Ultimate System Administrator Course

Explore a home lab, a personal non-production environment where you can set up experiments with IT systems, software, and networks. Experiment with virtual machines, configure network devices, test new technologies, and practice troubleshooting in a safe, customizable space that supports hands-on learning, real-world IT skills, and certifications.

Build a low-cost home lab server using salvaged and cheap hardware, run 4–5 virtual machines with proxmox, esxi, or hyper-v, and gain hands-on, practical experience.

Explore virtualization platforms that let you run virtual computers on your physical machine, enabling Windows, Linux, or multiple OS for safe testing, experimenting, and learning in a virtual lab.

Explore Windows Server 2025, the next evolution in Microsoft server operating systems, delivering enhanced security, advanced threat detection, improved performance, centralized management, and seamless cloud or on premise deployment.

Upgrade directly to Windows Server 2025 from 2012 R2 and later. Use hot patching and laps to manage admin passwords via Active Directory and adopt Azure Arc for hybrid management.

Discover the minimum hardware requirements for Windows Server, including cpu, memory, storage, and network specs, and learn how to tailor them for VMware lab setups.

Set up a safe, isolated lab by configuring a Windows Server 2025 virtual machine in VMware Workstation or other virtualization platforms, with an ISO, allocated resources, and snapshots.

Install Windows Server 2025 in a lab VM on VMware ESX or Hyper-V by following the standard ISO installation, choosing English US desktop experience, and creating a secure administrator password.

Perform the first time setup of a Windows Server 2025 instance, configuring time zone, static IPv4, and DNS. Enable remote desktop and management via sconfig and server manager.

Actively participate in assignments, quizzes, and role plays to apply what you learn and deepen retention. Engage in hands-on, safe practice that builds decision-making, problem-solving, and confidence through real-world simulations.

Understand server roles as the main duties of a Windows Server, with examples like Active Directory, DHCP, DNS, file services, and Hyper-V, while features provide supporting tools such as BitLocker.

Install and configure DNS and Active Directory Domain Services to create a functional domain controller and new forest. Validate domain operations with nslookup, static IP, and DNS forwarders.

Learn how to create A records, CNAME records, MX records, and PTR records in Windows DNS, perform forward and reverse lookups, and understand their role in Active Directory networks.

Learn to create organizational units, user accounts, and security groups in Active Directory, assign users to groups, and apply access control and group policy using a Windows Server domain controller.

Join a second Windows Server to an existing Active Directory domain. Verify domain membership via Server Manager and DNS.

Apply group policy to centrally manage operating systems, applications, and end-user settings across an Active Directory domain with Group Policy Objects for consistent security settings.

Explore the five FSMO roles: schema master, domain naming master, RID master, PDC emulator, and infrastructure master, on forest and domain levels to prevent conflicts in Active Directory.

Run the netdom query fsmo from a domain joined machine to identify which domain controller holds each fsmo role, and document the output to prevent a single point of failure.

Learn to install and configure a DHCP server, authorize it in Active Directory, create an IPv4 scope, and manage IP allocations, exclusions, and reservations for automatic network configuration.

Install and configure the Windows Server web server IIS to host websites, web apps, and services, using Server Manager and IIS Manager.

Install and configure Remote Desktop Services on Windows Server. Set up a session-based deployment, enable Remote Desktop Web Access and Gateway, manage licensing, and test connectivity.

Explore how disks become volumes and how storage spaces pool multiple disks into fault-tolerant virtual disks, using GPT, NTFS, and volume types like simple, spanned, striped, and mirrored.

Create a storage pool from five ten-gig disks, enable thin provisioning, configure a parity virtual disk, and provision a usable NTFS volume for the Z drive.

Install the file server role, create a shared projects folder, and grant domain users access via SMB. Map the Z drive and configure NTFS permissions in Server Manager.

Master NTFS permissions in Windows Server 2025 by configuring share access, disabling inheritance, and assigning rights like full control, modify, and read for users and groups.

PowerShell essentials empower server admins to automate tasks, manage services and users, and gain full control over Windows Server environments.

Shows a PowerShell script that automates Active Directory user creation. Imports the AD module, prompts for user details, and applies enabled and change password at logon.

Discover practical PowerShell tips to boost efficiency, from using get-help and get-command to tab completion and show command, while managing aliases and updating help.

