42,99 €
Mehr erfahren.
- Herausgeber: John Wiley & Sons
- Kategorie: Wissenschaft und neue Technologien
- Serie: Tech Today
- Sprache: Englisch
Architect, migrate, and manage Windows Server on Azure
In Running Windows Server 2025 on Microsoft Azure, 5-time Microsoft MVP, William Panek, walks you through the migration of business-critical Windows Server workloads to Azure while ensuring hybrid cloud agility and advanced security. You'll learn how to extend on-premises deployments of Windows Server to the Azure cloud using hybrid services that offer an array of vital functions.
Will Panek explains how to use a downloadable app provided by Microsoft to set up the most common Azure hybrid services and shows you how to conduct the manual configuration required to customize and personalize your setup for your use case. He also demonstrates how to use Windows Admin Center, integrated directly into Azure, to obtain a server-centric view of available Azure services.
Also inside the book:
- Discussions of foundational principles of Azure IaaS, PaaS, and SaaS, including compute, storage, and networking
- Step-by-step tutorials for tools used to implement hybrid solutions, including Windows Admin Center and PowerShell
- Implementing identity management in hybrid scenarios, including Azure AD DS on Azure IaaS and managed AD DS
- Planning and implementing hybrid and cloud migration, backup, and recovery scenarios
- Deploying Azure VMs running Windows Server
Perfect for IT professionals managing on-premises Windows Server environments who are interested in using Azure to manage server workloads, Running Windows Server 2025 on Microsoft Azure helps you understand all the core service models available on Azure.
Sie lesen das E-Book in den Legimi-Apps auf:
Seitenzahl: 706
Veröffentlichungsjahr: 2025
Ähnliche
Table of Contents
Cover
Table of Contents
Title Page
Introduction
Who Should Read This Book?
What’s Inside?
Recommended Home Lab Setup
How to Contact Sybex/Author
How to Contact the Publisher
CHAPTER 1: Understanding Windows Server 2025
Features and Advantages of Windows Server 2025
Deciding Which Windows Server 2025 Version to Use
Deciding on the Type of Installation
Removed Features
Summary
CHAPTER 2: Understanding Hyper-V
Introduction to Virtualization
Hyper-V Installation and Configuration
Configuring Virtual Machines
PowerShell Commands
Summary
CHAPTER 3: Installing Windows Server 2025
Installing the Windows Server 2025 OS
Activating and Servicing Windows
Configuring Windows Server Updates
Understanding Features On Demand
Summary
CHAPTER 4: Understanding IP
Understanding TCP/IP
Understanding IP Addressing
Subnetting a Network
Understanding IPv6
Summary
CHAPTER 5: Implementing DNS
Introducing DNS
Introducing DNS Database Zones
Advantages of DNS in Windows Server 2025
Introducing DNS Record Types
Configuring DNS
DNS PowerShell Commands
Summary
CHAPTER 6: Understanding Active Directory
Verifying the File System
Verifying Network Connectivity
Understanding Active Directory
Understanding Domain and Forest Functionality
Planning the Domain Structure
Installing Active Directory
Verifying Active Directory Installation
Creating and Configuring Application Data Partitions
Configuring DNS Integration with Active Directory
Summary
CHAPTER 7: Administering Active Directory
Active Directory Overview
An Overview of OUs
Planning the OU Structure
Creating OUs
Managing OUs
Creating and Managing Active Directory Objects
Publishing Active Directory Objects
PowerShell for Active Directory
Summary
CHAPTER 8: Configuring DHCP
Understanding DHCP
Installing and Authorizing DHCP
Creating and Managing DHCP Scopes
Working with Advanced DHCP Configuration Options
PowerShell Commands
Summary
CHAPTER 9: Building Group Policies
Introducing Group Policy
Planning a Group Policy Strategy
Implementing Group Policy
Managing Group Policy
Summary
CHAPTER 10: Understanding Cloud Concepts
Exploring Cloud Concepts
Understanding the Difference Between IaaS, PaaS, and SaaS
Summary
CHAPTER 11: Configuring Azure
Understanding Azure Benefits
Understanding the Azure Dashboards
Configuring the Azure Portal Settings
Summary
CHAPTER 12: Creating a Hybrid Network
Creating a Hybrid Network
Implementing Active Directory Federation Services
Planning Microsoft Entra Connect Authentication Options
Creating an Azure Recovery Policy
Summary
Index
Copyright
Dedication
About the Author
About the Technical Editor
Acknowledgments
End User License Agreement
List of Tables
Chapter 1
Table 1-1: Windows Server 2025 Locks and Limits
Table 1-2: Windows Server 2025 Standard vs. Datacenter
Table 1-3: Windows Server 2025 Standard vs. Datacenter
Table 1-4: Supported Windows Server 2025 Upgrade Path Recommendati...
Chapter 2
Table 2-1: Hyper-V Guest Server Operating Systems
Table 2-2: Hyper-V Guest Client Operating Systems
Table 2-3: Hardware Requirements for Hyper-V
Table 2-4: Virtual Hard Disks in Hyper-V
Table 2-5: Edit Disk Overview
Table 2-6: Hyper-V PowerShell Commands
Chapter 3
Table 3-1:
Slmgr.vbs
Switches
Table 3-2: Windows Server 2025 AVMA Keys
Table 3-3: Servicing Models for Windows Server 2025
Table 3-4: Selected Registry Keys and Values for Automatic Updates...
Table 3-5: WSUS Administration Commands
Chapter 4
Table 4-1: Common Port Numbers
Table 4-2: Network Address Classes
Table 4-3: Special Network Addresses
Table 4-4: Default Subnet Masks
Table 4-5: Setting Up Class C Subnets
Table 4-6: Fourth Octet Addresses for a Class C Network with Eight...
