Skip to content

Commit b4c95c0

Browse files
brazilianscriptguybrazilianscriptguy
authored
Update README.md
Signed-off-by: LUIZ HAMILTON ROBERTO DA SILVA <[email protected]>
1 parent 0cc2e60 commit b4c95c0

1 file changed

Lines changed: 76 additions & 60 deletions

File tree

‎ITSM-Templates-SVR/README.md‎

Lines changed: 76 additions & 60 deletions
Original file line numberDiff line numberDiff line change
@@ -1,104 +1,120 @@
1-
## 🖥️ ITSM-Templates-SVR Suite — Windows Server Management & Compliance
1+
## 🖥️ ITSM-Templates-SVR Suite
2+
### Windows Server Standardization · Domain Compliance · ITSM Automation
23

3-
### 📝 Overview
4+
![Suite](https://img.shields.io/badge/Suite-ITSM%20Templates%20SVR-0A66C2?style=for-the-badge&logo=windowsserver&logoColor=white)
5+
![Platform](https://img.shields.io/badge/Platform-Windows%20Server-0078D6?style=for-the-badge&logo=windows&logoColor=white)
6+
![Automation](https://img.shields.io/badge/Automation-PowerShell%20%7C%20VBScript-success?style=for-the-badge)
7+
![Ops](https://img.shields.io/badge/Target-L2%20%7C%20L3%20Infrastructure-informational?style=for-the-badge)
8+
![Compliance](https://img.shields.io/badge/Focus-ITSM%20%7C%20Security-critical?style=for-the-badge)
49

5-
The **ITSM-Templates-SVR** folder provides a suite of **PowerShell** and **VBScript** tools for Windows Server operations. These scripts automate provisioning, enforce IT compliance, and streamline routine administrative tasks in enterprise server environments.
10+
---
11+
12+
## 🧭 Overview
13+
14+
Welcome to **ITSM-Templates-SVR** — a standardized automation framework built with **PowerShell and VBScript** to enforce **baseline configuration, security hardening, and operational compliance** across **Windows Server environments**.
615

7-
- 🔧 **Server Hardening & Setup:** Automate secure baseline configurations and domain-ready deployments.
8-
- ⚙️ **Registry & DNS Fixes:** Correct registry entries and enforce DNS re-registration.
9-
- 📊 **Logging & Reports:** Scripts generate `.log` files and export `.csv` audit reports.
10-
- 📦 **Reusable Templates:** Easily adaptable for new roles, time sync, and GPO resets.
16+
This suite mirrors the structure and governance model of **ITSM-Templates-WKS**, adapted for **server-class workloads**, including **member servers, infrastructure roles, and domain services**.
1117

1218
---
1319

14-
## 🛠️ Prerequisites
20+
## 🌟 Key Features
1521

16-
1. ⚙️ **PowerShell Version:** PowerShell 5.1 or later
17-
```powershell
18-
$PSVersionTable.PSVersion
19-
```
22+
- 🖼️ **Admin-Friendly Execution** — Scripts designed for Infrastructure and Server teams (L2/L3)
23+
- 📝 **Structured Logging** — Logs saved to `C:\ITSM-Logs-SVR\`
24+
- 📊 **CSV & Audit Reports** — Inventories and compliance outputs
25+
- 🔒 **Security & Baseline Enforcement** — Hardened defaults aligned with enterprise policy
26+
- 📦 **Role-Oriented Templates** — Ready for File Servers, Application Servers, and Infrastructure roles
2027

21-
2. 🔑 **Administrator Privileges:** Required for domain changes, registry editing, and service control.
28+
---
2229

23-
3. 🖥️ **RSAT Tools:** Remote Server Administration Tools are required
24-
```powershell
25-
Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online
26-
```
30+
## 📄 Script Overview
2731

28-
4. 🔧 **Execution Policy:**
29-
```powershell
30-
Set-ExecutionPolicy RemoteSigned -Scope Process
31-
```
32+
### Folder: `/BeforeJoinDomain/`
3233

33-
5. 📦 **Dependencies:** Ensure modules such as `ActiveDirectory` and `DHCPServer` are installed.
34+
| Script Name | Purpose |
35+
|------------|---------|
36+
| **ITSM-BeforeJoinDomain-SVR.ps1** | Pre-join server preparation: hostname, time sync, firewall baseline, WSUS, registry and role prerequisites. |
3437

35-
---
38+
### Folder: `/AfterJoinDomain/`
39+
40+
| Script Name | Purpose |
41+
|------------|---------|
42+
| **ITSM-AfterJoinDomain-SVR.ps1** | Post-join automation: DNS registration, GPO refresh, service validation, and domain alignment. |
3643

37-
## 📄 Script Descriptions (Alphabetical Order)
44+
### Folder: `/Assets/AdditionalSupportScripts/`
3845

39-
| Script Name | Description |
40-
|-------------|-------------|
46+
| Script Name | Purpose |
47+
|------------|---------|
4148
| **CheckServerRoles.ps1** | Lists installed roles/features for validation. |
42-
| **ExportServerConfig.ps1** | Exports server config to `.csv` for documentation. |
49+
| **ExportServerConfig.ps1** | Exports server configuration to CSV. |
4350
| **FixNTFSPermissions.ps1** | Repairs NTFS permission inconsistencies. |
4451
| **InventoryServerSoftware.ps1** | Generates inventory of installed software. |
45-
| **ITSM-DefaultServerConfig.ps1** | Applies secure standard configs (e.g., NTP, firewall). |
46-
| **ITSM-DNSRegistration.ps1** | Forces DNS re-registration for AD. |
47-
| **ITSM-HardenServer.ps1** | Hardens server post-domain join (SMBv1, local accounts, lockout). |
48-
| **ITSM-ModifyServerRegistry.ps1** | Adjusts registry for compliance/security. |
49-
| **ResetGPOSettings.ps1** | Restores default GPO-controlled settings. |
50-
| **ServerTimeSync.ps1** | Syncs server time with DCs to prevent replication/auth issues. |
52+
| **ITSM-HardenServer.ps1** | Applies security hardening (SMB, accounts, protocols). |
53+
| **ResetGPOSettings.ps1** | Forces reapplication of domain GPOs. |
54+
| **ServerTimeSync.ps1** | Syncs server time with domain controllers. |
55+
| **UnjoinADServer-and-Cleanup.ps1** | Safely removes server from domain and cleans metadata. |
5156

5257
---
5358

54-
## 🚀 Getting Started
59+
## 🧭 Execution Order Summary
5560

56-
```bash
57-
git clone https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite.git
58-
```
61+
1. Prepare OS and patch baseline
62+
2. Execute **ITSM-BeforeJoinDomain-SVR.ps1**
63+
3. Rename disks and validate storage layout
64+
4. Join domain using delegated account
65+
5. Execute **ITSM-AfterJoinDomain-SVR.ps1**
66+
6. Validate logs and compliance reports
5967

60-
1. **Navigate to:**
61-
`Windows-SysAdmin-ProSuite/ITSM-Templates-SVR/`
68+
---
6269

63-
2. **Read the Docs:**
64-
Each script has usage notes in comments or a `README.md`.
70+
## 🏷️ Hostname Format (Servers)
6571

66-
3. **Run the Script:**
67-
```powershell
68-
.\ScriptName.ps1
69-
```
72+
```text
73+
<LOC><ROLE><UNIT><ASSET>
74+
Example: MIASRVFILEO23017
75+
```
7076

71-
4. **Review Logs and Reports:**
72-
Output files include `.log` and `.csv` formats for auditing and tracking.
77+
| Component | Meaning |
78+
|----------|---------|
79+
| LOC | Location code (e.g., MIA, BOS) |
80+
| ROLE | SRVFILE, SRVAPP, SRVDC |
81+
| UNIT | Organizational unit |
82+
| ASSET | Asset ID |
7383

7484
---
7585

76-
## 📝 Logging and Output
86+
## 🚀 Getting Started
7787

78-
- 📄 **Logs:**
79-
Each script outputs structured `.log` files for traceability and troubleshooting.
88+
```bash
89+
git clone https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite.git
90+
```
8091

81-
- 📊 **Reports:**
82-
Configuration states and inventories are exported to `.csv`.
92+
```powershell
93+
cd Windows-SysAdmin-ProSuite/ITSM-Templates-SVR/
94+
.\ScriptName.ps1
95+
```
8396

8497
---
8598

86-
## 💡 Optimization Tips
99+
## 📝 Logging & Reporting
87100

88-
- ⏱️ **Automate with Task Scheduler:** Schedule script execution to enforce drift remediation.
89-
- 🗂️ **Centralize Output:** Redirect logs and `.csv` reports to shared storage for compliance auditing.
90-
- 🧩 **Customize Templates:** Modify hardening profiles per role (e.g., file server, domain controller).
101+
- **Logs:** `C:\ITSM-Logs-SVR\`
102+
- **Reports:** CSV exports per execution
91103

92104
---
93105

94-
## ❓ Additional Assistance
106+
## 💡 Optimization Tips
95107

96-
These scripts are highly adaptable for custom infrastructures. Check embedded script headers and comments for configurable variables and behavior explanations.
108+
- 🔁 Schedule enforcement via Task Scheduler or GPO
109+
- 🗂️ Centralize logs to secured network share
110+
- 🧩 Clone templates per server role
97111

98112
---
99113

100-
## 📂 Document Classification
114+
## 📌 Document Classification
101115

102-
**RESTRICTED:** For internal use within the organization's network only.
116+
**RESTRICTED:** Internal use only. Confidential to Infrastructure and Security teams.
117+
118+
---
103119

104120
© 2026 Luiz Hamilton Silva. All rights reserved.

0 commit comments

Comments
 (0)