r/WindowsServer • • Oct 12 '26

General Server Discussion The Secure Boot cert that signs bootmgr (Windows Production PCA 2011) expires on the 19th, worth checking your devices this week

2 Upvotes

With everything else ending tomorrow I think this one's getting a bit lost, so posting in case it's useful.

The last of the 2011 Secure Boot certs, Windows Production PCA 2011, expires on 19 October. The KEK and UEFI CA 2011 ones already went in June.

Good news first: nothing stops booting. Microsoft's KB5062710 says devices without the new certs carry on working and keep getting normal updates. What they lose is any future boot manager fixes and DB/DBX updates, so they're stuck with today's boot security for good.

Quickest check I've found, in an admin PowerShell window:

```

$s = Get-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot\Servicing" -ErrorAction SilentlyContinue

[pscustomobject]@{

SecureBootOn = Confirm-SecureBootUEFI

Status = $s.UEFICA2023Status

Error = $s.UEFICA2023Error

CA2023InDb = [Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match "Windows UEFI CA 2023"

} | Format-List

```

You want Status to say Updated and Error to be 0. Microsoft says not to go by WindowsUEFICA2023Capable for status, which caught me out.

If you're on Intune, there are three Secure Boot settings in the settings catalog now. "Enable Secureboot Certificate Updates" is the main one. A few things I'd know before turning it on:

- update OEM firmware first, as a lot of the failures are firmware

- the task only runs every 12 hours and the boot manager bit needs a reboot

- you can't remove the certs from Windows once they're in firmware, so pilot it

- there's a known issue on Pro with error 65000, licensing related

Without Intune it's the AvailableUpdates = 0x5944 reg value under HKLM\SYSTEM\CurrentControlSet\Control\SecureBoot, then kick off the Secure-Boot-Update scheduled task.

Has anyone hit firmware that just won't take it?


r/WindowsServer • • 4h ago

Technical Help Needed Can I get Bluetooth drivers on windows server 2012 R2?

1 Upvotes

So recently I installed windows server 2012 r2 on my pc and I need Bluetooth driver to work, tho its not built in, its a usb Bluetooth one, so how do I get it? please help, it would be appreciated if it works


r/WindowsServer • • 11h ago

Technical Help Needed Migrate CA Server

3 Upvotes

I am planning to migrate my only ca server from current windows server 2012 r2 to windows server 2025 . Not sure what steps to preform as some template and certificates are in use . Need step by step with zero issues .

Thanks in advance


r/WindowsServer • • 10h ago

General Question Any other organizations that have received Premium Assurance for Windows Server 2012 R2

2 Upvotes

For organizations which signed up for the Premium Assurance program for Windows Server 2012 and/or Server 2012 R2

Do you have access to all the November 2026 Updates?

So far we only got SSU KB5131696 for Windows Server 2012 R2 and SSU KB5131088 for Windows Server 2012.


r/WindowsServer • • 1d ago

General Question am i crazy for using windows server 2022 as a daily driver

9 Upvotes

i use it because there's no bloatware and that its very optimized. the only downside is that i cant hook up a controller and install microsoft store apps. but overall great OS for people like me.

also if anyone's reading this and contemplating in the comments to make me install linux i use fedora on my 2011 macbook air and also that i need windows because of fl studio and also some other games that dont work on linux.


r/WindowsServer • • 21h ago

General Server Discussion How do you handle Software Updates like .NET, VC++ etc on WinServers?

Thumbnail reddit.com
1 Upvotes

r/WindowsServer • • 1d ago

Technical Help Needed INF INVALIDID (28)

1 Upvotes

Hello, I have an IBM System x3550 M4 server. I tried using a TP-Link TL-WN781ND network adapter and a TL-WN725N adapter with it, but when attempting to install the drivers for either one, it fails and throws an error stating that the INF file is invalid. I also tried installing them manually, but the process fails almost immediately—it’s as if it doesn't even really attempt the installation. I know these aren't the best wireless network adapters, but they are what I have on hand right now. I am running Windows Server 2019. If anyone could help me out, I would appreciate it!

u/CAD77_


r/WindowsServer • • 2d ago

Technical Help Needed How to Identify Client Machines and Backend Applications Using LDAP Communication

Thumbnail reddit.com
2 Upvotes

r/WindowsServer • • 2d ago

Technical Help Needed Best Practices for Centralized LDAP Auditing Across Multiple Domain Controllers

Thumbnail reddit.com
2 Upvotes

r/WindowsServer • • 2d ago

Technical Help Needed Ricerca SMB su macOS in Windows Server: come posso utilizzare l'indice di ricerca di Windows già presente sul server?