Table 4-7: IPv6 Address Space Known Prefixes and Addresses
Chapter 5
Table 5-1: Common Top-Level DNS Domains
Table 5-2: The SOA Record Structure
Table 5-3: The NS Record Structure
Table 5-4: The SRV Record Structure
Table 5-5: PowerShell Commands for DNS
Chapter 6
Table 6-1: Active Directory Requirements
Table 6-2:
ntdsutil
Domain Management Commands
Chapter 7
Table 7-1: Permissions of Active Directory objects
Table 7-2: PowerShell commands for Active Directory
Chapter 8
Table 8-1: DHCP PowerShell commands
Chapter 9
Table 9-1:
Auditpol.exe
switches
Table 9-2:
GPUpdate.exe
switches
Chapter 10
Table 10-1: IaaS, PaaS, and SaaS Benefits and Features
Chapter 12
Table 12-1: Common Identity Scenarios and Recommendations
Table 12-2: AD FS Endpoints
Table 12-3: AD FS Security Modes
Table 12-4: SAML-Supported Authentication Methods
Table 12-5: Federation Metadata Fields
Table 12-6: Transform Claims Rule Templates
Table 12-7: Settings Configured by Microsoft Entra Connect
Table 12-8: Selecting a Source and Target Machine
Table 12-9: Selecting a Source and Target Machine
List of Illustrations
Chapter 2
Figure 2-1: Hyper-V architecture
Figure 2-2: Warning window that Hyper-V cannot be installed
Figure 2-3: Server Manager Add Features
Figure 2-4: Virtual Switch screen
Figure 2-5: Hyper-V in Server Manager
Figure 2-6: Hyper-V Manager
Figure 2-7: Hyper-V Settings
Figure 2-8: Virtual Network Manager
Figure 2-9: Virtual network card
Figure 2-10: In Disk Management, you can set disks as Offline.
Figure 2-11: The Edit Virtual Hard Disk Wizard
Figure 2-12: Hyper-V Manager
Figure 2-13: Specify Generation screen
Figure 2-14: VM RAM
Figure 2-15: Networking Page
Figure 2-16: Virtual Hard Disk Page
Figure 2-17: Installing OS screen
Figure 2-18: Completing the New Virtual Machine Wizard screen
Figure 2-19: Options available when right-clicking a virtual mac...
Figure 2-20: Delete Virtual Machine warning window
Figure 2-21: Virtual Machine Connection window when the machine ...
Chapter 3
Figure 3-1: Windows Server 2025 Setup
Figure 3-2: Install Now Screen
Figure 3-3: Windows Server Edition
Figure 3-4: Windows Server Installation
Figure 3-5: Installing Windows screen
Figure 3-6: Customize settings
Figure 3-7: Windows Server Manager Dashboard
Figure 3-8: Windows Server Edition
Figure 3-9: Change password screen
Figure 3-10: Password changed screen
Figure 3-11: SConfig.exe prompt
Figure 3-12: PowerShell prompt
Figure 3-13: Windows Update control panel
Figure 3-14: Seeing the update status
Figure 3-15: Seeing the Restart Now button
Figure 3-16: Viewing your update history
Figure 3-17: Viewing the advanced options
Figure 3-18: Choosing to Install WSUS
Figure 3-19: Select role screen
Figure 3-20: Content location screen
Figure 3-21: Confirmation screen
Figure 3-22: Status screen
Figure 3-23: Status screen
Figure 3-24: Administrative Tools
Chapter 4
Figure 4-1: TCP/IP model
Figure 4-2: TCP/IP process
Figure 4-3: A sample subnet
Figure 4-4: Network vs. host addresses
Figure 4-5: The network address and its subnet
Figure 4-6: The subnet mask revealed
Figure 4-7: Different ways to represent the same mask
Figure 4-8: Applying the subnet mask
Figure 4-9: Converting the subnet mask to decimal
Figure 4-10: An example of a smaller subnet address
Figure 4-11: Will Panek’s IPv4 subnetting chart
Figure 4-12: Subnet mask represented by 1s
Figure 4-13: IPv4/IPv6 comparison
Figure 4-14: TCP/IPv6 Properties window
Figure 4-15: IPv6 configuration as seen from the command prompt...
Figure 4-16: IPv6 dual IP layer diagram
Figure 4-17: IPv6 interface identifier for
ipconfig
display
Chapter 5
Figure 5-1: HOSTS file
Figure 5-2: The DNS hierarchy
Figure 5-3: Setting the Dynamic Updates option
Figure 5-4: DHCP settings for DNS
Figure 5-5: A sample DNS query
Figure 5-6: Setting up an Active Directory Integrated zone
Figure 5-7: DNS stub zone type
Figure 5-8: DNS Notify dialog box
Figure 5-9: DNS Zone Transfers tab
Figure 5-10: DNS zone replication scope
Figure 5-11: The Root Hints tab of the DNS server’s Properties d...
Figure 5-12: The Start Of Authority (SOA) tab of the zone Proper...
Figure 5-13: The Name Servers tab of the zone Properties dialog ...
Chapter 6
Figure 6-1: Format options on Windows Server 2025
Figure 6-2: Disk Management
Figure 6-3: Viewing TCP/IP information with the
ipconfig
utility...
Figure 6-4: Promote screen
Figure 6-5: New Forest screen
Figure 6-6: Domain Controller Options
Figure 6-7: Review Options screen
Figure 6-8: Prerequisites Check screen
Figure 6-9: Viewing Active Directory information using the Active...
Figure 6-10: General tab of DNS zone properties
Chapter 7
Figure 7-1: Active Directory OUs
Figure 7-2: Mapping a business organization to an OU structure
Figure 7-3: A geographically based OU structure
Figure 7-4: New OU dialog box
Figure 7-5: The General tab of the OU’s Properties dialog box
Figure 7-6: The Managed By tab of the OU’s Properties dialog box...
Figure 7-7: User Properties
Figure 7-8: New Group dialog box
Figure 7-9: The Filter Options dialog box
Figure 7-10: Advanced Features in the
System
folder of the Activ...
Chapter 8
Figure 8-1: Choosing DHCP
Figure 8-2: DHCP snap-in
Figure 8-3: Choosing Authorize
Figure 8-4: Choosing Unauthorize
Figure 8-5: Welcome page of the New Scope Wizard
Figure 8-6: IP Address Range page of the New Scope Wizard
Figure 8-7: Add Exclusions And Delay page of the New Scope Wizard...
Figure 8-8: Lease Duration page of the New Scope Wizard
Figure 8-9: Configure DHCP Options page of the New Scope Wizard
Figure 8-10: Router (Default Gateway) page of the New Scope Wiza...
Figure 8-11: Domain Name And DNS Servers page of the New Scope W...
Figure 8-12: WINS Servers page of the New Scope Wizard
Figure 8-13: Activate Scope page of the New Scope Wizard
Figure 8-14: IPv6 Scope Name page of the New Scope Wizard
Figure 8-15: Scope Prefix page of the New Scope Wizard
Figure 8-16: General tab of the scope’s Properties dialog box fo...
