Windows Server 2025 Insider Preview Build 26304 Introduces Windows Defender Application Control Features

Microsoft has unveiled the newest version of Windows Server specifically for participants of the Windows Server Insider Program. This release is designated as build 26304 and marks the beginning of the Windows Server 2025 branding for all present and future Insider builds.

A significant enhancement in this update is the introduction of Windows Defender Application Control for Business (WDAC), which, as indicated by its name, enhances security features for Windows Server 2025. Below is the summary of changes:

New Features

[NEW]Windows Defender Application Control for Business (WDAC)

The Windows Defender Application Control (WDAC) for business introduces a robust security framework that mitigates the attack surface by enforcing a defined list of permissible software. For Windows Server 2025, we are offering a Microsoft-defined ‘default policy’ that can be set up on your server using PowerShell cmdlets, supported by our security configuration platform named ‘OSconfig’.

Preview of Windows Server 2025 Security Baseline

Initiating with build 26296, we are excited to present the preview for the Windows Server 2025 Security Baseline. You can bolster your device’s or VM’s security right from the beginning by implementing a personalized security baseline, which comprises over 350 preconfigured Windows security settings that facilitate the application and enforcement of detailed security measures adhering to Microsoft’s best practices and industry standards. The content of the Windows Server 2025 Security Baseline is categorized into three sections based on the server role:

Domain Controller (DC)

Member Server

Workgroup Member

Introducing Windows Server Flighting!

If you are registered for Server Flighting, you can expect to receive this new build automatically later today. For additional details, refer to Welcome to Windows Insider Flighting on Windows Server – Microsoft Community Hub.

The application is supposed to update automatically with the latest version. If this does not occur, you can manually check for updates within the app’s settings.

Known Issues

Download Windows Server Insider Preview (microsoft.com)

Flighting: The flight label might incorrectly mention Windows 11. However, rest assured that selecting it will install the Windows Server update. Please disregard the misleading label and continue with the installation. This issue is set to be resolved in an upcoming release.

WinPE – PowerShell Scripts: The optional WinPE-PowerShell component does not install PowerShell correctly within WinPE, resulting in PowerShell cmdlets failing to execute. Users reliant on PowerShell in WinPE should refrain from using this build.

如果您正在測試從 Windows Server 2019 或 2022 的升級，我們建議不要使用此版本，因為已記錄間歇性升級失敗。

此外，使用「wevetutil al」命令歸檔事件日誌存在一個已知問題，該問題會導致 Windows 事件日誌服務崩潰並使歸檔過程失敗。要解決此問題，需要透過從管理命令提示字元執行「Start-Service EventLog」來重新啟動服務。

如果您啟用了 Secure Launch/DRTM 程式碼路徑，則不建議安裝此版本。

下載可用性

某些下載在特定國家/地區可能無法存取。請參閱微軟暫停在俄羅斯的新產品銷售 – 微軟相關問題。

Windows Server 長期服務頻道預覽版提供 18 種語言的 ISO 格式和僅英文的 VHDX 格式。

Windows Server Datacenter Azure Edition Preview提供 ISO 和 VHDX 格式，僅提供英文版本。

Microsoft 伺服器語言和選用功能預覽

預覽版本的密鑰：密鑰僅對這些預覽版本有效。

伺服器標準：MFY9F-XBN2F-TYFMP-CCV49-RMYVH

資料中心：2KNJJ-33Y9H-2GXGX-KMQWH-G6H67

Azure 版本不需要金鑰。

符號：可以透過公共符號伺服器存取符號 – 請參閱使用 Microsoft 符號伺服器。

過期通知：此 Windows Server 預覽版將於 2025 年 9 月 15 日過期。