{"id":8026,"date":"2023-03-08T09:00:00","date_gmt":"2023-03-08T09:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/en-us\/blog\/?p=8026"},"modified":"2025-06-10T10:30:48","modified_gmt":"2025-06-10T17:30:48","slug":"4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/","title":{"rendered":"4 best-practices to keep your Windows Server estate secure and optimized"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Windows Server customers often share with us the challenges of navigating rapid changes in recent years. Many of their IT estates have expanded to support growth, while teams are often changing, with talent coming and going. You may find your organization in a similar situation, with a sprawled IT estate that includes a mix of legacy and new applications and hardware. This can leave room for potential security vulnerabilities and compliance gaps, but also opportunities to optimize.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We are committed to supporting you through the next stages of optimization and growth in your organization, which starts with a secure IT foundation. Here are four best practices to keep your <a href=\"https:\/\/azure.microsoft.com\/solutions\/windows-server\/#overview\">Windows Server<\/a> estate secure and up-to-date:<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"1-watch-for-update-notifications-and-have-a-strategy-to-apply-the-latest-security-patches\">1. Watch for update notifications and have a strategy to apply the latest security patches<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A critical but often overlooked best practice is having a strategy to apply the latest security patches that are released. Our team continuously monitors and listens to customer feedback on any issues they have encountered and creates patches to address these. These are released on the second Tuesday of every month (known as Patch Tuesday). Keeping your various systems up-to-date with the latest patches will secure workloads and optimize day-to-day performance and operations. Learn more about <a href=\"https:\/\/learn.microsoft.com\/mem\/configmgr\/sum\/plan-design\/plan-for-software-updates\" target=\"_blank\" rel=\"noreferrer noopener\">best practices for software updates<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, we know that patching also usually means rebooting and ultimately downtime for your workloads. If you are in Microsoft Azure, you can <a href=\"https:\/\/learn.microsoft.com\/azure\/automanage\/automanage-hotpatch\" target=\"_blank\" rel=\"noreferrer noopener\">take advantage of Hotpatch<\/a>, which allows you to keep your Windows Server virtual machines on Azure up-to-date without rebooting, enabling higher availability with faster and more secure delivery of updates.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"2-get-deeper-visibility-and-management-capabilities-at-no-additional-cost\">2. Get deeper visibility and management capabilities at no additional cost<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Many Windows Server customers might be familiar with many of the native Windows Server Microsoft Management Consoles (MMC). <a href=\"https:\/\/www.microsoft.com\/windows-server\/windows-admin-center\" target=\"_blank\" rel=\"noreferrer noopener\">Windows Admin Center<\/a> is the modern evolution of \u201cin-box\u201d management tools such as Server Manager and MMC. It has become <em>the <\/em>solution for managing Windows Server infrastructure, giving you deep management, troubleshooting, configuration, and maintenance capabilities over your server clusters.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It can be locally deployed with no cloud dependency or can be used within the Azure portal through <a href=\"https:\/\/learn.microsoft.com\/\/windows-server\/manage\/windows-admin-center\/azure\/manage-vm\" target=\"_blank\" rel=\"noreferrer noopener\">direct integration<\/a>, enabling you to carry over the simple and familiar UI when you decide to start adopting the cloud. Learn more in the <a href=\"https:\/\/learn.microsoft.com\/windows-server\/manage\/windows-admin-center\/understand\/what-is\" target=\"_blank\" rel=\"noreferrer noopener\">Windows Admin Center documentation<\/a> or <a href=\"https:\/\/go.microsoft.com\/fwlink\/p\/?linkid=2194936&amp;clcid=0x409&amp;culture=en-us&amp;country=us\" target=\"_blank\" rel=\"noreferrer noopener\">download it today for free<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"3-check-for-end-of-support-versions-and-prepare-to-modernize\">3. Check for end of support versions and prepare to modernize<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Most organizations are likely to have a mix of Windows Server versions that support a variety of applications. Each version of Windows Server is backed by 10 years of support (5 years for mainstream support and 5 years for extended support) that include regular security updates, per the <a href=\"https:\/\/learn.microsoft.com\/lifecycle\/faq\/extended-security-updates\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft lifecycle policy<\/a>. After the end of support date, a version and its workloads will be vulnerable as they will no longer receive regular security updates. Windows Server 2012\/R2 is the upcoming version that will reach the end of support on October 10, 2023.