Windows Server 2022 is full of new file services!

Published Sep 01 2021 09:17 AM 14.1K Views
Microsoft

Heya folks, Ned here again. As you’ve heard by now, Windows Server 2022 is available and supported for production deployments. This new OS brings many new features around security, storage, networking, web, containers, applications, virtualization, edge, and Azure hybrid.

 

Today I’ll highlight what we’ve introduced for the single most used scenario in organizations: File Services. Our goal with Windows Server 2022 was to make the same generational leap that we did with Windows Server 2012, where we first introduced SMB 3.0 and its security, scale, and performance options. With Windows Server 2022, we focused on today's world of hybrid cloud computing, mobile and telecommuter edge users, and increasingly congested and untrusted networks. We ended up with a large new catalog of options for your organization to stay productive.

 

Mount up!

 

SMB Compression

Windows Server 2022 introduces SMB compression, which shrinks files as they transfer over the network. Compressed files use less bandwidth and take less time to transfer, at the cost of slightly increased CPU usage during transfers. For files with compressible space, the savings can be huge – watch my demo below of copying VHD files!

 

Narrated demo of SMB compression on Youtube

 

You configure this feature with Windows Admin Center or PowerShell, and you can set compression on SMB shares, client mapped drives, clients, servers, or even on individual file copies using robocopy. SMB compression is most effective on networks with less bandwidth, such as a client's 1Gbps ethernet or Wi-Fi network. It supports your favorite SMB options like SMB signing, encryption, and multichannel. Windows 11 and Windows Server 2022 both have this new capability.

 

This is a game changing feature in a world where files and are bigger than ever on networks that are fuller than ever.

 

SMB Security

We added a raft of new SMB security features in Windows Server 2022 for use with client-server scenarios as well as failover clustering and high speed RDMA networking. Security is ever evolving and besides the new options below, we have additional security features coming retroactively to Windows 11 and Windows Server 2022.

 

2021-08-30_17-30-37.png
Windows Admin Center and the SMB settings for encryption and signing

 

AES-256

SMB encryption protects your data from being read off the network. Windows Server 2022 now supports AES-256-GCM and AES-256-CCM, in addition to the primary AES-128 encryption used today. This isn’t some implication that AES security is flawed – there are no practical attacks that would allow someone without a key to decrypt AES-128 and none reasonably forecast, despite what the quantum computing marketing folks would have you believe – it’s to ensure that we met mandates like FIPS 197, NSA Suite B Cryptography, and others required by top secret networks. In fact, we still use AES-128 by default for performance reasons and let you opt into 256 bits with group policy and management tools. Windows 11 and Windows Server 2022 have this new capability.

 

Accelerated signing

SMB signing prevents tampering with data on the network, as well as relay, interception, and spoofing attacks. With Windows Server 2022, we added AES-GMAC acceleration to signing, meaning improved AES-NI hardware offloading provided by CPUs. When two AES-128-GMAC machines are signing SMB and running at least Nehalem processors – i.e., newer than 12 years old – you’ll see the latency of signed SMB really drop and transfer speeds improve, especially on busy processors. For more info on signing, check out Configure SMB Signing with Confidence. Windows 11 and Windows Server 2022 have this new capability.

 

SMB Direct and RDMA encryption

SMB Direct and RDMA supply high bandwidth, low latency networking fabric for workloads like Storage Spaces Direct, Storage Replica, Hyper-V, Scale-out File Server, and MS SQL server. Windows Server 2022 SMB Direct now supports encryption. Previously, enabling SMB encryption disabled direct data placement; this was intentional, but seriously impacted performance. Now we encrypt data before placement, leading to far less performance degradation while adding AES-128 and AES-256 protected packet privacy. Windows 11 Enterprise, Education, and Pro Workstation, as well as Windows Server 2022, have this new capability.

 

Failover Cluster East-West security control

Windows Server failover clusters use intra-node communications instances for cluster shared volumes (CSV) and the storage bus layer (SBL). Windows Server 2022 now allows granular control of encrypting intra-node storage communications for those networks beyond the “default” instance of SMB Server. This means that when using clusters and RDMA networks, you can decide to encrypt or sign east-west communications within the cluster itself for higher security, but not necessarily for north-south communications like file copies or Hyper-V Live Migration – and the reverse as well. You can control this with PowerShell currently, there’s more info at Security Settings for Failover Clustering. Windows Server 2022 failover clusters have this new capability.

 

Storage Migration Service

The Storage Migration Service migrates servers, their storage, and their SMB config from old Windows and Linux to modern Windows Servers and clusters running on-prem or in Azure. You can now also migrate from NetApp FAS arrays running NetApp ONTAP 9 or later. The process is almost identical to migrating from an old Windows Server 2008 or 2012 machine, except that now you point to a NetApp FAS and pick from its running CIFS SVMs, and you can migrate the data into folders on one or more volumes as NetApp storage doesn’t have drive letters.

