1 00:00:03,040 --> 00:00:07,990 In this demonstration, you will look at how you can securely manage your server environment by using 2 00:00:07,990 --> 00:00:13,810 Windows Admin Centre, using Windows Admin Center, which is currently installed on the Domain Admins 3 00:00:13,810 --> 00:00:14,530 Workstation. 4 00:00:14,530 --> 00:00:19,180 You will connect and manage the primary domain controller and you will look at how you can manage server 5 00:00:19,180 --> 00:00:22,990 core operating systems which we currently have installed on server three. 6 00:00:23,860 --> 00:00:28,300 Currently on the Domain Admins workstation, we have installed the Windows Admin Center. 7 00:00:29,170 --> 00:00:34,300 Now if you recall, there are a number of deployment options, but in this demonstration we are using 8 00:00:34,300 --> 00:00:38,830 the local host option where we have installed this locally on the domain admin workstation. 9 00:00:39,670 --> 00:00:44,290 Before we connect to the servers, let's take a look at some of the settings that's available within 10 00:00:44,290 --> 00:00:45,460 Windows Admin Center. 11 00:00:46,360 --> 00:00:49,600 When you navigate to settings, it gives you a number of options. 12 00:00:50,500 --> 00:00:55,600 For instance, you can go ahead and sign in and connect to an Azure account so that you can manage Azure 13 00:00:55,600 --> 00:00:56,260 resources. 14 00:00:57,160 --> 00:01:01,330 You have various personalization options under Gateway. 15 00:01:01,330 --> 00:01:06,070 You have the extensions option, which gives you a list of extensions that are currently available. 16 00:01:06,970 --> 00:01:12,190 Microsoft is continually adding additional extensions, so you'll notice that some of them are currently 17 00:01:12,190 --> 00:01:13,060 in preview mode. 18 00:01:13,900 --> 00:01:18,940 If you would like to install a specific extension, all you need to do is select the extension and click 19 00:01:18,940 --> 00:01:22,170 on install under installed extensions. 20 00:01:22,180 --> 00:01:24,250 This shows you what is currently installed. 21 00:01:25,130 --> 00:01:29,450 Take note of the extensions that require updates to update them. 22 00:01:29,480 --> 00:01:34,490 All you have to do is select the extension and click on Update and Windows Admin Center will perform 23 00:01:34,490 --> 00:01:35,810 the update of the extension. 24 00:01:36,680 --> 00:01:41,690 Under Azure, this is where you can connect Windows Admin Center with Azure Services to integrate the 25 00:01:41,690 --> 00:01:42,230 management. 26 00:01:43,130 --> 00:01:48,230 Under PowerShell, you have a number of PowerShell scripts that you can use for repetitive tasks. 27 00:01:49,100 --> 00:01:51,470 Now you will go ahead and add your first server. 28 00:01:52,370 --> 00:01:56,780 By clicking on the add button, it provides you with a list of resources that you can add. 29 00:01:57,660 --> 00:02:01,240 You'll click on Add under servers and here you can either add a server name. 30 00:02:01,260 --> 00:02:03,770 You can also import a text or CSV list. 31 00:02:03,780 --> 00:02:09,000 And since we are connected to an Active Directory forest, you can also search within Active Directory. 32 00:02:09,860 --> 00:02:13,920 Now you need to manage the primary domain controller so you will enter in DC. 33 00:02:13,940 --> 00:02:16,580 You can also use a wild card and click on search. 34 00:02:17,480 --> 00:02:23,810 You will select the domain controller and click on ADD and now the domain controller has been successfully 35 00:02:23,810 --> 00:02:24,170 added. 36 00:02:25,040 --> 00:02:28,700 You can also change the managers account for the servers that you have added. 37 00:02:29,570 --> 00:02:34,400 This gives you the ability to leverage multiple accounts to manage different servers, depending on 38 00:02:34,400 --> 00:02:35,480 the permissions you have. 39 00:02:36,340 --> 00:02:37,480 To manage the server. 40 00:02:37,480 --> 00:02:42,490 You click on the server name and it'll connect to the server and you're immediately brought to the overview 41 00:02:42,490 --> 00:02:42,910 page. 42 00:02:43,810 --> 00:02:47,380 The overview page will give you some metrics related to the server. 43 00:02:48,270 --> 00:02:52,590 On the left hand side, you'll see all of your extensions that you currently have installed. 44 00:02:53,500 --> 00:02:55,300 Since this is a domain controller. 