Discover how Visual Studio Code empowers PowerShell scripting with syntax highlighting, intellisense, an integrated terminal, and a rich extensions ecosystem including templates.

Check for and apply updates on Windows Server, pause updates when needed, and review update history, then configure automatic, manual, or download-only settings via sconfig.

Master event viewer to view and filter Windows Server logs, including application, security, and system, and create custom views for critical errors, logins, and security audits, enabling proactive server diagnostics.

Monitor and troubleshoot Windows Server 2025 performance in real time using task manager, resource monitor, and performance monitor to identify bottlenecks and optimize CPU, memory, disk, and network usage.

Master Windows Defender Firewall with Advanced Security, manage inbound and outbound rules across domain, private, and public profiles, and create port 8080 rules to secure servers.

Enable Microsoft Defender Antivirus on Windows Server 2025, run quick or full scans, and keep definitions current while enabling real-time protection, tamper protection, and exclusions.

Explore Windows Server backup as a tool for backing up files, volumes, system state, and bare metal recovery, compare it to third-party solutions, and practice configuring scheduled and manual backups.

Explore how Windows Server powers small businesses to large enterprises by running roles like Active Directory, file storage, DNS, and DHCP on a single physical server and via Hyper-V.

Learn to automate new user provisioning in Active Directory with a PowerShell script, copy security group memberships, and streamline onboarding for the help desk.

Learn how to create and manage security groups in Active Directory, apply least-privilege access, and configure SSO for apps like Dan Mill Monitoring with global vs domain local groups.

Enable audit logon events with group policy to capture login and logout activity, then use Event Viewer to identify failed logons and the source of account lockouts.

Audit who has admin rights in Active Directory, focusing on domain admins and other high privilege groups. Use PowerShell to list members and export CSV reports for compliance.

Develop practical Windows Server 2025 mastery by building a personal IT lab, recreating labs, and solving real-world issues with virtualization such as VMware Workstation or VirtualBox.

Explore Hyper-V, Microsoft's virtualization platform for creating and managing virtual machines on a single host. See how Windows Server and Windows 10/11 Pro drive cost efficiency, versatility, and production environments.

Install Hyper-V on Windows server, enable BIOS virtualization. Enable nested virtualization if needed, create a virtual switch, set folders for virtual disks and VMs, then reboot and use Hyper-V manager.

Create a Hyper-V virtual machine with the wizard, name core Linux zero two, generation one, attach switch, allocate 1 gb and 16 gb, then boot from the core Linux ISO.

Explore Windows 11 editions from home to enterprise and identify the right admin fit. Pro adds group policy editor and Azure AD join; enterprise adds AppLocker and Credential Guard.

Understand why Windows 11 matters as Windows 10 reaches end of life in 2025. Learn how TPM 2.0, zero-trust security, and BitLocker boost protection, while admins leverage familiar deployment skills.

Windows 11 introduces security, management, and performance improvements for sysadmins, including enhanced threat protection, zero trust by default, TPM 2.0, and streamlined deployment with Autopilot and improved group policy.

Build and run Windows 11 in a VMware Workstation VM, focusing on safe, isolated lab testing, VM creation, memory and CPU allocation, TPM support, and using the Windows 11 ISO.

Shows how to install Windows 11 Pro in a VMware Workstation Pro VM, from booting the ISO to creating a local admin account and joining a domain.

Join Windows 11 to a local active directory domain using DMT.local and the DMT\Dan.mill account; reboot to sign in with the domain account.

Explore Microsoft Entra ID, the cloud-based identity and access management service that enables single sign-on, multifactor authentication, and conditional access for Windows 11 and Microsoft 365 apps.

Explore Windows 11 administration by mastering the start menu, from pinned apps and integrated search to customization, plus networking settings, the settings hub, and the control panel for advanced configurations.

Explore the Windows 11 taskbar and system tray, use the start button and search, pin and view running apps, and notice the centered layout with live updates.

Master File Explorer in Windows 11 to navigate, search, and manage files and permissions efficiently. Learn shortcuts, hidden items, and filters to streamline file management for a system admin.

Explore built-in Windows 11 productivity tools, including snap layouts, multiple desktops via Windows Tab, search, focus settings, do not disturb, and cloud backup with OneDrive and Microsoft Office.

