From Help Desk to System Administrator - Complete Path
Prerequisites: Phase 1 (Help Desk Fundamentals) completed
Duration: 9 months (Months 4-12)
Goal: Transition from Help Desk to System Administrator role
Expected Outcome: Manage 50+ servers, automate routine tasks, handle escalations
- Master Active Directory administration
- Understand AD architecture and replication
- Implement Group Policy effectively
- Troubleshoot AD issues systematically
- AD database structure (NTDS.dit)
- Forest, Tree, Domain, OU hierarchy
- FSMO roles (what, where, when to transfer/seize)
- AD replication (how it works, troubleshooting)
- Global Catalog and its importance
- AD sites and services (for multi-location)
- User account lifecycle (create → modify → disable → delete)
- Group types and scopes (Domain Local, Global, Universal)
- AGDLP/AGUDLP best practices
- Bulk operations (PowerShell for mass user creation)
- Service accounts (password management, security)
- Managed Service Accounts (gMSA)
- GPO structure and processing order (LSDOU)
- Common GPOs (drive maps, printers, security settings)
- GPO filtering (security, WMI)
- GPO troubleshooting (rsop, gpresult)
- GPO backup and migration
- Security policies (password, lockout, audit)
- Common AD issues (authentication, replication, DNS)
- AD diagnostic tools (ADUC, ADSI Edit, LDP)
- Event logs to monitor (4624, 4625, 4740, etc.)
- AD database maintenance (offline defrag, integrity check)
- Disaster recovery (authoritative vs non-authoritative restore)
- AD Recycle Bin
| Lab | Description | Time |
|---|---|---|
| 2.1.1 | Build multi-domain forest (1 forest, 2 domains) | 4 hours |
| 2.1.2 | Create 100 users via PowerShell (CSV import) | 2 hours |
| 2.1.3 | Implement AGDLP for file access | 3 hours |
| 2.1.4 | Configure 10 different GPOs | 6 hours |
| 2.1.5 | GPO filtering scenarios (5 exercises) | 3 hours |
| 2.1.6 | Troubleshoot replication issues (simulated) | 4 hours |
| 2.1.7 | FSMO role transfer and seizure | 2 hours |
| 2.1.8 | AD database backup and restore | 4 hours |
| 2.1.9 | Implement AD Recycle Bin and recover objects | 2 hours |
| 2.1.10 | Security audit (find misconfigurations) | 4 hours |
| 2.1.11 | Create AD documentation template | 2 hours |
| 2.1.12 | Capstone: Full AD design for 500-user company | 8 hours |
- Video: Active Directory Full Course
- Microsoft Docs: Active Directory Documentation
- Book: "Active Directory Administration Cookbook"
- Practical exam: Complete 5 AD troubleshooting scenarios in 90 minutes
- Written exam: AD architecture and concepts (50 questions)
- Capstone project: AD design document for hypothetical company
- Install and configure Windows Server 2019/2022
- Manage server roles and features
- Implement storage solutions
- Monitor and maintain server health
- Windows Server versions (Standard vs Datacenter)
- Installation options (Desktop Experience vs Core)
- Server Manager and Windows Admin Center
- PowerShell for server management
- Initial configuration (networking, updates, roles)
- Server hardening basics
- File Server (FSRM, quotas, file screening)
- Print Server (deployment, management)
- Web Server (IIS basics)
- DHCP Server (scopes, reservations, failover)
- DNS Server (zones, forwarding, troubleshooting)
- Remote Access (VPN, DirectAccess)
- Disk types (basic, dynamic, GPT, MBR)
- RAID levels (0, 1, 5, 6, 10)
- Storage Spaces (Windows software RAID)
- iSCSI configuration
- DFS (Distributed File System)
- Backup strategies (Windows Server Backup, third-party)
- Performance Monitor (key counters)
- Event Viewer (critical logs)
- Resource Monitor
- Task Scheduler (automated maintenance)
