1. Introducing Windows Server 2016
Corey Hynes
Ward Ralston

2. Agenda What Microsoft heard from customers Built-in security
Azure-inspired infrastructure
Hybrid application platform
Next steps
Image credit: (Color modified)

3. Software-defined Datacenter
PRISM FY16
6/6/2018 2:20 AM
What we heard from customers
Security
Software-defined Datacenter
Application Platform
Increasing breaches incidents
Identity is target of attacks
Complex to secure virtual environments
Lack of integration between solutions
Hard to deploy and operate
Low footprint server
No integration between Dev and Ops
Fast and lightweight OS
Hard to plan for public cloud
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Azure-inspired Infrastructure
PRISM FY16
6/6/2018 2:20 AM
Windows Server 2016
The cloud-ready server operating system that delivers new layers of security and Azure- innovation for the applications and infrastructure that power your business.
Built-in
Security
Azure-inspired Infrastructure
Hybrid
Application Platform
Protection to Identity
Secure the virtualization platform
Built-in layers of security
Affordable & Enterprise ready
Learnings from hyper-scale datacenter
Built-in SDDC capabilities
Support for containers
Built-purpose OS
Azure Hybrid Use Benefiit for SA eases transition to Cloud
Windows Server 2016 is the most cloud-ready server we have ever built and includes a lot of technology that was inspired from our experience in the public cloud. It has big improvements in security, software defined infrastructure and technologies to help developers build modern micro-service based applications, in the cloud or on-premises.
Built-In Security - Deliver new layers of security to control privileged access, protect virtual machines and harden the platform against emerging threats – to help you prevent attacks and detect suspicious activity more quickly.
Minimize attack surface and require fewer security patches/reboots by deploying “just enough” OS with the new Nano Server option
Prevent risk associated with compromised administrative credentials using new privileged account management features to limit access to “just enough” and “just in time” administration.
Shielded Virtual Machines provide protection from malicious administrators and compromised hosts by using Bitlocker to encrypt your virtual machines.
Protect every Windows Server 2016 deployment, regardless of Cloud it’s running with features such as Code Integrity, Defender, Control Flow Guard, etc.
Azure-inspired Infrastructure: Evolve your datacenter to achieve cost-savings and flexibility with compute, storage and network virtualization technologies proven at scale in Microsoft Azure.
Nano Server, a new headless deployment option, offers a dramatically smaller footprint and fewer reboots and patches.
Deliver storage solutions at a fraction of the cost of SAN or NAS with your choice of hyper-converged or converged storage architecture.
Create affordable business continuity and disaster recovery among datacenters with Storage Replica synchronous storage replication.
Make applications highly available and responsive with a built-in load balancer and other network technology that runs Azure.
Hybrid Application Platform: Innovate with a single application platform optimized for the applications of today, as well as the cloud-based apps of tomorrow. Move your applications to a cloud-ready operating system, so they are ready to move to the cloud when you are.
Windows Server Containers bring the agility and density of containers to the Windows ecosystem, enabling agile application development and deployment.
Use the lightweight Nano Server deployment option for the agility and flexibility today’s application developers need. It’s the perfect option for running applications from containers or micro services.
Run Windows Server on-premises or in the public cloud. Save money by bringing the Windows Server licenses you own to Azure, and pay the lower base compute rate with Azure Hybrid Use Benefit. (SA required.)
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Azure-inspired Infrastructure
PRISM FY16
6/6/2018 2:20 AM
Windows Server 2016
The cloud-ready server operating system that delivers new layers of security and Azure- innovation for the applications and infrastructure that power your business.
Built-in
Security
Azure-inspired Infrastructure
Hybrid
Application Platform
Protection to Identity
Secure the virtualization platform
Built-in layers of security
Affordable & Enterprise ready
Learnings from hyper-scale datacenter
Built-in SDDC capabilities
Support for containers
Built-purpose OS
AHUB eases transition to Cloud
Increase the security of your applications and data. Windows Server 2016 introduces layers of security to control privileged access, protect virtual machines, and harden the platform against emerging threats.
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Protection to credentials
Microsoft Build 2016
6/6/2018 2:20 AM
Protection to credentials
Domain
Admin
Credential Guard Prevents Pass the Hash and Pass the Ticket attacks by protecting stored credentials through Virtualization based Security
Just Enough Administration Limits administrative privileges to the bare- minimum required set of actions (limited in space)
Just in Time Administration Provide privileged access through a workflow that is audited and limited in time
JEA + JIT = limited in time & capability
Ben
Mary
John
Admin
Typical administrator
Just Enough and Just in Time Administration
Capability
Time
Capability and time needed
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Protection to the OS in any cloud
Code Integrity Ensure that only permitted binaries can be executed from the moment the OS is booted
Windows Defender Actively protects from known malware without impacting workloads
Control Flow Guard Protects against unknown vulnerabilities by blocking common attack vectors

