A workgroup is a peer-to-peer network where each computer manages its own security and user accounts locally. There's no centralized authentication, and each machine maintains its own user database. Workgroups are suitable for small networks (typically under 20 computers).

A domain is a centralized network where a domain controller manages authentication, security policies, and user accounts. All computers in the domain trust the domain controller for authentication. Domains provide centralized management, better security, and scalability for larger organizations.

Key differences:

• Authentication: Workgroup uses local accounts; Domain uses centralized authentication
• Management: Workgroup requires individual computer management; Domain allows centralized management
• Security: Domain provides better security through centralized policies
• Scalability: Workgroups are limited to small networks; Domains can scale to thousands of computers

Common Windows Server roles include:

• Active Directory Domain Services (AD DS): Provides directory services and domain authentication
• DNS Server: Resolves domain names to IP addresses
• DHCP Server: Automatically assigns IP addresses to network clients
• File and Storage Services: Manages file shares and storage
• IIS (Web Server): Hosts websites and web applications
• Print and Document Services: Manages network printers
• Remote Desktop Services: Provides remote access to applications and desktops
• Hyper-V: Provides virtualization platform
• Windows Deployment Services (WDS): Deploys Windows operating systems over the network

Each role can be installed and configured based on organizational needs.

NTFS (New Technology File System):

• Supports large files (up to 16 TB) and volumes (up to 256 TB)
• Provides file-level security and permissions
• Supports compression, encryption, and disk quotas
• Has journaling capabilities for better reliability
• Supports symbolic links and hard links

FAT32 (File Allocation Table 32):

• Limited to 4 GB maximum file size
• Maximum volume size of 32 GB (Windows formatting limitation)
• No built-in security features
• Compatible with multiple operating systems
• Simpler structure, faster for small files

NTFS is preferred for Windows systems due to its advanced features and security capabilities.

Active Directory (AD) is Microsoft's directory service that stores information about network resources and enables administrators to manage them. It provides authentication and authorization services in Windows domains.

Main components:

• Domain: A logical group of network objects (users, computers, groups)
• Domain Controller (DC): A server that authenticates users and manages domain objects
• Organizational Units (OUs): Containers used to organize objects within a domain
• Forest: A collection of one or more domains that share a common schema
• Tree: A collection of domains in a contiguous namespace
• Global Catalog: A partial replica of all objects in the forest
• Schema: Defines the structure and attributes of objects in AD

PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and scripting language built on .NET Framework.

Key differences from Command Prompt:

PowerShell:

• Object-oriented (works with .NET objects)
• Extensive cmdlet library with consistent syntax
• Advanced scripting capabilities
• Built-in help system and tab completion
• Can access .NET Framework and WMI
• Supports aliases for common commands

Command Prompt:

• Text-based input/output
• Limited built-in commands
• Basic scripting with batch files
• Legacy tool dating back to DOS

Example: In PowerShell, Get-Process returns process objects with properties and methods. In CMD, tasklist returns text output that requires parsing.

PowerShell cmdlets follow a consistent Verb-Noun syntax structure, making them intuitive and predictable.

Common verbs:

• Get (retrieve information)
• Set (modify properties)
• New (create objects)
• Remove (delete objects)
• Start/Stop (control services/processes)

Syntax structure:

Verb-Noun -Parameter Value -Switch

Examples:

Get-Service -Name "Spooler"
Set-Location -Path "C:\Windows"
New-Item -ItemType Directory -Name "TestFolder"
Stop-Process -Name "notepad" -Force

Parameters: Modify cmdlet behavior
Switches: Boolean parameters (present or not)
Pipeline: Cmdlets can be chained using the pipe operator (|)

User Account Control (UAC) is a Windows security feature that helps prevent unauthorized changes to the system by requiring administrative approval for actions that could affect system security.

How UAC works:

1. Standard user context: Users run with standard user privileges by default
2. Elevation prompt: Administrative actions trigger an elevation prompt
3. Admin approval mode: Even administrators run with standard privileges until elevation
4. Secure desktop: Elevation prompts run on a secure desktop to prevent spoofing

UAC levels:

• Always notify: Prompt for all administrative actions
• Notify when apps try to make changes: Default setting, prompts for unknown applications
• Notify when apps try to make changes (no dimming): Same as above but without secure desktop
• Never notify: UAC disabled (not recommended)

Benefits: Reduces impact of malware, prevents accidental system changes, promotes principle of least privilege.