My server, plans to setup


Recommended Posts

Right i have my hard drive coming on Monday / Tuesday for my server, and also te replacement motherboard coming from eBay on Tuesday / Wednesday for me.

Basically i want to make it into a file / web / email server

I have downloaded Linux clarkconnect, as i was told this was best.

So any advice i need to make my server as secure as posible, and also good tips to making it the best performance?

dave164

Link to comment
https://www.neowin.net/forum/topic/270996-my-server-plans-to-setup/
Share on other sites

Right i have my hard drive coming on Monday / Tuesday for my server, and also te replacement motherboard coming from eBay on Tuesday / Wednesday for me.

Basically i want to make it into a file / web / email server

I have downloaded Linux clarkconnect, as i was told this was best.

So any advice i need to make my server as secure as posible, and also good tips to making it the best performance?

dave164

585288310[/snapback]

You should learn how to use iptables, you should also post in the Linux Server forum as more linux users will notice it.

For a decent GUI frontend for iptables you should look at:

http://www.fs-security.com/

iptables is part of 'netfilter', which is just a way of saying that iptables handles all IP/ethernet traffic before it is received by the kernel for inbound traffic, and after the kernel and before the NIC device on send.

Perhaps I should just say that it is your inbound and outbound packet filter (it also does more advanced processwing, if you wish). It is 'stateful', meaning that it is aware of connections already open, and can treat these differently than new connections.

You can edit the rules in the chain (it's like a flowchart) manually with text commands, or you can get a GUI frontend to handle the rules. (much easier with a GUI)

I have a GUI 'wizard' for my installation, but I don't recall what it was that I used at home (I am at work now). There is also fwbuilder at http://www.fwbuilder.org/ They aren't the one I use, but they all do the same thing, really - make it easier to set up your firewall (iptables) rules.

whats the domain name of ur server dude? lemme check the security :shifty: ...

:p nah .. i do penetration tests on server .. if ur server will be holding really imp imp files/data contact me . i will hardened it for a cost or ...

i give u some tips ( i found this on some free webhosters site)

1. Log into server as root.

2. Open /etc/httpd/conf/httpd.conf with an editor.

3. Change the line ServerSignature on to

ServerSignature Off

4. Find the line "HostnameLookups off"

After that line, add "ServerTokens Prod"

5. Save and exit.

6. Restart Apache with /etc/rc.d/init.d/httpd restart

Install System Integrity Monitor

System Integrity Monitor (SIM) monitors system services and provides a clean and information representation of system status. It is an essential tool for server admins to monitor servers. SIM has several modules that can be installed to help admin with common system processes. SIM will verify that system and services are online, check load averages, and maintain log files.

1. Login to server and su to root.

2. go to /usr/local 3. Get source file wget http://www.r-fx.org/downloads/sim-current.tar.gz

4. Untar file with tar -xzvf sim-current.tar.gz

5. cd sim-2.5-3 (or latest version of SIM)

6. Type ./setup -i

7. Enter and spacebar to continue.

8. Finally, get to auto-configuration script for SIM. Select options you want to install.

Security: Use SSH protocol 2

The old SSH Protocol 1 has several security leaks and faces many automated "root kits". Protocol 2 is an improvement to plug the holes. All servers with SSH 1 should use SSH 2.

1. Open /etc/ssh/sshd_config with an editor.

2. Find the line "#Protocol 2, 1".

3. Uncomment (remove #).

4. Save and exit.

5. Restart SSH with /etc/rc.d/init.d/sshd restart

: Disable direct root login

Root user is the most important account on a server. The root user has access to any file/program/application running on a server. By default, terminal services would allow the root user to login. This is a major threat to security as hackers can try to guess at the root password to gain access.

Disabling direct root login will create an extra user account before changing to root user. This will force a hacker to have try and guess 2 seperate passwords to become root user.

cPanel users/servers must add the user to 'wheel' group so that the user is allowed to su to root. Failure to do so would cause a lock out of the root account.

* A user with SSH access must already be created.

1. SSH into server as user and gain root access by 'su -'

2. Open /etc/ssh/sshd_config with an editor.

3. Find line PermitRootLogin yes

4. Uncomment it. Put no so thatPermitRootLogin no

5. Save the file and exit.

6. Restart SSH with "/etc/rc.d/init.d/sshd restart"

Security: Disabling Telnet

Telnet is a threat to server security. The protocol communicates on port 23 for both incoming and outgoing messages. Passwords and usernames are sent as clear text during logins, giving hackers the chance to tap the traffic between client and server and then gaining access. Telnet should always be disabled on web servers and replaced with a more secure platform like SSH.

