Create a Virtual Machines Using ESXi Web Client – PART 2 of vSphere 7.0

VMware vSphere 7.0 Series

PART 01: How To Install and Configure VMware ESXi 7.0

PART 02: Install Virtual Machines Using ESXi Web Client

PART 03: Install vCSA 7.0 (vCenter Server Appliance)

KEEP IN MIND

  • This is the 2nd tutorial focusing VMware vSphere 7.0 and a new virtual machine is created in VMware ESXi Server 7.0 host.
  • For the tutorial, ESXi Web Client is used from a remote workstation.
  • Using the newly created virtual machine, you can install required Operating Systems such as Windows 8, 10 etc.

To create a VMware ESXi Server 7.0 refer following link

https://techencyclopedia.wordpress.com/2020/05/06/how-to-install-and-configure-vmware-esxi-7-0-part-1-of-vsphere-7-0

TUTORIAL

Login to the already installed ESXi host using ESXi Web Client

IP address should be taken from the previously installed VMware ESXi Server

create virtual machine 1

Add the ISO image of the windows 10 installation file to the Datastore

Go to the Storage and select Datastore browser

ISO files 1

Upload the ISO image (If needed you can create a directory to upload/manage the files)

ISO files 2

Create a virtual machine

Two options are available to install the Virtual Machine

create virtual machine 2

Select the virtual machine type which is creating a new VM

create virtual machine 3

Provide a name for the virtual machine you are going to create and select the compatibility, Guest OS family and Guest OS version

create virtual machine 4

Select the datastore

create virtual machine 5

Configure the virtual machine settings

create virtual machine 6

Review the settings and proceed to create the VM

create virtual machine 7

Windows 10 VM is created and visible in the pane in Virtual machines navigator

create virtual machine 8

Now you can Install required operating systems !

How To Install and Configure VMware ESXi 7.0 – PART 1 of vSphere 7.0

VMware vSphere 7.0 Series

PART 01: How To Install and Configure VMware ESXi 7.0

PART 02: Install Virtual Machines Using ESXi Web Client

PART 03: Install vCSA 7.0 (vCenter Server Appliance)

KEEP IN MIND

  • In this tutorial, VMware ESXi 7.0 is installed and configured using VMware workstation virtual environment in home lab.
  • You may install VMware ESXi 7.0 in a physical server in corporate to vritualize the servers (Windows 2016/2019, Windows 8/10, Linux etc).
  • In addition to that basic configurations are shown such as Hostname configuration and IP address configuration.

What is VMware ESXi Server?

VMware ESXi server is a baremetal hypervisor (without running an operating system) that can run Virtual Machines.

TUTORIAL

Download ESXi server 7.0

Download ESXi server 7.0 from VMware website (In this scenario, a free trial is downloaded which can be used for 60 days before getting expired)

vmware DL

Install ESXi server 7.0

Boot the downloaded image file and choose the standard installer

VMware ESXi 7.0-2020-05-05-18-39-32

let the ESXi installer load

VMware ESXi 7.0-2020-05-05-18-39-45

VMware ESXi 7.0-2020-05-05-18-41-15

Press enter key to continue the ESXi 7.0 installation

VMware ESXi 7.0-2020-05-05-18-53-08

Accept the End User License Agreement to continue

VMware ESXi 7.0-2020-05-05-18-53-17

Choose the hard disk to install ESXi server 7.0 and press Enter key

You can refresh using F5 key if the hard disks are not visible

And make sure to use IDE hard disk if necessary because for some reason SCSI was not visible in the configuration (refer Troubleshooting section for screenshots)

VMware ESXi 7.0-2020-05-05-19-09-50

Enter a root password and confirm

VMware ESXi 7.0-2020-05-05-19-10-13

Press F11 key to confirm the ESXi server 7.0 installation

VMware ESXi 7.0-2020-05-05-19-10-37

Wait couple of minutes until the ESXi server 7.0 installation finish

VMware ESXi 7.0-2020-05-05-19-10-55

Press Enter key to reboot after the installation

VMware ESXi 7.0-2020-05-05-19-12-47

The ESXi server can be configured using function keys

192.168.1.25 – IP address given to manage the ESXi server

<F2> Customize System/ View logs

<F12> Shutdown /Restart

VMware ESXi 7.0-2020-05-05-19-39-55

Basic Configuration

Change the IP address of the ESXi  server 7.0

Press F2 key and enter the previously given root password

VMware ESXi 7.0-2020-05-05-19-44-59

Configure the Management Network

VMware ESXi 7.0-2020-05-05-19-47-17

Select the IPv4 configuration to change the IP address

VMware ESXi 7.0-2020-05-05-19-47-41

Give an IP address (static IP 192.168.1.50 is given)

VMware ESXi 7.0-2020-05-05-19-48-29

Press ‘Y’ to confirm the IP change and restart the management network

VMware ESXi 7.0-2020-05-05-19-48-43

The new IP change will look like this

VMware ESXi 7.0-2020-05-06-11-36-53

Change the Hostname

To change the Hostname select the DNS configuration in the Configure Management Network menu

VMware ESXi 7.0-2020-05-05-19-52-43

Give an appropriate Hostname

VMware ESXi 7.0-2020-05-05-19-53-07

New Hostname will be visible like this

VMware ESXi 7.0-2020-05-06-11-39-54

Log in using

After the installation and configuration of ESXi server 7.0, you can visit the ESXi login screen using the management IP address and the root password from a remote computer.

Using this interface you can create and maintain virtual machines.

interface 1

interface 2

TROUBLESHOOTING

Hard disk not visible error

In VMware workstation, for the virtual matching, create an IDE hard disk instead of the default SCSI because for some reason SCSI was not visible in the configuration.

hard disk

Network adapter not visible error

If you are installing the ESXi Server 7.0 in VMware workstation, you might encounter an error stating ‘No network adapters”. To resolve this, go to vmx file where the virtual machine is installed and make following changes.

ethernet0.virtualDev = "e1000"

TO

ethernet0.virtualDev = "vmxnet3"

There is an excellent article written by at: https://vinfrastructure.it/2020/04/installing-esxi-7-0-on-vmware-workstation/

Hacking the Wireless Network Using aircrack-ng in Kali Linux

KEEP IN MIND

  • This tutorial is executed in controlled environment using my own wireless router. It is advised not to misuse to gain unauthorized access for a third party network.
  • For the tutorial, Kali Linux 64-Bit (Live) is downloaded from https://www.kali.org/downloads/ in torrent and booted using a USB.
  • To hack the wireless network, you need a wireless adapter attached to your PC or laptop.

INTRODUCTION

What is Aircrack-ng?

