Discussion Question 1:

The first thing that should be done to ensure that certain server roles

and features are installed on all servers, is to add all of those servers

we want to manage to a Server pool. The next step would be to open

up a poweshell session as an Administrator and run the command

“Set-Item wsman:\localhost\Client\TrustedHosts” followed by the IP

address of the server “-Concatenate -Force”. This will tell the server

you’re running server manager in to trust the remote systems that

you want to manage.

Next, you need to ensure to configure the host-

based firewall on each server to allow Windows remote management

traffic. You then use Manage as... to specify remote administrator

credentials. With all of that setup, we can use the server manager to

manage roles and features on up to 100 remote servers.

To ensure that a set of default users and groups are created on each

server, we could add all new servers to the domain and add them to

a previously created Active Directory or install the Active Directory

Domain Services on one of the servers so it can store information like

users and groups that can be available to all users in the same

domains.

 

To deploy diagnostic and malware software to multiple computers or

users, we can use the Group Policy to assign program distribution. A

package can be assigned to the Group Policy Object (GPO) that after

it is deployed to the computers in the group, the software package is

automatically installed once they start the computer.

Discussion Question 2:

The command I selected was the Get-Service command. This

command gets objects that represent the services on a computer,

including running and stopped services. It is really useful because we

can use it to get all services on a computer, all services that begin

with a certain string, that include a certain string, we can add

exclusions, see services currently active, or list services on the

computer that have dependent services. The Windows Server 2016

GUI has also the capability to display all services installed on a

server. You can do so just by clicking on “Manage” and then you can

select to either add or remove a service from a server.