To disable telnet on your server, follow these steps:

1. Login as root.

2. Open the file /etc/xinetd.d/telnet with your editor (pico/vi).

3. Find the line "disable = no" ,

replace with "disable = yes".

4. Restart the inetd service with command /etc/rc.d/init.d/xinetd restart

5. Do a quick scan to make sure port 23 telnet is closed.

nmap -sT -O localhost

warning :- DO this when u u.stand wht this means... do not blame me if ur dog eats ur cow or ur server crashes and burns.

kyro, that is some EXCELLENT and throrough advice! (Y)

Might I ask you to make a post in the Server FAQ section with that info? I am sure it will help someone setting up a *nix server. :yes:

Great advice, should be posted in the Server HOWTOs.

However I should mention that hardening is someone a new craze among server admins and there are many "Hardeners" popping up as well as "Hardened Distro Versions" (usually that someone other then the official dev team made).

Right im getting more and more confused now :p

Help *eek's*, if someone could give me a step by step after installing clarkconnect Linux, in basic language, not complex language!!!

What programs do i need? I obviously need TightVNC to control my server, but what else?

dave164

You can do an FTP server as long as you have an FTP daemon, which most linux distros have. I'm not sure about clarkconnect, but I'd assume so. Also you do have a webcontrol interface and you don't need a VNC connection if you don't want one.

I'm not sure the installation of clarkconnect, but most linux installers do a pretty good job of walking you through it. Are you having trouble installing it?

Nope, im just getting everything sorted before i get my HDD on Tuesday, motherboard on Wednesday, then i install it all :)

Just getting all prepared.

Can anyone recommend me any other Linux distro... it was something beginnning with an M that i remember people talking about...

Nope, im just getting everything sorted before i get my HDD on Tuesday, motherboard on Wednesday, then i install it all :)

Just getting all prepared.

Can anyone recommend me any other Linux distro... it was something beginnning with an M that i remember people talking about...

585295098[/snapback]

Probably Mandrake, but I wouldn't use it as a server. It can be used as one and probably do a good job, but it wouldn't exactly be the best server solution in my opinion.

-

Don't worry about the installation, it should be painless.

kyro, that is some EXCELLENT and throrough advice! (Y)

Might I ask you to make a post in the Server FAQ section with that info?  I am sure it will help someone setting up a *nix server. :yes:

585293410[/snapback]

Sir .. Yes Sir.....

*stomps the ground * marches to Completed server howto thread and makes a howto*

Sir... your command was carried out sucessfully ...

:cool:

I obviously need TightVNC to control my server, but what else?

585294805[/snapback]

That would be a very Windows-like way of managing your server.

dotRoot mentioned using a web interface (like webmin) to setup your server, which is an easy option for the GUI-centered. Logging in via ssh and changing things through a command line is another option, as well.

The link he points should probably be pinned and made into a sort of 'definitive' *nix server thread... :shifty:

To setup a successful file sharing server/production server ;

Get a linux OS installed on it; such as Fedora core.

Don't install a GUI, it just leads to security problems and its also a waste of resources.

You need to install the basics. NO GUI'S!

Ok, Then you need to secure it via ssh...

There are a lot of guides on the net for this

You will need to install a control panel, APF firewall, BFD - Brute force protection, antivirus, IDS - snort and acid

There are a heap of things....

But don't install a GUI, do everything over SSH. Its easier, and i don't think VNC works on linux ;)

Lol i just keep getting more and more confused now :p

Does someone have a guide cos people keep saying stuf, and it seems more and more is coming all the time, doing things through commands has never been my kinda style, id rather "see" it happening.

I'd guess i should wait untill i install Linux, cos im getting really really really confused now *rubs head*.

My stages now:

1) Downloading FC2, heard it was more stable then FC3

2) Mobo + HDD coming on Tuesday

What im stuck with:

1) What programs are used to do what i want (ftp / mail / web sites)

2) What everyone is saying about SSH and not installing a GUI, etc..

