management
111 TopicsExtending AGPM support for Windows Server 2025
Does Microsoft have any plans for extending AGPM to Windows Server 2025 or creating a new GPO management and approval system? GPOs are still the best solution for Windows Server, and now even Linux distributions are adding GPO support.120Views1like1CommentProblems to join Debian/Ubuntu machines to a domain
Is not posible to join Debian/Ubuntu machines to a domain based on Windows Server 2025 (using realm at least) this is the error: ! Couldn't set password for computer account: XXXX$: Message stream modified adcli: joining domain xxxx.local failed: Couldn't set password for computer account: XXXX$: Message stream modified ! Failed to join the domain realm: Couldn't join realm: Failed to join the domain Domain is discoverable vía realm: root@lnms01:/home/administrator# realm discover xxxx.local xxxx.local type: kerberos realm-name: XXXX.LOCAL domain-name: xxxx.local configured: no server-software: active-directory client-software: sssd required-package: sssd-tools required-package: sssd required-package: libnss-sss Tested on WS2025 build 26227 and Linux 6.1.0-21-amd64 x86_64, Linux 6.6.31+rpt-rpi-v8 aarch64 and Linux 6.8.0-31-generic x86_64. Those 3 versions of Linux joined to another doman based con Windows Server 2022 without issues.2.8KViews0likes6CommentsWAC - Server not addable from AD
Hi, i installed actual WAC public preview with my domain account (local admin) on a Server 2025 (26257). When i start WAC and i want to add window Server i can´t search Active Directory, because it says: "We can’t search Active Directory because the Windows Admin Center computer isn’t joined to an Active Directory domain. It’s also possible that your account doesn’t have permission to read from Active Directory." Can you help, because server is domain joined. SPN is also set on AD Computer Account with http/admincenter.domain.internal.616Views2likes2Comments[Server Buld 20303.1] IIS 6 Manager crashes trying to edit SMTP Virtual Server Properties
I have installed 20303.1 and added the SMTP Service and add the management tools. Install-WindowsFeature SMTP-Server -IncludeManagementTools After the installation, I bring up the IIS 6 Management Console. If I right-click the [SMTP Virtual Server] node and select properties, I get an error like this: Clues?Solved42KViews2likes29Commentsb26085 - Windows Server 2025 Domain Controller fail to deploy via DSC
Hi there, I am trying to deploy mslab using Windows Server 2025 preview VM using Windows Server 2025 OS as a Hyper-V platform. I believe Jaromir as maintainer of mslab opened an SR. In result he updated the code, plus PS DSC Modules. edit: this issue is unrelated to the running SR. Still the deployment of the domain controller template will fail during first boot. This is not specific to b26085, this one is troubling for since WS2025 insider, so it never worked with this branch. Repro steps Install Windows Server 2025 b26085.1 on a physical machine and enable Hyper-V Download and extract mslab https://github.com/microsoft/MSLab/releases/tag/v24.04.1 run the mslab scripts in order 1_Prereq 2_CreateParentDisks > select Windows Server 2025 ISO b26085 (WS 2022 ISO will work) > skip the MSU dialogue Domain Controller VM gets created from parent disk image First boot will fail with following error Creating DC VM Applying Unattend and copying Powershell DSC Modules PSPath : Microsoft.PowerShell.Core\FileSystem::J:\mslab_v24.04.1\Temp\MountDir PSParentPath : Microsoft.PowerShell.Core\FileSystem::J:\mslab_v24.04.1\Temp PSChildName : MountDir PSDrive : J PSProvider : Microsoft.PowerShell.Core\FileSystem PSIsContainer : True Name : MountDir FullName : J:\mslab_v24.04.1\Temp\MountDir Parent : Temp Exists : True Root : J:\ Extension : CreationTime : 21.04.2024 13:20:16 CreationTimeUtc : 21.04.2024 11:20:16 LastAccessTime : 21.04.2024 13:20:16 LastAccessTimeUtc : 21.04.2024 11:20:16 LastWriteTime : 21.04.2024 13:20:16 LastWriteTimeUtc : 21.04.2024 11:20:16 Attributes : Directory Mode : d----- BaseName : MountDir Target : {} LinkType : Path : J:\mslab_v24.04.1\Temp\MountDir Online : False Path : J:\mslab_v24.04.1\Temp\MountDir Online : False