• Azure Arc-enabled servers at OS level for seamless hybrid management.
• SMB AES-256-GCM encryption by default.
• Credential Guard and Virtualization-based security (VBS) now recommended for all editions, not just Datacenter.
• Windows Defender Application Control for Servers (WDAC) with built-in baseline policies.

, serves as the final "Release to Manufacturing" (RTM) version for the Long-Term Servicing Channel (LTSC) , providing 10 years of support through October 2034. Microsoft Learn Key Features in Build 26100.1742 Windows Server 2025.26100.1742-OEMRET-x64FRE-en...