Aircrack-ng is a complete suite of tools to assess WiFi network security. It focuses on different areas of WiFi security:

  • Monitoring: Packet capture and export of data to text files for further processing by third party tools
  • Attacking: Replay attacks, deauthentication, fake access points and others via packet injection
  • Testing: Checking WiFi cards and driver capabilities (capture and injection)
  • Cracking: WEP and WPA PSK (WPA 1 and 2)

All tools are command line which allows for heavy scripting. A lot of GUIs have taken advantage of this feature. It works primarily Linux but also Windows

More at: https://www.aircrack-ng.org/

TUTORIAL

Open a new terminal and make sure the wireless adapter is already fixed and working properly in your PC or laptop.

wireless adapter is a hardware device that is generally attached to a computer or other workstation device to allow it to connect to a wireless system

kali@kali:~# sudo ifconfig

1

This command will specifically give you information about the wireless adapter of your PC or laptop

kali@kali:~# sudo iwconfig

2

Execute the following command to set the wireless adapter in the monitor mode

kali@kali:~# sudo airmon-ng start wlan0

3

Confirm the configuration. You may see that wlan0 network is changed to wlan0mon, which is the monitoring mode.

kali@kali:~# sudo iwconfig

4

Capture Traffic with Airodump-Ng (keep this running and do not close the terminal)

kali@kali:~# kali airodump-ng wlan0mon

We need following details to proceed

BSSID = FE:XX:74:FE:H5:AC

CH = 9

ESSID = (this is the name of the wireless network you are going to target)

5

Make sure to type these commands in a new terminal and do not close it after the execution

(The BSSID is  FE:XX:74:FE:H5:AC and CH value should be 9 in this case)

kali@kali:~# sudo airodump-ng --bssid FE:XX:74:FE:H5:AC -c 9 --write WPAcrack wlan0mon

6

Again open a new terminal and type

kali@kali:~# sudo aireplay-ng --deauth 100 -a FE:XX:74:FE:H5:AC wlan0mon

7

.cap file is generated and use a password dictionary file to reveal the password

 kali@kali:~# sudo aircrack-ng /home/kali/WPAcrack-02.cap -w /home/kali/pass.txt

/home/kali/WPAcrack-02.cap = location of the generated .cap file

/home/kali/pass.txt = location of your password file

8

TROUBLESHOOTING

  • This tutorial might not work in Kali Linux which is installed in Virtual Machines in VMware workstations etc since the wireless adapter might not be available.
  • The Password dictionary file should contain the password of the wireless network, you are going to hack. If the password is a strong one, it is difficult to achieve the feat.
  • The username/ password of Kali Linux live is kali/ kali

How to Manage Windows Server from Windows Admin Center (Codenamed Project Honolulu)

KEEP IN MIND

  • In this tutorial, Windows Admin Center (codenamed Project Honolulu) is installed in a Windows 10 PC and the default port 6516 is used.
  • Windows Admin Center is a server management tool that allows to manage Windows 2012 R2/ 2016/ 2019 servers.
  • After the installation, a desktop shortcut is created to allow you to manage your Windows servers and workstations using the web interface.

Useful link

https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/deploy/install

What is Windows Admin Center?

Windows Admin Center (codenamed Project Honolulu) was unveiled by Microsoft on September 14, 2017 as the necessary evolution of the Windows Server graphical user interface (GUI). Officially launched in public preview under the code name Project Honolulu at the Microsoft Ignite 2017 conference in Orlando, Florida, Windows Admin Center offers “flexible, locally-deployed, browser-based management platform and tools”. The idea behind this project is to help simplify management of servers by placing a majority of the frequently referenced tools used by system administrators in one spot. On April 12, 2018 the project left preview and was named Windows Admin Center.

DOWNLOAD

Download ‘Windows Admin Center’ from Microsoft Evaluation Center

https://www.microsoft.com/en-us/evalcenter/evaluate-windows-admin-center

00

INSTALL WINDOWS ADMIN CENTER

Double click on the setup to proceed

11 install

Accept the terms and conditions

22

Choose the option to allow Microsoft updates

33

A link is available for installation scenarios

44

You are given the option to select the port

55

Click finish to complete the installation

66

A short cut is installed in the desktop

77

 

Manage Windows Server

Click on the icon to use the newly installed ‘Windows Admin Center’

11

22

Add a server to the Windows Admin Center

You can go to ‘Server Manager’ from the menu

33

You can add a new server by clicking the ‘+ add’ and searching the ‘server name’

44

Manage your server (This screenshot is taken from https://docs.microsoft.com/ as reference purposes)

server-overview

 

TOOLS

LINK to find the available tools

https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/use/manage-servers#overview

The following tools are available for server connections:

Tool Description
Overview View server details and control server state
Active Directory Manage Active Directory
Backup View and configure Azure Backup
Certificates View and modify certificates
Containers View Containers
Devices View and modify devices
DHCP View and manage DHCP server configuration
DNS View and manage DNS server configuration
Events View events
Files Browse files and folders
Firewall View and modify firewall rules
Installed Apps View and remove installed apps
Local Users and Groups View and modify local users and groups
Network View and modify network devices
Packet monitoring Monitor network packets
Performance monitor View performance counters and reports
PowerShell Interact with server via PowerShell
Processes View and modify running processes
Registry View and modify registry entries
Remote Desktop Interact with server via Remote Desktop
Roles and Features View and modify roles and features
Scheduled Tasks View and modify scheduled tasks
Services View and modify services
Settings View and modify services
Storage View and modify storage devices
Storage Migration Service Migrate servers and file shares to Azure or Windows Server 2019
Storage Replica Use Storage Replica to manage server-to-server storage replication
System Insights System Insights gives you increased insight into the functioning of your server.
Updates View installed and check for new updates
Virtual Machines View and manage virtual machines
Virtual Switches View and manage virtual switches

 

 

 

How to Migrate Active Directory and DNS from Microsoft Server 2012 to 2019

server mig1

KEEP IN MIND

  • In this scenario, the Active Directory and DNS are migrated from Microsoft Server 2012 to Microsoft Server 2019.
  • The migration process is configured in Virtual lab environment using VMware workstation.
  • This migration is conducted without a migration tool and ideal for small to medium sized business environment.
  • Before the migration, it is advised to back up the DC and remove the shares from ‘Files and Storage Services’.
  • To make it easier to follow, the tutorial is mainly divided into 4 sections.
    1. Pre-configuration tasks
    2. Install Active Directory and promote the new Server 2019
    3. Confirm Replication & DNS in Server 2012 and 2019
    4. Transfer FSMO roles to the new server (Server 2019)

01 Pre-configuration tasks

The domain is already configured as ‘techin.com’

WIN 2012 for Techinnovate-2020-03-11-11-52-27

The old server 2012 is already installed with Active Directory, DNS

WIN 2012 for Techinnovate-2020-03-10-11-32-36

Windows 10 computer is added to the domain

WIN 2012 for Techinnovate-2020-03-10-12-11-25

Users are created in ‘Active Directory Users and Computers’

WIN 2012 for Techinnovate-2020-03-10-12-11-38

The following DNS configurations are visible

WIN 2012 for Techinnovate-2020-03-10-12-37-23

02 Install Active Directory and promote the new Server 2019

Firstly, you have to install Windows Server 2019 to a new server machine.

Refer article : https://techencyclopedia.wordpress.com/2020/02/15/microsoft-windows-server-2019-installation-step-by-step-guide/

 

After Installing Windows Server 2019, add the new server to the existing domain (In this case techin.com). And log in as the domain administrator

SVR 2019 for migration-2020-03-18-12-52-59

 

After adding to the domain install active directory and DNS

You can get an idea from the following article on how to install AD DS and DNS properly. However, you have to make slight changes during installation and screenshots are provided below.

Refer article : https://techencyclopedia.wordpress.com/2020/02/16/how-to-install-active-directory-in-windows-server-2019-step-by-step-guide/

When the server is promoted, instead of adding a new forest and providing a root domain name you have to add the domain controller to the existing domain which is ‘techin.com’.

