Server Core is a minimalistic Microsoft Windows Server installation option, debuted in Windows Server 2008. Server Core provides a server environment with functionality scaled back to core server features, and because of limited features, it has reduced servicing and management requirements, attack surface, disk and memory usage.[1][2] Andrew Mason, a program manager on the Windows Server team, noted that a primary motivation for producing a Server Core variant of Windows Server 2008 was to reduce the attack surface of the operating system, and that about 70% of the security vulnerabilities in Microsoft Windows from the prior five years would not have affected Server Core.[3] Most notably, no Windows Explorer shell is installed.[1] All configuration and maintenance is done entirely through command-line interface windows, or by connecting to the machine remotely using Microsoft Management Console (MMC), remote server administration tools, and PowerShell.
As Server Core implementations matured, it has evolved from an installation option to a configuration level.[4] Server Core is less looked down as a stripped version, instead the full GUI version is being thought of having a rarely needed client layer on top of the server layer[5]
Windows Server 2008 was the first Windows Server with the Server Core option (in all editions, except IA-64[1]). Though no Windows Explorer shell is installed, Notepad and some control panel applets, such as Regional Settings, are available. Server Core on Windows Server 2008 does not include the Internet Explorer or many other features not related to core server features.[1] A Server Core machine can be configured for several basic roles: Active Directory Domain Services, Active Directory Application Mode (ADAM), DNS Server, DHCP server, file server, print server, Windows Media Server, IIS 7 web server and Hyper-V virtual server.[1] Server Core can also be used to create a cluster with high availability using failover clustering or network load balancing.
As Server Core is not a different version of Windows Server 2008, but simply an installation option, it has the same file versions and default configurations as the full server version.[1] In Windows Server 2008 and 2008 R2, if a server was installed as Server Core, it cannot be changed to the full GUI version and vice versa.[2]
To make administration of a Server Core machine easier, a Windows script called "scregedit.wsf" was included to make basic changes like turning Automatic Updates on or off, turning Remote Desktop on or off and change page file settings.[9]
In Windows Server 2008 R2, Server Core includes a subset of the .NET Framework, so that some applications (including ASP.NET web sites and Windows PowerShell 2.0) can be used. Having .NET support, it is also the first Server Core version where Microsoft SQL Server can be installed (a supported scenario only with SQL Server 2012+).[10][11] Server Manager has become remoteable.[4] New roles had been enabled to run on Server Core, including Active Directory Certificate Services and the File Server Resource Manager component of the File Services role. WoW64 is available by default, but can be disabled.[12]
In addition to the DISM command, a new command line Server Configuration tool (Sconfig.cmd) has arrived to configure and manage several common aspects of Server Core installations.[13] Server Manager can be used to remotely administer a Server Core machine.
Unlike its predecessors, Windows Server 2012 can switch between "Server Core" and server with a DE installation option without reinstallation.[4] Server Core is now the default configuration level.[4] There is also a new installation option, "minimal server interface" that allows some GUI elements such as MMC and Server Manager to run, but without the normal desktop, shell or default programs like File Explorer.[14] The "minimal server interface" is in fact a server role (Server-Gui-Mgmt-Infra), the full GUI version contains the Server-Gui-Shell role as well. Some new roles are available, like Windows Server Update Services (WSUS), Active Directory Rights Management Server, and Routing and Remote Access Server, and many new features as well.[15]
Windows Server 2016 has a minimal footprint installation option (smaller than Server Core) called Nano Server, optimized for Windows Server Containers and Hyper-V Containers, as well as other cloud-optimized scenarios. Microsoft removed the GUI stack, WoW64 and Windows Installer. There is no local logon or Remote Desktop support.[17][18]
On installation, Server 2016 offers two options: Windows Server 2016 (which is Server Core) and Windows Server 2016 Desktop Experience. Switching between these versions, as is available in Server 2012, is not supported (the possibility was removed in Technical Preview 3).[19]
I'm in the process of migrating all services across the operation from core installs of Windows Server 2016 to core installs of Windows Server 2019. I long ago scripted out firewall configurations for each server role using NETSH ADVFIREWALL and all of that is good, no problems. I can connect to these core versions of Windows Server 2016 to visually audit or quickly toggle unrelated rules on or off in mass using the MMC firewall tool but I've thus far been unable to do so for the new core Windows Server 2019 servers.
