Windows Server 2025 — New Features, Migration, Security
A three-day Windows Server 2025 course treating three areas as equal pillars: new platform features (hotpatching, dMSA, SMB over QUIC), planning and executing migration from Windows Server 2019/2022, and security hardening (security baseline, hardening) — for organizations planning a move to the latest server version.
Three pillars of a single migration
Migrating to Windows Server 2025 is not just about adopting new features — it means simultaneously changing operational processes (hotpatching instead of maintenance windows), a server-role migration plan, and security configuration. The course walks through all three areas as a coherent whole, not as separate, unrelated topics.
Security as an equal priority, not an add-on
Stricter default LDAP signing and Kerberos hardening settings in WS2025 can block legacy applications if they are not tested beforehand. A dedicated security module teaches how to identify such dependencies before a production migration and how to deploy a security baseline aligned with Microsoft’s recommendations.
From plan to deployment
The final module ties theory to practice: Azure Arc integration, Windows Admin Center as a central console, and a workshop building a step-by-step migration schedule for a sample organization — so participants leave with a ready action plan, not just theoretical knowledge.
Benefits
- Learn the key Windows Server 2025 features (hotpatching, dMSA, SMB over QUIC, Storage Spaces Direct)
- Plan and execute a migration from Windows Server 2019/2022 to version 2025
- Deploy a security baseline and hardening mechanisms specific to WS2025
- Assess the impact of new security features on your existing hybrid infrastructure
Who is this training for?
Prerequisites
- Experience administering Windows Server (any prior version)
- Basic familiarity with Active Directory and Windows networking
Training program
Windows Server 2025 — architecture and new features
- WS2025 vs. WS2022 feature overview: what actually changes for administrators
- Hotpatching — updates without a system restart, requirements, and licensing
- Delegated Managed Service Accounts (dMSA) as the successor to gMSA
- SMB over QUIC — secure file share access without a VPN
Migration planning and execution
- Migration paths from Windows Server 2019 and 2022 — in-place vs. side-by-side migration
- Migrating server roles (AD DS, DNS, DHCP, file services) step by step
- Application compatibility and common migration pitfalls
- Decommissioning plan for legacy domain controllers
Security and hardening in WS2025
- Security baseline for Windows Server 2025 — Microsoft's reference configuration
- Hardening Active Directory: LDAP signing, Kerberos hardening, protecting privileged accounts
- Storage Spaces Direct and encryption of data at rest
- Monitoring and auditing security events after migration
Azure integration and the hybrid environment
- Azure Arc — managing on-premises servers from Azure
- Windows Admin Center as a central management console
- Backup and disaster recovery in a hybrid environment
- Workshop: building a step-by-step migration schedule for a sample organization
Delivery Methods
Online
- Convenience of participating from anywhere
- Interactive live sessions with trainer
- Materials available for 30 days
- No travel costs
On-site
- Direct contact with trainer and group
- Intensive hands-on workshops
- Networking with other participants
- Full focus on learning
Frequently asked questions
How is this different from Windows Server 2025 — New Features and Migration in our catalog?
The existing course focuses primarily on platform features and the migration process. This course treats three areas — new features, migration, and security — as equal pillars of the program, with a dedicated module devoted solely to hardening and the security baseline for WS2025 (LDAP signing, Kerberos hardening, protecting privileged accounts) that the existing course does not develop to the same level of detail. The choice between the two courses depends on whether you need a general platform overview or an in-depth migration-plus-security track.
Does hotpatching require an additional license?
Yes — hotpatching in Windows Server 2025 requires an active Azure Arc subscription for the given server (for on-premises environments) or running the server as an Azure VM. The course covers this licensing requirement in detail and walks through the configuration step by step, including common mistakes on first deployment.
Is migration from Windows Server 2012/2016 directly supported?
There is no direct in-place migration path from WS2012/2016 to WS2025 — an intermediate step through WS2019 or WS2022 is required, or a side-by-side migration with role transfer. The course covers both scenarios and helps you choose the right path depending on the scale of your environment.
Which WS2025 security changes have the biggest impact on existing infrastructure?
The biggest impact comes from stricter default LDAP signing and Kerberos hardening settings — they can block legacy applications and devices that do not support newer authentication protocols if these are not identified and tested beforehand. The security module of the course teaches how to identify such dependencies before a production migration, rather than discovering them after the fact.
Request a quote
Funding Options
Check funding options for your company
Development Services Database
Up to 80% funding for SMEs from EU funds
Check availabilityNational Training Fund
Up to 100% funding for employers
Learn moreTrusted by
We train teams at Poland's largest companies
Interested in this training?
Contact us - we'll prepare an offer tailored to your organization's needs.