45 00:02:55,330 --> 00:03:00,550 By navigating to the Active Directory extension, it enables you to manage Active Directory in a more 46 00:03:00,550 --> 00:03:02,290 graphical user friendly way. 47 00:03:03,160 --> 00:03:08,230 You can also browse the current Active Directory structure and modify objects within that structure. 48 00:03:09,130 --> 00:03:14,380 For example, if you click on users and under domain admins, which is the security group, you can 49 00:03:14,380 --> 00:03:19,570 modify the properties of that group such as the group name, and you can modify the membership by adding 50 00:03:19,570 --> 00:03:20,650 or deleting users. 51 00:03:21,520 --> 00:03:26,350 When you use the PowerShell extension, this establishes a PowerShell remote in session from within 52 00:03:26,350 --> 00:03:29,200 Windows Admin Center to the server that you are managing. 53 00:03:30,010 --> 00:03:35,140 Now you have the ability to run PowerShell scripts on the destination server from within Windows Admin 54 00:03:35,140 --> 00:03:35,560 Center. 55 00:03:36,460 --> 00:03:41,350 The roles and features extension enables you to install and uninstall additional roles and features 56 00:03:41,350 --> 00:03:42,010 of the server. 57 00:03:42,900 --> 00:03:46,950 Under the security extension, which at the time of recording was still in preview. 58 00:03:46,980 --> 00:03:50,370 You can create security scans and you can run and you scan. 59 00:03:51,210 --> 00:03:56,220 You can also look at the protection history to see what threats were found and the action that was taken. 60 00:03:57,030 --> 00:04:01,860 The remote desktop extension enables you to establish an RDP session to the server. 61 00:04:02,730 --> 00:04:05,330 It'll prompt you for the credentials that should be used. 62 00:04:05,340 --> 00:04:09,810 And once you have entered in credentials that are allowed to remote desktop to the server, a remote 63 00:04:09,810 --> 00:04:14,670 desktop session will be established and now you can manage the server remotely within Windows Admin 64 00:04:14,670 --> 00:04:17,760 Center as if you have opened up the remote desktop application. 65 00:04:18,570 --> 00:04:22,290 The settings extension pertains to the server that you are connected to. 66 00:04:23,040 --> 00:04:28,320 It gives you a few settings that you can configure, for example, those related to SMB remote desktop 67 00:04:28,320 --> 00:04:30,750 connection and one that I would like you to take a look at. 68 00:04:30,750 --> 00:04:34,920 His role based access control with role based access control. 69 00:04:34,950 --> 00:04:37,740 You can add some additional groups to Active Directory. 70 00:04:38,610 --> 00:04:43,710 This gives you the ability to control who's got access to Windows Admin Center and the different permissions 71 00:04:43,710 --> 00:04:44,370 that they have. 72 00:04:45,240 --> 00:04:47,010 Now you will add server three. 73 00:04:47,930 --> 00:04:52,730 I'll click on AD and follow the same process again, and this time you'll enter in the IP address. 74 00:04:53,630 --> 00:04:56,690 You could also enter in the fully qualified domain name. 75 00:04:57,530 --> 00:05:00,890 Once the server has been found, its name will be validated. 76 00:05:01,760 --> 00:05:06,110 You can either added as you have typed the name or when you click on Add without selecting the tick 77 00:05:06,110 --> 00:05:08,030 box it allowed the DNS name. 78 00:05:08,900 --> 00:05:11,570 This server currently is not joined to the domain. 79 00:05:12,410 --> 00:05:18,260 Lets modify the manage as account so that we can successfully connect to the server by selecting the 80 00:05:18,260 --> 00:05:22,260 server and clicking on manage as and we specified the account details. 81 00:05:22,280 --> 00:05:27,830 The credentials will be validated and you will then be able to connect to the server to connect to the 82 00:05:27,830 --> 00:05:28,280 server. 83 00:05:28,310 --> 00:05:33,770 It's the same process as before, simply clicking on the server name and you have the ability to utilize 84 00:05:33,770 --> 00:05:37,220 your extensions to perform various management tasks on the server. 85 00:05:38,090 --> 00:05:43,340 I find using Windows Admin Center a lot more useful and easier to use than using server manager and 86 00:05:43,340 --> 00:05:44,900 connecting to multiple servers. 87 00:05:45,800 --> 00:05:47,990 That brings us to the end of this module.