Windows Server 2025 Insider Preview Build 26311: Key Features and Security Enhancements

  • Thread Author
The much-anticipated release of Windows Server 2025 Insider Preview Build 26311 has landed, and it's making waves within the Windows Server community. Launched recently for members of the Windows Server Insider Program, this build signifies a step forward under the new Windows Server 2025 branding. But before we dive into the nitty-gritty details, let's talk about what this new build brings to the table and its implications for users, especially those looking to bolster their server security and capabilities.

A Familiar Changelog​

One of the quirks of the latest update is that the official changelog mirrors that of the previous preview build, 26304, which can leave users scratching their heads. However, it does confirm the significant addition of Windows Defender Application Control for Business (WDAC). This new security feature aims to enhance the safety of Windows Server 2025 by enforcing security measures directly on the applications that run within the server environment .

Key Features of Build 26311​

  1. Windows Defender Application Control for Business (WDAC):
    • This powerful software layer reduces the potential attack surface by allowing only an explicit list of software to run. It comes with a Microsoft-defined 'default policy' that administrators can apply directly via PowerShell cmdlets. This opens doors to better enforcement of security best practices .
  2. Security Baseline Preview:
    • Starting from build 26296, this feature provides a predefined security posture that can be tailored to suit the needs of various server roles, from Domain Controllers to Member Servers and Workgroup Members. This means you’ll have access to over 350 preconfigured Windows security settings aimed at supporting Microsoft’s recommended best practices .
  3. Feedback Hub for Server Desktop Users:
    • Touted as a user-friendly addition, the Feedback Hub app allows server administrators to provide insights directly from their server environments. Users should automatically receive the latest version, ensuring constant engagement with the development team .
  4. Known Issues:
    • As with any preview release, users should be aware of certain known issues, including potential upgrade failures from previous server versions and specific bugs related to PowerShell in the Windows Preinstallation Environment (WinPE). For instance, there's a notable problem wherein using the wevetutil al command could crash the Windows Event Log service .
  5. Expiration:
    • As a preview build, users must note that this version is set to expire on September 15, 2025. This temporal aspect encourages organizations to evaluate and transition to the stable release in due time .

Why Is This Important?​

For system administrators and professionals using Windows Server, each new build not only introduces new features but potentially reshapes operational protocols around security, efficiency, and management of their environments. By embedding robust features like WDAC and offering a tailored security baseline, Microsoft aims to help organizations mitigate risks associated with unauthorized software and unsecured configurations .
Furthermore, the continuity in changelogs between builds highlights a focus on stability and gradual enhancement rather than radical changes, which could be comforting for administrators wary of unexpected disruptions .

Wrapping Up​

With Build 26311, Microsoft sends a clear message about its vision for Windows Server 2025—a vision where heightened security protocols play a pivotal role in the architectural fabric of server management. As organizations gear up for future deployments, features like the WDAC will be crucial for navigating the cyber threat landscape effectively.
It's always an exciting time when new builds roll out. If you're part of the Insider Program, dive into this release, experiment, and share your experiences in the Windows Forum to enrich the community discourse on the evolution of Windows Server!
Source: Neowin Windows Server 2025 Insider Preview build 26311 is now available