Figure 8-17: General tab of the IPv4 Properties dialog box for t...
Figure 8-18: Advanced tab of the IPv4 Properties dialog box for ...
Figure 8-19: New Reservation dialog boxes for IPv4 and IPv6
Figure 8-20: DNS tab of the scope’s IPv4 Properties dialog box
Chapter 9
Figure 9-1: Group Policy configuration settings
Figure 9-2: Group Policy options
Figure 9-3: Viewing GPO links to an Active Directory OU
Figure 9-4: A GPO’s Security Settings dialog box
Figure 9-5: Setting the Enforced GPO option
Figure 9-6: Viewing Startup/Shutdown script policy settings
Figure 9-7: Setting scripting options
Figure 9-8: Viewing Group Policy User network configuration optio...
Chapter 11
Figure 11-1: Azure Dashboard
Figure 11-2: New Azure Dashboard
Figure 11-3: Naming New Azure Dashboard
Figure 11-4: Edit
Figure 11-5: Tile Gallery
Figure 11-6: Resource Group page
Figure 11-7: Copying a tile
Figure 11-8: Configure the tile size
Figure 11-9: Auto Refresh and Time settings
Figure 11-10: Filter icon
Figure 11-11: Configure the tile settings
Figure 11-12: Overriding the dashboard
Figure 11-13: Editing the tile settings
Figure 11-14: Remove from Dashboard settings
Figure 11-15: Browse all Dashboards
Figure 11-16: Deleting the dashboard
Figure 11-17: Azure Portal settings
Figure 11-18: Appearance + Startup Views screen
Figure 11-19: Startup Views screen
Figure 11-20: Language + Region pane
Figure 11-21: My Information pane
Figure 11-22: Signing Out + Notifications pane
Figure 11-23: Inactive Signing Out settings
Chapter 12
Figure 12-1: Example of a forest
Figure 12-2: Microsoft Entra Connect Express
Figure 12-3: Multifactor authentication methods
Figure 12-4: Enable Self-Service Password Reset
Figure 12-5:
Get-MsolDirSyncFeatures
screen
Guide
Cover
Table of Contents
Title Page
Copyright
Dedication
About the Author
About the Technical Editor
Acknowledgments
Introduction
Begin Reading
Index
End User License Agreement
Pages
iii
xxvii
xxviii
xxix
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
359
360
361
362
363
364
365
366
367
368
369
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
437
438
439
440
441
442
443
444
445
446
447
448
449
450
iv
v
vii
ix
xi
451
Running Windows Server 2025 on Microsoft Azure
William Panek
Introduction
This book is drawn from more than 30 years of IT experience. I have taken that experience and translated it into a Windows Server 2025 book that will help you install and configure Windows Server 2025 while avoiding all of the possible configuration pitfalls.
Many Microsoft books just explain the Windows operating system, but I go a step further by providing many in-depth, step-by-step procedures to support my explanations of how the operating system performs at its best.
Microsoft Windows Server 2025 is the newest version of Microsoft’s server operating system software. Microsoft has taken the best of its previous Windows Server versions and combined them into the latest creation, Windows Server 2025.
Windows Server 2025 eliminates many of the problems that plagued the previous versions of Windows Server, and it includes a much faster boot time and shutdown. It is also easier to install and configure, and it barely stops to ask the user any questions during installation. In this book, I will show you what features are installed during the automated installation and where you can make changes if you need to be more in charge of your operating system and its features.
This book takes you through all the ins and outs of Windows Server 2025, including installation, configuration, Group Policy objects, auditing, backups, the cloud, and so much more.
Windows Server 2025 has improved on Microsoft’s desktop environment, made networking easier, enhanced searching capability, and improved performance—and that’s only scratching the surface.
When all is said and done, this is a technical book for IT professionals who want to take Windows Server 2025 to the next step. With this book, you will not only learn Windows Server 2025 but also become a Windows Server 2025 expert.
Who Should Read This Book?
This book is intended for individuals who want to learn about Windows Server 2025 and connecting that network to the cloud.
This book will not only help anyone who is looking to learn the real ins and outs of the Windows Server 2025 operating system but also show you how to connect the Windows Server 2025 network to the cloud.
What’s Inside?
Here is a glance at what’s in each chapter:
Chapter 1
: Understanding Windows Server 2025
In the first chapter, I explain the requirements and steps required to install and configure Windows Server 2025.
Chapter 2
: Understanding Virtualization
This chapter introduces you to virtual networking, virtual hard disks, migration types, and integration services.
Chapter 3
: Installing Windows Server 2019
This chapter shows you how to implement and configure Windows Server 2025. You will learn about the different ways and different versions of Windows Server 2025.
Chapter 4
: Understanding IP
In this chapter, I show you how TCP/IP gets configured on a server and within a network. I also show you how to subnet an IPv4 network and how to work with IPv6.
Chapter 5
: Implementing DNS
This chapter shows you how to install Windows Server 2025 DNS in an enterprise environment.
Chapter 6
: Understanding Active Directory
In this chapter, I explain the benefits of using Active Directory. I explain how forests, trees, and domains work and also how to install Active Directory.
Chapter 7
: Administering Active Directory
This chapter shows you how to create accounts in Active Directory. I show you how to do bulk imports into Active Directory and also how to create and manage groups. I also show you how to create and manage service accounts.
Chapter 8
: Configuring DHCP
I take you through the advantages and benefits of using Windows Server 2025 DHCP.
Chapter 9
: Building Group Policies
This chapter shows you how to implement and configure Group Policy Objects (GPOs).
Chapter 10
: Understanding Cloud Concepts
I take you through the advantages and benefits of using and understand cloud concepts.
Chapter 11
: Configuring Azure
This chapter shows you the benefits of understanding and using Azure. I show you how to use the Azure portal and dashboard to configure Azure options.
Chapter 12
: Creating a Hybrid Network
In this chapter, I show you how to connect your on-site domain to Azure using Azure AD Connect. I also show you how to set up and manage this connection.
Recommended Home Lab Setup
To get the most out of this book, you will want to make sure you complete the exercises throughout the chapters. To complete the exercises, you will need one of two setups. First, you can set up a machine with Windows Server 2025 and complete the labs using a regular Windows Server 2025 machine.
