-->
Applies to: Windows Server 2019
This topic describes some of the new features in Windows Server 2019. Windows Server 2019 is built on the strong foundation of Windows Server 2016 and brings numerous innovations on four key themes: Hybrid Cloud, Security, Application Platform, and Hyper-Converged Infrastructure (HCI).
Whit this announcement Microsoft also released the first preview build (17623) of Windows Server 2019 LTSC to the public, which contains both the Desktop Experience as well as the Server Core edition in all 18-server languages. To get started with the download of this Preview build, you need to be a member of Windows Server Insider program. Dec 3, 2018 - Windows Server 2019 brings key improvements to infrastructure roles. That the Long Term Support Channel (LTSC) version of Windows Server is. To install Windows Server 2019, rather than using the ISO, the naming of.
To find out what's new in Windows Server Semi-Annual Channel releases, see What's New in Windows Server.
General
Windows Admin Center
Windows Admin Center is a locally deployed, browser-based app for managing servers, clusters, hyper-converged infrastructure, and Windows 10 PCs. It comes at no additional cost beyond Windows and is ready to use in production.
You can install Windows Admin Center on Windows Server 2019 as well as Windows 10 and earlier versions of Windows and Windows Server, and use it to manage servers and clusters running Windows Server 2008 R2 and later.
For more info, see Windows Admin Center.
Desktop experience
Because Windows Server 2019 is a Long-Term Servicing Channel (LTSC) release, it includes the Desktop Experience. (Semi-Annual Channel (SAC) releases don't include the Desktop Experience by design; they are strictly Server Core and Nano Server container image releases.)As with Windows Server 2016, during setup of the operating system you can choose between Server Core installations or Server with Desktop Experience installations.
System Insights
System Insights is a new feature available in Windows Server 2019 that brings local predictive analytics capabilities natively to Windows Server. These predictive capabilities, each backed by a machine-learning model, locally analyze Windows Server system data, such as performance counters and events, providing insight into the functioning of your servers and helping you reduce the operational expenses associated with reactively managing issues in your Windows Server deployments.
Hybrid Cloud
Server Core app compatibility feature on demand
The Server Core App Compatibility feature on demand (FOD) significantly improves the app compatibility of the Windows Server Core installation option by including a subset of binaries and components from Windows Server with the Desktop Experience, without adding the Windows Server Desktop Experience graphical environment itself. This is done to increase the functionality and compatibility of Server Core while keeping it as lean as possible.
This optional feature on demand is available on a separate ISO and can be added to Windows Server Core installations and images only, using DISM.
Security
Windows Defender Advanced Threat Protection (ATP)
ATP's deep platform sensors and response actions expose memory and kernel level attacks and respond by suppressing malicious files and terminating malicious processes.
For more information about Windows Defender ATP, see Overview of WindowsDefender ATPcapabilities.
For more information on onboarding servers, see Onboard servers to WindowsDefender ATPservice.
Windows Defender ATP Exploit Guard is a new set of host-intrusion prevention capabilities. The four components of Windows Defender Exploit Guard are designed to lock down the device against a wide variety of attack vectors and block behaviors commonly used in malware attacks, while enabling you to balance security risk and productivity requirements.
Attack SurfaceReduction(ASR) is set of controls that enterprises can enable to prevent malware fromgetting on the machine by blocking suspicious malicious files (for example,Office files), scripts, lateral movement, ransomware behavior, andemail-based threats.
Network protectionprotects the endpoint against web-based threats by blocking any outboundprocess on the device to untrusted hosts/IP addresses through WindowsDefender SmartScreen.
Controlled folderaccessprotects sensitive data from ransomware by blocking untrusted processes fromaccessing your protected folders.
Exploitprotection is a set of mitigations for vulnerability exploits (replacing EMET)that canbe easily configured to protect your system and applications.
Windows Defender ApplicationControl (alsoknown as Code Integrity (CI) policy) was released in Windows Server 2016.Customer feedback has suggested that it is a great concept, but hard to deploy.To address this, we have built default CI policies, which allows all Windowsin-box files and Microsoft applications, such as SQL Server, and block knownexecutables that can bypass CI.
Security with Software Defined Networking (SDN)
Security with SDN delivers many features to increase customer confidence in running workloads, either on-premises, or as a service provider in the cloud.
These security enhancements are integrated into the comprehensive SDN platform introduced in Windows Server 2016.
For a complete list of what’s new in SDN see, What’s New in SDN for Windows Server 2019.
Shielded Virtual Machines improvements
Branch office improvements
You can now run shielded virtual machines on machines with intermittent connectivity to the Host Guardian Service by leveraging the new fallback HGS and offline mode features. Fallback HGS allows you to configure a second set of URLs for Hyper-V to try if it can't reach your primary HGS server.
Offline mode allows you to continue to start up your shielded VMs, even if HGS can't be reached, as long as the VM has started successfully once, and the host's security configuration has not changed.
Troubleshooting improvements
We've also made it easier to troubleshoot your shielded virtual machines by enabling support for VMConnect Enhanced Session Mode and PowerShell Direct. These tools are particularly useful if you've lost network connectivity to your VM and need to update its configuration to restore access.