Edited by dave164

Well, there is this HOWTO in our FAQ/HOWTO section:

https://www.neowin.net/forum/index.php?showtopic=258829

FC3 may have been a better choice than FC2, because you will have some updating to do. Other than that, it really doesn't matter.

You can use Apache (httpd) as your web server, ftpd for ftp, and probably qmail (default is sendmail in Fedora) for mail serving.

You don't need to install a GUI of any sort. Using webmin will allow you to set up your server via a GUI on another PC (point your browser to your server and go). You can ssh into your server and do everythign through the command line, once you get comfortable with that, but the main issue is there is no need to install X or any GUI environments.

(and, of course, if you as 20 Linux experts, you will get 50 opinions, as there are always alternatives) ;)

Yeh i keep getting really confused :cry:

But thanks for summing it up mark :)

Can i just login to my server via the ip its on? How do i? *sounds really really n00b*

Installation is sounding really complicated now im reading more stuf, etc..

Im all ok about the apps now though!!

Im so damn confused, can someone talk to me on MSN please?

Edited by dave164
Can i just login to my server via the ip its on? How do i? *sounds really really n00b*

585300567[/snapback]

Hang in there! It sounds more complex than it is. :D

And, yes, when you have a server set up, you can log into it by IP or by name on the network.

  • ssh can be used to log into it, just like you were at the keyboard right on it. Just ssh -l username hostname (or use IP), and it will prompt you for the password for the username you provided. Bingo! You are logged in.
  • Or webmin can be used by any browser on your network. Point your browser to http://pcname_or_ip:10000, and login. (I haven't used webmin ever, but that is what the docs I could find say to do)

Hope that helps (and not confuses!)