The second way to set up Windows Server 2025 (the way I set up Server 2025) is by using virtualization. I set up Windows Server 2025 as a virtual hard disk (VHD), and I did all the labs this way. The advantages of using virtualization are that you can always just wipe out the system and start over without losing a real server. Plus, you can set up multiple virtual servers and create a full lab environment on one machine.
How to Contact Sybex/Author
Sybex strives to keep you supplied with the latest tools and information you need for your work. Please check the website at www.sybex.com/go/mcsawin2016, where I’ll post additional content and updates that supplement this book should the need arise.
You can contact me by going to my website at www.willpanek.com. You can also watch free videos on Microsoft networking at www.youtube.com/c/williampanek. If you would like to follow information about Windows Server 2025 from the Will Panek, please visit Twitter: @AuthorWillPanek.
How to Contact the Publisher
If you believe you have found a mistake in this book, please bring it to our attention. At John Wiley & Sons, we understand how important it is to provide our customers with accurate content, but even with our best efforts an error may occur.
To submit your possible errata, please email it to our Customer Service Team at [email protected] with the subject line “Possible Book Errata Submission.”
CHAPTER 1Understanding Windows Server 2025
So, you have decided to start down the track of Windows Server 2025. The first question we must ask ourselves is, “What’s the first step?” Well, the first step is to learn about what’s new about the Windows Server 2025 features and benefits that are available and how these features can help improve your organization’s network.
So that’s where I am going to start. I will talk about the different Windows Server 2025 versions and what version may be best for you. So, let’s dive right into the server by talking about some of the features and advantages of Windows Server 2025.
Features and Advantages of Windows Server 2025
Before deciding to install and configure Windows Server 2025, it’s first important to learn about some of the features and the advantages it offers. Windows Server 2025 is built off of the solid foundation of Windows Server, but Microsoft has stated that Windows Server 2025 is “a cloud-ready operating system.” This means that many of the features of Windows Server 2025 are built and evolve around cloud-based software and networking.
I will talk about all of these features in greater detail throughout this book. What follows are merely brief descriptions of some of the features of Windows Server 2025.
Built-In Security
Microsoft has always tried to make sure that its operating systems are as secure as possible, but with Windows Server 2025, Microsoft has included Windows Defender Advanced Threat Protection (ATP). This feature helps stop attackers on your system and allows a company to meet any compliance requirements.
Active Directory Certificate Services
Active Directory Certificate Services (AD CS)
provides a customizable set of services that allow you to issue and manage
public key infrastructure (PKI) certificates
. These certificates can be used in software security systems that employ public key technologies.
Active Directory Domain Services
Active Directory Domain Services (AD DS)
includes new features that make deploying domain controllers simpler and that let you implement them faster. AD DS also makes the domain controllers more flexible, both to audit and to authorize for access to files. Moreover, AD DS has been designed to make performing administrative tasks easier through consistent graphical and scripted management experiences.
Active Directory Federation Services
Active Directory Federation Services (AD FS)
provides Internet-based clients with a secure identity access solution that works on both Windows and non-Windows operating systems. AD FS gives users the ability to do a
single sign-on (SSO)
and access applications on other networks without needing a secondary password. Federation Services is one of the ways that you can connect your on-site domain with the cloud.
Active Directory Lightweight Directory Services
Active Directory Lightweight Directory Services (AD LDS)
is a
Lightweight Directory Access Protocol (LDAP)
directory service that provides flexible support for directory-enabled applications, without the dependencies and domain-related restrictions of AD DS.
Active Directory Rights Management Services
Active Directory Rights Management Services (AD RMS)
provides management and development tools that let you work with industry security technologies, including encryption, certificates, and authentication. Using these technologies allows organizations to create reliable information protection solutions.
Application Server
Application Server
provides an integrated environment for deploying and running custom, server-based business applications.
BitLocker
BitLocker
is a tool that allows you to encrypt the hard drives of your computer. By encrypting the hard drives, you can provide enhanced protection against data theft or unauthorized exposure of your computers or removable drives that are lost or stolen.
BranchCache
BranchCache
allows data from files and web servers on a wide area network (WAN) to be cached on computers at a local branch office. By using BranchCache, you can improve application response times while also reducing WAN traffic. Cached data can be either distributed across peer client computers (distributed cache mode) or centrally hosted on a server (hosted cache mode). BranchCache is included with Windows Server 2025 and Windows 11.
Containers
Windows Server 2025 has continued focusing on an isolated operating system environment called Docker. Docker allows applications to run in isolated environments called
containers
. Containers are a separate location where applications can operate without affecting other applications or other operating system resources. To understand Docker and containers, think of virtualization.
Virtual machines are operating systems that run in their own space on top of another operating system. Well, Docker and containers allow an application to run in its own space, and because of this, it doesn’t affect other application. There are two different types of containers to focus on:
Windows Server Containers
Windows Server 2025 allows for an isolated application to run by using a technology called
process and namespace isolation
. Windows Server 2025 containers allow applications to share the system’s kernel with their container and all other containers running on the same host.
Hyper-V Containers
Windows Server 2025 Hyper-V containers add another virtual layer by isolating applications in their own optimized virtual machine. Hyper-V containers work differently than Windows Server containers in that the Hyper-V containers do not share the system’s kernel with other Hyper-V containers.
Credential Guard
Credential Guard helps protect a system’s credentials and this helps avoid pass-the-hash attacks. Credential Guard offers better protection against advanced persistent threats by protecting credentials on the system from being stolen by a compromised administrator or malware.
Credential Guard can also be enabled on Remote Desktop Services servers and Virtual Desktop Infrastructure so that the credentials for users connecting to their sessions are protected.
DHCP
Dynamic Host Configuration Protocol (DHCP)
is an Internet standard that allows organizations to reduce the administrative overhead of configuring hosts on a TCP/IP-based network. Some of the features are DHCP failover, policy-based assignment, and the ability to use Windows PowerShell for DHCP Server.
DNS
Domain Name System (DNS)
services are used in TCP/IP networks. DNS will convert a computer name or fully qualified domain name (FQDN) to an IP address. DNS also has the ability to do a reverse lookup and convert an IP address to a computer name. DNS allows you to locate computers and services through user-friendly names.
Failover Clustering
Failover Clustering
gives an organization the ability to provide high availability and scalability to networked servers. Failover clusters can include file share storage for server applications, such as Hyper-V and Microsoft SQL Server, and those that run on physical servers or virtual machines.
