Day-to-day Windows administration is where fundamentals become practical. These are the tools you'll reach for on almost every support ticket.
Windows Administration
The everyday tools that keep Windows machines healthy and secure.
Tap or hover a part to learn more.
Who can do what.
Local and domain accounts belong to groups; NTFS/share permissions and least-privilege decide access. Add users to groups (not per-user grants), and keep everyday work off admin accounts to limit blast radius.
Check your understanding
1. Which Security log event indicates a failed logon?
2. What is the best-practice way to grant access to a resource?
Keep learning
Identity and permissions
Local and domain accounts belong to groups; NTFS/share permissions and least privilege decide access. Add users to groups (not per-user grants) and keep everyday work off admin accounts to limit blast radius.
Services, tasks and logs
services.msc controls background services (startup type, recovery, the account they run as); Task Scheduler runs jobs on triggers; Event Viewer holds System, Application and Security logs. Know the key Security events — 4624 (logon), 4625 (failed logon), 4740 (lockout) — before an incident, not during one.
Core tools
Computer Management bundles the MMC snap-ins — Device Manager, Disk Management, Local Users & Groups — and command-line tools (sfc, chkdsk, ipconfig) round out support work.
These skills sit alongside PowerShell and are assumed for A+ and SOC/Security+ roles.