- WSUS (Windows Server Update Services)
- Server migration (migration tools, side-by-side)
| Lab | Description | Time |
|---|---|---|
| 2.2.1 | Install Windows Server 2022 (Desktop & Core) | 2 hours |
| 2.2.2 | Configure Server Core via PowerShell | 4 hours |
| 2.2.3 | Set up File Server with quotas and screening | 3 hours |
| 2.2.4 | Configure DHCP with failover | 3 hours |
| 2.2.5 | DNS configuration and troubleshooting | 4 hours |
| 2.2.6 | IIS web server setup with multiple sites | 3 hours |
| 2.2.7 | Storage Spaces implementation | 3 hours |
| 2.2.8 | DFS namespace and replication | 4 hours |
| 2.2.9 | WSUS deployment and configuration | 4 hours |
| 2.2.10 | Performance baseline and monitoring | 3 hours |
| 2.2.11 | Server migration (physical to virtual) | 6 hours |
| 2.2.12 | Disaster recovery drill (full server restore) | 4 hours |
- Microsoft Learn: Windows Server Learning Path
- Video: Windows Server 2022 Full Course
- Exam: AZ-800/801 (Windows Server Hybrid Administrator)
- Practical: Deploy and configure 5 server roles in 4 hours
- Troubleshooting exam: Fix 5 broken server configurations
- Documentation: Server deployment runbook
- Navigate and administer Linux systems confidently
- Manage users, permissions, and packages
- Configure common services (SSH, web, file sharing)
- Troubleshoot Linux issues effectively
- Linux distributions (RHEL, Ubuntu, CentOS differences)
- File system hierarchy (/etc, /var, /home, etc.)
- Basic commands (ls, cd, cp, mv, rm, cat, grep, find)
- File permissions (chmod, chown, ACLs)
- Text editors (nano, vim basics)
- Package management (apt, yum, dnf)
- User and group management
- Sudo configuration
- Process management (ps, top, kill, nice)
- Systemd services (start, stop, enable)
- Cron jobs and scheduled tasks
- Log management (/var/log, journalctl)
- SSH configuration and key-based auth
- Network configuration (ip, nmcli)
- Firewall (ufw, firewalld, iptables basics)
- Web server (Apache/Nginx basics)
- File sharing (Samba, NFS)
- Remote monitoring (top, htop, iotop)
- Boot process and troubleshooting
- Disk management (fdisk, mkfs, mount)
- LVM (Logical Volume Manager)
- Basic Bash scripting (variables, loops, conditions)
- Log analysis (grep, awk, sed for logs)
- Performance troubleshooting
| Lab | Description | Time |
|---|---|---|
| 2.3.1 | Install Ubuntu Server 22.04 (minimal) | 1 hour |
| 2.3.2 | Command line navigation (20 exercises) | 4 hours |
| 2.3.3 | User management (create 20 users via script) | 3 hours |
| 2.3.4 | File permissions scenarios (10 exercises) | 3 hours |
| 2.3.5 | SSH hardening (disable root, key-only) | 2 hours |
| 2.3.6 | Apache web server with virtual hosts | 4 hours |
| 2.3.7 | Samba file server configuration | 3 hours |
| 2.3.8 | Firewall configuration (ufw/firewalld) | 2 hours |
| 2.3.9 | Bash script for system health check | 4 hours |
| 2.3.10 | LVM configuration and expansion | 3 hours |
| 2.3.11 | Log analysis and alerting script | 4 hours |
| 2.3.12 | Troubleshoot 5 broken Linux scenarios | 6 hours |
| 2.3.13 | Backup script with rotation | 3 hours |
| 2.3.14 | Docker installation and basic containers | 4 hours |
| 2.3.15 | Monitoring setup (Prometheus + Grafana) | 6 hours |
| 2.3.16 | Security hardening checklist | 4 hours |
| 2.3.17 | Migration: Windows file server to Linux | 8 hours |
| 2.3.18 | Capstone: Full Linux server deployment | 10 hours |
- Video: Linux Administration Full Course
- Website: Linux Journey
- Book: "How Linux Works" by Brian Ward
- Certification: Linux+ or LFCS
- Practical exam: Complete 10 Linux tasks in 2 hours
- Script submission: System health monitoring script
