Administração do Windows Server

Gerenciamento do Windows Server e automação com PowerShell para cargas de trabalho de produção, incluindo hospedagem web IIS, serviços de domínio do Active Directory e manutenção de sistemas.

Quando Usar

• Provisionamento ou configuração de instâncias do Windows Server 2019/2022
• Configuração de sites IIS, pools de aplicativos e associações (bindings)
• Gerenciamento de usuários, grupos e Política de Grupo (Group Policy) do Active Directory
• Automação de tarefas administrativas com PowerShell
• Revisão de Logs de Eventos do Windows para solução de problemas
• Aplicação e gerenciamento de Atualizações do Windows em servidores

Pré-requisitos

• Conta de administrador no servidor de destino
• PowerShell 5.1+ (integrado) ou PowerShell 7+ instalado
• Área de Trabalho Remota ou acesso WinRM configurado
• Windows Server 2019 ou 2022 (Experiência Desktop ou Server Core)

Essenciais de Administração com PowerShell

# Check PowerShell version
$PSVersionTable.PSVersion

# Get system information
Get-ComputerInfo | Select-Object CsName, OsName, OsVersion, OsArchitecture

# List running processes sorted by CPU
Get-Process | Sort-Object CPU -Descending | Select-Object -First 20

# List all services and their status
Get-Service | Where-Object { $_.Status -eq 'Running' }

# Restart a service
Restart-Service -Name W3SVC -Force

# Get disk space on all drives
Get-PSDrive -PSProvider FileSystem | Select-Object Name, @{N='Used(GB)';E={[math]::Round($_.Used/1GB,2)}}, @{N='Free(GB)';E={[math]::Round($_.Free/1GB,2)}}

# Check uptime
(Get-Date) - (Get-CimInstance Win32_OperatingSystem).LastBootUpTime

# Open firewall port
New-NetFirewallRule -DisplayName "Allow HTTPS" -Direction Inbound -Protocol TCP -LocalPort 443 -Action Allow

# List firewall rules
Get-NetFirewallRule | Where-Object { $_.Enabled -eq 'True' -and $_.Direction -eq 'Inbound' } | Select-Object DisplayName, Action

# Set DNS client server addresses
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses ("10.0.0.2","10.0.0.3")

# PowerShell remoting to another server
Enter-PSSession -ComputerName server02 -Credential (Get-Credential)

# Run a command on multiple remote servers
Invoke-Command -ComputerName server01,server02,server03 -ScriptBlock { Get-Service W3SVC }

Funções e Recursos do Servidor

# List all available roles and features
Get-WindowsFeature

# Install IIS with management tools
Install-WindowsFeature -Name Web-Server -IncludeManagementTools -IncludeAllSubFeature

# Install Active Directory Domain Services
Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools

# Install DNS Server
Install-WindowsFeature -Name DNS -IncludeManagementTools

# Install DHCP Server
Install-WindowsFeature -Name DHCP -IncludeManagementTools

# Install File Server with deduplication
Install-WindowsFeature -Name FS-FileServer, FS-Data-Deduplication

# List installed features only
Get-WindowsFeature | Where-Object Installed | Select-Object Name, InstallState

# Remove a feature
Uninstall-WindowsFeature -Name Telnet-Client

Configuração do Servidor Web IIS

# Importa o módulo de administração do IIS
Import-Module WebAdministration

# Cria um novo pool de aplicativos
New-WebAppPool -Name "ProductionPool"
Set-ItemProperty IIS:\AppPools\ProductionPool -Name processModel.identityType -Value 3  # NetworkService
Set-ItemProperty IIS:\AppPools\ProductionPool -Name managedRuntimeVersion -Value ""     # Sem código gerenciado (proxy reverso)

# Cria um novo site
New-Website -Name "MyApp" `
  -Port 443 `
  -Protocol https `
  -PhysicalPath "C:\inetpub\myapp" `
  -ApplicationPool "ProductionPool" `
  -SslFlags 1

# Adiciona uma associação HTTP que redireciona para HTTPS
New-WebBinding -Name "MyApp" -Protocol http -Port 80

# Associa um certificado SSL ao site HTTPS
$cert = Get-ChildItem -Path Cert:\LocalMachine\My | Where-Object { $_.Subject -like "*example.com*" }
New-Item IIS:\SslBindings\0.0.0.0!443 -Value $cert

# Cria um diretório virtual
New-WebVirtualDirectory -Site "MyApp" -Name "static" -PhysicalPath "C:\inetpub\static"

# Inicia, para e reinicia um site
Start-Website -Name "MyApp"
Stop-Website  -Name "MyApp"
Restart-WebAppPool -Name "ProductionPool"

# Lista todos os sites e seu status
Get-Website | Select-Object Name, State, PhysicalPath, @{N='Bindings';E={$_.Bindings.Collection.bindingInformation}}

# Habilita o log do IIS no formato W3C
Set-WebConfigurationProperty -PSPath "IIS:\Sites\MyApp" `
  -Filter "system.webServer/httpLogging" `
  -Name "dontLog" -Value $false

# Reescrever URL: redireciona HTTP para HTTPS (requer o módulo URL Rewrite)

…