 

Furthermore, SMS now integrates with Azure File Sync cloud tiering! AFS cloud tiering allows you to use less storage in your Windows File Server and tier your data into Azure for backups and added ransomware protection.

 

2021-08-31_15-53-53.png
Windows Admin Center and the Storage Migration Service enabling AFS sync on each volume

 

Applications must be aware of AFS cloud tiering, though; when they copy a large data set and AFS says “hey, this volume is full – please wait for me to dehydrate these old files into Azure,” the app has to pause IO. SMS understands this and you can configure AFS cloud tiering on your destination so that the migration and AFS happen simultaneously. For more info on AFS cloud tiering, see Understand Azure File Sync cloud tiering.

 

2021-08-31_15-55-19.png
Windows Admin Center and the Storage Migration Service about to begin a transfer with AFS enabled

 

For steps on SMS, see Use Storage Migration Service to migrate a server. Windows Server 2022 and Windows Server 2019 with an update both have this new capability.

 

Storage and Networking

While not specific to File Services, the Networking, Hyper-V, and local storage teams have been busy adding more performance options for SMB and file servers to gain on Windows Server 2022. You’ll be configuring the new standalone storage bus cache feature based on your drive configuration; the networking features are on by default and just work!

 

TCP & UDP Networking

Windows Server 2022 implements TCP HyStart++ to reduce packet loss during connection start up - especially helpful in high-speed networks - and RACK to reduce Retransmit Time Outs (RTO). These features are enabled in the transport stack by default and provide a smoother network data flow with better performance at high speeds. Windows 11 and Windows Server 2022 both have this new capability.

 

Furthermore, UDP is becoming a more popular protocol carrying more networking traffic. In Windows Server 2022 we added the game changing UDP Segmentation Offload (USO). USO moves much of the work needed to send UDP packets from the CPU to the NIC's specialized hardware. We also added UDP Receive Side Coalescing (UDP RSC) which coalesces packets and reduces CPU usage for UDP processing. “But” you exclaim, “SMB uses TCP and RDMA, what does this matter?” Read on, noble IT Pro, to see why this is important. Windows 11 and Windows Server 2022 both have this new capability.

 

vSwitch networking

The odds that your file servers are virtualized are extremely high and Windows Server 2022 improves the Hyper-V vSwitch with updated Receive Segment Coalescing (RSC). This allows the hypervisor network to coalesce packets and process as one larger segment. This reduces CPU cycles and segments will remain coalesced across the entire data path until processed by the intended application. This means improved performance in both network traffic from an external host, received by a virtual NIC, as well as from a virtual NIC to another virtual NIC on the same host. Windows Server 2022 has this new capability.

 

Storage bus cache

Windows failover clusters with Storage Spaces Direct have supported a caching feature for many years and now the option is available for standalone servers using Storage Spaces as the storage bus cache. Storage bus cache can significantly improve read and write performance by tiering smaller fast flash drives above slower but higher capacity drives.

 

2021-08-31_15-25-14.png
A diagram of SSD and HDD drives arranged into mirror cache tiers and parity capacity tiers

 

SBC can work both as a read cache and a read-write cache, depending on your hardware. It adds performance to a file server without breaking the bank. Windows Server 2022 has this new capability.

 

SMB over QUIC (preview)

Finally, we come to the next generation of hybrid file services: SMB over QUIC. SMB over QUIC (preview) provides secure and reliable connectivity to edge file servers over untrusted networks like the Internet, and brings an "SMB VPN" to telecommuters, mobile device users, and high security organizations. QUIC is an IETF-standardized protocol with many benefits over TCP, including:

 

  • All applications using QUIC travel over UDP and, by default, the firewall-friendly port 443
  • TLS 1.3 ensures encryption of all packets and a certificate provides non-repudiation
  • Parallel streams of reliable and unreliable application data
  • Improved congestion control and loss recovery

 

All SMB traffic, including authentication and authorization, occurs within the tunnel and is never exposed to the underlying network. SMB over QUIC supports Kerberos but even if you decide to use NTLMv2, no challenge or response is exposed to the network.

 

Here's a demonstration of deploying SMB over QUIC and the user experience:

 

Narrated demo of SMB over QUIC on Youtube

 

SMB behaves normally within the QUIC tunnel; as you saw in the demo, the user experience doesn't change. SMB features like multichannel, signing, compression, continuous availability, and directory leasing work normally. Windows 11 and Automanage for Windows Server Services (with Windows Server 2022 Datacenter: Azure Edition Preview) both have this new capability, and it is coming to Azure Files and Android Phones later.