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • FINALLY a rare comment from someone who understands the industry. The level of clue essness in the comments in every article on Neowin is astounding.
    • The comment about clock speeds not changing is actually not really true. Due to aggressive power management, clock speeds on an idle system are lower now than they have been in decades. It isn't uncommon for a laptop to be hovering right around 1GHz if it isn't working on anything. Yes you right that more work gets done with each cycle, but you are still dealing with a nearly 5x difference between low and high power states, which can change how snappy the interface feels. I totally agree with you about the action center and other Windows UI elements taking a shameful amount of CPU cycles to do basic functions, but I see that as a separate conversation. While I do agree with the "don't sweep that under the rug" concern, I also don't want to get into a debate about what things deserve a boost or not. In my opinion, boost all the things, get the full value from your CPU. Keep in mind, we are talking about milliseconds of boosting, it isn't meaningfully going to change power consumption.
    • Windows 11 gets better widgets, new Screen Tint feature, and more in the latest build by Taras Buria While we usually cover Experimental and Beta builds together, this week's Beta updates are worth a separate article, as they offer more changes and new features than the other build. If you are a Windows Insider with a computer enrolled in the Beta Channel, you can download build 26220.8680 or build 28020.2298 (26H1). Today's release introduces long-anticipated improvements to Windows Widgets, a new display accessibility feature, File Explorer, and more. [Widgets] We're working to make Widgets feel less distracting and overwhelming by making the experience quiet by default. To do this, we're releasing a new set of default settings designed to reduce unexpected alerts and visual interruptions. These changes include: Disabling Open on hover by default Turning off Taskbar badging by default Opening to widgets experience on first launch Placing Weather as the only default widget on the lockscreen Restricting the number of Taskbar alerts that can be sent daily Limiting Taskbar alerts until you choose to open and engage with the Widgets experience As we continue to make Widgets feel less distracting, we've also made a small but meaningful visual update to taskbar badging. For those that have taskbar badging on, the badge color will now match your Windows accent color instead of always appearing red, reducing the sense of urgency that something needs your immediate attention. However, we still want it to be easy to find missed information so we now support badges on the icons in the Widget navigation bar that can show you the number of missed alerts from that specific dashboard; and badges clear automatically when you leave a dashboard, making it easy to track what's new. And if you don't want badges at all in your navigation bar, there's a setting to turn them off. We're also quieting down a user's experience based on their level of engagement, so that existing users also have a less distracting experience. For example, a user who barely engages with Widgets and would benefit from having the experience quieted down with taskbar badging turned off as it is for new users who experience it as quiet by default, as compared to a user who highly engages with Widgets and likely has their settings set to a state that works best for them and don't need some adjustments. You can also easily turn features like Taskbar badging on or off through Widgets settings, which is now a full screen experience that's easier to read. In pursuit of memory savings across the system, Widgets also now leverages device characteristics and user behavior patterns to optimize memory use. This includes things like a smaller default memory footprint, giving back memory faster when not in use, and limiting pre-launch on devices with lower memory capacity. Please share your feedback to let us know how these changes are working for you or if you encounter any issues with your quieter Widgets experience. Feedback: Share your thoughts in Feedback Hub (WIN + F) under Widgets. [Accessibility] New accessibility setting: Screen tint (also available in the 26H1 build) We're introducing screen tint, a new accessibility setting that applies a color overlay across your entire display, softening its intensity so it's easier on your eyes throughout the day. If bright, saturated screens leave you with tired or sensitive eyes by the end of a long session, screen tint can help. To get started, open Settings > Accessibility (or press Win + U) and look for screen tint under the Vision section. From there you can: Pick from six preset colors or choose a custom color of your own. Adjust the tint strength slider from a subtle wash to full intensity. Night light warms your display to reduce blue light that can interfere with sleep. Screen tint reduces overall screen intensity to ease eye fatigue and light sensitivity during the day. They tackle different problems and you can use both at the same time, one working on warmth and the other on intensity. Note that turning on screen tint will disable color filters, and vice versa. If you currently rely on color filters, you may need to keep screen tint turned off. [Windows Magnifier] Magnifier now gives you more control over how you zoom. You can type an exact zoom percentage directly in the magnifier toolbar to land on precisely the level you need. We've also added preset step increments (5%, 10%, 25%, 50%, 100%, 150%, 200%, and 400%) to the Settings dropdown, so you can jump to common levels in a single click. Whether you need a subtle boost or a dramatic close-up, Magnifier adapts to how you want to zoom. Feedback: Share your thoughts in Feedback Hub (WIN + F) under Accessibility > Magnifier [Input] Update: The emoji panel (Windows key + period (.)) now uses GIPHY as the GIF provider, delivering a smoother GIF browsing and sharing experience following the deprecation of Tenor. [Remote Recovery Management] Adding recovery remote management plug-in for extending WinRE management capabilities for MDM providers [File Explorer] The address bar now supports paths containing double backslashes and quotation marks (for