{"id":98,"date":"2019-02-18T10:01:21","date_gmt":"2019-02-18T15:01:21","guid":{"rendered":"http:\/\/blog.jamesblakeley.ca\/?p=98"},"modified":"2019-03-29T12:51:54","modified_gmt":"2019-03-29T16:51:54","slug":"windows-server-2016-core-build-notes","status":"publish","type":"post","link":"http:\/\/blog.jamesblakeley.ca\/?p=98","title":{"rendered":"Windows Server 2016 Core Build Notes"},"content":{"rendered":"<p><strong>Lasted Updated: March.29.2019<\/strong><\/p>\n<p>This post will document my settings for a fresh Windows Server 2016 Core Build<br \/>\nThese notes will hopefully serve as the basis for complete automation in the future<\/p>\n<h4>Building a new Windows Server 2016 Virtual Template<\/h4>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<p class=\"blockParagraph-544a408c\" data-key=\"9c88e0704d1141dba5bbaed0e3744f8b\"><span class=\"text-4505230f--TextH400-3033861f\"><span data-key=\"0334df41dc5a4e869097aaaeb6c196a0\">Begin the installation process by creating a new virtual machine instance using vCenter Web Client and booting into the Windows Server 2016 installation media.<\/span><\/span><\/p>\n<\/div>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<div class=\"reset-3c756112--listItemContent-756c9114\" data-key=\"e3dbe0384bfe4eb59d2de822fcde3eef\">\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\"><span class=\"text-4505230f--TextH400-3033861f\"><span data-key=\"eb26804920a64446ae2e38d023192c89\">Login to the vCenter Client or Web Client &#8211; Select <strong class=\"bold-3c254bd9\">Home\\Inventory\\VMs and Templates<\/strong> view<\/span><\/span><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Expand and select &lt;<strong class=\"bold-3c254bd9\">vCenter&gt;\\&lt;datacenter&gt;\\&lt;Folder&gt;\\1.Templates\\\u00a0<\/strong>folder<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\"><span class=\"text-4505230f--TextH400-3033861f\"><span data-key=\"3b009e82874b4b4681125ef6d9cdc2c3\">Right-click, select <strong class=\"bold-3c254bd9\">New Virtual Machine<\/strong>, select <strong class=\"bold-3c254bd9\">Custom<\/strong>, and click <strong class=\"bold-3c254bd9\">Next<\/strong><\/span><\/span><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Type Virtual Machine Name: <strong class=\"bold-3c254bd9\">TMPL-Windows 2016 STD Core<\/strong>, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select Host\\Cluster location: <strong class=\"bold-3c254bd9\">CLUSTER01<\/strong>, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select Root of Host for <strong class=\"bold-3c254bd9\">Resource Pool<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select an available Storage location: <strong class=\"bold-3c254bd9\">&lt;datastore&gt;,<\/strong> click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select <strong class=\"bold-3c254bd9\">Virtual Machine Version 11<\/strong>, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select <strong class=\"bold-3c254bd9\">Microsoft Windows Server 2016 (64-bit)<\/strong>, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select <strong class=\"bold-3c254bd9\">1 Virtual CPU<\/strong>, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select <strong class=\"bold-3c254bd9\">4 GB Memory<\/strong>, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select <strong class=\"bold-3c254bd9\">1 Network Adapter<\/strong> with <strong class=\"bold-3c254bd9\">VMXNET3<\/strong> type, click <strong class=\"bold-3c254bd9\">Next<\/strong>\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">NIC1 \u2013 &lt;VLAN Description&gt;<\/li>\n<\/ul>\n<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select <strong class=\"bold-3c254bd9\">VMware Paravirtual<\/strong> SCSI Controller type, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select \u201c<strong class=\"bold-3c254bd9\">Create a new virtual disk<\/strong>\u201d, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select <strong class=\"bold-3c254bd9\">50 GB Disk Size<\/strong>, <strong class=\"bold-3c254bd9\">Thin Provision<\/strong> type, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select <strong class=\"bold-3c254bd9\">SCSI (0:0)<\/strong> Virtual Device Node, click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Review Virtual Machine settings, click <strong class=\"bold-3c254bd9\">Finish<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Right-click on new Virtual Machine, select <strong class=\"bold-3c254bd9\">Edit Settings<\/strong>, click <strong class=\"bold-3c254bd9\">Options<\/strong> tab<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Remove <strong class=\"bold-3c254bd9\">Floppy Drive 1<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Under <strong class=\"bold-3c254bd9\">Options | Advanced | Memory CPU Hot Plug<\/strong> section, enable