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With this in mind, a critical step towards optimizing performance and tightening security should be to <strong>check for Windows Server 2012\/R2 versions, which will reach end of support soon<\/strong>. This can be done with various, built-in tools such as Server Manager, PowerShell, or at-scale with tools from Azure such as <a href=\"https:\/\/azure.microsoft.com\/products\/azure-migrate\/\">Azure Migrate<\/a> or <a href=\"https:\/\/azure.microsoft.com\/products\/azure-arc\/#overview\">Azure Arc<\/a>. Additionally, mapping out application and hardware dependencies on Windows Server should be done to determine the next best step:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Upgrading to the latest version such as <a href=\"https:\/\/www.microsoft.com\/windows-server\/\" target=\"_blank\" rel=\"noreferrer noopener\">Windows Server 2022<\/a> will provide the latest security, performance, and application modernization innovation. Learn more about how to <a href=\"https:\/\/learn.microsoft.com\/windows-server\/get-started\/upgrade-overview#which-version-of-windows-server-should-i-upgrade-to\" target=\"_blank\" rel=\"noreferrer noopener\">perform in-place upgrades<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">If you are unable to upgrade by the end-of-support date, you can continue to stay secure on current versions by getting <a href=\"https:\/\/learn.microsoft.com\/windows-server\/get-started\/extended-security-updates-deploy\" target=\"_blank\" rel=\"noreferrer noopener\">extended security updates<\/a><sup>1<\/sup> for up to three years free in Azure or purchasing them for deployment on-premises.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"4-utilize-cloud-native-services-for-enhanced-security-and-compliance-anywhere\">4. Utilize cloud-native services for enhanced security and compliance anywhere<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Whether your organization has migrated to Azure or is just starting to consider the cloud, here are some steps you can take now, to enhance your security with Microsoft:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><strong>Already in Azure:<\/strong> To maximize your security coverage in Azure, be sure to check your <a href=\"https:\/\/learn.microsoft.com\/azure\/defender-for-cloud\/secure-score-access-and-track\" target=\"_blank\" rel=\"noreferrer noopener\">secure&nbsp;score<\/a> and improve it by enabling services such as <a href=\"https:\/\/azure.microsoft.com\/products\/defender-for-cloud\/\">Microsoft Defender for Cloud<\/a>, <a href=\"https:\/\/azure.microsoft.com\/products\/microsoft-sentinel\/\">Microsoft Sentinel<\/a> (cloud-native SIEM), and <a href=\"https:\/\/azure.microsoft.com\/solutions\/network-security\/#products\">Azure Network Security<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><strong>Have workloads on-premises:<\/strong> Extend <a href=\"https:\/\/learn.microsoft.com\/azure\/defender-for-cloud\/plan-defender-for-servers\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Defender for Servers<\/a> to your on-premises Windows Servers by connecting them to <a href=\"https:\/\/azure.microsoft.com\/products\/azure-arc\/#overview\">Azure Arc<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><strong>Ready to migrate to Azure:<\/strong> When you are ready to migrate workloads to Azure, your first step can be an assessment with <a href=\"https:\/\/azure.microsoft.com\/products\/azure-migrate\/\">Azure Migrate<\/a> or getting expert help and support through the <a href=\"https:\/\/azure.microsoft.com\/solutions\/migration\/migration-modernization-program\/\">Azure Migration and Modernization Program<\/a>.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"learn-more\">Learn more<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We hope these best practices serve as starting points to help you increase security and optimize the performance of your IT platform, so you can focus on supporting business growth. Be sure to explore the resources below for further information:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Learn more about capabilities and offers for <a href=\"https:\/\/azure.microsoft.com\/solutions\/windows-server\/#overview\">Windows Server on Azure<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Watch our recent webinar on-demand titled \u201c<a href=\"https:\/\/info.microsoft.com\/ww-ondemand-optimize-windows-server-and-sql-server-security-on-azure.html\" target=\"_blank\" rel=\"noreferrer noopener\">Optimizing Windows and SQL Server Security in Azure<\/a>.\u201d<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Register for our upcoming webinar titled \u201c<a href=\"https:\/\/info.microsoft.com\/ww-landing-cloud-migration-stories-windows-and-sql-server-with-azure.html\">Cloud Migration Stories: Windows and SQL Server with Azure<\/a>\u201d on March 29, 2023, at 10 AM Pacific Time.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Take the recently available <a href=\"https:\/\/learn.microsoft.com\/certifications\/windows-server-hybrid-administrator\/?WT.mc_id=Azure_blog-wwl\" target=\"_blank\" rel=\"noreferrer noopener\">Windows Server Hybrid Administrator Certification<\/a> to apply your current Windows Server knowledge and learn how to apply it in the current state of hybrid cloud computing.