Recent Discussions
Server 2025 Core ADDS DC, Network Profile Showing as "Public" and not as "DomainAuthenticated"
OS: Windows Server 20225 Standard Core (no GUI), build 26085.1 Role: ADDS, DNS ForestMode: Windows2025Forest DomainMode: Windows2025Domain Platform: Hyper-V guest When standing up a clean Windows Server 2025 using server core and configuring it as a domain controller, the network category (profile) always shows as "public." A clean load of Windows Server 2022 with server core as a domain controller has the same behavior. However, in Server 2022, the fix is to add DNS as a required service to the nlasvc (Network Location Awareness) service. Once that is done, the network category reflects "DomainAuthenticed" and persists between reboots. In Server 2025, the nlasvc service does not have the same requiredservices as Windows Server 2022, and it does not start automatically. Even after configuring the nlasvc service the same way it is in Server 2022 and adding DNS as a required service, the network category still reflects "public." The only way to get the network category to properly reflect the "DomainAuthenticated" status is to disable and reenable the network adapter after each reboot.
Configuring session timeout for Remote Desktop Services web client (HTML5)
Is anyone aware of a way to customize the session timeout in the remote desktop services web client (HTML5)? An issue our users have been experiencing is if they are in a long running remote desktop session and they experience a disconnect, clicking the "reconnect" button on the pop up they receive doesn't do anything. They also can't navigate back to the main menu to select their session collection to reconnect. The fix is they need to click refresh and log in again, it appears that the cause is that the users' login session to the remote desktop web client has timed out. Ideally, we'd like to customize the session timeout to be a long value so they could get through a whole work shift without their existing authentication session being timed out.
VPN on Windows Server 2016 not working
I followed the stand procedure to set up VPN on Windows Server 2016. Let me jump to where I am now. The event viewer has the following two entries when a client connects to the VPN server: A connection between the VPN server and the VPN client 72.74.70.135 has been established, but the VPN connection cannot be completed. The most common cause for this is that a firewall or router between the VPN server and the VPN client is not configured to allow Generic Routing Encapsulation (GRE) packets (protocol 47). CoId={23FC7BC4-0885-5E63-715B-8EFAD37B9E15}: The following error occurred in the Point to Point Protocol module on port: VPN2-127, UserName: <Unauthenticated User>. Negotiation timed out I am not familiar with GRE, so add rules for both inbound and outbound GRE on both the Windows Server 2016 and the client machine (Windows 11 Pro). Could anyone offer a direction to guide me in diagnosing this?Add Passkey support to Active Directory
Everyone, Please go to the feedback hub and upvote my suggestion to add passkey support to Active Directory Domain Services: https://aka.ms/AAw8z54 The reason I am recommending this is because there needs to be a standard way to use passkeys in an AD environment.
Reduce Window Server CAL licenses
Hi, I am building a new production environtment, where client uses Microsoft Dynamics Navision 2016 and I have few question regarding the user/device CALs. I have installed new VM where Windows Server 2022 Datacenter is installed and I installed SQL Server 2019 Standard and applied per core (2x2 vCore) license to it. I know that for SQL Server no CALs are required, since it is Per Core licensed. I installed another VM where Windows Server 2022 Standard is installed and where NAV2016 server is installed. Windows Server is lincesed, but I am not sure, if I need to purchase also user and device CALs? I believe I need user and device CALs, too, and therefore I'd like to reduce the cost of CALs by: 1. creating an AD Security Group X and add all the users who are connecting to the NAV service tier as members into that AD Security Group (20x employees and 5x service accounts for 3rd party apps). Can I purchase exactly 1 user CAL license, or do I need to purchase 25 user CALs? 2. creating an AD Security Group Z and add all the devices that are connecting to the NAV service tier via WS calls (3x barcode scanners). Can I purchase exactly 1 device CAL license, or do I need to purchase 3 user CALs? Thanks Damjan
How to disable the Cocreator feature in the Microsoft Paint app
