Introducing Windows Server 2016 Corey Hynes Ward Ralston

Agenda What Microsoft heard from customers Built-in security Azure-inspired infrastructure Hybrid application platform Next steps Image credit: flickr.com/photos/28481088@N00/8379766356/ (Color modified)

Software-defined Datacenter PRISM FY16 6/6/2018 2:20 AM What we heard from customers Security Software-defined Datacenter Application Platform Increasing breaches incidents Identity is target of attacks Complex to secure virtual environments Lack of integration between solutions Hard to deploy and operate Low footprint server No integration between Dev and Ops Fast and lightweight OS Hard to plan for public cloud © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure-inspired Infrastructure PRISM FY16 6/6/2018 2:20 AM Windows Server 2016 The cloud-ready server operating system that delivers new layers of security and Azure- innovation for the applications and infrastructure that power your business. Built-in Security Azure-inspired Infrastructure Hybrid Application Platform Protection to Identity Secure the virtualization platform Built-in layers of security Affordable & Enterprise ready Learnings from hyper-scale datacenter Built-in SDDC capabilities Support for containers Built-purpose OS Azure Hybrid Use Benefiit for SA eases transition to Cloud Windows Server 2016 is the most cloud-ready server we have ever built and includes a lot of technology that was inspired from our experience in the public cloud. It has big improvements in security, software defined infrastructure and technologies to help developers build modern micro-service based applications, in the cloud or on-premises. Built-In Security - Deliver new layers of security to control privileged access, protect virtual machines and harden the platform against emerging threats – to help you prevent attacks and detect suspicious activity more quickly. Minimize attack surface and require fewer security patches/reboots by deploying “just enough” OS with the new Nano Server option Prevent risk associated with compromised administrative credentials using new privileged account management features to limit access to “just enough” and “just in time” administration. Shielded Virtual Machines provide protection from malicious administrators and compromised hosts by using Bitlocker to encrypt your virtual machines. Protect every Windows Server 2016 deployment, regardless of Cloud it’s running with features such as Code Integrity, Defender, Control Flow Guard, etc. Azure-inspired Infrastructure: Evolve your datacenter to achieve cost-savings and flexibility with compute, storage and network virtualization technologies proven at scale in Microsoft Azure.   Nano Server, a new headless deployment option, offers a dramatically smaller footprint and fewer reboots and patches. Deliver storage solutions at a fraction of the cost of SAN or NAS with your choice of hyper-converged or converged storage architecture. Create affordable business continuity and disaster recovery among datacenters with Storage Replica synchronous storage replication. Make applications highly available and responsive with a built-in load balancer and other network technology that runs Azure. Hybrid Application Platform: Innovate with a single application platform optimized for the applications of today, as well as the cloud-based apps of tomorrow. Move your applications to a cloud-ready operating system, so they are ready to move to the cloud when you are. Windows Server Containers bring the agility and density of containers to the Windows ecosystem, enabling agile application development and deployment. Use the lightweight Nano Server deployment option for the agility and flexibility today’s application developers need. It’s the perfect option for running applications from containers or micro services. Run Windows Server on-premises or in the public cloud. Save money by bringing the Windows Server licenses you own to Azure, and pay the lower base compute rate with Azure Hybrid Use Benefit. (SA required.) © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure-inspired Infrastructure PRISM FY16 6/6/2018 2:20 AM Windows Server 2016 The cloud-ready server operating system that delivers new layers of security and Azure- innovation for the applications and infrastructure that power your business. Built-in Security Azure-inspired Infrastructure Hybrid Application Platform Protection to Identity Secure the virtualization platform Built-in layers of security Affordable & Enterprise ready Learnings from hyper-scale datacenter Built-in SDDC capabilities Support for containers Built-purpose OS AHUB eases transition to Cloud Increase the security of your applications and data. Windows Server 2016 introduces layers of security to control privileged access, protect virtual machines, and harden the platform against emerging threats. © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Protection to credentials Microsoft Build 2016 6/6/2018 2:20 AM Protection to credentials Domain Admin Credential Guard Prevents Pass the Hash and Pass the Ticket attacks by protecting stored credentials through Virtualization based Security Just Enough Administration Limits administrative privileges to the bare- minimum required set of actions (limited in space) Just in Time Administration Provide privileged access through a workflow that is audited and limited in time JEA + JIT = limited in time & capability Ben Mary John Admin Typical administrator Just Enough and Just in Time Administration Capability Time Capability and time needed © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Protection to the OS in any cloud Code Integrity Ensure that only permitted binaries can be executed from the moment the OS is booted Windows Defender Actively protects from known malware without impacting workloads Control Flow Guard Protects against unknown vulnerabilities by blocking common attack vectors

