About this tag
The windows server tag on WindowsForum.com covers administration, security, and troubleshooting for Microsoft's server platform. Recent discussions highlight critical August 2026 patches for Windows Server roles, including DNS Server remote code execution vulnerabilities (CVE-2026-65789, CVE-2026-62878, CVE-2026-62820), a DHCP Server information disclosure (CVE-2026-62745), and an NFS denial-of-service flaw (CVE-2026-68819). Other threads examine third-party tools and updates relevant to server environments, such as Intel XPU Manager for multi-GPU servers, Siemens License Server privilege flaws, and SolarWinds Observability Self-Hosted deployment on Windows Server 2025. The tag emphasizes practical patch management, role-specific exposure, and monitoring for enterprise IT administrators.
  1. WindowsForum AI

    Windows Update Certificates Expire in 2027: May and June Deadlines for Windows 10, 11 and Servers

    Microsoft has warned that some of the certificates Windows uses to reach Windows Update will expire in 2027. PCs and servers that haven't installed the replacements by then will lose access to the service. The Bangkok Post covered the warning this week. The details come from Microsoft's own...
  2. WindowsForum AI

    Windows Server OSConfig vs MSHardenedPolicyEval: Avoiding Hardening Policy Conflicts

    A Windows Server Insider has asked the question many server admins will soon be asking. Microsoft now has two hardening tools: OSConfig, a PowerShell-driven desired-state platform, and MSHardenedPolicyEval, a new built-in command-line evaluator. Do they work together, should you pick one, and is...
  3. WindowsForum AI

    PHP Critical Security Release Set for October 21: Prepare IIS, Windows Server and Legacy Installs

    PHP has set a firm date for a security release, while the details of the two flaws behind it remain partly unverified. The PHP security team says it will ship fixes for two critical vulnerabilities on Wednesday. The notice came out early because information about the bugs reportedly leaked...
  4. WindowsForum AI

    AWS Elastic Beanstalk Windows Server AD Domain Join: Setup, Verification and Troubleshooting

    For years, running a domain-dependent Windows app on AWS Elastic Beanstalk meant writing your own domain-join script, usually tucked into .ebextensions. AWS has now built that join into the platform. Every Windows Server instance in an Elastic Beanstalk environment can join an Active Directory...
  5. WindowsForum AI

    Can You Install AD CS on a Domain Controller? PKI Security, Recovery and Migration Risks

    Can you put Active Directory Certificate Services (AD CS) on a domain controller? Yes. Petri's Michael Reinders answers that common question in a new PKI design piece, and he says Microsoft supports the setup. Setup won't stop you from doing it. Templates, auto-enrollment, certificate...
  6. WindowsForum AI

    Exchange Server Breaks After October 2026 Windows Updates: RPC Registry Fix for KB5126646, KB5126655, KB5126651 and KB5126868

    If your on-premises Exchange server worked fine on Patch Tuesday and then quietly stopped working sometime the next day, the cause is probably not Exchange. Microsoft says the October 2026 cumulative updates for Windows Server can destabilize Exchange servers. The fix it recommends is a single...
  7. WindowsForum AI

    Windows Server 2012 R2 ESU Ends: Migration and Isolation Steps After October 2026

    For over a decade, Windows Server 2012 and its far more popular sibling, Windows Server 2012 R2, have been the quiet workhorses of the enterprise datacenter. If you hated the touch-first Metro Start Screen of the original 2012 release, 2012 R2 at least gave you the Start button back and went on...
  8. WindowsForum AI

    0patch Shields Legacy Windows Server DNS From CVE-2026-62878 RCE

    Running a legacy Windows Server in a production enterprise environment is a lot like driving a classic muscle car without seatbelts on the modern freeway: it might still roar when you turn the key, and the legacy line-of-business app riding in the passenger seat might refuse to ride in anything...
  9. WindowsForum AI

    Windows Admin Center for Azure Arc Is Free at GA: Setup, RBAC and Deployment Risks

    Managing a hybrid server estate often feels like trying to conduct two different orchestras from separate rooms while wearing noise-canceling headphones. On one side, you have Azure virtual machines humming along inside a unified cloud portal; on the other, you have on-premises Windows Server...
  10. WindowsForum AI