How can I disable the Cocreator feature in the Microsoft Paint app using the Active Directory Group Policy Management Console (GPMC)? If it is not possible to disable only the feature, please tell me how to disable the Microsoft Paint app itsel.Certificate Authority Revocation issues: CRL db lost in migration
We currently have a CA which was migrated from a retired server no longer available - over 6 months now but they didn't complete the migration, and the revocation database is missing. We're now experiencing issues with certs issued but the former server that it cannot issue renew certs. What is the best approach to this? I can create another CA server but what about the root certificate of the current one? How do you point renew requests to the new server if there is no revocation DB for the already issued certs? What about the current certs issued by the current server if I migrate the current one to a new CA? I do have copies of the system32\certsrv folder and CA backup from the retired server, but this backup was used to migrate the current one which resulted in its current state. Can the revocation db just be imported? Any help would be appreciated! Thanks.Kerberos KDC Errors
Hello, I have been testing Windows Server 2025 with AD DC role and sometimes in event log I can see error. The Security Account Manager failed a KDC request in an unexpected way. The error is in the data field. The account name was and lookup type 0x108. Just a note - I did not remove the account name; it is not just there, not even once. I'm unable to connect it to some "action", so it looks a bit random. In data field there is only C000000D (in words) which is every time the same. Event ID is 7. Is this okay or anything to worry about?Mandatory AccessKey parameter for Import-WACConnection Powershell cmdlet in 2410
Hello, I have recently updated to Admin Center 2410, needed to do a fresh install because I ran into some Ajax error 500 problems when I dried to updrade the existing installation. Now I had a script running one a week which fetched all AD computers and Clusters and imported them as shared connection. I have already figured that I need to use a different path to import the Microsoft.WindowsAdminCenter.ConnectionTools module, and that the syntax for Import-Connection is now Import-WACConnection. However, when trying to connect, the commandlet now has a mandatory AccessKey parameter. The help suggests: "-AccessKey <String> The access key to the endpoint for form login. The access key can be created from Advanced menu of Settings on Windows Admin Center UI." However, I cannot find that option in the UI, there is only "Advanced" in the Development section of the UI, and there is no option for generating an access key. P.S. I have installed WAC to use Kerberos integrated Windows Authentication. In the past, the Import-Connection CMDlet was also just using the credentials of the currently logged-on user. Thank you for your help, MarcDamaged/scratched Windows Server 2022 activation key while scratching it off.
Hi All I am posting on behalf of my end-user, who has managed to damage part of the sticker while scratching it off, leaving him unable to activate his Windows Server 2022 STD installation (i have blacked out part of the SN above for privacy reasons) Please advice on how to proceed to either retrieve the key itself, or to get a new key from MS After Sales Support. We are able to provide proof of purchase (invoice) and the picture above as well.Reports on failed logins
Hello, In a Windows domain network, I want to know which user has made unsuccessful attempts to log into the system. I checked the Event Viewer of the server where Active Directory is installed. I checked the Event Viewer of the server where Active Directory is installed and filtered the logs based on Event ID 4625, but found nothing. I entered my password incorrectly several times for testing, but no log was recorded on the server. Why? Thank you.Linux clients for RDP - Features and limitation
I am testing Remote Desktop Services in a lab environment based on Windows Server 2019 servers and Windows 10 clients. I try to understand what can I do from a Linux client, let's say an Ubuntu box. 1 - Can I access an RDP desktop? I say yes, using remmina; is there any better solution? 2 - Can I use an .rdp file to open a RemoteApp? Maybe via xfreerdp? 3 - Can I connect to a Virtual Desktop, either pooled or private? 4 - Can I install self signed certificates created by a RD or VH server? I am attempting to collect information from the web: is there any comprehensive document explaining features and limitations of a Linux client in a RDS implementation? RegardsRDS Cals from Insider server not compatible with GA 2025.
