Windows Server
Standalone (non-AD) Windows Server admin: local policy, updates, hardening.
12 guides
- Windows Server
Print Spooler Won't Stay Running on Windows Server? Check the PrintNightmare GPO First
On Server 2019/2022/2025 the spooler often restarts then stops because a hardening GPO disabled it — not a corrupt queue. How to find the policy, plus the real driver/AV causes.
June 12, 2026 - Windows Server
RDP "CredSSP Encryption Oracle Remediation" Error: The Safe Fix (Not the Risky One)
This RDP error is a patch mismatch from CVE-2018-0886. The right fix is to patch both ends — or set the policy to Mitigated. Setting it to 'Vulnerable' exposes the server.
June 9, 2026 - Windows Server
"Remote Desktop Licensing Mode Is Not Configured"? Set It Right (Don't Reset the Clock)
The 'RDS will stop working in X days' warning means the licensing mode isn't set. The popular grace-period registry reset is a license violation — here's the supported fix.
June 7, 2026 - Windows Server
Setting Up & Hardening a Standalone (Non-AD) Windows Server 2019
A practical checklist for a workgroup Windows Server 2019 with no Active Directory: disable Server Manager autostart, set local security policy, lock down accounts, and the firewall.
May 27, 2026 - Windows Server
How to Detect and Disable SMBv1 on Windows Server (Audit First, by Component)
Disabling SMBv1 isn't one registry flip — it's separate for the server and client components. And audit usage first so you don't cut off a legacy device. The full, safe method.
May 25, 2026 - Windows Server
Shared Printing Broke After the Print RPC Hardening (CVE-2021-1678)? Patch Clients First
Enabling RpcAuthnLevelPrivacyEnabled hardens print spooler RPC (CVE-2021-1678) — but if clients aren't patched first, network printing breaks. The correct order, and the safe value.
May 21, 2026 - Windows Server
LGPO.exe: Batch-Apply Local Group Policy on a Standalone Server (Reflects in gpedit)
On a non-AD server you can't push GPOs — but LGPO.exe lets you back up, version, and batch-apply local group policy from the command line, and the settings show up in gpedit.msc.
May 21, 2026 - Windows Server
PSWindowsUpdate: Manage Windows Server Updates from PowerShell (Install, Schedule, Remote)
Run Windows Updates from the command line on Server 2019/2022 with the PSWindowsUpdate module — scan, install, auto-reboot, and patch remote servers over WinRM.
May 9, 2026 - Windows Server
KMS Activation Error 0x8007007B ("DNS Name Does Not Exist")? Fix the SRV Record
0x8007007B means the KMS client can't find the _VLMCS SRV record in DNS — not a bad key. Confirm a KMS host exists, or point the client directly with slmgr /skms.
May 6, 2026 - Windows Server
Windows Activation Error 0xC004F074 ("No KMS Could Be Contacted")? Fix the Real Cause
0xC004F074 isn't a bad key — it means the client can't reach a working KMS host. Check the service, port 1688, time skew and DNS, not a new product key.
May 6, 2026 - Windows Server
"No Remote Desktop License Servers Available" on a Workgroup Server? Use Per-Device CALs
On a non-AD/workgroup RD Session Host you MUST use Per Device CALs — Per User silently fails. Set the license server and mode in Local Group Policy. Exact steps.
April 22, 2026 - Windows Server
Enable PowerShell Remoting (WinRM) on a Standalone / Workgroup Server
No domain means no automatic Kerberos trust — so PSRemoting needs TrustedHosts. Here's how to enable WinRM and connect between non-AD Windows servers safely.
April 9, 2026