Windows 10: TLS version enforcement capabilities available on Windows Server 2019

Brink · Oct 2, 2019

At Microsoft, we often develop new security features to meet the specific needs of our own products and online services. This is a story about how we solved a very important problem and are sharing the solution with customers. As engineers worldwide work to eliminate their own dependencies on TLS 1.0, they run into the complex challenge of balancing their own security needs with the migration readiness of their customers. Microsoft faced this as well.

To date, we’ve helped customers address these issues by adding TLS 1.2 support to older operating systems, by shipping new logging formats in IIS for detecting weak TLS usage by clients, as well as providing the latest technical guidance for eliminating TLS 1.0 dependencies.

Now Microsoft is pleased to announce a powerful new feature in Windows to make your transition to a TLS 1.2+ world easier. Beginning with KB4490481, Windows Server 2019 now allows you to block weak TLS versions from being used with individual certificates you designate. We call this feature “Disable Legacy TLS” and it effectively enforces a TLS version and cipher suite floor on any certificate you select.

Disable Legacy TLS also allows an online or on-premise web service to offer two distinct groupings of endpoints on the same hardware: one which allows only TLS 1.2+ traffic, and another which accommodates legacy TLS 1.0 traffic. The changes are implemented in HTTP.sys, and in conjunction with the issuance of additional certificates, allow traffic to be routed to the new endpoint with the appropriate TLS version. Prior to this change, deploying such capabilities would require an additional hardware investment because such settings were only configurable system-wide via registry.

For a deep dive on this important new feature and implementation details and scenarios, please see Technical Guidance for Disabling Legacy TLS. Microsoft will also look to make this feature available in its own online services based on customer demand.

Bookmark the Security blog to keep up with our expert coverage on security matters. Also, follow us at @MSFTSecurity for the latest news and updates on cybersecurity.
Click to expand...

Source: https://www.microsoft.com/security/b...s-server-2019/

See also: https://techcommunity.microsoft.com/...LS/ba-p/887568

:)

Ahhzz · Oct 2, 2019

Office 2019

Only supported on Win10. Sorry, 8.1 users, only 4 years old, gotta go.

Microsoft Office 2019 will only work on Windows 10

https://blogs.technet.microsoft.com...-to-office-and-windows-servicing-and-support/

Spoiler Office 2019
Last year at Ignite, we announced Office 2019 – the next perpetual version of Office that includes apps (including Word, Excel, PowerPoint, and Outlook, and Skype for Business) and servers (including Exchange, SharePoint, and Skype for Business). Today we’re pleased to share the following updates:

Office 2019 will ship in H2 of 2018. Previews of the new apps and servers will start shipping in the second quarter of 2018.

Office 2019 apps will be supported on:

Any supported Windows 10 SAC release

Windows 10 Enterprise LTSC 2018

The next LTSC release of Windows Server

The Office 2019 client apps will be released with Click-to-Run installation technology only. We will not provide MSI as a deployment methodology for Office 2019 clients. We will continue to provide MSI for Office Server products.

Callender · Oct 2, 2019

Intermittent problems with TLS handshake and being timed out

Check DNS settings for both network adapters. Your Wifi might be set to use a different DNS server.

Getting message when trying to connect - Windows 10 Forums

Option Two follow steps then pick a DNS server from the list in item 7. Personally I use CloudFlare DNS

EDIT: Reset router first as already suggested.

Brink · Oct 2, 2019

Remote Desktop Services 2019 generally available Windows Server 2019

We released the newest version of Remote Desktop Services (RDS), RDS 2019, on October 2, 2018. RDS 2019 builds on the strong foundation of RDS 2016, letting you rapidly deploy on-premises or in the cloud. RDS 2019 is generally available with Windows Server 2019.

RDS 2019 will give customers the opportunity to leverage fantastic enhancements that make it the optimal version of RDS, to date, with several areas of innovation to improve the administrative and client experiences.

We brought innovation centered around three areas in RDS 2019 – Simplify IT management, User experience, and Improved security.

Simplify IT management

We have time and again heard from customers that license management should focus on simplification to scale deployments. Over the past few years, we have focused on improving management of Remote Desktop (RD) Licensing servers and entitlement through Active Directory (AD).

Now, you will be able to leverage high availability RD Licensing servers with forward-compatibility for future versions of Windows Server to enable easier management of licenses from a variety of RDS releases.

We have also made it easier to manage licenses for your employees by bringing the ability for the RD Licensing servers to update RDS user Client Access Licenses (CALs) into AD objects without accessing AD directly.

Lastly, we added perfmon (Performance Counters) APIs to provide partners an easy way to access data to build monitoring dashboards and deliver a consistent user experience.

User experience

We have also invested in providing an enhanced user experience where end users will be able to leverage desktops and apps through RDS 2019 to maximize productivity.

To start, we have added modern notifications for RemoteApp in the Action Center to improve productivity with applications like Microsoft Outlook.

