Start-up security for Windows servers
These three documents provides key best practices to help organisations achieve the secure implementation of a Windows Server 2016 (and later versions) intended to operate as an Active Directory member server, a standalone server not joined to an Active Directory domain, or a domain controller.
ANSSI's Back to Basics aim to enlighten all our readers, whatever their level of technical knowledge, on the major challenges of cybersecurity. They reflect the agency's point of view at the time of publication, and are not intended as detailed recommendations, like our guides. Rather, they set out independent best practices that can be implemented in a complementary manner. These recommendations are likely to be regularly updated in line with developments in the threat environment, the technologies used, our feedback, etc.