I know there are numerous commands vis netsh or PowerShell or GPO, many of which I'm using so I'm not entirely in the dark or unable to manage these, but I'm wondering if the MMC is now entirely unsupported/incompatible, or if there is some configuration option I've not toggled which sorts the MMC error I am seeing. I imagine Windows Admin Center is the next logical answer though I do not have a working gateway service. Anywho - I have a bunch of boxes now and am really missing the MMC if someone could provide an answer or verification. Thanks!
Update : I've found I can use MMC to remotely bulk manage or visually audit firewall rules against Windows Server 2019 core VMs but only when run from an existing Windows Server 2016 box which happens to be installed full GUI itself. That has been getting me by, and suggests that the MMC option isn't incompatible with Server 2019, though I've as yet not discovered any solution to the errors when attempting to do this same administration from a Windows 10 client.
I thought I had replied to this a long time ago - My bad!
Thanks for the suggestion and it was definitely something I hadn't thought to try myself. Doesn't seem to have made any difference in the MMC crashes or errors however. At least some of the snap-ins work though some crash and others seem kind of wonky.
@Dave Patrick I just got my WAC gateway up and running around a month ago and have been prodding at migrating management functions as I get accustomed to using it - I'm definitely aware that the MMC paradigm is long outmoded. I guess old habits die hard! Thanks for the link.
@egpd_smoede The firewall MMC isn't the only one I've found to be wonky from a desktop client, though for the most part they seem to still be functional. I'm working on sorting out methods to recreate these processes I have via the Windows Admin Center so with any luck I'll eventually move mostly away from the MMC tools I've curated over the years before things really start to break.
As a Microsoft SQL Server MVP I am afforded the opportunity to take part in promotional programs from other companies that like to offer complimentary licenses to MVPs. One of those companies is VMWare. As part of the VM Guru program I have been allowed to use VMWare Workstation in order to create guests locally here on my laptop for just over a year now.
After I got everything built, named my domain (DALEK.local), and the instances (DOCTOR and ROSE) installed, etc. I wanted to then take a quick tour of how I would administer these Server Core instances. Since I was hearing about how difficult it would be for someone without any proper training I was curious to know what was the learning curve for this new platform.
Everything you know in SSMS carries over to Server Core instances. No need to panic. If you are used to using SSMS to administer SQL Server then you can continue to use SSMS for SQL Server running on Server Core.
I created the entire lab with four VMs and 5GB of RAM. Could not have done it without Windows Core! I did end up using the GUI from my non-core installations but still, saved tons of space and 3GB of RAM on a system that has 9GB. DBAs get out there and play with Windows Core and PowerShell!!
Instead of continuing to cite edge cases that use odd architectural design patterns and questionable hiring practices, why not write your own blog post that describes the problem you are trying (poorly, I might add) to describe here?
I think it would be great to see a post that helps explain the situation, how things got to that point, the issue that arose, the solutions that came about, and the steps taken in order to avoid the issue from happening again.
Since most people have external firewalls, I find that most customers comletely disable all three in Windows. You still need to obviously poke holes somewhere, but better to not have to manage it per server unless you script it all out.
SQL Rockstar is known to be a reputed consulting firm for SQL SERVER related Courses with top talented database professionals and software engineers coming from some of the most established and most successful software development and technology consulting firms around the globe for providing a tailored-made solutions to their clients at the very best of their knowledge and liable time.
I have a problem to get my windows server 2019 core working as doamin controller and dns into my checkmk. Port 6556 is open as you can see on one of the attachments. if I do a Portcheck on the machine I get in powershell that it is open and also in the firewall settings the port is open. But if I do a a ckeck from a other windows 10 client I get no connection to the port. Also from my debian checkmk server (ip 192.168.20.50) I get no connection.
d3342ee215