example, C:\Users\user or "C:\Users\user"), improving compatibility with a wider range of inputs. Improved performance when mounting large ISO files by preventing File Explorer from becoming unresponsive during SmartScreen checks. The address bar suggestion dropdown is more reliable and now consistently closes after an item is selected. This update addresses an issue on File Explorer Home where OneDrive files could appear duplicated in the Favorites section. This update includes several refinements to the Rename experience: Addresses an issue where text was repeatedly selected when renaming items in folder views. Addresses an issue where case-only name changes were not immediately reflected in folder views for items stored locally or in the cloud. [Windows Update] If you were seeing error 0x800f0843 when attempting to install the previous update, that should be resolved now. [Other] - 26H1-only Task Scheduler will now persist column width adjustments in task list view across sessions. You can find the release notes for build 26220.8680 here and build 28020.2298 here.
    • Microsoft releases big Windows 11 25H2, 24H2 Release Preview with Recovery, Update features by Sayan Sen Microsoft has released today new Release Preview channel builds for Windows 11 Insiders. The new builds, 26100.8728 and 26200.8728, are for Windows 11 24H2 and 25H2 flighters, respectively. Meanwhile 26H1 flighters get 28000.2333. The new builds include new features related to Windows Update, Recovery, and more. The full changelogs, which are quite long today, are given below. First up we have for Builds 26200.8728 and 26100.8728: Gradual rollout This section highlights some new features and enhancements for Windows 11 PCs, including AI-powered capabilities, continuous innovation, and performance improvements. [Point-in-time restore for Windows] New! This flexible recovery feature helps you quickly roll back your PC, including apps, settings, and personal files, to a recent automatic restore point. It helps reduce downtime and simplifies troubleshooting when issues occur. To learn more, see Point-in-time restore for Windows. [Windows Update] New! A calendar experience in Windows Update settings (Settings > Windows Update) lets you pause updates by choosing an end date, for up to 35 days. You can extend the pause by selecting a different end date and re-pause updates as needed. [Widgets] New! A quieter, more focused Widgets experience helps reduce interruptions and improves default settings and notification controls: Reduce distractions: Widgets no longer open on hover. Notifications and taskbar badges are minimized by default, and badges use colors that match your Windows accent. Simpler: Open to the Widgets dashboard by default on first use. New users see a simplified experience on lock screen with Weather as the only default widget. Customize: Configure Widgets the way you want by selecting Settings in the navigation bar, then changing any default settings. Stay informed: Dashboard icons show the number of alerts, and badges clear automatically when you leave a dashboard. Adjusted defaults: Some default settings are preserved based on usage, while others adjust to reduce interruptions. Performance improvements: This update provides improved reliability, responsiveness, and visual quality across the Widgets experience. [Accessibility] New! This update makes your screen easier to see and helps you customize your zoom experience: Screen tint: Apply a full-screen color overlay to help reduce eye strain and improve readability. Choose from preset tint options, adjust intensity, or turn it on automatically. Find this feature in Settings > Accessibility. Magnifier: Enter a zoom percentage directly and change it in increments in the Magnifier window for more precise, flexible control. Magnifier settings menu: Modify zoom increments directly from the Magnifier bar instead of navigating to Windows Settings each time. [File Explorer] When you hover over a file in File Explorer Home, commands such as Open file location and Ask Copilot appear as quick actions. This experience is now supported for work and school accounts (Entra ID). This feature isn't available in the European Economic Area. The address bar now supports paths containing double backslashes and quotation marks (for example, C:\Users\user or "C:\Users\user"), improving compatibility with a wider range of inputs. The address bar suggestion dropdown is more reliable and now consistently closes after an item is selected. This update addresses an issue on File Explorer Home where OneDrive files could appear duplicated in the Favorites section. This update includes several refinements to the Rename experience: Addresses an issue where text was repeatedly selected when renaming items in folder views. Addresses an issue where case-only name changes were not immediately reflected in folder views for items stored locally or in the cloud. [Bluetooth] This update improves reliability and performance when connecting to and using Bluetooth devices: New! Windows now keeps the microphone mute state in sync between the audio mixer and the Hands-Free Profile (HFP) for a more consistent experience with Bluetooth headphones with mute buttons or indicators. Device compatibility: Improves compatibility with certain Bluetooth audio devices, helping AirPods appear faster in pairing mode and improving microphone reliability on Beats Studio Pro headphones. Bluetooth audio stability and quality: Improves Bluetooth audio stability with certain PC manufacturer drivers (error code 0x9F). Improves Bluetooth audio quality and reliability for voice calls when using classic audio devices with the Hands-Free Profile (HFP). Improves reliability of LE Audio streaming after a connection is lost and restored. Reduces time for LE Audio accessories to start playing audio while using the microphone. Device management: Bluetooth device removal is now more reliable when the Bluetooth radio is disabled or changed after pairing, reducing occurrences of the "Remove failed" message. Settings experience: Improves stability when using the Bluetooth & devices settings page for a smoother, more consistent experience. Connection reliability and responsiveness: Reduces the time it takes for classic Bluetooth audio devices to reconnect after Windows resumes from hibernation. Improves reliability when LE Audio accessories