Installing Windows Server roles and features
Roles and features add additional functionality to your environment. As you add roles, it is critical that hardening is also taken into consideration and understood. For example, hardening a Domain Controller (DC) will be different to that of an IIS web server. There will be some base similarities, but you need to understand what each of these roles and features provide and how to best secure them if they are to be enabled. Any mishandling could provide an opportunity for a hacker to exploit or infiltrate your environment.
The following roles are features in Windows Server 2019 that are available to help with securing and hardening your environment:
- Active Directory Certificate Services
- Active Directory Domain Services
- Active Directory Federation Services
- Active Directory Rights Management Services
- Device Health Attestation
- Host Guardian Service
- Network Policy and Access Services
- Remote Access
- Remote...