- Capstone: Deploy and document a production-ready Linux server
- Design and implement enterprise network solutions
- Troubleshoot complex network issues
- Implement network security best practices
- Understand routing and switching fundamentals
- Subnetting (advanced, VLSM)
- Routing concepts (static, dynamic)
- VLANs and trunking
- NAT and PAT
- IPv6 fundamentals
- Advanced DHCP (options, reservations)
- Advanced DNS (conditional forwarding, zones)
- NTP (time synchronization)
- Load balancing concepts
- Proxy servers
- Firewall types and configuration
- VPN (site-to-site, client-to-site)
- Network segmentation
- 802.1X authentication
- IDS/IPS basics
- Network monitoring tools (PRTG, Nagios)
- Packet analysis (Wireshark deep dive)
- Network documentation
- Common network issues and fixes
- Performance optimization
| Lab | Description | Time |
|---|---|---|
| 2.4.1 | Advanced subnetting (30 exercises) | 6 hours |
| 2.4.2 | VLAN configuration (managed switches or virtual) | 4 hours |
| 2.4.3 | Site-to-site VPN configuration | 4 hours |
| 2.4.4 | Load balancer setup (HAProxy or nginx) | 4 hours |
| 2.4.5 | Wireshark packet analysis (10 scenarios) | 6 hours |
| 2.4.6 | Network monitoring setup (PRTG free) | 4 hours |
| 2.4.7 | Firewall rules implementation | 4 hours |
| 2.4.8 | Network troubleshooting (10 scenarios) | 8 hours |
- Video: CCNA Full Course
- Tool: Cisco Packet Tracer
- Certification: Network+ or CCNA
- Practical: Design network for 3-office company
- Troubleshooting: Fix 5 network issues in 90 minutes
- Documentation: Complete network diagram and IP schema
- Deploy and manage virtualization platforms
- Optimize VM performance
- Implement high availability
- Manage virtual infrastructure
- ESXi installation and configuration
- vCenter Server deployment
- VM creation and management
- vMotion and Storage vMotion
- High Availability (HA)
- Distributed Resource Scheduler (DRS)
- Hyper-V installation
- VM creation and management
- Checkpoints and replication
- Live Migration
- Failover Clustering basics
- Resource allocation (CPU, RAM, storage)
- Performance monitoring
- Capacity planning
- Backup strategies for VMs
- Disaster recovery
| Lab | Description | Time |
|---|---|---|
| 2.5.1 | Install ESXi 7/8 (nested virtualization) | 2 hours |
| 2.5.2 | Deploy vCenter Server Appliance | 2 hours |
| 2.5.3 | Create and manage 10 VMs | 4 hours |
| 2.5.4 | Configure vMotion | 3 hours |
| 2.5.5 | Implement HA cluster | 4 hours |
| 2.5.6 | Hyper-V cluster setup | 4 hours |
| 2.5.7 | VM backup and restore | 3 hours |
| 2.5.8 | Performance optimization | 4 hours |
- VMware: Free vSphere Training
- Microsoft: Hyper-V Documentation
- Certification: VCP or AZ-104
- Practical: Deploy and configure full virtual infrastructure
- Design document: Virtualization solution for 100-VM environment
- Design backup strategies
- Implement disaster recovery plans
- Test and validate backups
- Meet RPO/RTO requirements
- Backup types (full, incremental, differential)
- 3-2-1 backup rule
- Backup solutions (Veeam, Commvault, native)
- Disaster Recovery planning
- RPO (Recovery Point Objective) and RTO (Recovery Time Objective)
- Business Continuity Planning
- DR testing and documentation
| Lab | Description | Time |
|---|---|---|
| 2.6.1 | Implement 3-2-1 backup strategy | 4 hours |
| 2.6.2 | Configure Veeam Community Edition | 4 hours |
| 2.6.3 | Test full system restore | 4 hours |
| 2.6.4 | Create DR runbook | 4 hours |
| 2.6.5 | DR drill (simulated disaster) | 6 hours |
| 2.6.6 | Document RPO/RTO for critical systems | 3 hours |
| 2.6.7 | Backup verification automation | 3 hours |
