Windows Server 2019 is a powerful and versatile operating system designed to meet the needs of modern enterprises and home lab environments. Proper initial setup ensures your server is secure, efficient, and ready to handle the roles and workloads you assign to it. This guide walks you through essential configuration steps to establish a reliable and secure foundation for your server.
Configuring a server correctly from the beginning prevents security vulnerabilities, ensures system stability, and provides a solid foundation for deploying services. Whether you’re running a web server, a domain controller, or hosting applications, these steps are critical for smooth operations.
After installing Windows Server 2019:
- Log in with the local administrator account and the password you set during installation.
- If using a virtual machine, ensure you have access to the hypervisor console for direct management in case of network misconfigurations.
-
Change the Password:
- Press
Ctrl + Alt + Del, select Change a password, and set a strong password.
-
Rename the Administrator Account:
- Open Computer Management > Local Users and Groups > Users.
- Right-click the administrator account and select Rename.
- Assign a non-standard name to reduce the risk of brute-force attacks.
- Open Network and Sharing Center > Change adapter settings.
- Right-click your network adapter, select Properties, and double-click Internet Protocol Version 4 (TCP/IPv4).
- Enter the following details:
- IP Address: Static IP for the server.
- Subnet Mask: Typically
255.255.255.0.
- Default Gateway: Your network’s gateway IP.
- DNS Servers: Use your preferred DNS server (e.g.,
127.0.0.1 for domain controllers or Google’s 8.8.8.8).
Test connectivity using:
ping <gateway-ip>
Keeping your server updated is vital for security and performance:
- Go to Settings > Update & Security > Windows Update.
- Click Check for updates.
- Configure Active Hours to minimize update reboots during working hours.
- Automate updates via Group Policy:
- Open Group Policy Editor (
gpedit.msc).
- Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update.
- Enable Configure Automatic Updates and set the desired schedule.
¶ Configuring Roles and Features
Windows Server 2019 allows you to add only the features and roles you need:
- Open Server Manager and select Add roles and features.
- Choose Role-based or feature-based installation.
- Select the server and pick the required roles (e.g., Active Directory Domain Services, Web Server (IIS)).
- Confirm and complete the installation.
Enable and configure the firewall to secure your server:
- Open Windows Defender Firewall with Advanced Security.
- Review and customize inbound and outbound rules.
- Allow essential traffic:
- Open System Properties and navigate to the Remote tab.
- Select Allow remote connections to this computer.
- Add authorized users under Select Users.
- Verify the firewall rule for Remote Desktop is enabled.
¶ Synchronizing Time and Date
Accurate time settings are essential for logging and domain environments:
- Open Settings > Time & Language > Date & Time.
- Ensure the time zone is correct and enable automatic time synchronization.
- Sync with a reliable NTP server:
w32tm /config /manualpeerlist:"pool.ntp.org" /syncfromflags:manual /reliable:yes /update
w32tm /resync
Before deploying additional services, create a full backup of the server:
- Install Windows Server Backup via Server Manager.
- Open Windows Server Backup and select Backup Schedule.
- Configure the backup to include:
- System State: Essential for disaster recovery.
- OS Volume: Protects the base operating system.
- Critical Data: Back up specific application data or directories.
- Choose a dedicated drive or network share as the backup destination.
¶ Regular Maintenance
- Monitor Resource Usage: Use tools like Task Manager, Resource Monitor, or Performance Monitor to track CPU, RAM, and disk activity.
- Check Logs: Open the Event Viewer to review warnings or errors.
- Update Regularly: Keep roles, features, and applications up-to-date to avoid vulnerabilities.
By following these steps, your Windows Server 2019 environment is secure, functional, and ready for additional configurations. This guide provides a foundation for deploying services and applications tailored to your specific needs, whether for a home lab, development, or production use. Taking the time to configure your server correctly now will save you time and trouble down the road.
Return to the Table of Contents for more guides and tutorials.