These features do not need to be configured, and they become available automatically when a shielded VM is placed on a Hyper-V host running Windows Server version 1803 or later.
Linux support
If you run mixed-OS environments, Windows Server 2019 now supports running Ubuntu, Red Hat Enterprise Linux, and SUSE Linux Enterprise Server inside shielded virtual machines.
HTTP/2 for a faster and safer Web
Improved coalescing of connections to deliver an uninterrupted and properly encrypted browsing experience.
Upgraded HTTP/2’s server-side cipher suite negotiation for automatic mitigation of connection failures and ease of deployment.
Changed our default TCP congestion provider to Cubic to give you more throughput!
Storage
Here are some of the changes we've made to storage in Windows Server 2019. For details, see What's new in Storage.
Storage Migration Service
Storage Migration Service is a new technology that makes it easier to migrate servers to a newer version of Windows Server. It provides a graphical tool that inventories data on servers, transfers the data and configuration to newer servers, and then optionally moves the identities of the old servers to the new servers so that apps and users don't have to change anything. For more info, see Storage Migration Service.
Storage Spaces Direct
Here's a list of what's new in Storage Spaces Direct. For details, see What's new in Storage Spaces Direct. Also see Azure Stack HCI for info on acquiring validated Storage Spaces Direct systems.
- Deduplication and compression for ReFS volumes
- Native support for persistent memory
- Nested resiliency for two-node hyper-converged infrastructure at the edge
- Two-server clusters using a USB flash drive as a witness
- Windows Admin Center support
- Performance history
- Scale up to 4 PB per cluster
- Mirror-accelerated parity is 2X faster
- Drive latency outlier detection
- Manually delimit the allocation of volumes to increase fault tolerance
Storage Replica
Here's what's new in Storage Replica. For details, see What's new in Storage Replica.
- Storage Replica is now available in Windows Server 2019 Standard Edition.
- Test failover is a new feature that allows mounting of destination storage to validate replication or backup data. For more information, see Frequently Asked Questions about Storage Replica.
- Storage Replica log performance improvements
- Windows Admin Center support
Failover Clustering
Here's a list of what's new in Failover Clustering. For details, see What's new in Failover Clustering.
- Cluster sets
- Azure-aware clusters
- Cross-domain cluster migration
- USB witness
- Cluster infrastructure improvements
- Cluster Aware Updating supports Storage Spaces Direct
- File share witness enhancements
- Cluster hardening
- Failover Cluster no longer uses NTLM authentication
Application Platform
Linux containers on Windows
Windows Server Ltsc Preview
It is now possible to run Windows and Linux-based containers on the same container host, using the same docker daemon. This enables you to have a heterogenous container host environment while providing flexibility to application developers.
Built-in Support for Kubernetes
Windows Server 2019 continues the improvements to compute, networking and storage from the semi-annual channel releases needed to support Kubernetes on Windows. More details are available in upcoming Kubernetes releases.
Container Networking in Windows Server 2019 greatly improves usability of Kubernetes on Windows by enhancing platform networking resiliency and support of container networking plugins.
Deployed workloads on Kubernetes are able to use network security to protect both Linux and Windows services using embedded tooling.
Container improvements
Improved integrated identity
We've made integrated Windows authentication in containers easier and more reliable, addressing several limitations from prior versions of Windows Server.
Better application compatibility
Containerizing Windows-based applications just got easier: The app compatibility for the existing windowsservercore image has been increased. For applications with additional API dependencies, there is now a third base image: windows.
Reduced size and higher performance
The base container image download sizes, size on disk and startup times have been improved. This speeds up container workflows
Management experience using Windows Admin Center (preview)
We've made it easier than ever to see which containers are running on your computer and manage individual containers with a new extension for Windows Admin Center. Look for the 'Containers' extension in the Windows Admin Center public feed.
Encrypted Networks
Encrypted Networks - Virtual network encryption allows encryption of virtual network traffic between virtual machines that communicate with each other within subnets marked as Encryption Enabled.It also utilizes Datagram Transport Layer Security (DTLS) on the virtual subnet to encrypt packets. DTLS protects against eavesdropping, tampering, and forgery by anyone with access to the physical network.
Network performance improvements for virtual workloads
Network performance improvements for virtual workloads maximizes the network throughput to virtual machines without requiring you to constantly tune or over-provision your host. This lowers the operations and maintenance cost while increasing the available density of your hosts. These new features are:
Receive Segment Coalescing in the vSwitch
Dynamic Virtual Machine Multi-Queue (d.VMMQ)
Low Extra Delay Background Transport
Low Extra Delay Background Transport (LEDBAT) is a latency optimized, network congestion control provider designed to automatically yield bandwidth to users and applications, while consuming the entire bandwidth available when the network is not in use.
This technology is intended for use in deploying large, critical updates across an IT environment without impacting customer facing services and associated bandwidth.
Windows Time Service
The Windows Time Service includes true UTC-compliant leap second support, a new time protocol called Precision Time Protocol, and end-to-end traceability.