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Learn more about your options for Windows Server 2012\/R2 <a href=\"https:\/\/www.microsoft.com\/sql-server\/sql-server-2012-eos\" target=\"_blank\" rel=\"noreferrer noopener\">end of support<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Join the Windows Server Tech Community for regular <a href=\"https:\/\/aka.ms\/windowsserverama\" target=\"_blank\" rel=\"noreferrer noopener\">Ask Me Anything (AMA) sessions<\/a>.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<p class=\"wp-block-paragraph\"><sup>1<\/sup>In alignment with the servicing model for Windows 7 and Windows 8.1 (link to <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/user\/ssoregistrationpage?dest_url=https:%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fwindows-blog-archive%2Ffurther-simplifying-servicing-models-for-windows-7-and-windows-8%2Fba-p%2F166772\" target=\"_blank\" rel=\"noreferrer noopener\">blog<\/a>), the Windows Server 2012 and 2012\/R2 ESU program will only include Monthly Rollup packages; Security Only update packages will not be provided.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Four best practices to keep your Windows Server estate secure and up-to-date.<\/p>\n","protected":false},"author":38,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","_alt_title":"","footnotes":"","msx_community_cta_settings":[]},"categories":[1466,1482,1463,1459],"tags":[],"audience":[3054,3053,3056],"content-type":[1511],"product":[1464,1515],"tech-community":[],"topic":[],"coauthors":[1900],"class_list":["post-8026","post","type-post","status-publish","format-standard","hentry","category-hybrid-multicloud","category-management-and-governance","category-migration","category-security","audience-business-decision-makers","audience-it-decision-makers","audience-it-implementors","content-type-best-practices","product-azure-migrate","product-microsoft-defender-for-cloud","review-flag-1680286581-295","review-flag-1-1680286581-825","review-flag-2-1680286581-601","review-flag-3-1680286581-173","review-flag-4-1680286581-250","review-flag-5-1680286581-950","review-flag-7-1680286581-146","review-flag-8-1680286581-263","review-flag-anywh-1680286580-635","review-flag-free-1680286579-836","review-flag-new-1680286579-546"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>4 best-practices to keep your Windows Server estate secure and optimized | Microsoft Azure Blog<\/title>\n<meta name=\"description\" content=\"Four best practices to keep your Windows Server estate secure and up-to-date.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"4 best-practices to keep your Windows Server estate secure and optimized | Microsoft Azure Blog\" \/>\n<meta property=\"og:description\" content=\"Four best practices to keep your Windows Server estate secure and up-to-date.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Azure Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/microsoftazure\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-08T09:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-10T17:30:48+00:00\" \/>\n<meta name=\"author\" content=\"Patrick Widjaja\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@azure\" \/>\n<meta name=\"twitter:site\" content=\"@azure\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Patrick Widjaja\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/\"},\"author\":[{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/patrick-widjaja\/\",\"@type\":\"Person\",\"@name\":\"Patrick Widjaja\"}],\"headline\":\"4 best-practices to keep your Windows Server estate secure and optimized\",\"datePublished\":\"2023-03-08T09:00:00+00:00\",\"dateModified\":\"2025-06-10T17:30:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/\"},\"wordCount\":938,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"articleSection\":[\"Hybrid + multicloud\",\"Management and governance\",\"Migration\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/\",\"name\":\"4 best-practices to keep your Windows Server estate secure and optimized | Microsoft Azure Blog\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\"},\"datePublished\":\"2023-03-08T09:00:00+00:00\",\"dateModified\":\"2025-06-10T17:30:48+00:00\",\"description\":\"Four best practices to keep your Windows Server estate secure and up-to-date.\",\"breadcrumb\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog home\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Migration\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/migration\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"4 best-practices to keep your Windows Server estate secure and optimized\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"name\":\"Microsoft Azure Blog\",\"description\":\"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.\",\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\",\"name\":\"Microsoft Azure Blog\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Azure Blog\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/microsoftazure\",\"https:\/\/x.com\/azure\",\"https:\/\/www.instagram.com\/microsoftdeveloper\/\",\"https:\/\/www.linkedin.com\/company\/16188386\",\"https:\/\/www.youtube.com\/user\/windowsazure\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/a3047486833511917401a93d26f70b9a\",\"name\":\"laurengoodwin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/0b47220d480d83e3118b16d74903754bf5fbb94a5dea133eacd3351cb50e7f2c?s=96&d=mm&r=g4845c2dabb16550539c6ad38a01ab841\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/0b47220d480d83e3118b16d74903754bf5fbb94a5dea133eacd3351cb50e7f2c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/0b47220d480d83e3118b16d74903754bf5fbb94a5dea133eacd3351cb50e7f2c?s=96&d=mm&r=g\",\"caption\":\"laurengoodwin\"},\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/laurengoodwin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"4 best-practices to keep your Windows Server estate secure and optimized | Microsoft Azure Blog","description":"Four best practices to keep your Windows Server estate secure and up-to-date.