the <strong class=\"bold-3c254bd9\">Hot Add<\/strong> for both Memory and CPU<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Under <strong class=\"bold-3c254bd9\">Boot Options<\/strong> select <strong class=\"bold-3c254bd9\">Force BIOS Setup<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Click <strong class=\"bold-3c254bd9\">OK<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Right-click on new Virtual Machine, select <strong class=\"bold-3c254bd9\">Open Console<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Power on the Virtual Machine<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Within the BIOS\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Ensure the <strong class=\"bold-3c254bd9\">System Time<\/strong> and <strong class=\"bold-3c254bd9\">System Date<\/strong> are accurate<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Set <strong class=\"bold-3c254bd9\">Legacy Diskette A:<\/strong> [Disabled]<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Under <strong class=\"bold-3c254bd9\">Advanced | I\/O Device Configuration<\/strong> Disable the following<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Serial Port A:<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Serial Port B:<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Parallel Port:<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Floppy Disk Controller:<\/li>\n<\/ul>\n<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Hit <strong class=\"bold-3c254bd9\">F10<\/strong> to Save and Exit<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Attach the Windows Server 2016 ISO Image through console attach iso<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">ISO Name: <strong class=\"bold-3c254bd9\">SW_DVD9_Win_Server_STD_CORE_2016_64Bit_English_04_DC_STD_MLF_x21_70526.iso<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\"><span class=\"text-4505230f--TextH400-3033861f\"><span data-key=\"c68d6fde97d5463f8ea0fd84be3f52dc\">Connect through Virtual Machine Console &#8211; Attach ISO<\/span><\/span><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Connect through CD Drive &#8211; Datastore ISO File Datastore|&lt;volume1&gt;\\_ISOs\\<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">If OS is not found hit enter to force boot from CD<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">On the Windows 2016 setup screen, keep the defaults and click on <strong class=\"bold-3c254bd9\">Next<\/strong>\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Language to install (English \u2013 US)<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Time &amp; Current format (English \u2013 US)<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Keyboard or input method (US)<\/li>\n<\/ul>\n<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">On the <strong class=\"bold-3c254bd9\">Windows Setup<\/strong> screen click on <strong class=\"bold-3c254bd9\">Install<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\"><span class=\"text-4505230f--TextH400-3033861f\"><span data-key=\"5e557a66f6634a1183a0954d24ff852c\">On the <strong class=\"bold-3c254bd9\">Select the operating system<\/strong> screen, click on <strong class=\"bold-3c254bd9\">Windows Server 2016 Standard<\/strong> and click on <strong class=\"bold-3c254bd9\">Next<\/strong><\/span><\/span><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">On the <strong class=\"bold-3c254bd9\">License terms<\/strong> screen click on <strong class=\"bold-3c254bd9\">I accept the license terms<\/strong> and click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">On the <strong class=\"bold-3c254bd9\">Which type of installation do you want<\/strong>, click on <strong class=\"bold-3c254bd9\">Custom: Install Windows Only (Advanced)<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">To load the Paravirtual driver we will need to attach the Vmware Tools Image<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Edit Virtual Machine Settings and select CD\/DVD Drive 1<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select Datastore ISO File\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select browse &lt;datastore&gt;\\_VMTools\\vmtools\\Windows.iso<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Under Device Status selected Connected<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Return to Virtual Machine Console<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Click <strong class=\"bold-3c254bd9\">Load Driver<\/strong> and <strong class=\"bold-3c254bd9\">Browse<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">VMware Tools &gt; Program Files &gt; VMware &gt; VMware Tools &gt; pvscsi &gt; Win8 &gt; amd64<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Click