And also make sure the credentials provided have permission to perform installation

SVR 2019 for migration-2020-03-18-12-56-15

The replication should be from the main server 2012. This needs to be chosen correctly and will be an issue if the organization has multiple domain controllers.

SVR 2019 for migration-2020-03-18-12-57-10

 

03 Confirm Replication & DNS in Server 2012 and 2019

After the active directory and DNS installation you have to confirm the replication from old 2012 server to new 2019 server

Check Active Directory Users and Computers

SVR 2019 for migration-2020-03-18-13-10-10

Check DNS Manager

SVR 2019 for migration-2020-03-18-13-12-02

 

If it is not replicated from old DC you have to use ‘Active Directory Sites and Services’ to replicate manually.

Following is done in the newly installed 2019 server. The manual replication can also be done from the old 2012 server as well.

SVR 2019 for migration-2020-03-18-13-12-13

SVR 2019 for migration-2020-03-18-13-12-47

SVR 2019 for migration-2020-03-18-13-13-22

After confirming replication, you can login to the already added workstation from a domain user to check the success of the replication process. Before log in make sure that you configure the DNS accordingly. It should be the DNS of the newly configured Server.

04 Transfer FSMO roles to the new server (Server 2019)

Finally, you have to transfer the Flexible Single-Master Operations (FSMO) roles. There are 5 FSMO roles that needs to be transferred namely Schema master, Domain naming master, RID master, PDC emulator and Infrastructure master.

Firstly, open the PowerShell and run ‘netdom query fsmo’ command to locate the server where the FSMO roles are based. (In this case it is the old 2012 server and we need to transfer them to the new 2019 server one by one)

netdom query fsmo

SVR 2019 for migration-2020-03-20-12-56-56

 

Transfer the RID master, PDC emulator and Infrastructure Master Roles

These three FSMO roles can be transferred using single MMC

go to

Server Manager > Tools > Active Directory Users and Computers

In the MMC right click on the domain name and select operations masters

Change all three of them

SVR 2019 for migration-2020-03-20-13-02-32

In this case only RID master role is shown and PDC and Infrastructure can be transferred in the same manner.

SVR 2019 for migration-2020-03-20-13-02-40

SVR 2019 for migration-2020-03-20-13-02-47

SVR 2019 for migration-2020-03-20-13-02-52

 

Transfer schema master role

Type run command regsvr32 schmmgmt.dll and Press OK in the next window

SVR 2019 for migration-2020-03-20-13-14-40

SVR 2019 for migration-2020-03-20-13-14-44

Type run command mmc

SVR 2019 for migration-2020-03-20-13-17-05

File > Add/Remove Snap-in…

SVR 2019 for migration-2020-03-20-13-17-16

Choose and add ‘Active Directory Schema’ from ‘Available snap-ins’ and ‘Selected snap-ins’ (in this case ‘Active Directory Domains and Trusts’ are also added since it is needed to transfer ‘domain naming master role’)

SVR 2019 for migration-2020-03-20-13-17-55

You have to change the domain controller to the new DC to proceed and steps are shown below

SVR 2019 for migration-2020-03-20-13-18-38

SVR 2019 for migration-2020-03-20-13-18-48

SVR 2019 for migration-2020-03-20-13-18-56

SVR 2019 for migration-2020-03-20-13-30-13

SVR 2019 for migration-2020-03-20-13-30-19

 

Transfer Domain Naming Master

This is similar to transferring ‘Schema master role’

SVR 2019 for migration-2020-03-20-13-19-21

SVR 2019 for migration-2020-03-20-13-19-26

 

Uninstall Old DC (Server 2012)

Lastly, you can uninstall old Domain controller (server 2012) from the network.

Debian 10 Manual Partition for /boot, /swap, root, /home, /tmp, /srv, /var, /var/mail, /var/log

line5

debian-10

KEEP IN MIND

  • Debian 10 (Buster) is used for this tutorial and configured using manual partition option in virtual environment using VMware workstation.
  • Sizes of the partitions can be different according to the requirement of the organization or user.
  • Advantages of manual partition include smooth backup and restore process, ability to maintain specially allocated partitions for different section for storage etc.
  • It is recommended to create a Standard /boot partition to keep the boot files and Linux Kernal separately as the system will might errors when booting from LVM partition. Or it can be a personnel preference since latest version supports the boot in LVM. (Read more at: https://askubuntu.com/questions/76095/what-is-the-use-of-boot-lvm-based-in-partitioning)
  • Logical Volume Manager is used to create partitions for
      • /swap
      • /       (root)
      • /home
      • /srv (For FTP servers a /srv partition is recommended)
      • /tmp
      • /var (For web or mail servers it is recommended to create a separate /var partition)
      • /var/log
      • /var/mail

Debian production release history

Refer the production release at https://wiki.debian.org/DebianReleases

debian releases

 

Why manual partition?

At a bare minimum, GNU/Linux needs one partition for itself. You can have a single partition containing the entire operating system, applications, and your personal files. Most people feel that a separate swap partition is also a necessity, although it’s not strictly true. “Swap” is scratch space for an operating system, which allows the system to use disk storage as “virtual memory”. By putting swap on a separate partition, Linux can make much more efficient use of it. It is possible to force Linux to use a regular file as swap, but it is not recommended.

Reason 01

Most people choose to give GNU/Linux more than the minimum number of partitions, however. There are two reasons you might want to break up the file system into a number of smaller partitions. The first is for safety. If something happens to corrupt the file system, generally only one partition is affected. Thus, you only have to replace (from the backups you’ve been carefully keeping) a portion of your system. At a bare minimum, you should consider creating what is commonly called a “root partition”. This contains the most essential components of the system. If any other partitions get corrupted, you can still boot into GNU/Linux to fix the system. This can save you the trouble of having to reinstall the system from scratch.

Reason 02

The second reason is generally more important in a business setting, but it really depends on your use of the machine. For example, a mail server getting spammed with e-mail can easily fill a partition. If you made /var/mail a separate partition on the mail server, most of the system will remain working even if you get spammed.

Drawback

The only real drawback to using more partitions is that it is often difficult to know in advance what your needs will be. If you make a partition too small then you will either have to reinstall the system or you will be constantly moving things around to make room in the undersized partition. On the other hand, if you make the partition too big, you will be wasting space that could be used elsewhere. Disk space is cheap nowadays, but why throw your money away?

More at [Deciding on Debian Partitions and Sizes:  https://www.debian.org/releases/jessie/amd64/apcs01.html.en]

Download Debian 10

For this tutorial version 10.3.0 for ‘amd64’ architecture is chosen. (Download the amd64 for 64 bit or i386 for 32 bit systems).