| 2.6.8 | Cloud backup integration | 4 hours |
- DR plan document for hypothetical company
- Practical: Complete backup and restore drill
- Implement comprehensive monitoring
- Configure meaningful alerts
- Create dashboards and reports
- Predict issues before they occur
- Monitoring types (infrastructure, application, logs)
- Monitoring tools (PRTG, Nagios, Zabbix, Prometheus)
- Log aggregation (ELK Stack, Splunk)
- Alert configuration (avoiding alert fatigue)
- Dashboard creation
- Trend analysis and capacity planning
| Lab | Description | Time |
|---|---|---|
| 2.7.1 | Deploy PRTG or Zabbix | 4 hours |
| 2.7.2 | Configure 50+ monitors | 6 hours |
| 2.7.3 | Set up alerting (email, SMS, Teams) | 3 hours |
| 2.7.4 | Create executive dashboard | 4 hours |
| 2.7.5 | ELK Stack deployment | 6 hours |
| 2.7.6 | Log analysis and correlation | 4 hours |
| 2.7.7 | Capacity planning report | 4 hours |
| 2.7.8 | Predictive alerting setup | 4 hours |
- Monitoring infrastructure deployment
- Dashboard presentation
- Alert configuration review
Scenario: Design and implement IT infrastructure for a startup growing from 20 to 200 employees.
-
Active Directory Design
- Forest/domain structure
- OU hierarchy
- Group Policy strategy
- User provisioning automation
-
Server Infrastructure
- Physical vs virtual decisions
- Server roles and placement
- High availability design
- Capacity planning
-
Network Design
- IP addressing scheme
- VLAN design
- Security zones
- Remote access solution
-
Backup & DR
- Backup strategy
- DR site design (or cloud DR)
- RPO/RTO definitions
- Testing schedule
-
Monitoring
- Monitoring architecture
- Alert configuration
- Dashboard design
- Reporting schedule
-
Documentation
- Network diagrams
- Runbooks for common tasks
- Disaster recovery procedures
- Knowledge base articles
-
Design Document (50+ pages)
- Executive summary
- Technical design
- Bill of materials
- Implementation timeline
-
Implementation
- Working lab environment
- All configurations documented
- Screenshots and diagrams
-
Operations Manual
- Daily/weekly/monthly checklists
- Troubleshooting guides
- Escalation procedures
- Contact lists
-
Presentation
- 30-minute presentation
- Record and upload
- Peer review
- Week 1-2: Design phase
- Week 3-6: Implementation phase
- Week 7-8: Documentation phase
- Week 9-10: Testing and refinement
- Week 11-12: Presentation and review
| Criteria | Weight |
|---|---|
| Technical accuracy | 30% |
| Best practices adherence | 20% |
| Documentation quality | 20% |
| Presentation quality | 15% |
| Innovation/automation | 15% |
- ✅ Complete all 8 modules
- ✅ Pass all module assessments (80%+ score)
- ✅ Complete 100+ hours of hands-on labs
- ✅ Submit capstone project
- ✅ CompTIA Network+ OR
- ✅ Microsoft AZ-800/801 OR
- ✅ Linux+ or LFCS
- ✅ GitHub with 10+ scripts
- ✅ 20+ KB articles
- ✅ Capstone project documentation
- ✅ Network diagrams
- ✅ Runbooks created
- ✅ Resume updated with Phase 2 skills
- ✅ LinkedIn profile optimized
- ✅ Mock interview completed
- ✅ Applied to 10+ SysAdmin positions
Month 4: Active Directory ████████████████████████
Month 5: Windows Server ████████████████████████
Month 6: Windows Server (cont) ████████████████████████
Month 7: Linux Administration ████████████████████████
Month 8: Linux + Networking ████████████████████████
Month 9: Advanced Networking ████████████████████████
Month 10: Virtualization ████████████████████████
Month 11: Monitoring ████████████████████████
Month 12: Capstone Project ████████████████████████
Total Duration: 9 months
Total Lab Hours: 200+ hours
Total Study Hours: 150+ hours
Next: See CURRICULUM_PHASE3.md for DevOps Engineer Track.