Skip to content

Windows

Windows Server 2022 deployment

The current Windows Server release with SPLA licensing and pre-handover hardening. Secured-core features, update policy and remote access configuration are part of the deployment.

Current server release
2022
Licence included
SPLA
Modern encryption support
TLS 1.3
Remote desktop access
Behind VPN

What the 2022 release changes

Windows Server 2022's most visible change over earlier releases is on the security side. The secured-core approach — a hardware-rooted chain of trust with virtualisation-based protection — makes attacks against the OS kernel considerably harder.

On encryption, TLS 1.3 is supported by default and SMB traffic can use AES-256. For systems sharing files across a corporate network, that means traffic no longer crosses the wire unencrypted.

The deciding factor is usually your application's supported matrix. If your software vendor does not officially support 2022, staying on an older release may be necessary — in which case we review together when that release's support ends and what risk that carries.

  • Secured-core features assessed and configured
  • TLS 1.3 and SMB encryption supported
  • Remote Desktop placed behind a VPN tunnel
  • Update policy tied to planned windows
  • Image-based backup configured as part of deployment

Features

Included with deployment

  • SPLA licensing

    Licensing is provided on a monthly usage model, so deployment completes without waiting on procurement.

  • Baseline hardening

    Unneeded roles disabled, local security policies set and access restrictions applied.

  • Secure remote access

    RDP is not exposed to the internet; access runs through a VPN tunnel terminated on pfSense.

  • Update plan

    Patch timing is agreed, with a snapshot taken beforehand to guarantee a rollback path.

  • Service monitoring

    Critical Windows services and resource metrics are tracked in Zabbix; a stopped service raises an alert.

  • Image-based backup

    Roles, configuration and data captured as one consistent image, so a restore needs no rebuild.

FAQ

Frequently asked questions

Can an older Windows Server version be installed?

The version your application requires can be installed. However, releases past end of support no longer receive security patches, so we assess the risk with you and, where possible, prepare an upgrade path.

Does licence cost vary by version?

Under SPLA, payment depends on duration and capacity. Because moving between versions requires no new licence purchase, upgrading to the current release adds no licensing investment.

Can I join the server to a domain?

Yes. The server can join your existing Active Directory or a new domain controller can be deployed. Where connectivity to your on-premises network is required, it is established over a VPN tunnel.

Let's plan your infrastructure together

Tell us what you need and we prepare a configuration and pricing specific to you. We don't sell fixed packages; we build the deployment, licensing and backup plan with you.