Download links (the links can change time to time)

https://www.debian.org/distrib/

Small installation image (netinst image)

This can be downloaded quickly and should be recorded onto a removable disk. To use this, you will need a machine with an Internet connection.

debian-10.3.0-amd64-netinst.iso – size (335 mb)

https://www.debian.org/distrib/netinst

Larger complete installation image

This contains more packages, making it easier to install machines without an Internet connection. You can download DVD images using torrent

debian-10.3.0-amd64-DVD-1.iso.torrent – size (3.69 GB)
debian-10.3.0-amd64-DVD-2.iso.torrent – size (4.36 GB)
debian-10.3.0-amd64-DVD-3.iso.torrent – size (4.34 GB)

https://cdimage.debian.org/debian-cd/current/amd64/bt-dvd/

 

Directories in Linux 

This is the list of directories, you can find in Linux and please note that in this tutorial, partitions are created for only the selected ones.

directories

More at: https://www.debian.org/releases/stable/amd64/apcs02.en.html

TUTORIAL

The tutorial is divided into 7 sections

  1. Install Debian graphical install
  2. Create manual partition
  3. Create standard boot partition
  4. Configure Logical Volume Manager (LVM)
  5. Create logical volumes for the rest of the directories
  6. Configure the partitions
  7. Finalize installation

 

01 Install Debian graphical install

In this case, Graphical Install is selected

Debian 10-2020-04-17-16-47-46

Select the desired language

Debian 10-2020-04-17-16-48-00

Select the location

Debian 10-2020-04-17-16-48-11

Provide the desired keyboard option

Debian 10-2020-04-17-16-48-16

wait until the ‘installer components’ load

Debian 10-2020-04-17-16-48-29

Give the ‘Hostname’ for the system

Debian 10-2020-04-17-16-49-27

Provide the ‘Domain name’ (you can keep it blank if the system is used as a normal desktop system)

Debian 10-2020-04-17-16-49-48

Give a strong password for the root account

Debian 10-2020-04-17-16-50-08

Provide a name for the user who is going to use this system for non-administrative tasks

Debian 10-2020-04-17-16-50-16

Provide a username for the new account

Debian 10-2020-04-17-16-50-31

Provide a strong password for the created new user

Debian 10-2020-04-17-16-50-48

Configure the clock (You should have chosen the correct language earlier to make the time zone to be listed)

Debian 10-2020-04-17-16-50-58

Press continue to proceed to the next step which is creating partitions

02 Create manual partition

In this tutorial  manual partition option is chosen

Debian 10-2020-04-17-16-51-29

Select the hard disk (In this case, hard disk was created using VMware workstation)

Debian 10-2020-04-17-17-16-52

Click ‘Yes’ to proceed

Debian 10-2020-04-17-17-17-17

Select the free space to continue

Debian 10-2020-04-17-17-18-28

3.0 Create standard boot partition

As The First Partition Create a Standard boot partition

  • Size of the partiton: 1 GB
  • Type for the new partition: primary
  • Location of the new partition: beginning
  • use as: Ext4 journaling file system
  • Mount point: /boot
  • label: boot
  • bootable flag: on

Select the option to create a new partition

Debian 10-2020-04-17-17-18-39

Provide the disk space required (I GB is enough for boot partition)

Debian 10-2020-04-17-17-19-18

Select primary as the type for boot partition

Debian 10-2020-04-17-17-19-22

Create the boot partition at the beginning of the free space

Debian 10-2020-04-17-17-19-26

In the partition settings you can select the Mount point,

Click on ‘Mount point’ to select the mount point as /boot

Debian 10-2020-04-17-17-25-25

‘/boot’ is selected as the mount point

Debian 10-2020-04-17-17-25-30

Click on the ‘Label’ to give the label as ‘boot’

Debian 10-2020-04-17-17-25-43

Provide ‘boot’ as the label

Debian 10-2020-04-17-17-25-50

Select the file system as Ext4 (In this scenario Ext4 is selected by default)

What is Ext4?

The ext4 journaling file system or fourth extended file system is a journaling file system for Linux, developed as the successor to ext3. Furthermore, ext4 is the default file system for many Linux distributions including Debian and Ubuntu. –wiki

Debian 10-2020-04-17-17-26-49

Debian 10-2020-04-17-17-26-53

Review the settings and finish configuring

Debian 10-2020-04-17-17-28-13

Note that freshly configured /boot partition is available in the list

Debian 10-2020-04-17-17-28-19

4.0 Configure Logical Volume Manager (LVM) 

  • Firstly create a LVM physical volume
  • Then create other partitions as LVM logical volumes within the LVM physical volume

Select the option from the menu to configure the LVM

Debian 10-2020-04-18-22-55-38

Click ‘yes’ to proceed

Debian 10-2020-04-20-13-22-10

Create a logical volume group

Debian 10-2020-04-20-13-22-18

Provide a name to the Volume Group

Debian 10-2020-04-20-13-22-37

Choose the free space for the new volume group

Debian 10-2020-04-20-13-22-46

Select ‘Yes’ to proceed

Debian 10-2020-04-20-13-23-07

5.0 Create logical volumes for rest of the directories  

In this tutorial logical volumes are created for following directories only for reference/ educational purposes. Additionally, you can create more separate partitions based on the requirement of the organization and personnel preferences.

  • /swap
  • /       – (root)
  • /home
  • /srv (For FTP servers a /srv partition is recommended)
  • /tmp
  • /var (For web or mail servers it is recommended to create a separate /var partition)
  • /var/log
  • /var/mail

Swap Space

There are two basic types of memory in a typical computer. The first type, random access memory (RAM), is used to store data and programs while they are being actively used by the computer. Swap space is the second type of memory in modern Linux systems. The primary function of swap space is to substitute disk space for RAM memory when real RAM fills up and more space is needed.

There’s no one hard-and-fast rule that will tell you how much paging or swap space you need. The answer depends on what you do with your computer and how much memory you use. For example, if you have 8 GB of memory but you never ever used more than those 8 GB, you could get by with no swap space at all — it’s likely you would need more than 8 GB eventually, of course. On the other hand, you might have a computer with 64 GB of memory, but it might regularly work with 100 GB data sets — you’d probably want at least the 64 GB swap space just to be safe. So a computer with 8 GB of RAM might need no page file and a computer with 64 GB of RAM might need a huge page file. It all depends on what the computer is doing. [More at:  https://www.howtogeek.com/196238/how-big-should-your-page-file-or-swap-partition-be/]

The root (/) directory

Primary hierarchy root and root directory of the entire file system hierarchy.
The root directory is the directory on Unix-like operating systems that contains all other directories and files on the system and which is designated by a forward slash ( / ). Size is 5 –6GB for a workstation or a server installation.

The /home Directory

A home directory, also called a login directory, is a subdirectory of /home that serves as the repository for a user’s personal files, directories and programs. It is also the directory that a user is first in after logging into the system.

The name of a user’s home directory is by default the same as that of the user. Thus, for example, a user with a user name of william would have a home directory also named william, and that directory would have an absolute pathname of /home/william.

The only account that will by default have its home directory in a location other than /home is the root (i.e., administrative) user, whose home directory by default is /root, another standard sub-directory of the root directory.

A common strategy for large installations is to place /home on its own partition (i.e., a logically independent section) of a hard disk drive (HDD) or even on a separate HDD. This is because users’ home directories usually contain the most important data on a system, and having them on a partition or disk separate from other parts of the system can make it easier to back them up and thereby reduce the chances of loss of data.

The /srv Directory

Site-specific data served by this system, such as data and scripts for web servers, data offered by FTP servers, and repositories for version control systems.

The /tmp Directory

Temporary data created by programs will most likely go in this directory. 40–100MB should usually be enough. Some applications — including archive manipulators, CD/DVD authoring tools, and multimedia software — may use /tmp to temporarily store image files. If you plan to use such applications, you should adjust the space available in /tmp accordingly.

The /var Directory

/var is a standard sub-directory of the root directory in Linux and other Unix-like operating systems that contains files to which the system writes data during the course of its operation.

Among the various sub-directories within /var are..

  • /var/cache (contains cached data from application programs),
  • /var/games (contains variable data relating to games in /usr),
  • /var/lib (contains dynamic data libraries and files),
  • /var/lock (contains lock files created by programs to indicate that they are using a particular file or device),
  • /var/log (contains log files),
  • /var/run (contains PIDs and other system information that is valid until the system is booted again) and
  • /var/spool (contains mail, news and printer queues).
  • /var/mail (A mail server getting spammed with e-mail can easily fill a partition. If you made /var/mail a separate partition on the mail server, most of the system will remain working even if you get spammed).

[More at: http://www.linfo.org/var]

 

Firstly, swap partition is created

Create a volume for the swap space

Debian 10-2020-04-20-13-23-26

Choose the previously created Logical Volume Group

Debian 10-2020-04-20-13-23-33

Give the name as swap

Debian 10-2020-04-20-13-24-37

Provide the size for the swap partition

How to decide the swap partition size

  • Size of the LVM logical volume partition: 2.5 GB [since the system RAM is 2 GB, 2 GB + 500 mb]
  • use as: swap area

You can calculate the capacity according to the system RAM. If the system RAM is less than 2 GB it can be multiplied by 2, if the system RAM is more than 2 GB, you can add 500 mb to the system RAM. However, this can be different based on the requirement.

EX -:
system RAM is 250 mb —> Desired Capacity is 500 mb [250 mb * 2]
system RAM is 3 GB —> Desired Capacity is 3.5 GB [3 GB + 500 mb]

Another guide that explains the swap partition size: https://opensource.com/article/18/9/swap-space-linux-systems

Debian 10-2020-04-20-13-24-51

Keep creating the rest of the partitions in LVM

Debian 10-2020-04-20-14-54-09

Altogether, 8 partitions are created (Again, it needs to be reminded that the partitions and sizes varies according to the requirement of the servers or workstations)

Debian 10-2020-04-21-00-19-02

 

6.0 Configure the partitions

Firstly, configure the swap space

Select swap logical volume

Debian 10-2020-04-21-03-57-44

In the partition settings, change the file system to ‘swap area’ (this is the only change you have to make)

Debian 10-2020-04-21-03-57-52

Debian 10-2020-04-21-03-57-59

Complete the configuration

Debian 10-2020-04-21-03-58-10

Notice how the changes are taken into effect

Debian 10-2020-04-21-03-58-16

 

Configure the /home logical volume settings

/home partition

  • use as: Ext4 journaling file system
  • Mount point: /home
  • label: home

Select the previously created home volume

Debian 10-2020-04-21-04-06-46

Change the file system to Ext4 journaling file system

Debian 10-2020-04-21-04-06-56

Debian 10-2020-04-21-04-07-02

Change the mount point to /home

Debian 10-2020-04-21-04-18-42

Debian 10-2020-04-21-04-18-47

Label the volume as ‘home’

Debian 10-2020-04-21-04-19-11

Debian 10-2020-04-21-04-19-17

Complete the /home partition settings

Debian 10-2020-04-21-04-19-33

Notice the changes made to the /home logical volume

Debian 10-2020-04-21-04-19-42

 

Configure the rest of the volumes as well with following partitions settings

Root partition

  • use as: Ext4 journaling file system
  • Mount point: /
  • label: root

/srv partition

  • use as: Ext4 journaling file system
  • Mount point: /srv
  • label: srv

/tmp partition

  • use as: Ext4 journaling file system
  • Mount point: /tmp
  • label: tmp

/var partition

  • use as: Ext4 journaling file system
  • Mount point: /var
  • label: var

/var/log

  • use as: Ext4 journaling file system
  • Mount point: /var/log
  • label: var-log

To create /var/log directory you have to provide the mount point manually

Debian 10-2020-04-21-05-09-45

Debian 10-2020-04-21-05-09-51

Debian 10-2020-04-21-05-10-05

Debian 10-2020-04-21-05-10-17

/var/mail

  • use as: Ext4 journaling file system
  • Mount point: /var/mail
  • label: var-mail

 

After finishing the configuration review the settings and finish partitioning

Debian 10-2020-04-21-05-11-00

Debian 10-2020-04-21-05-11-31

click ‘Yes’ to accept the changes and write to the disk

Debian 10-2020-04-21-05-11-52

07 Finalize installation

Tick ‘yes’ to scan additional CD/DVD images for installation (I selected ‘No’ since I do not wish to install further from CD/ DVD)

Debian 10-2020-04-21-05-55-04

Configure the network mirror by selecting the Debian mirror country

Debian 10-2020-04-21-05-55-14

Select the Debian mirror archive mirror (in this scenario, default option is kept as it is)

Debian 10-2020-04-21-05-55-20

Include the proxy details if needed or keep it blank

Debian 10-2020-04-21-05-55-31

Let the package manager configure its settings

Debian 10-2020-04-21-05-55-40

Configure the popularity-contest to participate in the package survey

Debian 10-2020-04-21-06-02-05

Software selection

For this Debian system, Gnome desktop environment and standard system utilities are installed.

If you want to install Debian Minimal server, you can un-tick the Debian desktop environment.

Read the following article to choose the best desktop environment for you:  https://itsfoss.com/best-linux-desktop-environments/

Debian 10-2020-04-21-06-17-03

Let the installation finish

Debian 10-2020-04-21-06-17-36

Select ‘Yes’ to install the GRUB boot loader to the master boot record

Debian 10-2020-04-21-06-53-45

Keep the boot loader installation location as it is

Debian 10-2020-04-21-06-53-51

Click ‘continue’ to finish the installation and boot into the new system

Debian 10-2020-04-21-06-55-54

Login to the new system using the password you have provided for the user created earlier

Debian 10-2020-04-21-07-03-35

Debian 10-2020-04-21-07-03-50

Go to the terminal and switch to root user to check the partition table using the lsblk command

waruna@debpc: ~$ su –

Password: *****

root@debpc:~# lsblk

Debian 10-2020-04-21-07-52-13.png

 

How to Install Kali Linux From Scratch to Perform Penetration Testing

pen testing Kali 1

Kali Linux Hacking Series

This series covers penetration testing tutorials using Kali Linux

  1. Install Kali Linux
  2. Hack the Wireless Network Using aircrack-ng

OVERVIEW

What is penetration testing?

Penetration testing, also called pen testing or ethical hacking, is the practice of testing a computer system, network or web application to find security vulnerabilities that an attacker could exploit. Penetration testing can be automated with software applications or performed manually.

The primary goal of a pen test is to identify weak spots in an organization’s security posture, as well as measure the compliance of its security policy, test the staff’s awareness of security issues and determine whether — and how — the organization would be subject to security disasters.

More at: https://searchsecurity.techtarget.com/definition/penetration-testing

What is Kali Linux?

Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security. In 2013, the Offensive Security team rebuilt BackTrack around the Debian distribution and released it under the name Kali Linux.

Kali Linux has over 600 pre-installed penetration-testing programs, including Armitage (a graphical cyber attack management tool), Nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper password cracker, Aircrack-ng (a software suite for penetration-testing wireless LANs), Burp suite and OWASP ZAP web application security scanners.

The Kali Linux project began quietly in 2012 and the first version (1.0) was released one year later, in March 2013.  Wiki

KEEP IN MIND

  • In this scenario Kali Linux version 2020.1b is installed with Graphical User Interface

Download link of Kali Llinux image: https://www.kali.org/downloads/

Kali Linux 64-Bit (Installer) | version 2020.1b | size 2.1G

TUTORIAL

After downloading boot Kali Linux image using USB and choose the ‘Graphical Install’

KALI LINUX-2020-03-27-10-30-37

Choose the desired language to proceed

KALI LINUX-2020-03-27-10-31-01

Location should be selected and should be accurate since time zone will be set according to this selection

KALI LINUX-2020-03-27-10-31-14

Provide the correct keyboard option

KALI LINUX-2020-03-27-10-31-21

Provide the ‘hostname’ which is the name for the PC that Kali is installed and the ‘hostname’ will be used to identify your system in the network

KALI LINUX-2020-03-27-10-33-04

A domain name also given and in this case this ends with .com (check the screenshot for possible options). If this is a home network or lab environment, you can make this up.

KALI LINUX-2020-03-27-10-33-29

A username is given to create an account for a new user

KALI LINUX-2020-03-27-10-33-40

Provide a password for the user account

KALI LINUX-2020-03-27-10-34-14

Configure the time zone in this window

KALI LINUX-2020-03-27-10-34-28

Choose ‘Guided – use entire disk’ option to partition disks

KALI LINUX-2020-03-27-10-35-14

Select the disk (In this scenario there is only one disk which is configured in VMware Workstation)

KALI LINUX-2020-03-27-10-35-34

Choose the partition scheme (All files in one partition is selected)

KALI LINUX-2020-03-27-10-35-38

Review the partitioned disk and Select the ‘Finish partition option’ to proceed

KALI LINUX-2020-03-27-10-35-47

Select the ‘yes’ option to make the changes and finish partitioning and install Kali Linux

KALI LINUX-2020-03-27-10-36-17

Let it install the base system

KALI LINUX-2020-03-27-10-37-07

If HTTP proxy server is used provide the proxy information or leave it blank

KALI LINUX-2020-03-27-10-41-10

Select and install software

KALI LINUX-2020-03-27-10-42-11

Select the software to be installed (Everything was kept as it is and if you want you can change the selection)

  • Select the ideal GUI desktop environment
  • Select the tools needed to be installed

KALI LINUX-2020-03-27-10-55-19

Select ‘yes’ to install the GRUB boot loader to the master boot record

GRUB boot loader – provides a user the choice to boot one of multiple operating systems installed on a computer or select a specific kernel configuration available on a particular operating system’s partitions.

The Master Boot Record (MBR) – is a small program that is executed when a computer is booting (i.e., starting up) in order to find the operating system and load it into memory.

 

KALI LINUX-2020-03-27-11-44-42

Select the default location to install the GRUB

KALI LINUX-2020-03-27-11-44-56

Wait until the ‘installation complete’ window appear

KALI LINUX-2020-03-27-11-47-40

Login using the given credentials

KALI LINUX-2020-03-27-12-16-06

 

How to Install Remote Server Administration Tool (RSAT) in Windows 10

KEEP IN MIND

  • In this scenario, the Remote Server Administration Tool (RSAT) is installed in a Windows 10 computer to manage Windows Server 2019 roles and features.
  • You have to login as a domain user to use Remote Server Administration Tool (RSAT).
  • Furthermore, the Domain Administrator privileges should be given to the domain user.

 

TUTORIAL

The domain administrator privileges are given to the domain user who is going to remotely manage the Active directory and rest of the roles and features

To provide ‘domain admin’ privileges, go to the ‘tools’ in ‘Sever Manager’ and select ‘Active Directory Users and Computers’

Right click on the user and select the ‘Properties’

Go to the ‘member Of’ tab and select ‘Add’

Then type ‘Domain Admins’ and select ‘Check Names’

AAAA11

 

Install the Remote Server Administration Tool (RSAT) in Windows 10

login to Windows and go to ‘Settings’ and select ‘Apps’

0001

Choose ‘Apps and features’ and then ‘Optional features’

0002

Then ‘Add a feature’

0003

Select the Feature you want to add from the list which includes RSAT tools

0004

 

Access the server roles and features from the remote PC

Go to the ‘start menu’ and choose the necessary tools to manage the desired server roles and features

11

Active Directory Administrative Center

You can select ‘Active Directory Administrative Center’ from the tools menu

22

From this you can manage your domain users including creating new users/ groups/ Organizational units

33

Active Directory Users and Computers

Or you can select ‘Active Directory Users and Computers’ to manage the users

44

How to Rename the Active Directory Domain Name

KEEP IN MIND

  • In this tutorial domain name is changed from ‘teche.com.au’ to ‘techencyclopedia.xyz’.
  • A computer has already been added to the existing domain (teche.com.au), so we can check the success of the domain change later on.

You cannot change the Domain Name just like that using ‘system properties’ and it will give you an error

SVR19 AD-2020-03-04-12-01-41

PRE-CONFIGURATION

Before configuration, notice the existing DNS records

SVR19 AD-2020-03-03-04-12-20

Run ‘Command Prompt’ as an administrator and check the ‘domainlist.xml’ file records

type DomainList.xml

SVR19 AD-2020-03-03-04-12-04

 

TUTORIAL

  1. Create a Forward Lookup Zone
  2. Change Domainlist.xml’ file
  3. Using ‘rendom’ utility in CMD
  4. Final tasks

 

01 Create a Forward Lookup Zone

Firstly, you have to create a new zone in ‘DNS’

Right click on ‘Forward Lookup Zones’ and select ‘New Zone’

SVR19 AD-2020-03-04-12-17-22

Select the ‘primary zone’ (this option is the default one)

SVR19 AD-2020-03-04-12-17-31

Select the default Active Directory Zone Replication option

SVR19 AD-2020-03-04-12-17-45

Provide the appropriate zone name

SVR19 AD-2020-03-04-12-18-34

Review the configuration

SVR19 AD-2020-03-04-12-23-46

The new Forward lookup zone is created (The old zone should be deleted later)

SVR19 AD-2020-03-04-12-23-57

 

02 Change Domainlist.xml’ file

Open ‘Command Prompt’ as an administrator and type in following command to generate ‘Domainlist.xml’ file (firstly, use cd to go to the location where the file will be saved)

rendom /list

SVR19 AD-2020-03-04-12-59-55

Open the ‘Domainlist.xml’ file in ‘Notepad’ and notice the values that needs to be changed

SVR19 AD-2020-03-04-13-05-08

Change the records of the ‘Domainlist.xml’ accordingly and save the file

(Make sure the NetBios Name is less than 15 characters)

SVR19 AD-2020-03-04-13-18-46

 

Using ‘rendom’ utility in CMD 

Open ‘Command Prompt’ as administrator and type in following command

rendom /upload

SVR19 AD-2020-03-04-13-19-06

Type following command

rendom /prepare

SVR19 AD-2020-03-04-13-27-41

Type the ‘Execute’ command

rendom/execute

SVR19 AD-2020-03-04-13-30-58

 

04 Final tasks

Log off and log back in using the new domain

SVR19 AD-2020-03-04-13-40-22

You can see the ‘domain’ has been changed but not the ‘Full computer name’. Change the name to your new domain name.

SVR19 AD-2020-03-04-13-43-00

SVR19 AD-2020-03-04-13-51-46

SVR19 AD-2020-03-04-13-52-56

SVR19 AD-2020-03-04-13-53-15

And also do not forget to delete the old DNS records in ‘DNS manager’

Double check whether the configuration has been taken into effect in ‘Active Directory Users And Computers’

SVR19 AD-2020-03-04-13-50-06

Furthermore, you should be able to login to the workstation which was added previously to the domain without making any changes using a domain user

Win 10 GPO-2020-03-04-14-29-33

Win 10 GPO-2020-03-04-14-31-21

RISKS

Refer following article to get an idea about the risks involved in domain renaming

https://www.varonis.com/blog/risks-renaming-your-domain-in-active-directory/

How to Install Exchange 2016 on Windows Server 2016 Step by Step Guide

line5

ex 2016

KEEP IN MIND

This tutorial will install Exchange Server 2016 on Windows Server 2016.

  • The Active Directory is already installed along with DNS in a separate server. Additional domain controller also have been configured to make it look similar to production environment (In this scenario, I configured Active Directory in Microsoft Server 2019)

How to Install Active Directory in Windows Server 2019:

https://techencyclopedia.wordpress.com/2020/02/16/how-to-install-active-directory-in-windows-server-2019-step-by-step-guide/

How to Install Additional Domain Controller in Windows 2919:

https://techencyclopedia.wordpress.com/2020/02/17/how-to-install-additional-domain-controller-in-windows-server-2019-step-by-step-guide/

  • To install Exchange 2016, you have to install Windows Server 2016 and add to the domain.

How to Install Windows Server 2016:

https://techencyclopedia.wordpress.com/2016/08/24/install-windows-server-2016-step-by-step/

  • The Exchange installation can be done using domain administrator account. If it is not the domain administrator account, the Schema and Enterprise administrator privileges should be given.
  • For this tutorial, Exchange Server 2016 CU11 is used. DOWNLOAD LINK FOR Cumulative Update 11 for Exchange Server 2016 (KB4134118): https://www.microsoft.com/en-us/download/details.aspx?id=57388

It is always good idea to follow articles in Microsoft that focus Exchange to make the installation run error free. Furthermore, the technology changes and new updates are introduced and prerequisites and requirements tend to change. Because of that reason, I have listed important links in this post, so readers can install any version of Exchange server. 

The Exchange sever download page provides important links to articles about System Requirements.

installation links

 

Exchange server 2016 versions history

Before installing the Exchange Server, you have to get an idea about the version you have downloaded. Refer following article for Exchange server 2016 build numbers and released dates. Based on the CU version the prerequisites might slightly change. For instance, the required .NET version varies based on the Exchange version.

https://docs.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates?view=exchserver-2019

build number

Prerequisites

It is important to understand the prerequisites needed for Exchange 2016 installation. Refer the following article given below.

https://docs.microsoft.com/en-us/Exchange/plan-and-deploy/prerequisites?view=exchserver-2016

Prepare Active Directory and Schema

You have to prepare the AD and Schema properly and this article shows you how to do that.

https://docs.microsoft.com/en-us/exchange/plan-and-deploy/prepare-ad-and-domains?view=exchserver-2016

TUTORIAL

Tutorial is divided into four sections to make it easier to follow

  • STEP 01: Install prerequisites for preparing Active Directory
  • STEP 02: Prepare active directory and domains
  • STEP 03: Install prerequisites for Server 2016 to install Exchange 2016
  • STEP 04: Install Exchange Server 2016
STEP 01: Install prerequisites for preparing Active Directory

Following prerequisites are needed to prepare Active Directory before installing Exchange Server 2016

 

Microsoft .Net Framework 4.8 or later

Download and run the setup

Accept the license terms to continue

SVR 2016 EX16-2020-02-25-20-15-51

Setup updates the files used by the programs listed. Press ‘No’ and restart the server machine after the installation

SVR 2016 EX16-2020-02-25-20-18-13

Wait until the installation finishes

SVR 2016 EX16-2020-02-25-20-18-55

After installation completes click ‘Finish’

SVR 2016 EX16-2020-02-25-20-24-49

Select ‘Restart Now’ to restart

SVR 2016 EX16-2020-02-25-20-25-34

 

How to check the .NET version

Before installing the .NET, you can check the installed version using regedit.exe

Go to ‘Start’ menu and select ‘Run’ and type ‘regedit.exe’

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full

SVR 2016 EX16-2020-02-24-10-55-40

 

SVR 2016 EX16-2020-02-24-10-59-56

 

SVR 2016 EX16-2020-02-24-11-00-02

 

Visual C++ Redistributable Package for Visual Studio 2012

Download and run the setup

Accept the Licence terms and click ‘Install’

SVR 2016 EX16-2020-02-25-21-11-53

Wait until the installation finishes

SVR 2016 EX16-2020-02-25-21-12-21

Close after the Setup Successful message

SVR 2016 EX16-2020-02-25-21-12-33

 

Remote Tools Administration Pack

Run Windows PowerShell as Administrator and paste following commands to install necessary features

Install-WindowsFeature RSAT-ADDS

Go to ‘Start’ menu select right click on ‘Windows PowerShell ISE’

SVR 2016 EX16-2020-02-24-17-43-51

Select ‘Run as administrator’

SVR 2016 EX16-2020-02-24-17-43-58

Run the command to install ‘Remote Tools Administration Pack’

SVR 2016 EX16-2020-02-24-17-53-11.png

 

STEP 02: Prepare active directory and domains
  • Prepare Schema
  • Prepare Active Directory
  • Prepare Domains

 

Prepare Schema

You have to extend the Active Directory Schema and prepare the Active Directory and domain. In the command prompt go to the location where the Exchange 2016 setup files are located and run this command (It is important to make sure there are no mistakes)

Setup.exe /PrepareSchema /IAcceptExchangeServerLicenseTerms

Go to the location where Exchange 2016 setup files are located

SVR 2016 EX16-2020-02-26-08-02-39

Type the command

SVR 2016 EX16-2020-02-26-08-21-52

 

Prepare Active Directory

Setup.exe /PrepareAD /OrganizationName:”” /IAcceptExchangeServerLicenseTerms

You have to provide the organization name between “”

SVR 2016 EX16-2020-02-26-08-33-25

 

Prepare Domains

Setup.exe /PrepareAllDomains /IAcceptExchangeServerLicenseTerms

SVR 2016 EX16-2020-02-26-08-28-42

 

STEP 03 : Install prerequisites for Server 2016 to install Exchange 2016

Following prerequisites are needed to be installed in Microsoft Windows Server 2016 before installing Exchange Server 2016

This is for Exchange 2016 Mailbox server role

Edge Transport role

Please note that, in this case Edge Transport role is not installed. However, the prerequisites needed are stated below.

