Learn / Labs / Tools

Windows Operations

Windows Server and workstation operations, patching, baselines, build evidence, servicing, recovery, configuration, and troubleshooting.

4 guides0 labs11 tools2 capability mapsBrowse all topic paths

Capability Maps

How this path becomes useful work

Windows Patch Readiness and Maintenance Evidence

Know whether Windows servers are ready for patching and prove what changed after maintenance.

Free boundary: Read-only readiness checks, reboot detection, servicing evidence, and local reports for one environment.
Paid value later: Pre/post comparison, multi-host reporting, exception tracking, maintenance summaries, and reusable evidence packs.

01UnderstandChoose repair and maintenance paths with evidenceTeach why patch readiness starts with state capture, not immediate repair commands.02BuildBuild a patch compliance workflowPractice scheduled scans, CSV evidence, rollback notes, and maintenance documentation in a build path.03UseCheck pending reboots before patchingUse a read-only reboot state check before maintenance, installs, or troubleshooting.04ExtendAdd servicing health and update repair evidenceInclude Windows Update state, servicing health, approved repair actions, and validation criteria.05AutomateRun pre and post checks as a maintenance routineSchedule repeatable before/after checks, export results, and track exceptions that need follow-up.06IntegrateSend maintenance evidence to stakeholdersTurn readiness and post-check findings into HTML summaries, tickets, or change-record attachments.07Upgrade / plannedSell patch readiness report packsPaid packs can add compare mode, fleet grouping, exception handling, and maintenance-window reporting.

Endpoint Management and SCCM-Style Reporting

Give endpoint and server owners useful compliance, inventory, deployment, and client-health reports without drowning them in raw console exports.

Free boundary: Read-only inventory and compliance starters, report design guidance, and small CSV/HTML outputs.
Paid value later: High-end report packs, query libraries, dashboards, deployment health summaries, and packaged documentation.

01Understand / plannedDefine what endpoint reports must proveTeach report purpose, audience, source data, stale-client risk, deployment state, and compliance interpretation.

02BuildBuild reusable inventory reporting habitsPractice collecting endpoint software inventory and shaping evidence into useful reports.03UseStart with installed application inventoryUse a read-only inventory starter to capture software evidence from Windows endpoints.04ExtendAdd stale clients, patch state, and deployment healthGrow into client health, collection targeting, missing updates, failed deployments, and ownership gaps.

05Automate / plannedRefresh reports and preserve point-in-time evidenceSchedule exports, normalize rows, track trend changes, and identify devices that need manual follow-up.

06IntegratePublish report packs for operational reviewConnect endpoint evidence to HTML reports, internal dashboards, or review-ready exported bundles.07Upgrade / plannedSell high-end endpoint report packsPaid products can compete through polish: report design, interpretation, query packs, deployment health, and client-ready documentation.

Learn

Understand Windows Operations

Technical guides that explain the concepts, architecture, decisions, and durable operator patterns.

Comparing Windows Repair Paths: SFC, DISM, Restore, Rollback, and ReinstallCompare Windows repair paths before reaching for SFC, DISM, restore workflows, update rollback, or full rebuilds.Learnwindows Planning Windows Recovery and Repair Without Making the Outage WorseUse an incident-lead decision model that separates known evidence from assumptions, identifies the likely failure domain, preserves evidence, chooses the smallest discriminating...Learnwindows Windows Evidence-First Recovery Workflow Before Repair CommandsCapture the exact symptom, Windows context, relevant logs, rollback signal, and validation criteria before SFC, DISM, reboots, uninstalls, Safe Mode, or other repair commands change the evidence you still need.Learnwindows Windows Patch Compliance Without Blind SpotsSeparate discovery, evidence coverage, baseline assessment, and verified compliance so a Windows patch report shows both what is known and what could not be proved.Learnwindows

Labs

Practice Windows Operations

Hands-on labs that turn the concepts into working systems and repeatable environments.

A hands-on lab has not been assigned to this path yet.

Tools

Operate Windows Operations

Free operator tools for checks, scripts, evidence, reporting, and practical infrastructure work.

Authenticated Users drive ACL scannerPowerShell scanner that checks fixed local drives on Windows servers for root ACL entries where Authenticated Users have broad access. Produces console and CSV evidence so admins can review exposure before any ACL changes.ScriptSecurity and Exposure ChecksRead-only Certificate expiration scannerA read-only certificate inventory that finds local-machine store certificates nearing expiration and captures certificates presented by known TLS endpoints for review.ScriptSecurity and Exposure ChecksRead-only Disk space cleanup candidate reportA read-only disk-pressure report that captures low-space context and returns targeted cleanup candidates from known folders without deleting, compressing, or moving anything.ScriptWindows Server HealthRead-only IIS site and binding inventoryA read-only IIS inventory that correlates sites, bindings, ports, host headers, app-pool identities, content paths, and certificate thumbprints for migration or renewal work.ScriptWindows Server HealthRead-only Pending reboot detection across Windows serversA read-only pending reboot check for Windows servers before patching, application installs, or maintenance-window closure.ScriptPatch and Reboot ReadinessRead-only Scheduled task inventory and failure reportA read-only scheduled task inventory that highlights failed runs, missed runs, disabled tasks, and ownership gaps.ScriptWindows Server HealthRead-only Windows firewall rule auditA read-only Windows Firewall audit that records enabled allow rules, ports, profiles, and address scopes.ScriptSecurity and Exposure ChecksRead-only Windows server health snapshotA read-only Windows Server health snapshot that returns one compact row per host for uptime, disk pressure, memory headroom, stopped automatic services, and recent system errors.ScriptWindows Server HealthRead-only Windows Server update failure evidence-first runbookA Windows Server-specific observe, compare, repair, validate workflow for one server that fails a monthly update while a peer succeeds, with proxy, update-source, servicing, applicability, CBS/DISM, and before/after evidence.ChecklistPatch and Reboot ReadinessChanges system state Windows Update readiness and repair evidence packA patch readiness and repair evidence pack for reboot state, servicing health, update logs, and approved repair actions.ChecklistPatch and Reboot ReadinessChanges system state Windows Update Repair ChecksA staged Windows Update troubleshooting path that starts read-only and escalates only when needed.ChecklistPatchingReview before running