, Install.

Windows tips: Join a Windows 10 PC to Active Directory Domain 1) Server Manager (Domain Controller - widget.internal ) > Control Panel > Network and Sharing Centre > Change Adapter Settings > Ethernet() (or name of your ethernet device) > right-click Properties > TCPIP v4 IP Address: 192.168.0.1 Subnet Mask: 255.255.255.0 Preferred DNS Server: 127.0.0.1 2) Windows 10 workstation > Network and Sharing Centre > Change Adapter Settings >Ethernet() (or name of your ethernet device) > right-click Properties > TCPIP v4 IP Address: 192.168.0.3 Subnet Mask: 255.255.255.0 Preferred DNS Server: 192.168.0.1 3) Windows 10 workstation > Control Panel > System > Check Computer name:- DESKTOP-BFCCB7O > change settings > Computer name:- Client > Member of (x) Domain widget.internal (i.e. name of domain) > popup asking for user name & password . //-  Note: if you encounter problems, it could be TCP IPv6 - because TCP IPv6 i

Windows Server 2016: Setup IIS(Internet Information Services) // Install IIS 1) Server Manager > Dashboard > Add roles and features > role based or feature based installation > select from server pool > web server (IIS) > Add Features > Install 2) Server Manager > Dashboard > Tools > Internet Information Services (IIS) Manager > router01 (e.g) > Sites > Default Web Site > click on Default Document > Add (document name: companyweb.txt - from part 3) ) > // ----------------------------------------- // Create a companyweb.txt file 3)  C:\inetpub\wwwroot\ > create new file:- companyweb.txt (-remember to enable view -> file name extensions, so that there won't be hidden extensions) > add any content to companyweb.txt // ----------------------------------------- // Create DNS record for www.widget.com 4) Server Manager > Dashboard > Tools > DNS (Manager)> DNS > DC01 (e.g.) > right-click on Forw

Windows Server 2016 tips: setup DHCP // Metadata (ipconfig) // IP address: 192.168.15.12 // Subnet mask: 255.255.255.0 // Install DHCP 1) Server Manager > Dashboard > Add roles and features > role based or feature-based installation > Roles: DHCP > Add features > install > complete DHCP configuration > Authorization > (x) Use the following user's credentials: WIDGET\administrator (e.g.) // Configure DHCP range 2) Server Manager > Dashboard > Tools > DHCP > dc2.widget.internal > right-click IPv4 > New Scope > Scope Name: Internal >  Start IP Address: 192.168.15.100 | End IP Address: 192.168.15.200

Windows Server 2016 tips: Create a distribution group // Distribution groups can only be utilised by programs/softwares that use this // feature - e.g. Microsoft Exchange - e.g. useful when mass-mailing thru // Exchange to all users in the Distribution group. 1) Active Directory Users and Computers > widget.internal (as an example) > right-click Users > New > Group > Group Name: Test2 Group | Group Scope: Global | Type: Distribution > click Apply .

Windows Server 2016: Create and use Security Group 1) Active Directory Users and Computers > Widget.internal (as an example) > Users > create new user:- Name: testuser Type: User > right-click anywhere > choose New > choose Group > Group Name: TestGroup Scope: () Domain Local -(i.e. covers only currently login domain) | (x)  Global -(i.e. covers all domains in a single forest) | () Universal -(i.e. covers all forests) > double-click TestGroup > under Members , ADD testuser > click Apply . 1) a) Active Directory Users and Computers > Widget.internal (as an example) > click testuser > under Member of:- you should see:- TestGroup // Any user that's added to the TestGroup will have access to the folder Test1 2) C:\ > create new folder:- Test1 > right-click Test1 > Properties > Security > click Edit > Add TestGroup > set permissions > click OK .

Windows Server 2016 tips: Windows Server 2016 tips: Move users and objects into other OU (organizational units) 1) Active Directory Users and Computers > Widget.internal (as an example) > Users > right-click on object or username > choose move or just left-click on object/username & drag to folder.

Windows Server 2016 tips: Quickly enable or disable user account in Active Directory // Enable or disable account 1) Active Directory Users and Computers > Widget.Internal (as an example) > Users > right-click on selected Name: Testuser Type:User > choose Disable Account / Enable Account // Disable at a certain date 2) Active Directory Users and Computers > Widget.Internal (as an example) > Users > right-click on selected Name: Testuser Type:User > double-click on Testuser > under Account, Account expires:- select (x) End of .... [Day Month Year] > click Apply .  

Windows Server 2016: Remote Desktop Services (Terminal Server) // ------------------------------- // Install Remote Desktop Services (i.e. Terminal Server) - used to control // remote desktops (over LAN or WAN) 1)  [Server Manager - Dashboard] > click on Manage > Click on Add roles and features > under installation type, select (x) Remote Desktop Services Installation > under Deployment, select (x) Standard Deployment > under Deployment Scenario, select (x) Sessions-based desktop deployment > under RD Connection Broker , choose from server pool (e.g: Win2016.Widget.internal IP: 192.168.15.251 ), add to Selected > under RD Web Access role service , select (x) Install the RD Web Access role service on the RD Connection Broker server , choose from server pool (e.g: Win2016.Widget.internal IP: 192.168.15.251 ), add to Selected > under RD Session Host ,  choose from server pool (e.g: Win2016.Widget.internal IP: 192.168.15.251 ), add to Selected >

Windows Server 2016: Generate Self-Signed Certificate // ------------------------------- // To create self-signed certificate under Windows Powershell // ************ //  -- To create a certificate for the DNS name test.contoso.com and place it to // the list of personal certificates on a computer, run the following command: // Note: The commands in BOLD are on a single line 6)  Command Prompt > Powershell New-SelfSignedCertificate -DnsName test.contoso.com -CertStoreLocation cert:\LocalMachine\My // This command creates a certificate and imports it in a personal store of the // computer. Having opened certlm.msc snap-in, make sure that a new certificate // has appeared in the Personal section of the certificate storage. // By default, a self-signed certificate is generated with the following settings: // // Cryptographic algorithm: RSA; // Key length: 2048 bit; // Acceptable key usage: Client Authentication and Server Authentication; // The certificate ca