next<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Select the Displayed Driver and click next<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\"><em>Disconnect the Vmware tools ISO and Reconnect the Windows Server 2016.iso before continuing<\/em><\/li>\n<\/ul>\n<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">On the <strong class=\"bold-3c254bd9\">Where do you want to install Windows,<\/strong> Select <strong class=\"bold-3c254bd9\">Drive 0<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\"><span class=\"text-4505230f--TextH400-3033861f\"><span data-key=\"5519cc6f99674c18aaff58d7fd854ef6\">When prompted that Windows might create additional partitions, click on <strong class=\"bold-3c254bd9\">OK<\/strong><\/span><\/span><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Click on <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">Wait for the installation of Windows to complete (approx. 10 minutes)<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"dd3982d12d2d4408a97ce58207b81d75\">On the <strong class=\"bold-3c254bd9\">Type a password for the built-in Administrator account<\/strong>, enter the standard <strong class=\"bold-3c254bd9\"><del>Local Admin<\/del> <\/strong>password used for Servers <span data-key=\"5754f23b79a94f6b94bfd2465c9f7f10\">and click on <strong class=\"bold-3c254bd9\">Finish<\/strong><\/span><\/li>\n<\/ul>\n<\/div>\n<hr \/>\n<\/div>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<h4 class=\"reset-3c756112\"><span class=\"text-4505230f--HeadingH600-23f228db\"><span data-key=\"7d19415fd9cf4b96b63449224ccfd17c\">VMware Tools<\/span><\/span><\/h4>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<div class=\"reset-3c756112--listItemContent-756c9114\" data-key=\"a763f23c69164e15906e99fc1d54c74c\">\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"d0ad1f84f7da42a6b8c3c8ff36376e2a\"><span class=\"text-4505230f--TextH400-3033861f\"><span data-key=\"0148088cc7f0492aba5941f26ce035cf\">From the Virtual Machine click <strong class=\"bold-3c254bd9\">Edit Settings,<\/strong> Select CD\/Drive 1 and change Datastore ISO File to\u00a0<\/span><\/span><strong>&lt;datastore&gt;\\_VMTools\\vmtools\\windows.iso<\/strong> click OK<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"d0ad1f84f7da42a6b8c3c8ff36376e2a\">Login to the newly created server<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"d0ad1f84f7da42a6b8c3c8ff36376e2a\">From the Command Prompt<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"d0ad1f84f7da42a6b8c3c8ff36376e2a\">Change to D:\\<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"d0ad1f84f7da42a6b8c3c8ff36376e2a\">Run <strong class=\"bold-3c254bd9\">VMware Tools<\/strong> Still attached (run setup64.exe) version 10.3.x<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"d0ad1f84f7da42a6b8c3c8ff36376e2a\">Click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"d0ad1f84f7da42a6b8c3c8ff36376e2a\">Select <strong class=\"bold-3c254bd9\">Complete<\/strong>\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"a0488f5bb70c412fb491a6782f3d41bf\">Click <strong class=\"bold-3c254bd9\">Next<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"a0488f5bb70c412fb491a6782f3d41bf\">Click <strong class=\"bold-3c254bd9\">Install<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"a0488f5bb70c412fb491a6782f3d41bf\">Click <strong class=\"bold-3c254bd9\">Finish<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"a0488f5bb70c412fb491a6782f3d41bf\">Click <strong class=\"bold-3c254bd9\">Yes<\/strong> to <strong class=\"bold-3c254bd9\">Restart<\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<div class=\"reset-3c756112--listItemContent-756c9114\" data-key=\"8729b04c62d34fbcae0e603a51768282\">\n<hr \/>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<h4 class=\"reset-3c756112\"><span class=\"text-4505230f--HeadingH600-23f228db\"><span data-key=\"11d6eb6fc63343379f884a14b390004d\">OS Configuration<\/span><\/span><\/h4>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<ul>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\"><span class=\"text-4505230f--TextH400-3033861f\"><span data-key=\"2342f549e6ef4a1dbb84195b0692d931\"> Login to the Desktop as the local Administrator account<\/span><\/span><\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">To configure Core Edition, you run the command <strong class=\"bold-3c254bd9\">SCONFIG<\/strong> once logged into the desktop<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 1: No Change leaves as workgroup<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 2: Change the Computer Name to W2K16-Core, restart when prompted<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 3: Do not add any additional local administrators<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 