How Windows gets an IP address
Automatic IP addressing
–This is the default
DHCP (Dynamic Host Configuration Protocol)
EFS
Encrypting File System
• View user and trusted certs
–Add and remove
Certificate Manager
• certmgr.msc
Force a Group Policy update
gpupdate
–Remove directory
• rd / rmdir
–Wipe everything and reload
–Backup your files
–Start the setup by booting from the installation
media
Clean install
SMS
Short message service
Real-time system statistics
–CPU, memory, disk access, etc.
• Starting
–Ctrl-Alt-Del,
select
–Ctrl-Shift-Esc
Task Manager
–A better Xcopy
–Included with Windows 10 and 11
robocopy
Fixes logical file system errors on the disk
chkdsk /f
Upgrade the existing OS
–Keeps all applications, documentations, and settings
–Start the setup from inside the existing OS
in-place Upgrade
WWAN
Wireless Wide Area Network
Built-in antivirus for Windows 10 and 11
–No additional third-party products required
• Included in the Windows Security app
–Virus & threat protection
Microsoft Defender Antivirus
Lookup information from DNS servers
–Canonical names, IP addresses, cache timers, etc.
• Lookup names and IP addresses
–Many different options
What is nslookup?
Manage disk configurations
diskpart
• Encrypt an entire volume
–Protects all of your data, including the OS
–Support for all Windows editions except Home
• Lose your laptop? - Doesn’t matter without the password
• Data is always protected
–Even if the physical drive is moved to another computer
BitLocker
ACLs
Used to allow or deny traffic
Access Control Lists
A database of everything on the network
–Computers, user accounts, file shares,
printers, groups, and more
• Manage authentication
–Users login using their AD credentials
• Centralized access control
–Determine which users can access resources
• Commonly used by the help desk
–Reset passwords
–Add and remove accounts
Active Directory
• Test reachability
–Determine round-trip time
–Uses Internet Control Message Protocol (ICMP)
• One of your primary troubleshooting tools
–Can you ping the host?
What is Ping ?
Scan integrity of all protected system files
What is sfc?
• System File Checker
-Rights and permissions should be set to the bare
minimum
–You only get exactly what’s needed to
complete your objective
Don’t allow users to run with administrative privileges
–Limits the scope of malicious behavior
What is Least privilege?
Network name - SSID
What is Service Set Identification?
APIPA
(Automatic Private IP Addressing)
Assigns 169.254.1.0 to 169.254.254.255
There’s no static address or DHCP server
–Communicate locally (link-local address)
Ping your local router/gateway
• Determine TCP/IP and network adapter information
–And some additional IP details
• View additional configuration details
–DNS servers, DHCP server, etc.
ipconfig
Combine ping and traceroute
–Included with Windows NT and later
• First phase runs a traceroute
–Build a map
• Second phase
–Measure round trip time and packet loss at each hop
pathping