Microsoft has released a new preview version of Windows Server 2025 LTSC for Windows Server Insiders.
Windows Server now has a new account type called Delegated Managed Service Account (dMSA), which enables the transition from a regular service account to a machine account with managed and fully randomized keys. Authentication for dMSA is tied to the device identity, which prevents kerberoasting, a major problem with regular service accounts. Furthermore, enhancements to the Server Message Block (SMB) protocol for QUIC, signature, and encryption are included, such as the ability to disable SMB over QUIC client and server options, enable auditing of SMB server and client for SMB signing and encryption support, and so on.
Announcing Windows Server Preview Build 26227
Hello Windows Server Insiders!
Today we are pleased to release a new build of the next Windows Server Long-Term Servicing Channel (LTSC) Preview that contains both the Desktop Experience and Server Core installation options for Datacenter and Standard editions, Annual Channel for Container Host and Azure Edition (for VM evaluation only). Branding has been updated for the upcoming release, Windows Server 2025, in this preview - when reporting issues please refer to Windows Server 2025 preview. If you signed up for Server Flighting, you should receive this new build automatically.
What's New
[NEW] Delegated Managed Service Accounts (dMSA)
A new account type known as delegated Managed Service Account (dMSA) is now available that allows migration from a traditional service account to a machine account with managed and fully randomized keys, while disabling original service account passwords.
Authentication for dMSA is linked to the device identity, which means that only specified machine identities mapped in AD can access the account. Using dMSA helps to prevent harvesting credentials using a compromised account (kerberoasting), which is a common issue with traditional service accounts.