 

This is another game changer feature.

 

Summary

Woo that’s a bunch of new stuff to learn. If you’re looking to get your feet wet, I recommend SMB compression as the quickest place to start, then dig into SMB over QUIC. For more important info on Windows Server 2022 in general:

 

 

Don’t forget to add Microsoft Ignite to your calendar for November – there will be tons of Windows Server info. And really don’t forget to register for the free Windows Server Summit on September 16, 2021. I have a presentation with Rick Claus that features great info, discussion, demos, and a special guest! Who could it be?

 

Picture1.png
Author's very embarrassed dogs wearing Halloween costumes of a viking and cowboy-riding horse

 

Until then,

 

- Ned “So Much Beauty” Pyle

9 Comments
Frequent Contributor

SMB compression:

Don't be shy to add nice pics from WAC 2103.2 and latest File and Share Plugin too. @Ned Pyle 

https://yourwacgateway.tailspintoys.local/servermanager/connections/server/yourfileserver.tailspinto...

WAC Gateway > connect to Server > Files and File Sharing > File Shares

 

Select a share (non administrative shares only). x$ share cause issues > Edit Share

K_WesterEbbinghaus_0-1630543375503.png

 

 

If anyone thinks these bells and whistles are for enterprise only? Nope all the good stuff like SMB compression and SMB over QUIC is also functional on the very same OS "cobalt" release 21H2 of Windows 10 and 11.
And might is even partly backported to Vibranium (2004).

 

 

Here is an absolutely practical usecase #sarcasm of SMB compression in a Home NAS solution powered by Windows Server 2022 LTSC as SMB target / Windows 11 as a client.

What I am going to do?

- Copying WinSxS folder and an extracted ZIP of Intel NIC Driver 26.x package to have really much and compressable files. This is something everybody does everyday, right?


Results:

300 Mbytes/ seconds throughput on a 1 Gbit link for small files isn't that bad is it? I think it was 1 - 20 Mbyte/s with File Explorer.

 

Small files - NO SMB Compression - File Explorer - Windows 11 > Server 2022 LTSC

(seems not to use it still on Windows 11 - would be great if so)

K_WesterEbbinghaus_3-1630544974561.png

 

 

 

Small files - SMB Compression - Robocopy - Windows 11 > Server 2022 LTSC

 

K_WesterEbbinghaus_1-1630543701535.png

 

source files:

Win11 WinSXS (of all accessible files without elevation)

Intel Network Driver Package zip extracted

Total: 60.944 files, 7.27 GByte

 

HW:

Source and target are SSD disk so the Ethernet 1 G Link is the bottleneck. Plenty RAM and CPU available.

Remeber SMB compression is not enabled by default, so you need PowerShell or preferably Windows Admin Center to manage it on the particular network shares or network drives.

 

robocopy "i:\test\small files" "\\mhv02.tailspintoys.local\Repository\test compress" /s /e /mt:16 /w:1 /r:1 /compress

 

K_WesterEbbinghaus_2-1630544126998.png

 

 

Fun Fact: deleting the files from a File Share via SMB remotely in Windows Explorer takes a lot longer than copying them to this very File Share via SMB compression, because of the "processed preview" :)


 

Occasional Contributor

Hello Ned,

 

Congrats for the release, as it seems you are the last Product Team still interested in putting new features into Windows Server from what I saw from the Release Notes.

 

Some quick questions for you :

 

- Regarding SMB Security, how do you manage conflicts with similar GPO parameters ? (I'm expecting GPO to win, but...)

- Do you plan to update Storage Migration Services to migrate shares and not volumes only ?

- Dynamic Access Control GUI is currently only available on the deprecated Active Directory Administrative Center. Any plans to move it to Windows Admin Center ?

 

Thanks

Microsoft

@Alban1999 Thanks!

 

- Security policy mostly isn't really policy, it's preference - it has only one registry setting and isn't really GP. This is because it's older than GP and comes from NT

- SMS already migrates shares not volumes by default; you have to opt into shares. Maybe I am misunderstanding?

- I have no ownership or knowledge of DAC or its future, sorry. 

Frequent Contributor

"Dynamic Access Control GUI is currently only available on the deprecated Active Directory Administrative Center."

 

Factually this tool is not deprecated. In fact the most still use Active Directory Users and Computers (ADUC). For Server 2022 I have even worked hard to get a long standing issue from 2012 fixed in ADAC. 

Otherwise there will be no changes in GUI tools, neither ADAC or ADUC.

 

@Alban1999 do you have a Microsoft statement that ADAC is deprecated? 