Discover Microsoft Copilot, an AI-powered assistant in Windows 11 Pro that boosts productivity with content generation, coding help, and automation, accessible via Start menu and integrated with Word and Excel.

Edge, the Windows 11 default browser, delivers speed, security, and productivity with built-in AI and co-pilot, tracking prevention, extensions, and secure browsing plus Microsoft services integration.

Clearing the browser cache helps fix login, loading, and display issues by refreshing stored files. Learn how to clear Edge browsing data, including history, cookies, and cached content.

Compare local, Microsoft, and domain accounts in Windows 11, and learn when to use each, including account management in computer management, groups, and Entra ID.

Master device manager to manage hardware, update drivers, and troubleshoot conflicts across display adapters, network adapters, processors, and audio devices in Windows 11.

Master Windows task manager to monitor CPU, memory, disk, and network usage, troubleshoot slow boots, and manage startup items by enabling or disabling programs.

Master the Windows services console (services.msc) to manage background processes, view startup types (automatic, manual, disabled), and control services by starting, stopping, or restarting them with admin rights.

Explore how group policy enables central management of Windows 11 Pro machines via Active Directory, enforcing password rules, restricting apps, and disabling USB drives across the organization.

Flush the DNS cache to clear the DNS resolver cache, resolve website loading issues and DNS errors, and force fresh lookups, demonstrated on Windows with ipconfig /flushdns and nslookup.

Master the Windows image repair workflow by running DISM to restore health, then SFC to scan and replace corrupted system files in an admin command prompt.

Release and renew your device's ip address to obtain a fresh dhcp assignment, resolving no-internet issues, 169.254 errors, and ip conflicts with ipconfig /release and /renew.

Discover disk management in Windows 11 using the Disk Management tool to create and format partitions, manage volumes and drive letters, and understand basic and dynamic disks and software raid.

Explore NTFS, EXFAT, and REFS on Windows 11, comparing features, use cases, and how to choose the right file system for performance, security, and data integrity.

Storage Sense in Windows 11 automatically frees disk space by deleting temporary files, recycle bin items, and previous Windows installations, with customizable settings for cleanup.

Differentiate Windows quality updates from feature updates: quality updates patch security and bugs monthly, while feature updates are larger, less frequent upgrades that add features and require longer restarts.

Manage Windows update settings in Windows 11, including quality, security, and feature updates, with restart scheduling and update history for admins.

Discover Windows features as optional components you can enable to tailor virtualization, development, and compatibility, with Hyper-V, Windows Subsystem for Linux, SMB 1.0, .NET frameworks, and sandbox.

Explore third-party and native tools to manage Windows updates from a centralized dashboard, including WSUS, Intune update rings, and RMM solutions for testing, automation, and compliance.

Discover how Windows Defender (Microsoft Defender Antivirus) provides real-time protection in Windows 11, with enterprise integration via Defender for Endpoint, and manage security from the Windows Security Center.

Windows Defender Firewall monitors inbound and outbound traffic, lets admins allow or block apps, applies rules to domain, private, and public networks, and uses group policy for enterprise security.

Activate BitLocker to provide full-disk encryption on Windows Pro, Enterprise, and Education, protecting data at rest with TPM, recovery keys, and centralized management via Intune or Group Policy.

Discover how Windows user access control (uac) prompts for administrator permissions to elevate tasks, preventing unauthorized changes and malware installation, with policy controls through Group Policy, Intune, and Endpoint Manager.

Explore third-party security tools that augment Windows 11 endpoints beyond Windows Defender, delivering real-time monitoring, centralized dashboards, threat hunting, and automated remediation for enterprise security.

Use the web-based emulator chasm to test unfamiliar operating systems and browsers, aiding quick troubleshooting and user guidance without a full VM or persistent storage.

Learn how PowerShell scripting automates routine sysadmin tasks across Windows servers, generating quick system health reports on disk space, memory, and system info, with reusable scripts.

Discover Visual Studio Code, the free code editor with a built-in terminal, syntax coloring, and IntelliSense, enhanced by extensions, ideal for sysadmins, developers, and DevOps.

learn to set up Visual Studio Code for PowerShell, create a scripts folder, write and run your first script GetSystemInfo.ps1, and explore basic Visual Studio Code features and debugging setup.