File Server Resource Manager
File Server Resource Manager
is a set of tools that allows administrators to manage and control the amount and type of data stored on the organization’s servers. By using File Server Resource Manager, administrators have the ability to set up file management tasks, use quota management, get detailed reports, set up a file classification infrastructure, and configure file-screening management.
File and Storage Services
File and Storage Services
allows an administrator to set up and manage one or more file servers. These servers can provide a central location on your network where you can store files and then share those files with network users. If users require access to the same files and applications or if centralized backup and file management are important issues for your organization, administrators should set up network servers as a file server.
Group Policy
Group policies
are a set of rules and management configuration options that you can control through the Group Policy settings. These policy settings can be placed on users’ computers throughout the organization.
Hyper-V
Hyper-V
is one of the most changed features in Windows Server 2025. Hyper-V allows an organization to consolidate servers by creating and managing a virtualized computing environment. It does this by using virtualization technology that is built into Windows Server 2025.
Hyper-V allows you to run multiple operating systems simultaneously on one physical computer. Each virtual operating system runs in its own virtual machine environment.
Windows Server 2025 Hyper-V now allows an administrator to protect their corporate virtual machines using the feature called Shielded Virtual Machine. Shielded Virtual Machines are encrypted using BitLocker, and the VMs can run only on approved Hyper-V host systems.
Hyper-V also now includes containers, which add a new, unique additional layer of isolation for containerized applications.
IPAM
IP Address Management (IPAM)
is one of the features first introduced with Windows Server 2016, but Microsoft then did an update so that IPAM would work on Windows Server 2012. IPAM allows an administrator to customize and monitor the IP address infrastructure on a corporate network.
Kerberos Authentication
Windows Server 2025 uses the
Kerberos authentication
protocol and extensions for password-based and public key authentication. The Kerberos client is installed as a
security support provider (SSP)
, and it can be accessed through the
Security Support Provider Interface (SSPI)
.
Managed Service Accounts (MSAs)
Stand-alone
managed service accounts
, originally created for Windows Server 2008 R2 and Windows 7, are configured domain accounts that allow automatic password management and
service principal names
(SPNs) management, including the ability to delegate management to other administrators.
Nested Virtualization
Windows Server 2016 introduced a new Hyper-V feature called Nested Virtualization. Nested Virtualization allows administrators to create virtual machines within virtual machines. As an instructor, this was an awesome new feature. Now I can build a Windows Server 2025 Hyper-V Server with a training virtual machine. Then, when I get to the part when I need to teach Hyper-V, I can just do that right in the classroom virtual machine. There are numerous possibilities and we will talk more about them throughout this book.
Nano Server
Windows Server 2016 introduced a new type of server installation called Nano Server. Nano Server requires an administrator to remotely administer the server operating system. It was primarily designed and optimized for private clouds and datacenters. Nano Server is similar to Server Core, but the Nano Server operating system uses significantly smaller hard drive space, has no local logon capability, and only supports 64-bit applications and tools.
Networking
There are many networking technologies and features in Windows Server 2025, including BranchCache, Data Center Bridging (DCB), NIC Teaming, and many more.
Network Load Balancing
The
Network Load Balancing (NLB)
feature dispenses traffic across multiple servers by using the TCP/IP networking protocol. By combining two or more computers that are running applications in Windows Server 2025 into a single virtual cluster, NLB provides reliability and performance for mission-critical servers.
Network Policy and Access Services
Use the
Network Policy Server (NPS) and Access Services
server role to install and configure
Network Access Protection (NAP)
, secure wired and wireless access points, and RADIUS servers and proxies.
Print and Document Services
Print and Document Services
allows an administrator to centralize print server and network printer tasks. This role also allows you to receive scanned documents from network scanners and route the documents to a shared network resource, Windows SharePoint Services site, or email addresses. Print and Document Services also provides fax servers with the ability to send and receive faxes while also giving the administrator the ability to manage fax resources such as jobs, settings, reports, and fax devices on the fax server.
PowerShell Direct
Windows Server 2016 included a new simple way to manage Hyper-V virtual machines called PowerShell Direct. PowerShell Direct is a powerful set of parameters for the PSSession cmdlet called VMName. This will be discussed in greater detail in the Hyper-V chapters and it is included with Windows Server 2025.
Remote Desktop Services
Before Windows Server 2008, we used to refer to this as Terminal Services.
Remote Desktop Services
allows users to connect to virtual desktops, RemoteApp programs, and session-based desktops. Using Remote Desktop Services allows users to access remote connections from within a corporate network or from the Internet.
Security Auditing
Security auditing
gives an organization the ability to help maintain the security of an enterprise. By using security audits, you can verify authorized or unauthorized access to machines, resources, applications, and services. One of the best advantages of security audits is to verify regulatory compliance.
Smart Cards
Using
smart cards
(referred to as
two-factor authentication
) and their associated
personal identification numbers (PINs)
is a popular, reliable, and cost-effective way to provide authentication. When using smart cards, the user not only must have the physical card but also must know the PIN to be able to gain access to network resources. This is effective because even if the smart card is stolen, thieves can’t access the network unless they know the PIN.
Software-Defined Networking
Software-Defined Networking (SDN) allows an administrator to centrally configure and manage their physical and virtual network devices. These devices include items such as routers, switches, and gateways in your datacenter.
Telemetry
The
Telemetry
service allows the Windows Feedback Forwarder to send feedback to Microsoft automatically by deploying a Group Policy setting to one or more organizational units. Windows Feedback Forwarder is available on all editions of Windows Server 2025, including Server Core.
TLS/SSL (Schannel SSP)
Schannel
is a security support provider (SSP) that uses the
Secure Sockets Layer (SSL)
and
Transport Layer Security (TLS)
Internet standard authentication protocols together. The Security Support Provider Interface is an API used by Windows systems to allow security-related functionality, including authentication.
Volume Activation
Windows Server 2025
Volume Activation
will help your organization benefit from using this service to deploy and manage volume licenses for a medium to large number of computers.
Web Server (IIS)
The
Web Server (IIS)
role in Windows Server 2025 allows an administrator to set up a secure, easy-to-manage, modular, and extensible platform for reliably hosting websites, services, and applications.
Windows Deployment Services
Windows Deployment Services
allows an administrator to install Windows operating systems remotely. Administrators can use Windows Deployment Services to set up new computers by using a network-based installation.
