4 ms·
Microsoft has made a big deal out of this being their way forward, but the only way to logon to a Windows Server is to use a password (unless you count a Smartc
by technion 5y ago
Microsoft has made a big deal out of this being their way forward, but the only way to logon to a Windows Server is to use a password (unless you count a Smartcard) and their answer for how this all fits together is pretty much "let's just talk about our cloud services". I don't think this aim is going to reach the majority of organisations any time soon.
- easton 5y agoI wish they’d come out and say that Windows Server is just going to be tracking kernel/plumbing changes from the mainstream release and no new features are planned. The biggest “feature” in Server 2022 is that you can now address more cores and RAM (2048 cores and 48TB) because apparently SQL Server needed that. I see every day someone coming onto r/sysadmin saying “oh I have this SBS 2011 server that really needs an update” and all these graybeard Windows admins come out of the woodwork screaming about how they need to set up a old school AD domain controller and print server and all this crap. It’s dead guys. New apps should not be adopting Windows Server.
- technion 5y agoYes it's been an interesting one to read through Microsoft's "what's new" for Windows 2022, there's multiple references to TPM support and Credential Guard and the MS Edge Browser (features we have already). We then have Azure Only features, and "Azure Hybrid" features. Microsoft have effectively done what you describe with Exchange. Current literature is pretty open about the fact they are barely working on the on-premises version. Which would be fine if they sorted out the hybrid management situation.
- slaymaker1907 5y agoYou can also store the certificate on a Yubikey instead of a smart card. We do that at my work in combination with an associated pin so that you have two factors.