I am currently configuring the base template for Windows Server 2016. I would like to create Windows Server 2016 VMs based on this template in the future.
Please feel free to post any tips on useful settings for the standard installation in the comments.
I will gradually expand this article until the template is complete. Various security settings are currently still missing, but here are the initial settings for the standard installation.
Disable automatic start of the Server Manager
The Server Manager really does not need to start every time someone logs on to the server. Therefore, the task that starts the server manager when a user logs on can be switched off:
Deactivate services that are not required
The following services can be deactivated:
- Manager for downloaded maps
- User experience and telemetry in connected mode
- Save Xbox Live games
- Xbox Live Authentication Manager
- Windows Camera FrameServer
Energy saving plan and presentation
For VMs, the energy saving plan should be set to "High performance":
The visual effects can also be switched off:
Login and lock screen
I have also customized the Windows Server 2016 lockscreen, I think it is easier to see that you are logging on to a server and not to a normal Windows 10 client.
Ich habe dabei ein ein 1×1 Pixel großes JPG-Bild erstellt und es lokal gespeichert. Die folgende lokale Richtlinie ändert Anmelde- und Sperrbildschirm:
This setting can also be changed later via group policy, but I occasionally have systems that are not members of an Active Directory, so I find the local policy better here.
User account control
The user account control is set to the highest level:
Rename local administrator account
In this case, I have renamed the local user account "Administrator" to "LocalAdmin":
Copy Sources\SXS folder to the local hard disk
So that .NET Framework 3.5 can be installed quickly if necessary, I copy the SXS folder to the local hard disk
If .NET 3.5 is required, the local folder for the source files can be specified directly:
