HomeGame GuidesWindows Server 2025 build 26212 adds delegated managed service accounts and more

Windows Server 2025 build 26212 adds delegated managed service accounts and more

Published on

Microsoft has released the latest build of Windows Server for members of the Windows Server Insider program. The new build number is 26212 and is the same build number for the Windows 11 Canary Channel build that was just released. Keep in mind that this and future Windows Server Insider builds now have Windows Server 2025 branding.

This new build includes support for a new account type, Delegated Managed Service Accounts (dMSA), along with additional changes to the Server Message Block (SMB) protocol. Here is the changelog:

What’s new

[NEW] Delegated Managed Service Accounts (dMSA)

A new account type known as Delegated Managed Service Account (dMSA) is now available that allows switching from a traditional service account to a machine account with completely randomized managed keys, while disabling native service account passwords. Authentication for dMSA is linked to the device identity, which means that only specified machine identities mapped in AD can access the account. Using dMSA helps prevent certificate harvesting via a hacked account (kerberoasting), which is a common problem with traditional service accounts.

For more information on dMSA, visit https://learn.microsoft.com/en-us/windows-server/security/delegated-managed-service-accounts/delegat….

[NEW] Additional changes to the Server Message Block (SMB) protocol.

Starting with Build 26097 and later, we introduce the following changes to the Server Message Block (SMB) protocol for QUIC, signing, and encryption:

SMB over QUIC client and server shutdown: Administrators can now disable the SMB over QUIC and SMB over QUIC Server options with Group Policy and PowerShell.

Audit SMB over QUIC client and server connection: Successful SMB over QUIC connection events and SMB over QUIC connection events are now written to the event log to include the QUIC transfer.

SMB signature audit and encryption audit: Administrators can now enable SMB server and client auditing to support SMB signing and encryption. This shows if a third-party client or server does not support SMB encryption or signing. You can configure these settings using PowerShell and Group Policy.

Windows Server Flighting is here!!

If you signed up for Server Flighting, you should receive this new build automatically later today. For more information, see Welcome to Windows Insider Flight on Windows Server – Microsoft Community Hub

the new feedback coordinator The app is now available for Server desktop Users!

The app should automatically update to the latest version, but if not, just check for updates in the app’s settings tab.

known problems

The upgrade is not complete: Some users may experience an issue when upgrading where the download process does not progress beyond 0%. If you experience this issue, upgrade to this newer build using the ISO media download option. Download Windows Server Insider Preview (microsoft.com)

VMs created using ISO media may not boot: Some users may experience boot issues when creating Gen 2 VMs using this build (26063) and trying to set the DVD ISO as the boot preference. The new VM is unable to boot from the ISO and skips to the next boot options. This will be addressed in a future release.

Access denied error when using Diskpart –> clean image On Winpe.vhdx virtual machines created using WinPE: Create Bootable Media | Microsoft Learn. We are working to resolve this issue and expect to have it fixed in the next preview release.

Download Windows Server Insider Preview (microsoft.com)

flight: The label for this flight may incorrectly point to Windows 11. However, when selected, the installed package is a Windows Server update. Please ignore the label and proceed to install your flight. This issue will be addressed in a future release.

Prepare: Some users may experience overlapping rectangular spaces following mouse clicks during “OOBE” setting. This is a graphics rendering issue and will not prevent the setup from completing. This issue will be addressed in a future release.

WinPE – Powershell Scripts: Applying the WinPE-Powershell optional component does not properly install Powershell on WinPE. As a result, Powershell cmdlets will fail. Customers that depend on Powershell on WinPE should not use this build.

If you are validating upgrades from Windows Server 2019 or 2022, we do not recommend using this build because intermittent upgrade failures have been detected for this build.

This build has an issue where archiving event logs with the “wevetutil al” command causes the Windows Event Log service to crash and the archive operation to fail. The service must be restarted by running “Start-Service EventLog” from an administrative command line.

If you have enabled Secure Activation Code Path/DRTM, we do not recommend installing this build.

Downloads are available
Downloads for some countries may not be available. See Microsoft suspends new sales in Russia – Microsoft On the Issues

Long Term Windows Server Channel Preview in ISO format in 18 languagesand in VHDX format in English only.

Windows Server Datacenter Azure Edition preview In ISO and VHDX format, English only.

Preview of Microsoft server languages ​​and optional features

keys: The keys are valid for preview build only

  • Server Standard: MFY9F-XBN2F-TYFMP-CCV49-RMYVH
  • Data center: 2KNJJ-33Y9H-2GXGX-KMQWH-G6H67
  • Azure Edition does not accept a key

Symbols: available on the public symbol server – see Using Microsoft Symbol Server.

expiry: Windows Server Preview expires on September 15, 2024.

Latest articles

More like this