The Server Core option is a minimal installation option that is available when you are deploying the Standard or Datacenter edition of Windows Server. Server Core includes most but not all server roles. Server Core has a smaller disk footprint, and therefore a smaller attack surface due to a smaller code base.
When you install Windows Server, you install only the server roles that you choose - this helps reduce the overall footprint for Windows Server. However, the Server with Desktop Experience installation option still installs many services and other components that are often not needed for a particular usage scenario.
That's where Server Core comes into play: the Server Core installation eliminates any services and other features that are not essential for the support of certain commonly used server roles. For example, a Hyper-V server doesn't need a graphical user interface (GUI), because you can manage virtually all aspects of Hyper-V either from the command line using Windows PowerShell or remotely using the Hyper-V Manager.
Server Core is a minimalistic Microsoft Windows Server installation option, debuted in Windows Server 2008. Server Core provides a server environment with functionality scaled back to core server features, and because of limited features, it has reduced servicing and management requirements, attack surface, disk and memory usage.[1][2] Andrew Mason, a program manager on the Windows Server team, noted that a primary motivation for producing a Server Core variant of Windows Server 2008 was to reduce the attack surface of the operating system, and that about 70% of the security vulnerabilities in Microsoft Windows from the prior five years would not have affected Server Core.[3] Most notably, no Windows Explorer shell is installed.[1] All configuration and maintenance is done entirely through command-line interface windows, or by connecting to the machine remotely using Microsoft Management Console (MMC), remote server administration tools, and PowerShell.
As Server Core implementations matured, it has evolved from an installation option to a configuration level.[4] Server Core is less looked down as a stripped version, instead the full GUI version is being thought of having a rarely needed client layer on top of the server layer[5]
Windows Server 2008 was the first Windows Server with the Server Core option (in all editions, except IA-64[1]). Though no Windows Explorer shell is installed, Notepad and some control panel applets, such as Regional Settings, are available. Server Core on Windows Server 2008 does not include the Internet Explorer or many other features not related to core server features.[1] A Server Core machine can be configured for several basic roles: Active Directory Domain Services, Active Directory Application Mode (ADAM), DNS Server, DHCP server, file server, print server, Windows Media Server, IIS 7 web server and Hyper-V virtual server.[1] Server Core can also be used to create a cluster with high availability using failover clustering or network load balancing.
As Server Core is not a different version of Windows Server 2008, but simply an installation option, it has the same file versions and default configurations as the full server version.[1] In Windows Server 2008 and 2008 R2, if a server was installed as Server Core, it cannot be changed to the full GUI version and vice versa.[2]
Unlike its predecessors, Windows Server 2012 can switch between "Server Core" and server with a DE installation option without reinstallation.[4] Server Core is now the default configuration level.[4] There is also a new installation option, "minimal server interface" that allows some GUI elements such as MMC and Server Manager to run, but without the normal desktop, shell or default programs like File Explorer.[14] The "minimal server interface" is in fact a server role (Server-Gui-Mgmt-Infra), the full GUI version contains the Server-Gui-Shell role as well. Some new roles are available, like Windows Server Update Services (WSUS), Active Directory Rights Management Server, and Routing and Remote Access Server, and many new features as well.[15]
I am just now learning about Windows server core. From research the cited reasons to use is smaller footprint, smaller attack surface, reduced resources. For our shop it would require some serious investment into Powershell and powershell learning.
Out of the gate I get an issue with a missing dll (oledlg.dll) but I know that I can work around it by dropping the dll into the server from a full installation. I found this but it's two years old at this point.
I created the entire lab with four VMs and 5GB of RAM. Could not have done it without Windows Core! I did end up using the GUI from my non-core installations but still, saved tons of space and 3GB of RAM on a system that has 9GB. DBAs get out there and play with Windows Core and PowerShell!!
Since most people have external firewalls, I find that most customers comletely disable all three in Windows. You still need to obviously poke holes somewhere, but better to not have to manage it per server unless you script it all out.
This is the where my issue diverges from the existing and good question: I am already working inside on Remote Desktop window, and then I RD into the servers when necessary, and then accidentally close the Command Prompt window.
Right now, the solution is to head back to the laptop's UI (out of the existing RD sessions), open a new RD into the server I'm trying to work in, use the above key combinations to open CMD prompt and reopen CMD.
Standard Edition includes up to two (2) virtual instances of the operating system environment (VMs / OSEs) or up to two (2) Hyper-V Containers when all physical cores in the Server are licensed. For every two (2) additional OSEs or Hyper-V Containers, all the cores in the Server must be licensed again.
I have a problem to get my windows server 2019 core working as doamin controller and dns into my checkmk. Port 6556 is open as you can see on one of the attachments. if I do a Portcheck on the machine I get in powershell that it is open and also in the firewall settings the port is open. But if I do a a ckeck from a other windows 10 client I get no connection to the port. Also from my debian checkmk server (ip 192.168.20.50) I get no connection.
I am ready to test whatever is necessary to make it working.
Because even if WSL2 will be in the end part of WS2022 LTSC (edition with GUI) I would rather want to have it working in the core edition, because of the resource saving potential.
Windows Server Core is a minimal installation option. Windows Server Core includes most but not all server roles. Server Core has a smaller disk footprint, and therefore a smaller attack surface due to a smaller code base
Server Core deployments are ideal for enterprises that need to deploy and maintain a large number of servers. Microsoft recommends Server Core for servers that require minimal administration once deployed for specific infrastructure roles, such as domain controllers and certificate authorities.
Windows Server Core Benefits:
Windows Server 2022 Datacenter brings the latest in security innovation, unique hybrid capabilities, and enhancements for modern applications. New security feature Secured-core builds on technologies such as System Guard and Windows Server Virtualization-based Security to minimize risk from firmware vulnerabilities and advanced malware.
Windows Server 2022 includes updates to Storage Migration Service that allow customers to seamlessly migrate file servers from NetApp FAS to Windows Server. The new release also provides increased file server security and performance with SMB AES-256 encryption and SMB on-the-fly compression. Furthermore, this release packs in significant improvements to Windows container runtime such as cross-version compatibility and containerization tools for .NET, ASP.NET and IIS applications.
Windows Server 2022 Core Benefits: