Windows Server Summit 2026 | Part 15: Networking in Windows Server 2025
Krähe mit Hut
For several years now, Windows Server has offered features for so-called software-defined data centers (SDDCs). This allows Windows Server to be set up, for example, as a storage system instead of a traditional SAN system. Windows Server also offers features for software-defined networks and can therefore provide routing capabilities.
This article highlights new networking features in Windows Server 2025.
Core networking announcements
The following chapters discuss new features in core network functions.
Network ATC
The Network ATC (Automated Traffic Control) feature is designed to automate the often complex and error-prone configuration of networks for compute, management, and storage. A new development is that the feature is now also available in Windows Server 2022. Until now, it has only been included in Windows Server 2025.
This is also interesting from the perspective that, in the past, operating systems typically did not receive subsequent feature enhancements (at most with a service pack or an R2 version, a practice that ended with 2012 R2).
In addition, it will soon be possible to set up a subnet for connecting storage systems.
Network HUD
The Network HUD feature is a network diagnostics tool that analyzes problems and automatically resolves them whenever possible. It also provides insight into the network infrastructure, including physical components from third-party manufacturers.
The feature is now available in the public preview. Furthermore, using it no longer incurs any additional costs. The previous pay-as-you-go model has been discontinued; the feature is now included at no cost.
NetAdapterCx
The NetAdapterCx (Network Adapter Class Extension) feature is a driver model designed to simplify driver development while significantly improving network performance. The associated Kernel-Mode Driver Framework is currently under active development and is expected to be available in the next version of Windows Server.
Interesting: this is the first time the expected name of the next Windows Server version has been mentioned: 2028.
Encrypted DNS
In line with the Zero Trust approach, the DNS server in Windows will gain features for encrypting DNS traffic. This will happen in several phases:
- Server-to-client DNS-over-HTTPS (DoH) is available in public preview
- Server-to-server DNS-over-HTTPS (DoH) will soon be available in a private preview
In addition, Microsoft is evaluating the implementation of the following features:
- DoH server-to-auth-server – this is still awaiting standardization by the IETF
- DNS over TLS (DoT) for Windows DNS servers
Windows Firewall for servers
The Windows Firewall provides excellent protection against attacks and unauthorized access within the network. In addition, it can be easily configured using Group Policy and is capable of applying rules based on the application. This makes it a very powerful security solution. However, it still has some limitations.
Based on a large amount of feedback regarding the Windows Firewall, Microsoft has been exploring ways to improve its usability. Many companies currently disable the firewall or keep it disabled for historical reasons, as they cannot assess what effects enabling it would have.
One new feature designed specifically to address this problem is monitoring mode. This allows you to test rules while the firewall is disabled. The firewall evaluates incoming traffic against these rules and provides an overview of which traffic would be affected by the rules.
This makes it possible to safely evaluate the currently configured set of rules or any additional desired rules. This greatly simplifies the (re)activation of the Windows Firewall for additional protection.
Monitoring mode can currently be configured via Remote PowerShell or the local MMC console. However, there are plans to introduce a configuration option via Group Policy.
Liked this article? Share it!
3 thoughts on “Windows Server Summit 2026 | Part 15: Networking in Windows Server 2025”