disconnect, such as when another device (for example, a phone) connects. [Bluetooth and Phone Link] This update improves audio routing for calls made through a connected phone: When an outgoing call is dialed from a paired phone, audio remains on the phone while ringing and transfers to the PC only when the call is answered from the PC. When Do Not Disturb is enabled on Windows, incoming call audio from a paired phone no longer rings on the PC. [Voice access and voice typing] New! You can now use voice access and voice typing in French, German, and Spanish. As you speak, your PC improves your text in real time. It corrects grammar, punctuation, and recognition errors, and helps improve clarity, even in the presence of background noise. This makes dictation smoother and reduces the need for manual edits. Available on Copilot+ PCs. [Audio] This update improves the reliability of the inbox HD Audio driver. [Taskbar] This update improves the reliability of invoking the Start menu when clicking the left edge of the taskbar when icons in the taskbar are left-aligned. [Emoji panel] The emoji panel (Windows key + period (.)) now uses GIPHY as the GIF provider, delivering a smoother GIF browsing and sharing experience following the deprecation of Tenor. [Networking] This update includes networking improvements for virtualized environments. Confidential Virtual Machines (CVMs) now use SR-IOV hardware acceleration by default for improved network throughput, and a configuration issue in nested Hyper-V virtualization network setup has been corrected to ensure reliable VM network provisioning. This update improves the reliability of the Windows networking stack. It reduces bug checks (blue screen errors) related to Wi-Fi power and improves cellular (WWAN) connectivity, including support for IPv6 VPNs. Compatibility with third-party VPN software and SR-IOV configurations on server hardware is also improved. Network adapter settings and bindings are now preserved across OS upgrades. [Printing] New! New printer installations use Internet Printing Protocol (IPP) by default when supported, simplifying setup and improving reliability. To control this behavior, use the toggle in Settings > Bluetooth & devices > Printers & scanners > Default install printers using Windows Ready Print. [Windows Subsystem for Linux (WSL)] This update improves usage of WSL in mirrored networking mode with VPNs. [Display and graphics] Improves reliability of rendering content while scrolling for certain apps spanning across multiple monitors. Improves reliability and persistence of applying color profiles. [Location services] This update changes how some location settings are displayed in Settings > Privacy & Security > Location to help with clarity. When location services are turned off, settings like Default location and Allow location override do not immediately apply, since location information is not given to apps or services. These settings are now greyed out when location services are off to reduce confusion over when they take effect. [Search] This update improves the reliability of setting Search-related group policies. [Input] New! You can now customize the size of the right-click zone in Settings > Bluetooth & devices > Touchpad. Choose from default, small, medium, or large to control how much of the bottom-right corner responds to a single-finger right-click. This setting is only available on touchpads with a pressable surface. If your device manufacturer provides customization through their app, a Custom option appears to reflect those settings. This update also improves recognition of English characters when using Japanese handwriting. [General Reliability] This update makes underlying changes to help improve explorer.exe reliability, including addressing reliability issues on the login and lock screens related to the use of third-party credential providers, reducing the probability of taskbar icons appearing as blank gray placeholders, improving reliability of navigating to File Explorer Home during OneDrive sync, improving explorer.exe reliability when switching between multiple desktops, improving app launch reliability when shell extensions are installed, and addressing reliability issues related to acrylic blur effects in Start menu, Settings, and the lock screen. Normal rollout This non-security update includes quality improvements. The following summary outlines key issues addressed by the KB update after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change. [Secure Boot] With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout. [Authentication] This update improves Netlogon secure channel connections between domain controllers, enabling successful connections from member servers to domain controllers set up before 2025. [Networking] This update improves how your device connects to shared network resources. Connections used by apps and system features, such as the NetUseAdd function, now work more reliably, including unauthenticated (null session) connections. [Start Menu] This update improves the Start menu experience, allowing newly installed or removed apps to appear without requiring sign-out or restart. This mainly affects apps that create a Start menu folder with multiple shortcuts. [Taskbar] This update improves notification badge display across your apps. Notification counts and badge visuals now update correctly, helping you stay up to date with new activity. Up next we have build 28000.2333: Gradual rollout Windows 11 PC experiences This section highlights some new features and enhancements for Windows 11 PCs, including AI-powered capabilities, continuous innovation, and performance improvements. [Magnifier in Windows] New! Magnifier now provides clearer and more consistent announcements when working with a screen reader. You'll hear helpful announcements when you zoom in or out, switch views, turn color inversion on or off, or turn Magnifier On or Off. This makes it easy to stay oriented while you work. New! Magnifier now supports magnification of permitted protected content. This update improves smoothness when moving Magnifier in lens mode. [Task Manager] New! Task Manager now offers improved visibility into NPU usage on PCs with an NPU. New optional NPU and NPU Engine columns are available on the Processes, Users, and Details pages, along with NPU Dedicated Memory and NPU Shared Memory