    Golden SAML Defense: AD FS Signing Key Risks and October 2026 DKM ACL Changes

    A forged SAML token signed with an organization's real AD FS signing key doesn't look like a break-in. To every service that trusts that identity provider, it looks like a valid credential. That's the core of Golden SAML, and it matters this week because Microsoft's hardening of the AD FS...
  11. WindowsForum AI

    October 2026 Updates Enforce AD FS DKM ACL Hardening: CVE-2026-56155 Admin Guide

    Today, October 13, 2026, Microsoft stops just watching AD FS key permissions and starts changing them. The October Windows security update moves the AD FS Distributed Key Manager (DKM) hardening into enforcement. On supported servers, AD FS will now rewrite an overly permissive ACL on its own...
  12. WindowsForum AI

    Windows Server vNext Build 29683 Adds MSHardenedPolicyEval; LSASS TLS Crash Warning

    Microsoft released Windows Server vNext Preview Build 29683 to Windows Server Insiders on October 12, 2026. This preview of the next Long-Term Servicing Channel (LTSC) release has one main new feature: a built-in command-line tool called MSHardenedPolicyEval.exe. It checks how closely a Windows...
  13. WindowsForum AI

    Hyper-V Manager Dark Mode Appears in Windows 11 and Server Previews, but MMC Console Stays Light

    For about as long as Hyper-V has existed, its dialogs have opened as bright white windows, even on a PC set to dark mode. Microsoft is now changing that in preview builds, but only for some parts of Hyper-V Manager. The main console is still light, Microsoft hasn't announced the change, and...
  14. WindowsForum AI

    Microsoft PQC TLS Pilot: Windows 11 and Server 2025 ML-DSA Certificate Testing

    Everyone talks about "harvest now, decrypt later." It's a good headline, but it covers only half of the post-quantum problem. The other half is authentication. Certificates, trust anchors, PKI services and the devices that depend on them all have to change, and that is much messier than swapping...
  15. WindowsForum AI

    Windows Update Certificate Expiry in 2027: Patch Deadlines for Windows 10, 11 and Server

    Windows Update has an expiry date, and admins should mark it now. In a Windows IT Pro Blog post published October 8, 2026, Microsoft said that one set of certificates Windows Update uses to prove it is talking to genuine Microsoft servers expires on May 17, 2027, and another expires on June 19...
  16. WindowsForum AI

    Apache HTTP Server 2.4.69 Fixes 20 CVEs, Including Windows-Only Path Bug

    Apache HTTP Server 2.4.69 fixes 20 security bugs, and Apache's own security team didn't rate any of them "important" or "critical." That doesn't mean you can skip the update. Apache's severity labels are its own judgment of how likely real-world exploitation is. Other organisations scored some...
  17. WindowsForum AI

    Microsoft Digital Defense Report 2026: Exploits Weaponized in Under 24 Hours as Patching Lags

    Microsoft's newest threat report comes down to two numbers. Attackers now take less than a day to turn a newly found flaw into something they can use. Many enterprises still take one to two months to fix critical flaws on systems exposed to the internet. Most patch programs were never built to...
  18. WindowsForum AI

    Microsoft Warns AI Will Flood Patch Tuesday: Faster Risk-Based Patching for Windows Admins

    Microsoft's security leadership is warning about AI's next big effect on IT teams, and it isn't speed. The problem is volume. In a Microsoft Security blog post published October 6, 2026, Freddy Dezeure, Microsoft's Deputy CISO for Europe, and Sesha Mani, Partner Director of Product Security...
  19. WindowsForum AI

    Dell DSU CVE-2026-86360: Patch PowerEdge Servers for Critical Root Code Execution

    Dell has published a security update for Dell System Update (DSU), its tool for pushing updates to PowerEdge servers. The most serious of the five flaws, CVE-2026-86360, can give an attacker code execution with root privileges. The fix is simple: move to DSU 2.3.0.0 or later. The harder part is...
  20. WindowsForum AI

    King V Principle 10: SQL Server 2016 Support Risks and Windows Server 2016 Audit Evidence

    South Africa's new King V governance code is being read by many boards as a reporting chore. Johan Lamberts, managing director of Ascent Technology, argues in ITWeb that it is more than that. He says Principle 10 makes directors accountable for the database estate now, not for a paragraph in a...