Learn to use variables in PowerShell to collect server information and display it with write-host, using $servername, current user, and today.

Explore how PowerShell uses objects with properties and select-object to extract operating system details from get-ciminstance and get-process for a server health view.

Filter system information with where-object to surface only items, like stopped services or disk space. Build a health-check script that outputs a concise report using get-service, get-psdrive, and select-object.

Master if statements to turn script output into health checks by flagging low disk space. Use PowerShell variables and Get-PSDrive to display warnings or normal results with if-else.

Master looping through multiple items in PowerShell, iterating servers, services, and drives to automate status checks and generate a concise health report.

Replace hard-coded values with environment variables in the PowerShell script to produce a readable, professional server health report with color-coded output and memory shown in gigabytes.

Prompt AI to generate usable scripts, then verify, debug, and adapt them for production environments. Empower IT pros and beginners to automate tasks, build scripting knowledge, and strengthen their resumes.

Explore three beginner-friendly AI tools for scripting: ChatGPT, Copilot, and Claude. Compare their strengths, access options, and how to choose the right tool for your environment, with free tiers available.

Learn to read and understand AI-generated code, explain the logic, and annotate scripts with comments to build practical scripting mastery and safer execution.

Spot and fix common ai scripting mistakes by recognizing root causes like hallucinated cmdlets, syntax and logic errors, missing error handling, and hardcoded values, with a practical review checklist.

GitHub stores scripts in the cloud and tracks changes with version history. It enables team collaboration and provides a professional home for your scripts as Copilot approaches.

Discover GitHub Copilot, an AI assistant inside Visual Studio Code that suggests code, answers questions, explains what code does, and speeds script writing, while emphasizing PowerShell understanding and data compliance.

Learn data compliance when using GitHub Copilot, including privacy settings, approval policies, and using a company account to keep sensitive information and credentials safe.

Create your free GitHub account in about two minutes by signing up, verifying your email, and securing your profile, then explore settings and privacy before diving into GitHub Copilot.

Activate GitHub Copilot on your account with the free tier, noting 50 agent mode or chat requests and 2,000 completions per month, and use it in the browser.

Install the GitHub Copilot extension and Copilot Chat in Visual Studio Code, sign in with GitHub, and authorize access. Use Copilot in the editor to write, explain, and verify scripts.

Use GitHub Copilot in VS Code to generate a PowerShell script from a plain description, test it by checking the Windows Update service, and refine it through back-and-forth prompts.

Use Copilot to review PowerShell script GetSystemInfo.ps1 and get recommendations on error handling, null checks, culture-safe parsing, and data outputs, serving as code review for compliance before running in development.

Discover the fundamentals of Microsoft 365, a cloud subscription platform for email, file storage, and collaboration, with the admin center, Intune, and the security and compliance center.

Explore how Microsoft 365 licenses grant access, including business and enterprise plans, standalone and package licenses, and learn to manage, audit, and optimize licensing from the admin center.

Master the Microsoft 365 admin center, the control hub to manage users, licenses, security, domains, and services, with quick access to Exchange Online, SharePoint, and Teams.

Add your organization’s domain to Microsoft 365 and prove ownership with a TXT record. Configure MX, CNAME, and TXT DNS records to enable branded email and services Exchange and Teams.

Learn to create standard users and a global administrator in Microsoft 365, configure licenses, domains, and user details, and enforce security with least privilege and offboarding steps.

Create and manage Microsoft 365 groups to control permissions and streamline communication across teams, mail, calendars, and SharePoint, including security groups and mail-enabled security groups with owners and members.

Learn to raise a Microsoft 365 admin center support ticket with proper permissions, by using help and support, detailing the issue, attaching files, and selecting phone or email for resolution.

Explore how to customize Microsoft 365 via org settings and security and privacy options, and monitor service health to distinguish Microsoft incidents from internal issues, with alerts via email.

Learn to create and manage rooms and equipment in Microsoft 365, enabling reservations via Outlook or Teams, setting capacity, locations, and booking rules for streamlined, trackable use.

Learn to create multiple users at once in Microsoft 365 by manual entry or csv upload, applying licenses and temporary passwords.