Windows PowerShell Desired State Configuration
Windows Server 2016 created a new PowerShell management platform called Windows PowerShell Desired State Configuration (DSC). DSC enables the deploying and managing of configuration data for software services, and it also helps manage the environment in which these services run.
DSC allows administrators to use Windows PowerShell language extensions along with new Windows PowerShell cmdlets and resources. DSC allows you to declaratively specify how a corporation wants their software environment to be configured and maintained.
DSC allows you to automate tasks like enabling or disabling server roles and features, manage registry settings, manage files and directories, manage groups and users, deploy software, and run PowerShell scripts, to just name a few.
Windows Server Backup Feature
The
Windows Server Backup
feature gives an organization a way to back up and restore Windows servers. You can use Windows Server Backup to back up the entire server (all volumes), selected volumes, the system state, or specific files or folders.
Windows Server Update Services
Windows Server Update Services (WSUS)
allows administrators to deploy application and operating system updates. By deploying WSUS, administrators have the ability to manage updates that are released through Microsoft Update to computers in their network. This feature is integrated with the operating system as a server role on a Windows Server 2025 system.
Deciding Which Windows Server 2025 Version to Use
You may be wondering which version of Windows Server 2025 is best for your organization. After all, Microsoft offers the following four versions of Windows Server 2025:
Windows Server 2025 Datacenter
This version is designed for organizations that are looking to migrate to a highly virtualized, private cloud environment. Windows Server 2025 Datacenter has full Windows Server functionality with unlimited virtual instances.
Windows Server 2025 Standard
This version is designed for organizations with physical or minimally virtualized environments. Windows Server 2025 Standard has full Windows Server functionality with two virtual instances.
Windows Server 2025 Essentials
This version is ideal for small businesses that have as many as 25 users and 50 devices. Windows Server 2025 Essentials has a simpler interface and preconfigured connectivity to cloud-based services but no virtualization rights.
Windows Server 2025 Azure Edition
This version is optimized for integration with Microsoft Azure, enabling seamless hybrid cloud capabilities.
Table 1-1 shows you the locks and limitations of Windows Server 2025 Standard and Windows Server 2025 Datacenter. This chart was taken directly from Microsoft’s website.
Table 1-1: Windows Server 2025 Locks and Limits
LOCKS AND LIMITS
WINDOWS SERVER 2025 STANDARD
WINDOWS SERVER 2025 DATACENTER
Maximum number of users
Based on CALs
Based on CALs
Maximum SMB connections
16,777,216
16,777,216
Maximum RRAS connections
Unlimited
Unlimited
Maximum IAS connections
2,147,483,647
2,147,483,647
Maximum RDS connections
65,535
65,535
Maximum number of 64-bit sockets
64
64
Maximum number of cores
Unlimited
Unlimited
Maximum RAM
24 TB
24 TB
Can be used as virtualization guest
Yes, two virtual machines, plus one Hyper-V host per license
Yes, unlimited virtual machines, plus one Hyper-V host per license
Server can join a domain
Yes
Yes
Edge network protection/firewall
No
No
DirectAccess
Yes
Yes
DLNA codecs and web media streaming
Yes, if installed as Server with Desktop Experience
Yes, if installed as Server with Desktop
Table 1-2 shows you the difference between Windows Server 2025 Standard and Windows Server 2025 Datacenter. This chart was taken directly from Microsoft’s website.
Table 1-2: Windows Server 2025 Standard vs. Datacenter
WINDOWS SERVER ROLES AVAILABLE
WINDOWS SERVER 2025 STANDARD
WINDOWS SERVER 2025 DATACENTER
Active Directory Certificate Services
Yes
Yes
Active Directory Domain Services
Yes
Yes
Active Directory Federation Services
Yes
Yes
AD Lightweight Directory Services
Yes
Yes
AD Rights Management Services
Yes
Yes
Device Health Attestation
Yes
Yes
DHCP Server
Yes
Yes
DNS Server
Yes
Yes
Fax Server
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
File and Storage Services
Yes
Yes
Host Guardian Service
Yes
Yes
Hyper-V
Yes
Yes, including Shielded Virtual Machines
Network Controller
No
Yes
Network Policy and Access Services
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Print and Document Services
Yes
Yes
Remote Access
Yes
Yes
Remote Desktop Services
Yes
Yes
Volume Activation Services
Yes
Yes
Web Services (IIS)
Yes
Yes
Windows Deployment Services
Yes
*
Yes
*
Windows Server Essentials Experience
No
No
Windows Server Update Services
Yes
Yes
NOTE* WDS Transport Server is new to Server Core installations in Windows Server 2025 (also in the semi-annual channel starting with Windows Server, version 1803).
Table 1-3 shows you the features of Windows Server 2025 Standard and Windows Server 2025 Datacenter. This chart was taken directly from Microsoft’s website.
Table 1-3: Windows Server 2025 Standard vs. Datacenter
WINDOWS SERVER FEATURES INSTALLABLE WITH SERVER MANAGER (OR POWERSHELL)
WINDOWS SERVER 2025 STANDARD
WINDOWS SERVER 2025 DATACENTER
.NET Framework 3.5
Yes
Yes
.NET Framework 4.7
Yes
Yes
Background Intelligent Transfer Service (BITS)
Yes
Yes
BitLocker Drive Encryption
Yes
Yes
BitLocker Network Unlock
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
BranchCache
Yes
Yes
Client for NFS
Yes
Yes
Containers
Yes (unlimited Windows containers; up to two Hyper-V containers)
Yes (unlimited Windows and Hyper-V containers)
Data Center Bridging
Yes
Yes
Direct Play
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Enhanced Storage
Yes
Yes
Failover Clustering
Yes
Yes
Group Policy Management
Yes
Yes
Host Guardian Hyper-V Support
No
Yes
I/O Quality of Service
Yes
Yes
IIS Hostable Web Core
Yes
Yes
Internet Printing Client
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
IPAM Server
Yes
Yes
iSNS Server Service
Yes
Yes
LPR Port Monitor
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Management OData IIS Extension
Yes
Yes
Media Foundation
Yes
Yes
Message Queueing
Yes
Yes
Multipath I/O
Yes
Yes
MultiPoint Connector
Yes
Yes
Network Load Balancing
Yes
Yes
Peer Name Resolution Protocol
Yes
Yes
Quality Windows Audio Video Experience
Yes
Yes
RAS Connection Manager Administration Kit
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Remote Assistance
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Remote Differential Compression
Yes
Yes
RSAT
Yes
Yes
RPC over HTTP Proxy
Yes
Yes
Setup and Boot Event Collection
Yes
Yes
Simple TCP/IP Services
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
SMB 1.0/CIFS File Sharing Support
Installed
Installed
SMB Bandwidth Limit
Yes
Yes
SMTP Server
Yes
Yes
SNMP Service
Yes
Yes
Software Load Balancer
Yes
Yes
Storage Replica
Yes
Yes
Telnet Client
Yes
Yes
TFTP Client
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
VM Shielding Tools for Fabric Management
Yes
Yes
WebDAV Redirector
Yes
Yes
Windows Biometric Framework
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Windows Defender Features
Installed
Installed
Windows Identity Foundation 3.5
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Windows Internal Database
Yes
Yes
Windows PowerShell
Installed
Installed
Windows Process Activation Service
Yes
Yes
Windows Search Service
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Windows Server Backup
Yes
Yes
Windows Server Migration Tools
Yes
Yes
Windows Standards-Based Storage Management
Yes
Yes
Windows TIFF IFilter
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
WinRM IIS Extension
Yes
Yes
WINS Server
Yes
Yes
Wireless LAN Service
Yes
Yes
WoW64 Support
Installed
Installed
XPS Viewer
Yes, when installed as Server with Desktop Experience
Yes, when installed as Server with Desktop Experience
Features available generally
Windows Server 2025 Standard
Windows Server 2025 Datacenter
Best Practices Analyzer
Yes
Yes
Direct Access
Yes
Yes
Dynamic Memory (in virtualization)
Yes
Yes
Hot Add/Replace RAM
Yes
Yes
Microsoft Management Console
Yes
Yes
Minimal Server Interface
Yes
Yes
Network Load Balancing
Yes
Yes
Windows PowerShell
Yes
Yes
Server Core Installation Option
Yes
Yes
Server Manager
Yes
Yes
SMB Direct and SMB over RDMA
Yes
Yes
Software-Defined Networking
No
Yes
Storage Migration Service
Yes
Yes
Storage Replica
Yes, one partnership and one resource group with a single 2 TB volume
Yes, unlimited
Storage Spaces
Yes
Yes
Storage Spaces Direct
No
Yes
Volume Activation Services
Yes
Yes
VSS (Volume Shadow Copy Service) Integration
Yes
Yes
Windows Server Update Services
Yes
Yes
Windows System Resource Manager
Yes
Yes
Server License Logging
Yes
Yes
Inherited Activation
As guest, if hosted on Datacenter
Can be a host or a guest
Work Folders
Yes
Yes
Once you choose what roles are going on your server, you must then decide how you’re going to install Windows Server 2025. There are two ways to install Windows Server 2025. You can upgrade a Windows Server 2012 R2 (or above) machine to Windows Server 2025, or you can do a clean install of Windows Server 2025. If you are running any version of Server before 2012 R2, you must first upgrade to Windows Server 2012 R2 or 2016 before upgrading to Windows Server 2025. If you decide that you are going to upgrade, there are specific upgrade paths you must follow.
Your choice of Windows Server 2025 version is dictated by how your current network is designed. If you are building a network from scratch, then it’s pretty straightforward. Just choose the Windows Server 2025 version based on your server’s tasks. However, if you already have a version of Windows Server 2012 installed, you should follow the recommendations in Table 1-4, which briefly summarizes the supported upgrade paths to Windows Server 2025.
Table 1-4: Supported Windows Server 2025 Upgrade Path Recommendations
CURRENT SYSTEM
UPGRADED SYSTEM
Windows Server 2012 Standard
Windows Server 2016 Standard or Datacenter
Windows Server 2012 Datacenter
Windows Server 2016 Datacenter
Windows Server 2012 R2 Standard
Windows Server 2025 Standard or Datacenter
Windows Server 2012 R2 Datacenter
Windows Server 2025 Datacenter
Windows Server 2012 R2 Essentials
Windows Server 2025 Essentials
Hyper-V Server 2012 R2
Hyper-V Server 2025
Windows Storage Server 2016/2019/2022 Standard
Windows Storage Server 2025 Standard
Windows Storage Server 2016/2019/2022 Datacenter
Windows Storage Server 2025 Datacenter
Deciding on the Type of Installation
One of the final choices you must make before installing Windows Server 2025 is what type of installation you want. There are three ways to install Windows Server 2025.
Windows Server 2025 (Desktop Experience)
This is the version with which most administrators are familiar. This is the version that uses Microsoft Management Console (MMC) windows, and it is the version that allows the use of a mouse to navigate through the installation.
Windows Server 2025 Server Core
This is a bare-bones installation of Windows Server 2025. You can think of it this way: if Windows Server 2025 (Desktop Experience) is a top-of-the-line luxury car, then Windows Server 2025 Server Core is the stripped-down model with no air-conditioning, manual windows, and cloth seats. It might not be pretty to look at, but it gets the job done.
SERVER CORE
Here is an explanation of Server Core that I have used ever since it was introduced in Windows Server 2008.
I am a huge sports fan. I love watching sports on TV, and I enjoy going to games. If you have ever been to a hockey game, you know what a hockey goal looks like. Between hockey periods, the stadium workers often bring out a huge piece of Plexiglas onto the ice. There is a tiny square cut out of the bottom of the glass. The square is just a bit bigger than a hockey puck itself.
Now they pick some lucky fan out of the stands, give them a puck at center ice, and then ask them to shoot the puck into the net with the Plexiglas in front of it. If they get it through that tiny little square at the bottom of the Plexiglas, they win a car or some such great prize.
Well, Windows Server 2025 (Desktop Experience) is like regular hockey with a net, and Windows Server 2025 Server Core is the Plexiglas version.
Server Core supports a limited number of roles.
Active Directory Certificate Services (AD CS)
Active Directory Domain Services (AD DS)
Active Directory Federation Services (AD FS)
Active Directory Lightweight Directory Services (AD LDS)
Active Directory Rights Management Services (AD RMS)
Application Server
DHCP Server
DNS Server
Fax Server
File and Storage Services
BITS Server
BranchCache
Hyper-V
Network Policy and Access Services
Print and Document Services
Remote Access
Remote Desktop Services
Volume Activation Services
Web Server (IIS)
Windows Deployment Services
Windows Server Update Services
.NET Framework 3.5 Features
.NET Framework 4.5 Features
Streaming Media Services
Failover Clustering
iSCSI
Network Load Balancing
MPIO
qWave
Telnet Server/Client
Windows Server Migration Tools
Windows PowerShell
Server Core does not have the normal Windows interface or GUI. Almost everything has to be configured via the command line or, in some cases, using the Remote Server Administration Tools from a full version of Windows Server 2025. While this might scare off some administrators, it has the following benefits:
Reduced Management
Because Server Core has a minimum number of applications installed, it reduces management effort.