We have improved upon innovations in Discrete Device Assignment in RDS 2016 to bring better security, virtual machine (VM) isolation, and performance for your graphic-intensive workloads. These improvements in GPU virtualization technologies will result in reduced network traffic and smooth video playback.

In addition to the GPU virtualization technology, we added high-level redirection of built-in or attached video cameras to deliver optimized video stream at higher frame rates in new and legacy remote applications and desktops. Users can now have a better experience with video-intensive interactions.

Lastly, we have reduced CPU usage on the client and server and bandwidth with better image quality to bring a faster end-to-end web client experience.

Security

One of our primary goals as the Remote Desktop Services product team is to help improve your security posture for your desktop and app virtualization environments. We have improved security through several enhancements.

With Windows Admin Center integration, it is easy to consolidate all local and remote server management into a single pane.

We have brought several Windows Defender optimizations for multi-session to give you more confidence in bringing a secure, scalable and cost-effective desktop experience to end users.

We also added web client support for Single Sign-on (SSO) to deliver a streamlined authentication experience for users connecting via the web client.

A few additional features include easy-to-configure DTLS-based encryption, all of which, work toward providing a trusted end-to-end RDS deployment.

Deploying RDS 2019 on Azure

We recognize that giving you the ability and making it easier to deploy RDS on Azure gives you a lot of flexibility, scalability, security and several other advantages of Azure. To improve flexibility and ease of cloud adoption, we also support hybrid deployments where the infrastructure roles can be in Azure while the host Virtual Machines (VMs) can be on-premises.

Key enhancements for deploying RDS 2019 on Azure include using Azure Key Vault for simplified certificate management and using Azure SQL DB for the RD licensing high-availability feature.

Lastly, later in October we will announce the availability of Remote Desktop Services (RDS) subscriptions through the Cloud Solution Provider (CSP) program. The availability of RDS in CSP addresses customer needs for additional cost-effective solutions that support desktop and app virtualization.

With RDS Subscriptions, partners can directly sell RDS subscriptions through our CSP program, eliminating the extra step of customers and partners acquiring different licenses through various programs. With this model, customers can enjoy a faster licensing cycle due to CSP integration with other Microsoft licenses including Windows Server, SQL Server, and Office to make it easy for partners to simplify the buying process.

For more technical information on RDS 2019, please refer to the RDS documentation page.
Download Windows Server 2019 that includes RDS 2019 now.

Frequently asked questions

Q: When will I be able to download the final version of Windows Server 2019?
A: Windows Server 2019 that includes RDS 2019 became generally available on October 2, 2018. It is available for evaluation and download through Volume Licensing Service Center (VLSC).

Q: Is Remote Desktop Server included in Windows Server 2019?
A: Yes. Remote Desktop Server 2019 will be a server role in Windows Server 2019.

Q: How do we view this announcement with Windows Virtual Desktop announcement at Ignite?
A: This is the most up-to-date version of RDS to enable running the latest on-premises multi-session virtualization available with Windows Server. Windows Virtual Desktop is a desktop and application virtualization service on Azure. Read the blog post Microsoft 365 adds modern desktop on Azure for more information.

Q: How is RDS on Azure different from Windows Virtual Desktop?
A: RDS is the ideal on-premises desktop and application virtualization solution, with a Windows Server operating system to provide a multi-session desktop experience. When deployed on Azure, you can scale your deployment and manage RD infrastructure roles in your own subscription. Windows Virtual Desktop enables customers to deliver a brand-new multi-session capability with a full Windows 10 experience, with the scale and flexibility of Azure. With this new service, Microsoft manages the infrastructure roles. Windows Virtual Desktop will be available for public preview later this calendar year. For more information, please visit the product page.

Q: Will there be a path to go from RDS to Windows Virtual Desktop?
A: Yes, we are developing Azure documentation guidance for this migration path as Windows Virtual Desktop gets closer to public preview later in calendar year 2018.
Click to expand...

Source: Remote Desktop Services 2019 generally available with Windows Server 2019 - Windows Server Blog

Windows 10: TLS version enforcement capabilities available on Windows Server 2019

TLS version enforcement capabilities available on Windows Server 2019

TLS version enforcement capabilities available on Windows Server 2019

TLS version enforcement capabilities available on Windows Server 2019

TLS version enforcement capabilities available on Windows Server 2019 - Similar Threads - TLS version enforcement

Windows Server 2019 Build version

Windows Server 2019 Build version

Windows Server 2019 Build version

Disabled TLS 1.1 on Server 2019

Disabled TLS 1.1 on Server 2019

How to know which versions of TLS is/are enabled on Windows Server 2019?

How to know which versions of TLS is/are enabled on Windows Server 2019?

Install Capability in Windows Server 2019 using DSIM.EXE

Install Capability in Windows Server 2019 using DSIM.EXE