4: Leave as Enabled<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 5: Leave as DownloadOnly<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 6: Click 6 to start the download and installation of latest Windows Updates\n<ul>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Select (A)ll updates<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Note this may take some time<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">When you see the list select (A)ll to download and install the updates<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Reboot the system when prompted<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Re-Run the Updates after Login and install any additional patches<\/li>\n<\/ul>\n<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 7: Change to Enabled for Remote Desktop\n<ul>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Allow only clients running Remote Desktop with NLA (more secure)<\/li>\n<\/ul>\n<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 8: Network Settings should be left as DHCP<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 9: Adjust Date, Time and Time Zone to EST with Daylight savings<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 10: Set to Basic (need to disable this completely)<\/li>\n<li class=\"blockParagraph-544a408c\" data-key=\"fa5cf7cca630413cbd137afd26b18da7\">Option 11: Check that the server is activated against the KMS Server<\/li>\n<\/ul>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<h4 class=\"reset-3c756112\"><span class=\"text-4505230f--HeadingH600-23f228db\"><span data-key=\"11d6eb6fc63343379f884a14b390004d\">Power Configuration<\/span><\/span><\/h4>\n<p class=\"reset-3c756112\">powercfg -setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<h4 class=\"reset-3c756112\"><span class=\"text-4505230f--HeadingH600-23f228db\"><span data-key=\"11d6eb6fc63343379f884a14b390004d\">secure channel (schannel) &#8211; iis crypto 2.0<\/span><\/span><\/h4>\n<p class=\"blockParagraph-544a408c\" data-key=\"83d1fd159c9f49399f831f000a35b3ba\">Software details: <a href=\"https:\/\/www.nartac.com\/Products\/IISCrypto\/\">https:\/\/www.nartac.com\/Products\/IISCrypto\/<\/a><\/p>\n<\/div>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<div class=\"reset-3c756112--listItemContent-756c9114\" data-key=\"96c59c57f3f54b2c9a22b8a852da30b7\">\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">Software Location: \\\\server1\\share1\\<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">From the command prompt map a connection to\n<ul>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">net use t: \\\\server1\\share1<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">Enter Domain Username and Password<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">Change to the mapped drive and run <strong class=\"bold-3c254bd9\">ISSCrypto.exe<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">.\\IISCrpto\\ISSCrypto.exe<\/li>\n<\/ul>\n<\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">On the License Agreement screen click on <strong class=\"bold-3c254bd9\">Accept<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">Click on the <strong class=\"bold-3c254bd9\">Best Practices<\/strong> button, click <strong class=\"bold-3c254bd9\">OK<\/strong> and click on <strong class=\"bold-3c254bd9\">Apply, OK<\/strong><\/li>\n<li class=\"blockParagraph-544a408c--noMargin-acdf7afa\" data-key=\"348f88f345c94f0bab888fbd2ae7d25b\">Reboot the server<\/li>\n<\/ul>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<h4 class=\"reset-3c756112\"><span class=\"text-4505230f--HeadingH600-23f228db\"><span data-key=\"11d6eb6fc63343379f884a14b390004d\">windows update (on premises wsus)<\/span><\/span><\/h4>\n<p class=\"blockParagraph-544a408c\" data-key=\"83d1fd159c9f49399f831f000a35b3ba\">To be able to manage and report on installed Windows Security Updates i wish to point the server to the local on premises WSUS 2016 server. As the template is not joined to the domain we will be modifying the registry.