optional columns on the Details page. Neural engines that are part of a GPU now appear on the Performance page, providing a more complete view of AI-related activity. A new optional Isolation column on the Processes and Details pages shows which apps are running in an AppContainer. You can add any of the new columns by right-clicking a column header in Task Manager and selecting them from the menu. This update improves CPU speed display on the Performance page of Task Manager for VMs, so it doesn't show higher than unexpected numbers after resuming from hibernate. [Camera] New! Windows 11's Multi-App Camera feature allows multiple applications to access your camera stream at the same time. Basic Camera mode in Windows 11 enables simplified camera functionality, useful for troubleshooting or improving stability when your camera is not working correctly. Enterprise admin can now set Multi-App Camera mode or Basic Camera mode through Group Policy, under Computer Configuration > Administrative Templates > Windows Components > Camera > Configure Camera Options. [Windows Setup] New! You can now choose a custom name for your user folder on the Device Name page during Windows setup. The updated experience makes it easier to select a custom name during setup only. If this step is skipped, Windows uses the default folder name and continues setup as usual. User folder names must follow standard Windows naming requirements. [General Performance] This update accelerates app launch and core shell experiences such as Start menu, Search, and Action Center. [Personalization] This update improves: Color selection accuracy when adjusting your accent color to match your wallpaper when the automatic accent color selection is enabled in Personalization settings. Wallpaper persistence reliability across restarts and upgrades, including better support for large-resolution wallpapers and other scenarios to prevent solid color wallpaper fallback. [Windows Hello] This update improves: This update optimizes the Windows Biometric service (WinBio) to help improve performance when your device resumes from Modern Standby. This update reduces unexpected authentication blocks in Windows Hello Enhanced Sign-in Security by resolving missing secure enrollment metadata. This update improves sign-in behavior on the lock screen and sign-in screen. When Windows Hello face or fingerprint is set up and available, it is now the default sign-in method every time you sign in, even if you used a different method previously. If you need to use your Windows PIN instead and use it three times in a row, Windows will stay with PIN until you switch to another sign-in method. [Windows Search Box] Windows Search will now find and prioritize files with as few as two characters. [Storage] The dialog box for creating a Dev Drive now supports specifying the size in gigabytes (GB) instead of only megabytes (MB). This option is also available when resizing volumes in Settings > System > Storage. In Settings > System > Storage, you now see a User Account Control (UAC) prompt only when you choose to view temporary files, instead of immediately when opening the page. [USB] This update improves reliability for displays attached to USB4 docks and hubs. These displays now light up more consistently, particularly when coming out of standby. The USB3 stack is updated to have additional resiliency and recovery measures in place against certain unexpected hardware faults and conditions. Users will experience higher reliability with USB devices. [Sensors] This update improves resiliency against apps that could keep the sensor hub powered on and drain power, impacting battery life. [Human Interface Device (HID)] This update improves battery life related to the HID and Input stack for failed HID devices. Power hygiene is also improved against applications that might initiate HID transfers during standby. [Input] The update improves: Reliability of the touch keyboard on the sign-in screen, including when entering or changing a password. Reliability of explorer.exe when closing the input switcher. Performance when opening or navigating to clipboard history. [Fonts] The Times New Roman font family is updated to improve the rendering of combining diacritical marks across Greek and Cyrillic scripts. This update provides more accurate and visually consistent text by addressing mark positioning issues. These changes improve readability, reduce rendering inconsistencies, and better support global language users working with Greek and Cyrillic content. [Task Scheduler] Task Scheduler now saves column width adjustments in task list view across sessions. [Desktop icons] This update improves reliability of loading desktop app shortcuts. [Microsoft Store] This update includes underlying changes that improve download performance and bandwidth usage. This update improves error reporting when downloads fail due to Windows Update group policy settings being enabled. [Reliability] This update improves Windows reliability on the sign-in and lock screens, in File Explorer, when using touch gestures on touchscreen devices, and when changing themes in Settings. Normal rollout This non-security update includes quality improvements. The following summary outlines key issues addressed by the KB update after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change. [Authentication] This update improves Netlogon secure channel connections between domain controllers, enabling successful connections from member servers to domain controllers set up before 2025. [BitLocker] This update improves BitLocker testing reliability by ensuring the required files are available for the BitLocker Drive Encryption USB BIOS Logo Test. You can find the blog post for builds 26100.8728/26200.8728 here and build 28000.2333 here.
  • Recent Achievements

    • Very Popular
      AndrewSteel earned a badge
      Very Popular
    • Veteran
      Taliseian went up a rank
      Veteran
    • One Month Later
      Clizby earned a badge
      One Month Later
    • One Month Later
      Timaximus earned a badge
      One Month Later
    • Week One Done
      Timaximus earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      502
    2. 2
      PsYcHoKiLLa
      172
    3. 3
      +Edouard
      163
    4. 4
      Steven P.
      86
    5. 5
      ATLien_0
      77
  • Tell a friend

    Love Neowin? Tell a friend!