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/","og_locale":"en_US","og_type":"article","og_title":"4 best-practices to keep your Windows Server estate secure and optimized | Microsoft Azure Blog","og_description":"Four best practices to keep your Windows Server estate secure and up-to-date.","og_url":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/","og_site_name":"Microsoft Azure Blog","article_publisher":"https:\/\/www.facebook.com\/microsoftazure","article_published_time":"2023-03-08T09:00:00+00:00","article_modified_time":"2025-06-10T17:30:48+00:00","author":"Patrick Widjaja","twitter_card":"summary_large_image","twitter_creator":"@azure","twitter_site":"@azure","twitter_misc":{"Written by":"Patrick Widjaja","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/#article","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/"},"author":[{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/patrick-widjaja\/","@type":"Person","@name":"Patrick Widjaja"}],"headline":"4 best-practices to keep your Windows Server estate secure and optimized","datePublished":"2023-03-08T09:00:00+00:00","dateModified":"2025-06-10T17:30:48+00:00","mainEntityOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/"},"wordCount":938,"commentCount":0,"publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"articleSection":["Hybrid + multicloud","Management and governance","Migration","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/","name":"4 best-practices to keep your Windows Server estate secure and optimized | Microsoft Azure Blog","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website"},"datePublished":"2023-03-08T09:00:00+00:00","dateModified":"2025-06-10T17:30:48+00:00","description":"Four best practices to keep your Windows Server estate secure and up-to-date.","breadcrumb":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/4-bestpractices-to-keep-your-windows-server-estate-secure-and-optimized\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog home","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/"},{"@type":"ListItem","position":2,"name":"Migration","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/migration\/"},{"@type":"ListItem","position":3,"name":"4 best-practices to keep your Windows Server estate secure and optimized"}]},{"@type":"WebSite","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","name":"Microsoft Azure Blog","description":"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.","publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization","name":"Microsoft Azure Blog","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","width":512,"height":512,"caption":"Microsoft Azure Blog"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/microsoftazure","https:\/\/x.com\/azure","https:\/\/www.instagram.com\/microsoftdeveloper\/","https:\/\/www.linkedin.com\/company\/16188386","https:\/\/www.youtube.com\/user\/windowsazure"]},{"@type":"Person","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/a3047486833511917401a93d26f70b9a","name":"laurengoodwin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0b47220d480d83e3118b16d74903754bf5fbb94a5dea133eacd3351cb50e7f2c?s=96&d=mm&r=g4845c2dabb16550539c6ad38a01ab841","url":"https:\/\/secure.gravatar.com\/avatar\/0b47220d480d83e3118b16d74903754bf5fbb94a5dea133eacd3351cb50e7f2c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0b47220d480d83e3118b16d74903754bf5fbb94a5dea133eacd3351cb50e7f2c?s=96&d=mm&r=g","caption":"laurengoodwin"},"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/laurengoodwin\/"}]}},"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Azure Blog","distributor_original_site_url":"https:\/\/azure.microsoft.com\/en-us\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/8026","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/comments?post=8026"}],"version-history":[{"count":2,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/8026\/revisions"}],"predecessor-version":[{"id":41266,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/8026\/revisions\/41266"}],"wp:attachment":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/media?parent=8026"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/categories?post=8026"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tags?post=8026"},{"taxonomy":"audience","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/audience?post=8026"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/content-type?post=8026"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/product?post=8026"},{"taxonomy":"tech-community","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tech-community?post=8026"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/topic?post=8026"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/coauthors?post=8026"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}