<\/p>\n<p data-key=\"83d1fd159c9f49399f831f000a35b3ba\">All keys can be found under HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate<\/p>\n<p data-key=\"83d1fd159c9f49399f831f000a35b3ba\">The following commands will be needed at a minimum. For other Automatic Update configurations. Refer to the Microsoft site:<\/p>\n<p data-key=\"83d1fd159c9f49399f831f000a35b3ba\">https:\/\/docs.microsoft.com\/de-de\/security-updates\/windowsupdateservices\/18127499<\/p>\n<\/div>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<div class=\"reset-3c756112--listItemContent-756c9114\" data-key=\"96c59c57f3f54b2c9a22b8a852da30b7\">\n<ul>\n<li>reg add &#8220;HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate&#8221; \/v TargetGroup \/t REG_SZ \/d &#8220;Templates &#8211; Servers&#8221;<\/li>\n<li>reg add &#8220;HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate&#8221; \/v TargetGroupEnabled \/t REG_DWORD \/d 1<\/li>\n<li>reg add &#8220;HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate&#8221; \/v WUServer \/t REG_SZ \/d https:\/\/wsus.domain.local:8531<\/li>\n<li>reg add &#8220;HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate&#8221; \/v WUStatusServer \/t REG_SZ \/d https:\/\/wsus.domain.local:8531<\/li>\n<\/ul>\n<p><strong><span style=\"color: #ff0000;\">Note: if you not using SSL on your WSUS then your ports will be different (8530)<\/span><\/strong><\/p>\n<p>To force check the server against your WSUS<\/p>\n<ul>\n<li>wuauclt \/detectnow \/reportnow<\/li>\n<\/ul>\n<p>Go to your WSUS Console and ensure the Servers are reporting in<\/p>\n<p><span style=\"color: #ff0000;\"><strong>Note: If you receive the following error code 80072F8F<\/strong><\/span><\/p>\n<p>I received the following code error when checking in with the on-premises WSUS Server. This is because i am using a SSL cert from an internal Certificate Authority<\/p>\n<p>To fix this i have imported the Root and SUBCA into the template. If you are unsure talk to your Certificate Authority Administrator for assistance<\/p>\n<ul>\n<li>certutil -addstore -enterprise -f -v root &#8220;root.cer&#8221;<\/li>\n<li>certutil -addstore -CA -f &#8220;SUBCA.cer&#8221;<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<h4 class=\"reset-3c756112\"><span class=\"text-4505230f--HeadingH600-23f228db\"><span data-key=\"11d6eb6fc63343379f884a14b390004d\">Windows Defender<\/span><\/span><\/h4>\n<p class=\"blockParagraph-544a408c\" data-key=\"83d1fd159c9f49399f831f000a35b3ba\">Since i will be using a 3rd party product the following will remove the Windows Defender feature:<\/p>\n<p data-key=\"83d1fd159c9f49399f831f000a35b3ba\">Update: 1<br \/>\nI have found that the above will cause problems when trying to pull the get-windowsupdatelog as it looks for a missing dll (that can be copied from a server with it installed to restore the functionality)<\/p>\n<p data-key=\"83d1fd159c9f49399f831f000a35b3ba\">Update: 2<br \/>\nIt seems really difficult to reinstall Windows-Defender when it has been removed proceed with caution!<\/p>\n<p data-key=\"83d1fd159c9f49399f831f000a35b3ba\"><strong>Dism \/online \/Disable-Feature \/FeatureName:Windows-Defender \/Remove \/NoRestart \/quiet<\/strong><\/p>\n<p data-key=\"83d1fd159c9f49399f831f000a35b3ba\">\n<\/div>\n<\/div>\n<div class=\"reset-3c756112--commentsArea-56f27afc\">\n<div class=\"reset-3c756112\">\n<div class=\"reset-3c756112--listItemContent-756c9114\" data-key=\"96c59c57f3f54b2c9a22b8a852da30b7\">This should complete the template. If you have any other suggestion please comment below.<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n<div class=\"twitter-share\"><a href=\"https:\/\/twitter.com\/intent\/tweet?via=mad_manc\" class=\"twitter-share-button\">Tweet<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Lasted Updated: March.29.2019 This post will document my settings for a fresh Windows Server 2016 Core Build These notes will hopefully serve as the basis for complete automation in the future Building a new Windows Server 2016 Virtual Template Begin the installation process by creating a new virtual machine instance using vCenter Web Client and booting into the Windows Server 2016 installation media. Login to the vCenter Client or Web Client &#8211; Select Home\\Inventory\\VMs and Templates view Expand and select &lt;vCenter&gt;\\&lt;datacenter&gt;\\&lt;Folder&gt;\\1.Templates\\\u00a0folder Right-click, select New Virtual Machine, select Custom, and click Next Type Virtual Machine Name: TMPL-Windows 2016 STD Core, click Next Select Host\\Cluster location: CLUSTER01, click Next Select Root of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,5],"tags":[],"class_list":["post-98","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-vmware"],"_links":{"self":[{"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=\/wp\/v2\/posts\/98","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=98"}],"version-history":[{"count":22,"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=\/wp\/v2\/posts\/98\/revisions"}],"predecessor-version":[{"id":202,"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=\/wp\/v2\/posts\/98\/revisions\/202"}],"wp:attachment":[{"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=98"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=98"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.jamesblakeley.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=98"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}