My RDS license server is running Canary Server 2025 26404.5000 and my RDS server is running GA 26100.3775. The GA machine is not able to check out RDS per user CALs from that license server. RD Licensing Diagnoser reports a version incompatibility. Even though the Canary License server is using valid GA RDS cals.Announcing Windows Server vNext Preview Build 26404
Announcing Windows Server vNext Preview Build 26404 Hello Windows Server Insiders! Today we are pleased to release a new build of the next Windows Server Long-Term Servicing Channel (LTSC) Preview that contains both the Desktop Experience and Server Core installation options for Datacenter and Standard editions, Annual Channel for Container Host and Azure Edition (for VM evaluation only). Branding remains, Windows Server 2025, in this preview - when reporting issues please refer to Windows Server vNext preview. If you signed up for Server Flighting, you should receive this new build automatically. What's New Windows Admin Center (WAC) Windows Server preview customers can download and install Windows Admin Center right from the Windows Server Desktop using the in-OS app that takes care of downloading and guides you through the installation process. Note: You must be running a desktop version of Windows Server Datacenter or Standard preview to access this feature. Windows Server Flighting is here!! If you signed up for Server Flighting, you should receive this new build automatically later today. For more information, see Welcome to Windows Insider flighting on Windows Server - Microsoft Community Hub. Feedback Hub app is now available for Server Desktop users! The app should automatically update with the latest version, but if it does not, simply Check for updates in the app’s settings tab. Known Issues Download Windows Server Insider Preview (microsoft.com) Flighting: The label for this flight may incorrectly reference Windows 11. However, when selected, the package installed is the Windows Server update. Please ignore the label and proceed with installing your flight. This issue will be addressed in a future release. Available Downloads Downloads to certain countries may not be available. See Microsoft suspends new sales in Russia - Microsoft On the Issues. Windows Server Long-Term Servicing Channel Preview in ISO format in 18 languages, and in VHDX format in English only. Windows Server Datacenter Azure Edition Preview in ISO and VHDX format, English only. Microsoft Server Languages and Optional Features Preview Keys: Keys are valid for preview builds only. Server Standard: MFY9F-XBN2F-TYFMP-CCV49-RMYVH Datacenter: 2KNJJ-33Y9H-2GXGX-KMQWH-G6H67 Azure Edition does not accept a key Symbols: Available on the public symbol server – see Using the Microsoft Symbol Server. Expiration: This Windows Server Preview will expire September 15, 2025. How to Download Registered Insiders may navigate directly to the Windows Server Insider Preview download page. If you have not yet registered as an Insider, see GETTING STARTED WITH SERVER on the Windows Insiders for Business portal. We value your feedback! The most important part of the release cycle is to hear what's working and what needs to be improved, so your feedback is extremely valued. Please use the new Feedback Hub app for Windows Server if you are running a Desktop version of Server. If you are using a Core edition, or if you are unable to use the Feedback Hub app, you can use your registered Windows 10 or Windows 11 Insider device and use the Feedback Hub application. In the app, choose the Windows Server category and then the appropriate subcategory for your feedback. In the title of the Feedback, please indicate the build number you are providing feedback on as shown below to ensure that your issue is attributed to the right version: [Server #####] Title of my feedback See Give Feedback on Windows Server via Feedback Hub for specifics. The Windows Server Insiders space on the Microsoft Tech Communities supports preview builds of the next version of Windows Server. Use the forum to collaborate, share and learn from experts. For versions that have been released to general availability in market, try the Windows Server for IT Pro forum or contact Support for Business. Diagnostic and Usage Information Microsoft collects this information over the internet to help keep Windows secure and up to date, troubleshoot problems, and make product improvements. Microsoft server operating systems can be configured to turn diagnostic data off, send Required diagnostic data, or send Optional diagnostic data. During previews, Microsoft asks that you change the default setting to Optional to provide the best automatic feedback and help us improve the final product. Administrators can change the level of information collection through Settings. For details, see http://aka.ms/winserverdata. Also see the Microsoft Privacy Statement. Terms of Use This is pre-release software - it is provided for use "as-is" and is not supported in production environments. Users are responsible for installing any updates that may be made available from Windows Update. All pre-release software made available to you via the Windows Server Insider program is governed by the Insider Terms of Use.Licensing issues
Is Microsoft open to receiving the information regarding licensing violations related to Windows Server or SQL Server? I mean that some US registered business is using unlicensed software above for commercial purposes. Is there an official channel or process for reporting such violations?
Recent Blogs
- Overview Today, we’re excited to announce a new era of Windows Server containers with more powerful Windows Server 2025 Nano Server containers. Windows Server containers have long been a go-to solu...May 13, 2025
- 3 MIN READBy adopting Zero Trust DNS (ZTDNS), organizations can strengthen their Zero Trust deployments, ensuring that Windows 11 devices only communicate with trusted network destinations. This blog post ...Apr 24, 2025