8. Protection to virtual machines
6/6/2018 2:20 AM
Protection to virtual machines
Shielded VMs Use BitLocker to encrypt the disk and state of virtual machines protecting secrets from compromised admins & malware
Host Guardian Service Attests to host health releasing the keys required to boot or migrate a Shielded VM only to healthy hosts
Generation 2 VMs Supports virtualized equivalents of hardware security technologies (e.g. TPMs) enabling BitLocker encryption for Shielded VMs
BUILDING PERIMETER
COMPUTER ROOM
HYPER-V
HYPER-V
Physical machine
Virtual machine
Shielded
virtual machine *
Server ü ü û
Administrator S
torage û ü û
administrator
Network û ü û
administrator
Backup û ü û
operator
Virtualization-host û ü û
administrator
Virtual machine û ü ü
administrator
*Configuration dependent
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Built-in security Shielded Virtual Machines Credential Guard
Host Guardian Service
Secure Boot for Windows & Linux
Nano Server Hyper-V Host
Virtualization-based Security (VBS)
Hyper-V Containers
Containers in Shielded VMs
Credential Guard
Justin Time Administration
Just Enough Administration
Control Flow Guard
Code Integrity
Windows Defender
Enhanced Threat Detection

10. Azure-inspired Infrastructure
PRISM FY16
6/6/2018 2:20 AM
Windows Server 2016
Built-in
Security
Azure-inspired Infrastructure
Hybrid
Application Platform
Protection to Identity
Secure the virtualization platform
Built-in layers of security
Affordable & Enterprise ready
Learnings from hyper-scale datacenter
Built-in SDDC capabilities
Support for containers
Built-purpose OS
AHUB eases transition to Cloud
Windows Server 2016 delivers a flexible and cost-efficient platform for your datacenter, using the same compute, storage and network virtualization features that power the Azure public cloud.
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Confidently virtualize anything
Rolling Cluster Upgrades Upgrade your fabric to Windows Server 2016, without downtime to workloads running on Hyper-V virtual machines.
Linux support Deploy applications on multiple platforms with best-in-class support
Hot-add and remove Make changes in Network, Disk and Storage without downtime to workload

12. Flexible workload placement
Network Controller Improve network management with centralized control of network policies using the same network controller found in Microsoft Azure
Distributed Firewall Control network flows in the fabric with access control lists structured around application connectivity needs, not workload placement
Load Balancer Make applications highly available and responsive with a built-in load balancer made from the technology that runs Azure

13. High performance storage, fraction of the cost
Storage Spaces Direct Use standard servers with local storage to build highly available and scalable software-defined storage
Storage Replica Create affordable business continuity and disaster recovery among datacenters
Storage QoS Prevent noisy neighbors from impacting high priority workloads with a Storage QoS policy
File share
Volume
Virtual disk
Storage Servers
Storage pool
Enclosure
Physical disks FS

14. Azure-inspired infrastructure
Storage Spaces Direct
Storage Spaces Replica
ReFS
Stretched Clusters
Storage QoS
Storage Health Monitoring
Rolling Cluster Upgrade
PowerShell 5.0
Mixed Mode Cluster
Hot-add & remove
Linux support
Guest Clustering
Azure Witness for cluster
StorSimple
VM Storage Resiliency
Server Management Tools
Azure Consistent Storage
Network Controller
Azure-based Data Plane
Load Balancer
Distributed Firewall
Multi-tenant Gateway
NVGRE, VXLAN, OVSDB

15. Azure-inspired Infrastructure
PRISM FY16
6/6/2018 2:20 AM
Windows Server 2016
Built-in
Security
Azure-inspired Infrastructure
Hybrid
Application Platform
Protection to Identity
Secure the virtualization platform
Built-in layers of security
Affordable & Enterprise ready
Learnings from hyper-scale datacenter
Built-in SDDC capabilities
Support for containers
Built-purpose OS
AHUB eases transition to Cloud
Windows Server 2016 delivers new ways to deploy and run your applications – whether on-premises or in Microsoft Azure – using new capabilities such as Windows containers and the Nano Server lightweight operating system deployment option
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Nano Server deployment option
Just enough OS Optimized for next generation of applications, provides higher density, reduced attack surface and servicing requirements
Key roles & features Support for Hyper-V, Storage, Cluster, IIS, DNS, .Net Core, ASP.Net Core
Full developer experience Windows SDK & Visual Studio target Nano Server. Full remote debugging experience
Third-party applications
RDS experience
Traditional VM workloads
Containers and next-gen applications
Full GUI
Specialized workloads
Server Core
Lower maintenance server environment
Nano Server
Just enough OS

17. Windows Server and Hyper-V Containers
Windows Server Container Bring the agility and density of containers to the Windows ecosystem, enabling agile application development and deployment
Hyper-V Container Offer a unique additional level of isolation for sensitive applications with no additional coding required
Windows Server Container
Hyper-V Container

18. Hybrid application platform
Windows Server Containers
Hyper-V Containers
Docker integration and support
PowerShell 5.0
PowerShell DSC
Internet Information Services 10
Azure Service Fabric for Windows Server
Visual Studio Core
.Net Core
Nano Server deployment option

19. Azure-inspired Infrastructure
PRISM FY16
6/6/2018 2:20 AM
Recap: Windows Server 2016
Built-in
Security
Azure-inspired Infrastructure
Hybrid
Application Platform
Protection to Identity
Secure the virtualization platform
Built-in layers of security
Affordable & Enterprise ready
Learnings from Azure
Built-in SDDC capabilities
Support to containers
Built-purpose OS
AHUB eases transition to Cloud
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Next steps
Try Windows Server 2016 Technical Preview: windows-server-technical-preview
Check out Windows Server 2016 page:
Windows Server Blog: