Skip to content

Lesson 11 — Windows Administration

Managing a personal Windows laptop is very different from managing hundreds or even thousands of enterprise computers.

A Windows Administrator is responsible for ensuring that systems remain:

  • Secure
  • Available
  • Reliable
  • Updated
  • Compliant
  • Performant

Every day, administrators perform tasks such as:

  • Creating user accounts
  • Managing servers
  • Installing updates
  • Monitoring performance
  • Troubleshooting issues
  • Deploying applications
  • Managing Active Directory
  • Responding to incidents

Windows Administration is the foundation of enterprise IT operations and is a critical skill for Windows Administrators, Cloud Engineers, DevOps Engineers, and Cybersecurity Professionals.


After completing this lesson, you will be able to:

  • Understand Windows administration responsibilities.
  • Learn common administrative tools.
  • Manage users, groups, and services.
  • Monitor system performance.
  • Perform patch management.
  • Automate administration tasks.
  • Apply enterprise operational best practices.

Windows Administration is the process of managing Windows workstations, servers, users, applications, and infrastructure throughout their lifecycle.

Typical responsibilities include:

  • Operating System Installation
  • User Management
  • Group Management
  • Active Directory Administration
  • Service Management
  • Performance Monitoring
  • Patch Management
  • Security Hardening
  • Backup & Recovery
  • Troubleshooting

Enterprise administrators ensure systems remain operational and secure.


A Windows Administrator may perform the following tasks each day:

  • Reset passwords
  • Unlock user accounts
  • Review Event Logs
  • Monitor servers
  • Install Windows updates
  • Restart services
  • Create shared folders
  • Manage storage
  • Review security alerts
  • Support end users

These routine tasks keep business operations running smoothly.


Provision Device
Configure Windows
Join Active Directory
Apply Group Policies
Install Applications
Monitor Health
Patch & Maintain
Retire System

This lifecycle ensures systems remain secure and standardized.


Windows includes a centralized administration console.

Open:

compmgmt.msc

From here administrators can manage:

  • Local Users & Groups
  • Shared Folders
  • Device Manager
  • Event Viewer
  • Disk Management
  • Services
  • Performance Monitoring

MMC provides a framework for administrative tools.

Open:

mmc

Administrators can add snap-ins such as:

  • Event Viewer
  • Services
  • Disk Management
  • Local Security Policy
  • Group Policy
  • Certificates
  • Device Manager

MMC allows custom administration consoles to be created.


Administrators regularly:

  • Create users
  • Disable accounts
  • Reset passwords
  • Unlock accounts
  • Modify group membership
  • Remove inactive users

PowerShell example:

Terminal window
Get-LocalUser

Enterprise environments typically manage users through Active Directory.


Windows Services support applications and operating system components.

Common tasks include:

  • Start services
  • Stop services
  • Restart services
  • Configure startup type
  • Monitor service health

PowerShell:

Terminal window
Get-Service
Restart-Service

Administrators manage:

  • Partitions
  • Volumes
  • Disk usage
  • File systems
  • Storage capacity

Open:

diskmgmt.msc

PowerShell:

Terminal window
Get-Disk
Get-Volume

Windows provides several monitoring tools.

Open:

Ctrl + Shift + Esc

Monitor:

  • CPU
  • Memory
  • Disk
  • Network
  • Processes

Open:

resmon

Provides detailed performance metrics.


Open:

perfmon

Administrators use Performance Monitor to:

  • Analyze CPU utilization
  • Track memory consumption
  • Monitor disk activity
  • Measure network performance
  • Create performance baselines

Open:

devmgmt.msc

Device Manager allows administrators to:

  • View hardware
  • Update drivers
  • Disable devices
  • Troubleshoot hardware
  • Verify device health

Keeping Windows updated is a core administrative responsibility.

Administrators manage:

  • Security Updates
  • Quality Updates
  • Driver Updates
  • Feature Updates

Enterprise environments often use:

  • Windows Server Update Services (WSUS)
  • Microsoft Intune
  • Microsoft Configuration Manager (ConfigMgr)

Updates should be tested before production deployment.


Administrators regularly back up:

  • User Data
  • System Configuration
  • Application Data
  • Databases
  • Virtual Machines

A backup is valuable only if it can be restored successfully, so restoration testing is equally important.


Administrators frequently manage systems remotely using:

  • Remote Desktop (RDP)
  • PowerShell Remoting
  • Windows Admin Center
  • Microsoft Intune
  • Remote Server Administration Tools (RSAT)

Remote administration improves efficiency while reducing the need for physical access.


Many administrative tasks are automated.

Examples include:

  • User provisioning
  • Password resets
  • Health checks
  • Service monitoring
  • Software installation
  • Inventory collection
  • Patch reporting

Automation reduces manual effort and improves consistency.


Cloud Engineers administer Windows workloads using:

  • Azure Virtual Machines
  • Azure Monitor
  • Azure Backup
  • Microsoft Entra ID
  • Azure Automation
  • Amazon EC2 Windows Instances
  • AWS Systems Manager
  • AWS Backup
  • CloudWatch

Windows administration skills extend naturally into cloud environments.


Security teams work closely with Windows administrators to:

  • Review Event Logs
  • Apply security patches
  • Investigate suspicious activity
  • Manage privileged accounts
  • Enforce security baselines
  • Respond to incidents
  • Perform forensic investigations

Effective administration contributes directly to organizational security.


Display system information:

Terminal window
systeminfo

Display computer information:

Terminal window
Get-ComputerInfo

Display services:

Terminal window
Get-Service

Display processes:

Terminal window
Get-Process

Display installed updates:

Terminal window
Get-HotFix

Display disks:

Terminal window
Get-Disk

Display event logs:

Terminal window
Get-WinEvent

A company deploys 500 new Windows laptops.

The IT Operations team follows this process:

Install Windows
Join Active Directory
Apply Group Policy
Install Microsoft 365
Enable BitLocker
Enable Microsoft Defender
Deploy Applications
Verify Compliance
Issue Laptop to Employee

Using standardized procedures ensures every device is configured consistently and securely.


As a Windows Administrator:

  • Standardize system configurations.
  • Automate repetitive tasks using PowerShell.
  • Keep systems fully patched.
  • Monitor performance continuously.
  • Enable centralized logging.
  • Follow the Principle of Least Privilege.
  • Test backups regularly.
  • Document administrative procedures.
  • Review administrative accounts frequently.
  • Maintain an accurate asset inventory.

Consistent administration improves security, stability, and operational efficiency.


After completing this lesson, you should understand:

  • Windows administration responsibilities.
  • Administrative tools.
  • Performance monitoring.
  • User and service management.
  • Patch management.
  • Backup administration.
  • Remote management.
  • Enterprise administration best practices.

Windows Administration is the operational foundation of enterprise IT.

Administrators are responsible for maintaining reliable, secure, and well-managed Windows environments through standardized processes, automation, monitoring, and continuous maintenance.

The skills learned in this lesson are directly applicable to enterprise IT operations, cloud administration, cybersecurity, and DevOps environments.


➡️ Lesson 12 — Enterprise Windows Administration

In the next lesson, you’ll learn how large organizations manage thousands of Windows systems using Active Directory, Group Policy, Microsoft Intune, centralized monitoring, compliance, automation, and enterprise operational practices.