 

Prerequisites for mail box server role (PowerShell command)

Install-WindowsFeature NET-Framework-45-Features, Server-Media-Foundation, RPC-over-HTTP-proxy, RSAT-Clustering, RSAT-Clustering-CmdInterface, RSAT-Clustering-Mgmt, RSAT-Clustering-PowerShell, WAS-Process-Model, Web-Asp-Net45, Web-Basic-Auth, Web-Client-Auth, Web-Digest-Auth, Web-Dir-Browsing, Web-Dyn-Compression, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Lgcy-Mgmt-Console, Web-Metabase, Web-Mgmt-Console, Web-Mgmt-Service, Web-Net-Ext45, Web-Request-Monitor, Web-Server, Web-Stat-Compression, Web-Static-Content, Web-Windows-Auth, Web-WMI, Windows-Identity-Foundation, RSAT-ADDS

SVR 2016 EX16-2020-02-25-21-21-05

If you encounter an error you can install the features one by one. (In this case the mentioned feature is already installed)

Install-WindowsFeature NET-Framework-45-Features

SVR 2016 EX16-2020-02-24-18-46-42

 

Microsoft .NET Framework 4.8 or later

Already installed. Refer Step 01.

 

Microsoft Knowledge Base article KB3206632

If your Windows Server 2016 version is 14393.576 or earlier you need to update Windows to Install Exchange Server 2016

Firstly, check your Windows version by running ‘winver’ command

SVR 2016 EX16-2020-02-25-21-29-09

Since the version is 14393.0, in this case we have to install this update

Firstly, download the update

http://www.catalog.update.microsoft.com/Search.aspx?q=KB3206632

windows update 2016 for exchange

 

Run the downloaded Windows update

Click ‘Yes’ in ‘Windows Update Standalone Installer’ to proceed

SVR 2016 EX16-2020-02-25-21-59-04

Wait until the installation finishes

SVR 2016 EX16-2020-02-25-22-00-10

Restart the server to complete the installation

SVR 2016 EX16-2020-02-25-23-29-43

SVR 2016 EX16-2020-02-25-23-29-57

 

Visual C++ Redistributable Package for Visual Studio 2012

Already installed. Refer Step 01.

 

Visual C++ Redistributable Package for Visual Studio 2013

Only the Mailbox role requires the Visual C++ Redistributable Packages for Visual Studio 2013

Run the setup

SVR 2016 EX16-2020-02-25-21-54-20

Wait until the installation finishes

SVR 2016 EX16-2020-02-25-21-54-40

Click ‘close’ after the installation

SVR 2016 EX16-2020-02-25-21-55-28

 

Microsoft Unified Communications Managed API 4.0, Core Runtime 64-bit

Run the setup file and click ‘Next’ to proceed

SVR 2016 EX16-2020-02-26-06-35-13

Accept the License Terms and click ‘Install’ to proceed

SVR 2016 EX16-2020-02-26-06-35-28

After the installation completes click ‘Finish’

SVR 2016 EX16-2020-02-26-06-40-53

 

Prerequisites for Edge Transport Server Role (PowerShell command)

This is an optional role and no need to be installed (detailed description is given in STEP 04 regarding Edger Transport role)

Install-WindowsFeature ADLDS

SVR 2016 EX16-2020-02-24-18-55-13

 

STEP 04: Install Exchange Server 2016

Run the Exchange 2016 setup

Initially you are asked to check for updates It is important to install the latest version otherwise you might get errors later on during the installation.

SVR 2016 EX16-2020-02-26-08-34-55

Files that are required to run the Exchange server 2016 installation is copied to the server

SVR 2016 EX16-2020-02-26-08-35-55

Read the ‘introduction’ Microsoft has provided and it includes important links

SVR 2016 EX16-2020-02-26-13-33-22

Accept the License Agreement and proceed

SVR 2016 EX16-2020-02-26-13-33-43

Use ‘Recommended Settings’ and click ‘Next’

SVR 2016 EX16-2020-02-26-13-33-48

Select ‘Mailbox’ Server role

(you do not need Edge Transport role in this case which is optional . Edge is designed to sit in a perimeter network to provide mail security)

What is Edge Transport role?

Edge Transport server provides protection against spam and apply mail flow rules to control mail flow.

You can install more than one Edge Transport server in the perimeter network. Deploying more than one Edge Transport server provides redundancy and failover capabilities for your inbound message flow. You can load balance the SMTP traffic to your organization among Edge Transport servers by defining more than one MX record with the same priority value for your mail domain. You can achieve consistency in the configuration among multiple Edge Transport servers by using cloned configuration scripts.

https://docs.microsoft.com/en-us/exchange/architecture/edge-transport-servers/edge-transport-servers?view=exchserver-2019

SVR 2016 EX16-2020-02-26-13-33-57

If you need you can browse installation location or keep as it is

SVR 2016 EX16-2020-02-26-13-34-01

In this case Malware Protection is disabled. If you need you can enable it. Or you can use a third party product.

SVR 2016 EX16-2020-02-26-13-34-07

Wait until the ‘Readiness Checks’ completes

SVR 2016 EX16-2020-02-26-13-35-20

Wait until the Exchange Server is installed

SVR 2016 EX16-2020-02-26-13-38-05

If the setup progress is slow make sure to disable or remove anti-malware service to make the installation run faster

SVR 2016 EX16-2020-02-26-14-29-04

 

Verify Exchange Server installation 

Exchange Management Shell

Run this command in Exchange Management Shell

Get-ExchangeServer

Select the ‘Exchange Management Shell’ from ‘start’ menu

EX 2016 datacenter-2020-03-02-07-41-34

Run the command

EX 2016 datacenter-2020-03-02-07-42-37

 

Review the Exchange Setup log

go to the following location

<location where exchange server is installed>:\ExchangeSetupLogs\ExchangeSetup.log

Login to Exchange Admin Center

Use following URL

https://localhost/ecp

Alternative you can use the IP address instead of ‘localhost’

https://192.168.1.10/ecp

EX 2016 datacenter-2020-03-02-06-57-55

TROUBLESHOOTING

  • If the additional domain controller is installed make sure it is up and running
  • Provide Schema and Enterprise administrator privileges to the account that is used to install the Exchange Server
  • Always download the most recent Exchange server 2016 product from Microsoft
  • Disable or uninstall antivirus protection (Uninstall Windows Defender using remove roles and feature wizard to make the installation faster)
  • Exchange Services should be up and running during the installation

 

Prepare schema error

An error will occur if you try to Prepare schema without installing Remote Tools Administration Pack and rest of the configuration

SVR 2016 EX16-2020-02-24-12-00-20

 

Installing prerequisites for Mail box server role error

If you encounter an error when installing multiple features, remove the particular feature that gives the error and try to install one by one. The best way to prevent this is to install the latest version of Exchange Sever 2016 and Windows Server 2016.

SVR 2016 EX16-2020-02-24-18-46-42

 

Download the latest Exchange server 2016 product

When the Exchange server 2016 came, the Server 2016 did not support the product fully and make sure you download the latest Exchange 2016 Cumulative Update

Download link: https://www.microsoft.com/en-us/download/details.aspx?id=57388

Error - you have to download the latest exchnage server product

 

Services not running 

SVR 2016 EX16-2020-02-26-14-54-46

Check whether MSExchangeADTopology service is running or not. If not manually start the service at the Server Manager or Task Manager

What is MSExchangeADTopology service?

Provides Active Directory topology information to Exchange services. If this service is stopped, most Exchange services can’t start.

REFER THIS LINK TO GET AN IDEA ABOUT EXCHANGE SERVICES: https://docs.microsoft.com/en-us/Exchange/plan-and-deploy/deployment-ref/services-overview?redirectedfrom=MSDN&view=exchserver-2019

Please note that after the ‘Step 4 of 13 – restoring services’ the Services can be started.

SVR 2016 EX16-2020-02-26-15-02-37