PSPath : Microsoft.PowerShell.Core\FileSystem::J:\mslab_v24.04.1\Temp\MountDir\Windows\Panther PSParentPath : Microsoft.PowerShell.Core\FileSystem::J:\mslab_v24.04.1\Temp\MountDir\Windows PSChildName : Panther PSDrive : J PSProvider : Microsoft.PowerShell.Core\FileSystem PSIsContainer : True Name : Panther FullName : J:\mslab_v24.04.1\Temp\MountDir\Windows\Panther Parent : Windows Exists : True Root : J:\ Extension : CreationTime : 21.04.2024 13:20:22 CreationTimeUtc : 21.04.2024 11:20:22 LastAccessTime : 21.04.2024 13:20:22 LastAccessTimeUtc : 21.04.2024 11:20:22 LastWriteTime : 21.04.2024 13:20:22 LastWriteTimeUtc : 21.04.2024 11:20:22 Attributes : Directory Mode : d----- BaseName : Panther Target : {J:\Windows\Panther} LinkType : Creating DSC Configs for DC LastWriteTime : 21.04.2024 13:20:23 Length : 1206 Name : DC.meta.mof LastWriteTime : 21.04.2024 13:20:25 Length : 32600 Name : DC.mof Copying DSC configurations (pending.mof and metaconfig.mof) Applying changes to VHD LogPath : C:\WINDOWS\Logs\DISM\dism.log ScratchDirectory : LogLevel : WarningsInfo Starting DC Configuring DC using DSC takes a while. Initial configuration in progress. Sleeping 250 seconds Question: What could be reasons it keeps failing? We have no clue / pointers and imho it would be expected and necessary that mslab works with WS2025, despite being preview, too. Who at Microsoft could afford time to repro and looking into that? As mslab is also used by Microsoft, I hope anyone could spare time to investigate (with Jaromir and/or me). I personally can spare time for that investigation. Thank you very much in advance!Solved2.8KViews2likes15CommentsAAD join Server 2025
Hi, Wondering if Server 2025 can be AAD joined. this would help some businesses that have their laptops joined as well as would also like to have the option to join their Server for their line of business apps etc. Seems really strange you can have win11 AAD joined but not server 2025. Or am i just missing something here. Having to use Azure Arc comes with extra headaches and costs.Solved6KViews2likes12CommentsDocumentation on "Microsoft.OSConfig" PowerShell Module
Hi Server Insiders, is there any documentation available on the PowerShell Module "Microsoft.OSConfig"? OsConfiguration Module | Microsoft Learn does not help that much and also "Get-Help" is not that helpfull on most of the Commands. 🙂 Thanks! Best regards, Jan479Views2likes2Commentsb26244 - OS evaluation expiration links to Windows 10 article
I am not sure if the feedback hub item will be processed correctly due to the minimal information and category. If the OS evaluation period (eval or insider) expires "more information" will link to a client OS Windows 10 specific guidance. FBH item: https://aka.ms/AAsgpk6235Views0likes0CommentsWAC Certificate Issue - PKI Signed Cert cannot be used
WAC Certificate Issue when i change in appsettings.json the line "Subject": "WindowsAdminCenterSelfSigned" to "Subject": "CN=admincenter.domain.int" and change the netsh config: netsh http delete sslcert ipport=0.0.0.0:443 netsh http add sslcert ipport=0.0.0.0:443 certhash=81893C1D789EA40EC8FC04FD08DB72DD44F2FBB1 appid="{afebb9ad-9b97-4a91-9ab5-daf4d59122f6}" restart-service WindowsAdminCenter the WAC is not Accessible, because the WAC Service Cannot be started! Why you did not use the Thumbprint in the appsettings.json file? because same Subject like servername.domain.int can be used multiple Times in a cert. On the Other hand Thumbprint is fixed size length, Subject can be very long ... like "E=email address removed for privacy reasons, CN=admincenter.domain.internal, OU=Domain, O=company, L=munich, C=DE"313Views1like1CommentCannot update from Build 26244 to 26252
Currently running Build 26244. Almost everything works except Settings -> Windows Update interface is bugged and unusable. It's been unusable since update to this build. Looking around i've found that there is also a cli interface called "SConfig" and i can install updates from there. I'm currently receiving updates for Windows Defender but didn't receive Build 26252. How do i install Build 26252? Should i burn iso to usb key and install from scratch?237Views0likes0Comments