Windows Server Administration Essentials (MMC, Admin Center & Roles)

Enterprise Windows administration requires navigating both classical Microsoft Management Consoles (MMC) and modern web-based Windows Admin Center workflows, backed by automated PowerShell cmdlets.

---

Step 1: Launch Core MMC Administrative Snap-ins

01

Classical Management Consoles

Console

Microsoft Management Consoles (MMC) remain the fastest native tools for low-overhead administrative tasks across local and domain environments.

Run Dialog Shortcuts

# Open Computer Management
compmgmt.msc

# Open Disk Management
diskmgmt.msc

# Open Windows Services Console
services.msc

# Open Local Group Policy Editor
gpedit.msc

PowerShell Launchers

# Launch Event Viewer directly from PowerShell
Start-Process eventvwr.msc

# Launch Active Directory Users and Computers (if RSAT is installed)
Start-Process dsa.msc

Figure 1: Windows Server Computer Management (compmgmt.msc) and Disk Management interface showing physical drives, EFI system partitions, and primary NTFS volumes.

---

Step 2: Query and Install Server Roles via PowerShell

02

Manage Server Roles & Features

Automation

Instead of clicking through GUI Server Manager wizards, install and inventory Windows Server roles and RSAT features with declarative PowerShell cmdlets:

Query Installed Roles

# Query all currently installed roles and features
Get-WindowsFeature | Where-Object Installed -eq $True | Select-Object Name, DisplayName

Install Roles & Tools

# Install Web Server (IIS) with Management Tools
Install-WindowsFeature -Name Web-Server -IncludeManagementTools

# Install Remote Server Administration Tools (RSAT) for Active Directory
Install-WindowsFeature -Name RSAT-AD-PowerShell, RSAT-ADDS-Tools

---

Step 3: Modern Fleet Management with Windows Admin Center

03

Windows Admin Center (WAC) Gateway

Modern GUI

Windows Admin Center is Microsoft’s browser-based management tool for on-premises, hybrid, and hyper-converged infrastructure. It uses WinRM and other configured management channels to communicate with targets; secure those channels according to your environment’s policy.

Deploy Gateway via PowerShell

# Download latest Windows Admin Center MSI installer
Invoke-WebRequest -Uri "https://aka.ms/WACDownload" -OutFile "$env:TEMP\WindowsAdminCenter.msi"

# Silent install on dedicated management server (Port 443 with self-signed cert)
Start-Process msiexec.exe -ArgumentList "/i $env:TEMP\WindowsAdminCenter.msi /qn /L*v $env:TEMP\WACInstall.log SME_PORT=443 SSL_CERTIFICATE_OPTION=generate" -Wait

# Verify gateway service state
Get-Service -Name "ServerManagementGateway"

Browser Access

Navigate to:
https://localhost:443 or https://<gateway-fqdn>:443

Sign in with an approved Windows Admin Center gateway account. For target servers,
use a delegated account with the permissions needed for that task. Do not use a
Domain Admin account by default; configure Windows Admin Center role-based access
control where its supported roles fit the task.

Figure 2: Windows Admin Center (WAC) web portal showing real-time server telemetry cards (CPU, Memory, Network) and remote management toolkits.