Protection to virtual machines 6/6/2018 2:20 AM Protection to virtual machines Shielded VMs Use BitLocker to encrypt the disk and state of virtual machines protecting secrets from compromised admins & malware Host Guardian Service Attests to host health releasing the keys required to boot or migrate a Shielded VM only to healthy hosts Generation 2 VMs Supports virtualized equivalents of hardware security technologies (e.g. TPMs) enabling BitLocker encryption for Shielded VMs BUILDING PERIMETER COMPUTER ROOM HYPER-V HYPER-V Physical machine Virtual machine Shielded virtual machine * Server ü ü û Administrator S torage û ü û administrator Network û ü û administrator Backup û ü û operator Virtualization-host û ü û administrator Virtual machine û ü ü administrator *Configuration dependent © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Built-in security Shielded Virtual Machines Credential Guard Host Guardian Service Secure Boot for Windows & Linux Nano Server Hyper-V Host Virtualization-based Security (VBS) Hyper-V Containers Containers in Shielded VMs Credential Guard Justin Time Administration Just Enough Administration Control Flow Guard Code Integrity Windows Defender Enhanced Threat Detection

Azure-inspired Infrastructure PRISM FY16 6/6/2018 2:20 AM Windows Server 2016 Built-in Security Azure-inspired Infrastructure Hybrid Application Platform Protection to Identity Secure the virtualization platform Built-in layers of security Affordable & Enterprise ready Learnings from hyper-scale datacenter Built-in SDDC capabilities Support for containers Built-purpose OS AHUB eases transition to Cloud Windows Server 2016 delivers a flexible and cost-efficient platform for your datacenter, using the same compute, storage and network virtualization features that power the Azure public cloud. © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Confidently virtualize anything Rolling Cluster Upgrades Upgrade your fabric to Windows Server 2016, without downtime to workloads running on Hyper-V virtual machines. Linux support Deploy applications on multiple platforms with best-in-class support Hot-add and remove Make changes in Network, Disk and Storage without downtime to workload

Flexible workload placement Network Controller Improve network management with centralized control of network policies using the same network controller found in Microsoft Azure Distributed Firewall Control network flows in the fabric with access control lists structured around application connectivity needs, not workload placement Load Balancer Make applications highly available and responsive with a built-in load balancer made from the technology that runs Azure

High performance storage, fraction of the cost Storage Spaces Direct Use standard servers with local storage to build highly available and scalable software-defined storage Storage Replica Create affordable business continuity and disaster recovery among datacenters Storage QoS Prevent noisy neighbors from impacting high priority workloads with a Storage QoS policy File share Volume Virtual disk Storage Servers Storage pool Enclosure Physical disks FS

Azure-inspired infrastructure Storage Spaces Direct Storage Spaces Replica ReFS Stretched Clusters Storage QoS Storage Health Monitoring Rolling Cluster Upgrade PowerShell 5.0 Mixed Mode Cluster Hot-add & remove Linux support Guest Clustering Azure Witness for cluster StorSimple VM Storage Resiliency Server Management Tools Azure Consistent Storage Network Controller Azure-based Data Plane Load Balancer Distributed Firewall Multi-tenant Gateway NVGRE, VXLAN, OVSDB

Azure-inspired Infrastructure PRISM FY16 6/6/2018 2:20 AM Windows Server 2016 Built-in Security Azure-inspired Infrastructure Hybrid Application Platform Protection to Identity Secure the virtualization platform Built-in layers of security Affordable & Enterprise ready Learnings from hyper-scale datacenter Built-in SDDC capabilities Support for containers Built-purpose OS AHUB eases transition to Cloud Windows Server 2016 delivers new ways to deploy and run your applications – whether on-premises or in Microsoft Azure – using new capabilities such as Windows containers and the Nano Server lightweight operating system deployment option © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Nano Server deployment option Just enough OS Optimized for next generation of applications, provides higher density, reduced attack surface and servicing requirements Key roles & features Support for Hyper-V, Storage, Cluster, IIS, DNS, .Net Core, ASP.Net Core Full developer experience Windows SDK & Visual Studio target Nano Server. Full remote debugging experience Third-party applications RDS experience Traditional VM workloads Containers and next-gen applications Full GUI Specialized workloads Server Core Lower maintenance server environment Nano Server Just enough OS

Windows Server and Hyper-V Containers Windows Server Container Bring the agility and density of containers to the Windows ecosystem, enabling agile application development and deployment Hyper-V Container Offer a unique additional level of isolation for sensitive applications with no additional coding required Windows Server Container Hyper-V Container

Hybrid application platform Windows Server Containers Hyper-V Containers Docker integration and support PowerShell 5.0 PowerShell DSC Internet Information Services 10 Azure Service Fabric for Windows Server Visual Studio Core .Net Core Nano Server deployment option

Azure-inspired Infrastructure PRISM FY16 6/6/2018 2:20 AM Recap: Windows Server 2016 Built-in Security Azure-inspired Infrastructure Hybrid Application Platform Protection to Identity Secure the virtualization platform Built-in layers of security Affordable & Enterprise ready Learnings from Azure Built-in SDDC capabilities Support to containers Built-purpose OS AHUB eases transition to Cloud © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Next steps Try Windows Server 2016 Technical Preview: https://www.microsoft.com/en-us/evalcenter/evaluate- windows-server-technical-preview Check out Windows Server 2016 page: http://www.microsoft.com/windowsserver2016 Windows Server Blog: http://blogs.technet.microsoft.com/windowsserver