Minimal Maintenance
Only basic systems can be installed on Server Core, so it reduces the upkeep you would need to perform in a normal server installation.
Smaller Footprint
Server Core requires only 1 GB of disk space to install and 2 GB of free space for operations.
Tighter Security
With only a few applications running on a server, it is less vulnerable to attacks.
Server Core App Compatibility Feature on Demand
Windows Server 2025 now includes Server Core App Compatibility feature on demand (FOD). This feature drastically improves the application compatibility of the Windows Server Core installation. It does this by containing a subset of components from Windows Server 2025 with the Desktop Experience, but without adding the Windows Server Desktop Experience graphical environment. The advantage to this helps increase the functionality and compatibility of Windows Server 2025 Server Core while keeping it as lean as possible.
The prerequisites for Server Core are basic. It requires the Windows Server 2025 installation media, a product key, and the hardware on which to install it.
After you install the base operating system, you use PowerShell or the remote administrative tools to configure the network settings, add the machine to the domain, create and format disks, and install roles and features. It takes only a few minutes to install Server Core, depending on the hardware.
BETTER SECURITY
When I started in this industry more than 30 years ago, I was a programmer. I used to program computer hospital systems. When I switched to the networking world, I continued to work under contract with hospitals and with doctors’ offices.
One problem I ran into is that many doctors are affiliated with hospitals, but they don’t actually have offices within the hospital. Generally, they have offices either near the hospital or, in some cases, right across the street.
Here is the issue: Do we put servers in the doctors’ offices, or do we make the doctor log into the hospital network through a remote connection? Doctors’ offices normally don’t have computer rooms, and we don’t want to place a domain controller or server on someone’s desk. It’s just unsafe!
This is where Windows Server 2025 Server Core can come into play. Since it is a slimmed-down version of Windows and there is no GUI, it makes it harder for anyone in the office to hack into the system. Also, Microsoft introduced a new domain controller in Windows Server 2008 called a read-only domain controller (RODC). As its name suggests, it is a read-only version of a domain controller (explained in detail later in this book).
With Server Core and an RODC, you can feel safer placing a server on someone’s desk or in any office. Server Core systems allow you to place servers in areas that you would never have placed them before. This can be a great advantage to businesses that have small, remote locations without full server rooms.
Windows Server 2025 Nano Server
Windows Server 2016 introduced a new type of server installation called Nano Server. Nano Server allows an administrator to remotely administer the server operating system. It was primarily designed and optimized for private clouds and datacenters. Nano Server is very similar to Server Core, but the Nano Server operating system uses significantly smaller hard drive space, has no local logon capability, and only supports 64-bit applications and tools.
Removed Features
As with all new versions of Windows Servers, Microsoft always decides to remove or retire features or services that are no longer needed. The following are some of the Features and Services that have been removed:
Computer Browser
The Computer Browser driver and service are deprecated due to being dated and insecure. Microsoft first disabled the Computer Browser driver by default in Windows 10.
NTLM
All versions of NTLM (including LANMAN, NTLMv1, and NTLMv2) are no longer an active feature in development and they have been deprecated. NTLM will continue to function in Windows Server 2025, but using NTLM calls should be replaced by calls to Negotiate.
Remote Mailslots
Remote Mailslots are deprecated. They are an unreliable and insecure IPC method.
TLS 1.0 and TLS 1.1
These versions of TLS are disabled by default due to security concerns.
Windows Management Instrumentation Command Line (WMIC)
WMIC is disabled by default on Windows Server 2025 installations and will be completely removed in a future release. PowerShell for WMI is recommended as a replacement.
VBScript
VBScript is deprecated and will be available as a feature on-demand before it is removal from the operating system.
WebDAV Redirector service
This service is deprecated and is not installed by default on Windows Server 2025.
IIS 6 Management Console
The IIS 6 Management console has been removed. Microsoft stopped development of the console in Windows Server 2019.
WordPad
Windows Server 2025 has removed WordPad. Microsoft recommends that you use either Microsoft Word for rich text documents and Notepad for plain text documents.
SMTP Server
The SMTP Server and supporting tools have been removed from Windows Server 2025.
Summary
In this chapter, I introduced you to Windows Server 2025. I explained the advantages of Windows Server 2025. Choosing the right server operating system depends on the roles and features that you need for your organizational needs. The proper operating system depends on the job functions and requirements that are needed to set your network up properly.
When choosing how to set up Windows Server 2025, there are different ways that you can set up how the system functions. You can choose between using the GUI version of Windows Server 2025 or a non-GUI version (Server Core).
I also talked about what features and roles have been removed or are no longer being developed is an important task. Administrators need to understand what roles or features that they need for their organization. Administrators do not want to purchase an operating system if the role or feature that you need is being removed.
CHAPTER 2Understanding Hyper-V
One of the greatest advancements in servers over the last decade has been the ability to have one physical server but run multiple servers on top of that one physical box. This is known as virtualization.
In this chapter, I will talk about virtualization and how it works. Since this is a Microsoft Server 2025 book, we will focus most of our attention on Microsoft’s version of virtualization called Hyper-V.
Hyper-V is a server role in Windows Server 2025 that allows you to virtualize your environment and therefore run multiple virtual operating system instances simultaneously on a physical server. This not only helps you to improve server utilization but also helps you to create a more cost-effective and dynamic system.
Hyper-V allows an organization of any size to act and compete with other organizations of any size. A small company can buy a single server and then virtualize that server into multiple servers. Therefore, Hyper-V gives a small company the ability to run multiple servers on a single box and compete with a company of any size.
For the large organizations, an administrator can consolidate multiple servers onto Hyper-V servers, thus saving an organization time and money by using fewer physical boxes but still having all the servers needed to run the business.
In this chapter, you will also get a solid understanding of what is important in virtualization and in what areas of your work life you can use it.
Introduction to Virtualization
Virtualization
