Ce tutoriel explique comment migrer de Windows Server 2022 (ou 2019) vers Windows Server 2025 en effectuant la mise à niveau via Windows Update.

Le post Migration sur-place vers Windows Server 2025 via Windows Update : comment faire ? a été publié sur IT-Connect.

Starting in mid-April 2026, Microsoft allows you to upgrade Windows Server 2019 and Windows Server 2022 directly to Windows Server 2025 through Windows Update — no installation media (ISO file or DVD) required. The process is called an in-place upgrade, meaning your installed applications, settings, and server roles remain unchanged while only the operating system version changes. This article covers the prerequisites, the exact registry change you need to make, the step-by-step procedure for both the graphical desktop and the text-only Server Core installation, and the important cases where you must not use this method.

Source

Ce tutoriel explique comment détecter et bloquer les adresses IP à l'origine d'attaques brute force sur Windows Server, grâce à des scripts PowerShell.

Le post Windows Server : détecter et bloquer les attaques brute force avec PowerShell a été publié sur IT-Connect.

Dimanche 19 avril 2026, Microsoft a publié en urgence des mises à jour hors bande pour Windows Server afin de patcher un problème affectant Active Directory.

Le post Windows Server – Avril 2026 : de nouveaux correctifs pour stabiliser l’Active Directory a été publié sur IT-Connect.

Microsoft a publié les nouvelles mises à jour Windows Server le 14 avril 2026, dont la KB5082063. Voici les principaux changements à anticiper et à connaître.

Le post Le point sur les mises à jour d’avril 2026 pour Windows Server a été publié sur IT-Connect.

Ce tutoriel explique comment obtenir un certificat pour signer les raccourcis Bureau à distance (.rdp) avec rdpsign.exe afin de renforcer la sécurité Windows.

Le post Windows : comment signer les fichiers .rdp avec rdpsign ? a été publié sur IT-Connect.

Remote Server Administration Tools (RSAT) are now natively supported on Arm64-based Windows 11 PCs. Starting with the February 2026 non-security preview update (KB5077241), six RSAT components are available as optional components on Windows 11 versions 24H2 and 25H2, including Server Manager.

Source

Windows Server vNext Insider Preview build 29531 introduces ReFS boot, allowing you to install and start Windows Server from a Resilient File System (ReFS)-formatted boot volume for the first time. This feature brings integrity-level metadata checksums, online corruption repair, block cloning, and 35-petabyte volume scalability to the OS boot partition — capabilities that NTFS cannot match. ReFS boot requires UEFI firmware and a minimum of 2 GB for the WinRE partition. Learn how to enable Windows ReFS boot during Windows Server installation.

Source

Microsoft released version 2602 of the Security Baseline for Windows Server 2025, approximately eight months after the previous version 2506. The update adds 10 new Group Policy settings and removes one, focusing on NTLM auditing, printer security, and authentication hardening. Most of the new policies were already included in the Windows 11 Security Baselines since 2022 and are now being backported to the server edition. The baseline is available as part of the Microsoft Security Compliance Toolkit 1.0.

Source

Microsoft's original Secure Boot certificates — issued in 2011 — begin expiring in June 2026. Unlike Windows 11, Windows Server does not receive these updates automatically via Windows Update. Administrators must manually deploy the 2023 replacement certificates to all applicable servers and Generation 2 virtual machines before the deadline. Systems that remain on the 2011 certificates after expiration enter a degraded security posture and cannot receive future Secure Boot updates.

Source

Windows 10 Enterprise LTSB 2016 reaches end of support (EOS) on October 13, 2026, after which Microsoft will stop delivering security updates, bug fixes, and technical support. Organizations that cannot migrate to a newer release by that date can purchase Extended Security Updates (ESU), a paid program that provides critical security patches for up to three years. ESU licenses for LTSB 2016 will be sold through Volume Licensing or a Cloud Solution Provider (CSP) starting in Q2 2026. Activation is performed using a Multiple Activation Key (MAK) and the slmgr.vbs command-line tool.

Source

Dans cet article, nous verrons ensemble comment installer un serveur SFTP sur Windows Server. J’utiliserai ici Windows Serveur 2022 mais vous pouvez faire de même sur les versions précédentes. Nous utiliserons ici le logiciel open source OpenSSH pour réaliser cette tâche. Pourquoi utiliser un serveur SFTP ? Un serveur SFTP est un moyen sécurisé et …