These tasks I do for every Windows 2012 server that I setup.
1) Change the time zone
2) Enable remote management
3) Enable remote desktop
4) Turn off Windows Firewall
5) Verify the time is correct
6) Give server a descriptive name following the standard naming convention
7) Join the domain
8) For app servers, add appropriate domain app group to the local administrator’s group
9) Turn off IE Enhanced Security Configuration for Administrators
10) Install Microsoft Update Services and patch, patch, patch!
You may need to add these sites as trusted sites in Internet Explorer:
- http://download.windowsupdate.com
- http://support.microsoft.com
- http://update.microsoft.com
- https://update.microsoft.com
- http://*.update.microsoft.com
- https://*.update.microsoft.com
11) Download and install BgInfo from technet Sysinternals
You may need to enable downloads from the Internet zone in Internet Explorer.
Internet Option, Security, Internet, Custom level…
Scroll down to Downloads / File download
Select Enable
In addition, you should use company wallpaper.
12) Change folder viewing preferences
13) Update PowerShell
Set shortcut to run as administratior
Update-Help
Set-ExecutionPolicy RemoteSigned (Need to run once for both 32 bit and 64 bit)
14) Install Remote Server Administration Tools
Server Manager / Manage / Add Roles and Features
Role-based or feature-based installation
Select your server, skip roles, and go to features.
Scroll down to Remote Server Administration Tools
From here, you can select what you need based on the server. I usually add Active Directory module for WIndows Powershell, Active Directory Administrative Center, AD DS Snap-Ins and Command-Line Tools. If this is a host machine, I also add Hyper-V GUI management Tools and Hyper-V Module for Windows PowerShell.
15) Pin common tools to the taskbar such as Active Directory Users and Computers and SQL Management Studio