Chapter 16: Hardening Your Infrastructure

Windows Server 2019 is more secure than any previous version of Windows Server. Right out of the box, you have a good anti-virus and anti-malware service (which we looked at in previous chapters). Although everyone's environment is different and has different needs, there are certain security requirements that are fairly common to most environments, and that's what we're going to look at in this chapter.

It's usually not good enough to just stop at the default security configuration. The default configuration in Windows (and frankly almost every operating system) aims to strike a balance between ease of configuration and being secure out of the box. But once you've got your servers configured with the services and roles that they require, there are further security steps that we can take.

There are also other Windows features that we can use to help enhance our security; for example, configuring Windows Server...