Explore Microsoft Exchange Online, the cloud based email and calendaring service in Microsoft 365, and manage mailboxes, shared mailboxes, mail flow, and migrations from the Exchange Admin Center.

Configure OneDrive for business in the SharePoint admin center for governance. Set notifications, retention, storage (1 tb, up to 5 tb), and sync settings; take ownership and view usage reports.

View a user’s OneDrive to review storage, sharing settings, and permissions, and generate a temporary link to access, move, or back up files during offboarding, following privacy policies.

Explore configuring SharePoint online in the admin center to balance external sharing, access control, storage, version history, and usage reports for secure, compliant collaboration.

Learn to create a team site in the SharePoint admin center from scratch, configure its name, description, privacy, language, and time zone, and manage permissions using groups.

Explore how to create a new SharePoint team site and apply a template. Customize the look with themes, header, and navigation; add sections and quick links.

Apply site, library, and folder permissions in SharePoint by creating design read write and design read only groups, using advanced settings, and breaking inheritance for granular control.

Navigate the Microsoft Teams admin center to manage users, teams, policies, meetings, guest access, and analytics, learning how to configure permissions, apps, and troubleshooting for organizational collaboration.

Explore Microsoft Purview, the cloud-based control center for data privacy, information protection, compliance, risk management, and insider threats, with admin access to sensitivity labels, retention policies, and audit logs.

Explore the Microsoft 365 security center as the command center for threat protection, incidents, and secure score, including Defender for Office 365 and MFA recommendations.

Use the setup wizard in Microsoft Defender for business to assign security reader and security admin roles, set incident and vulnerabilities alerts, then onboard devices via Intune and apply policies.

Explore threat policies in Microsoft 365 to configure anti-phishing, anti-spam, anti-malware, safe attachments and safe links, and customizable rules to tailor protection for your organization.

Learn how DKIM in Microsoft 365 adds a digital signature to outbound emails, preventing spoofing by using DNS records and enabling verification across custom domains.

Explore the Microsoft Entra admin center to manage identities and access across Microsoft cloud services, including users, groups, devices, enterprise apps, conditional access, MFA, and RBAC.

Explore how conditional access policies automate access control and enforce MFA under defined conditions in Azure AD, via the Microsoft Entra Admin Center and security defaults.

Empower users to reset forgotten passwords securely through the admin center’s self-service password reset, reducing helpdesk tickets and boosting organizational efficiency with configurable authentication methods.

Manage and secure devices and apps with Microsoft Intune, a cloud-based tool in Microsoft Endpoint Manager that integrates with Azure Active Directory and Defender for endpoint, enabling policy enforcement.

Join a Windows device to Microsoft Entra ID and enroll it in Intune for centralized management, security, and policy application, with setup steps from settings to restart.

Discover what Microsoft Azure is, how it provides compute, storage, networking, and analytics services, and how pay-as-you-go scaling, security, and compliance enable flexible cloud infrastructure.

Discover Azure global infrastructure with 60-plus regions, multiple data centers, and availability zones that enable low-latency workloads, compliance, and resilient disaster recovery for global apps.

Understand how Azure subscriptions act as foundations for resources, billing, and identity, and how management groups, policies, and regions enable scalable, isolated governance.

Explore the Azure portal as your cloud mission control, manage virtual machines, databases, and networking, and discover the marketplace and free tier for hands-on learning.

Spin up a Microsoft Azure virtual machine by using the Azure portal to choose an image, pick a region and size, configure networking and security, and review the cost estimate.

Learn to expand Azure skills using Microsoft Learn, the free tier, and practical labs, then pursue Azure certifications from AZ 900 onward.

Explore how ChatGPT assists in configuring, troubleshooting, and maintaining Windows Server and Active Directory, from setting up new machines to monitoring performance with built-in and third-party tools.

Access and interpret Windows Event Viewer logs with ChatGPT to audit user logon events (4624/4625), enable logon auditing via group policy, and automate monitoring with PowerShell or SIEM.

Demonstrates using ChatGPT to generate PowerShell and Linux bash scripts for automating Active Directory user creation and date-based folders, with emphasis on dev testing and production environments.

Explore how artificial intelligence reshapes daily sysadmin tasks with real-time intelligence and faster scripting. Use AI as a smart assistant to boost efficiency while upholding data privacy and organizational policies.