Three months after the operating system was released, Microsoft published the associated security baseline. Several of the settings now recommended concern new features such as Delegated Managed Service Accounts or functions to improve SMB security. There are several changes for Defender Antivirus. The Security Baseline brings together a series of…
Category: Server 2025
OSConfig: Configure security settings in Windows Server 2025 and correct deviations
OSConfig is a new feature in Windows Server 2025 that allows you to configure the security settings recommended by Microsoft. They largely correspond to those of the Security Baseline. Management is done via PowerShell, Windows Admin Center or Azure Policy. OSConfig can also automatically correct deviations. Microsoft traditionally provides its…
Docker containers in Server 2025: Windows vs. Hyper-V vs. WSL2
Windows Server 2025 offers several options for running Docker containers with Linux or Windows. Windows containers can be isolated in two ways, while Linux containers can optionally be run on WSL2. Server2025 also offers better backward compatibility than its predecessors. Conceptually, containers are a lightweight alternative to virtual machines because…
Exchange 2019 CU15: Last update before Exchange SE, feature flighting, support for Server 2025 DCs
Microsoft announced CU15 or 2025 H1, the last cumulative update for Exchange Server 2019. In addition to bug fixes, it brings a number of new features, including the Fligthing feature for the gradual introduction of new functions. It also runs in environments with DCs under Windows Server 2025 and brings…
Microsoft brings new group policy for optional updates in Windows 11
Now that Windows 11 only receives one feature update per year, Microsoft is delivering many new features via optional non-security updates or CUs in the second week of each month. A new group policy causes the automatic installation of optional updates, either with or without new features. By default, new…
Active Directory
LAPS: Automatically generate admin accounts, use passphrases, enable rollback detection
Since Windows 11 23H2, the Local Administrator Password Solution (LAPS) has been integrated into the OS and 24H2 brought some interesting innovations. These include the automatic management of local admin accounts, the use of passphrases and the generation of a new password when the computer is reset. LAPS is designed…