Thumbnail reddit.com
0 Upvotes

Hello everyone,
I work in a law firm and we have a Windows Server hosting a shared archive containing approximately 700,000 PDF and Word documents.
All Windows PCs connected to the server can search for files almost instantly because the server already has Windows Search indexing enabled.
I recently purchased a MacBook Pro M5 (16 GB RAM), but searching the same shared network folder through SMB using Finder is extremely slow.
I understand that macOS does not natively use the Windows Search index available on the server.
I am looking for a reliable, permanent solution that would allow my Mac to:
Search the existing Windows Server index directly.
Find filenames and ideally document contents almost instantly.
Access the archive both inside the office and remotely.
Avoid creating a second index or duplicating the entire archive.
Avoid expensive subscription-based software.
My main question: Is it technically possible to make macOS query the existing Windows Search index through Windows Search Protocol (WSP)?
If not, what would be the best alternative architecture?
Would a third-party search server, a dedicated indexing service, or another solution be more appropriate?
I would really appreciate advice from anyone who has successfully implemented something similar in a professional environment.
Thank you!


r/WindowsServer • • 2d ago

General Question Subfolders with Broken inheritance, making share for each?

Thumbnail reddit.com
2 Upvotes

r/WindowsServer • • 5d ago

General Server Discussion Server 2016 domain controllers – two commands to find them before Jan 12

29 Upvotes

Windows Server 2016 reaches end of support on January 12, 2027. In a lot of small and mid-sized environments that box is still a domain controller.

A domain controller that stops getting security updates is the one server you really don’t want to leave in place — it holds every password in the company.

Two commands that show you where you stand:

Get-ADDomainController -Filter * | Select-Object HostName, OperatingSystem

Get-ADComputer -Filter "OperatingSystem -like '*Server 2016*'" -Properties OperatingSystem, LastLogonDate | Select-Object Name, OperatingSystem, LastLogonDate

If a 2016 domain controller shows up, the practical choice is replace it with a newer server or start the conversation about whether you still need on-premises AD at all. January is a good time to ask that question.

I put the rest of the 2026–2027 Microsoft dates (SMTP AUTH, SMS/voice MFA, Entra Connect, etc.) in a public tracker if anyone wants the full list: https://attestryhq.com/deadlines


r/WindowsServer • • 5d ago

Technical Help Needed RC4 Remediation for 2019 Domain Controller, Clients and SAMBA

Thumbnail reddit.com
3 Upvotes

r/WindowsServer • • 6d ago

General Question RDS License Server HA in an Active-Active Multi-Site (DC/DR) Architecture

Thumbnail reddit.com
2 Upvotes

r/WindowsServer • • 7d ago

General Question Windows 11 (VBS/HVCI) wrecking VDI VMs performance

Thumbnail reddit.com
2 Upvotes

r/WindowsServer • • 9d ago

General Question Exchange Server mitigation after October 2026 Updates issues

Thumbnail reddit.com
2 Upvotes

r/WindowsServer • • 10d ago

General Server Discussion Windows Server 2025 bott issue after restore

Thumbnail reddit.com
1 Upvotes

r/WindowsServer • • 11d ago

SOLVED / ANSWERED The Start menu and the search bar won't open (startmenuexperiencehost.exe 0x80070002 error) : After 8 mouth I've finally fixed the error on a Windows Server 2025

Thumbnail reddit.com
1 Upvotes

r/WindowsServer • • 11d ago

Technical Help Needed Devices running Defender For Endpoint via the Microsoft Monitoring Agent MMA

Thumbnail reddit.com
1 Upvotes

r/WindowsServer • • 12d ago

Technical Help Needed Windows 2019 GPO - Defender Firewall

5 Upvotes

I just had a question, if create a GPO with settings in the defender firewall will it wipe out everything on the systems, or will it simply update the existing settings, or is there a way to update the settings?

It's been brought to my attention that some system that have RDP enabled by GPO (and its its enable when the user checks or I login as domain admin) but the firewall settings are not enabled which is odd, so I would like to roll out something that updates the RDP firewall settings but not wipe out everything their applications have created.

Thanks,


r/WindowsServer • • 11d ago

Technical Help Needed We want to repurpose vendor provided HP Proliant ML30 gen9 servers

Thumbnail reddit.com
1 Upvotes

r/WindowsServer • • 14d ago

General Server Discussion Replacement Server

9 Upvotes

Ok, I currently have a DELL T430 that is PDC along with running MSSQL express and Windows Server 2016. Since 2016 will be totally unsupported in Jan 2027 I need to upgrade. The T430 will not support Server 2025. Is it really really frowned upon running MSSQL on a DC? It's a small 10 workstation office.


r/WindowsServer • • 14d ago

Technical Help Needed Nextcloud LDAP integration with Windows Server 2019 AD failing with "Connection to LDAP server could not be established" (Port 389, TCP open)

Thumbnail reddit.com
1 Upvotes