High performance SDN gateways
High performance SDN gateways in Windows Server 2019 greatly improves the performance for IPsec and GRE connections, providing ultra-high-performance throughput with much less CPU utilization.
New Deployment UI and Windows Admin Center extension for SDN
Now, with Windows Server 2019, it’s easy to deploy and manage through a new deployment UI and Windows Admin Center extension that enable anyone to harness the power of SDN.
Windows Server 2019 Ltsc Iso Download Windows 10
Persistent Memory support for Hyper-V VMs
To leverage the high throughput and low latency of persistent memory (a.k.a. storage class memory) in virtual machines, it can now be projected directly into VMs. This can help to drastically reduce database transaction latency or reduce recovery times for low latency in-memory databases on failure.
Microsoft this week released the first preview of Windows Server 2019, the next iteration of its enterprise-standard server software and announced that the final code would ship in the second half of his year.
Licensing costs will likely go up for Server 2019, Microsoft added.
The Server 2019 early look is available now to participants in Windows Insider, the preview program Microsoft established prior to Windows 10's launch and expanded in June 2017 to include Windows Server. Microsoft has tagged the beta with the build number 17623.
Windows Server 2019's beta, the general window of release, even its nameplate, were not unexpected. Microsoft signaled each when last year it conformed Server's development and release cadence to that of the client versions of Windows and Office.
All three lines, Microsoft's most important software by leagues, now issue multiple interim upgrades annually - those are dubbed 'Semi-Annual Channel' builds, or SACs - that in turn lead to a new more-static-and-stable build every two to three years (with the emphasis on the latter). Those less-frequent versions are labeled 'Long-Term Service Channel,' or LTSC.
For Office and Windows Server, the LTSC also gets a new moniker, such as 'Office 2019' or 'Windows Server 2019,' to distinguish the every-so-often editions available as 'perpetual' licenses, as opposed to software 'rented' from Microsoft via a subscription. So, it's no coincidence that the next editions of Office and Windows Server will share the same '2019' label, as they both rely on the same licensing rhythm.
Like other products sold as perpetual licenses, Server 2019 will be supported using the standard 5+5 scheme, with five years of 'Mainstream' support and another five years of 'Extended' support. The former will probably expire in early 2024, while the latter will likely end in early 2029.
However, customers willing to pay for the privilege may receive support for six more years atop the usual decade, for a total of 16 years. That option, 'Premium Assurance,' debuted in December 2016.
Microsoft puts a stake in the ground
Because of the way Microsoft delivers Server SACs and limits the support for each to 18 months, Server 2019 - in particular, the preview - will be the first glimpse customers have of the future in an edition that supports a full desktop mode.
SACs of Windows Server 2016, like last year's 1709 (using Microsoft's yymm nomenclature), the impending 1803 and even this fall's 1809 have been limited to the Nano and Server Core configurations, with the former relegated to container-only and neither providing a full desktop GUI (graphical user interface).
Those SACs, however, were where Microsoft introduced new technologies or features into Windows Server. As with the development of Office, every two or three years Microsoft will take the contents of the twice-annual SACs to compose the feature set of the next Windows Server X, essentially putting a stake in the ground for customers who prefer stability over instant innovation.
Erin Chapple, director of program management for Windows Server, laid out the foundational additions and improvements to the product in a March 20 post to a company blog.
Among the most notable, Microsoft will embed its Windows Advanced Threat Protection (ATP) technology into the Server 2019 operating system so that administrators can detect and react to intrusions. ATP, a cornerstone of many of Microsoft's most expensive, and thus profitable, products, including the top-tier Microsoft 365 subscriptions, will be accompanied by other new tools, including extending the shielded VM concept of Server 2016 to encompass Linux-hosted virtual machines. Server 2019 will also include the ability to encrypt network segments, such as those between servers.
A more detailed 'What's New?' description of Server 2019, of build 17623 specifically, was offered by Mary Hoffman, a spokeswoman who often blogs about Server.
CAL cost to go up
Nothing is free, particularly if it's from Microsoft.
Windows Server 2019 will cost more to run than its predecessor, Microsoft admitted, though it did not reveal how much more. 'It is highly likely we will increase pricing for Windows Server Client Access Licensing (CAL),' said Chapple in his Tuesday post. 'We will provide more details when available.' (When the Redmond, Wash. company says 'highly likely' in the context of price increases, the money is on those hikes coming to pass.)
CALs, as they're known, are the licenses necessary to connect other software to the server. Microsoft's general rule, in fact, is that all server software access requires a CAL. And because CALs are generally (but not always) required for each user, per-CAL hikes can quickly accumulate into, as former Sen. Everett Dirkson (R-Ill.) once said, 'real money.'
Windows Server 2019 Ltsc Iso Download Torrent
How to download the Server 2019 preview
Build 17623 can be downloaded from the Insider website in disk image (.iso) or Hyper-V (.vhdx) formats. The initial build is available in 18 languages, including Chinese, English, German, Korean and Russian.
Windows Server 2019 Ltsc Iso Download Pc
Testers must have already registered as an Insider participant; that can be accomplished here.