I would not use DAC as there is no counterpart in Azure at all. 

Occasional Contributor

Hello Ned,

 

Sorry for the delay in the response.

- You're right on security settings, those are preferences not policies. I'm an idiot for forgetting about this.

- My question was really, really badly written (guess that wasn't a good day to write anything).

Here is my use case :

I'm migrating file servers on a regular basis, mostly from 2008 R2/2012 R2 to 2019. Most of those migrations imply merging or dispatching data from/to one/several file shares. I'm still relying on good old robocopy because some options are still not available within file storage services, like copy data without retaining ACL by example.

Basically, do you aim to provide similar features between robocopy and SMS in the future ?

Microsoft

@Alban1999 no worries & you're definitely not an idiot :) 

 

So you want to migrate files using SMS but not have the ACL's migrate? I.e. just inherit the destination file system's inherited defaults? Or do you mean you want to move where the files get migrated to so that they aren't a mirrored copy of the source but instead merged together under some new folder structure? 

 

I want to be sure I understand real clearly here, sorry for endless questions. A diagram might help here too.

Occasional Contributor

Looks like option 2 matches my needs. Let me give you one scenario I worked on.

I could describe more similar scenarios but that would be converting your comment section into a KB :p

 

Case 1 : Bob the fat file server.

Bob is ten-ish year old. Bob holds 6+ To of data, including application, user and office data. No one care for Bob, yet everyone knows if Bob fails, the company halts.

 

So I'm moving Bob's data over newly build file servers. I wish to separate user data, application data, office data (one file server being dedicated to one type of data only). I build and apply a brand new delegation model (including file directories and permissions) on those new file servers and their new shares. And I check with my customer what to move and where.

If I'm very lucky, I just need to copy the content of one of Bob's share to a newly created share. If I'm not (and most of the time, I'm not), I need to copy a part of a share (like a single or multiple, specific folders) to another share : by example, user data being mixed with application data, customer wishing to isolate sensitive data to a dedicated share, etc.

In both case I likely do not wish to copy ACL because the destination has already been pre-configured : I put my trust in my delegation model.

 

 

TL;DR : during most of my file migration scenario, it is not enough to work on volume/share level, I frequently need to work on a folder level to be able to reorganize data. Also, it is likely I do not want to retain ACL because I'm also implementing a new delegation model.

 

Robocopy is able to do that, not SMS (yet). Thus my question.

 

By the way, thanks a lot for taking some of your very precious time to gather feedback from us IT pros. This is very, very much appreciated.

Microsoft

Ah yeah. Sorry. We definitely only support the ACL mirror model - in fact we go even further and support local user and groups (with their new SIDs) so that we don't lose access to data or expose it by mistake, something robocopy cannot handle. I think robocopy is going to be your best option, perhaps combined with the ancient-but-still-useable built in 'server migration tool' you'll see listed as a feature. That tool can be run in a "recreate the shares only" mode where you wouldn't have to manually do all the shares over yourself. 

 

Then you're just left with dealing with cutover manually. We did document what it does so you have kind of a checklist though: How cutover works in Storage Migration Service | Microsoft Docs

 

Sorry for my bummer answer. I've never had anyone ask for this functionality before. I guess one other thing would be to just run the migration, let it do all the security, and then just blow it away yourself with ICACLs afterwards? Meh... 

Occasional Contributor

From experience I can confirm rewriting ACL is hell, and I try to stay away from it - just like local groups-based ACL. I do appreciate you fully support this kind of migration for customers who need it however.

Regarding ACL-less migration model , maybe create a Powershell only option, with -Confirm switch on top of it ? But I know your engineering resources aren't infinite and cannot implement every possible feature... And as you said, some alternate tools are already available. Was worth asking anyway :)

 

Thanks for your response.

%3CLINGO-SUB%20id%3D%22lingo-sub-2637323%22%20slang%3D%22en-US%22%3EWindows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2637323%22%20slang%3D%22en-US%22%3E%3CP%3EHeya%20folks%2C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2F%40nerdpyle%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3ENed%3C%2FA%3E%26nbsp%3Bhere%20again.%26nbsp%3BAs%20you%E2%80%99ve%20heard%20by%20now%2C%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FWS2022GABlog%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EWindows%20Server%202022%20is%20available%3C%2FA%3E%20and%20supported%20for%20production%20deployments.%20This%20new%20OS%20brings%20many%20new%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fws2022docs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Efeatures%3C%2FA%3E%20around%20security%2C%20storage%2C%20networking%2C%20web%2C%20containers%2C%20applications%2C%20virtualization%2C%20edge%2C%20and%20Azure%20hybrid.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EToday%20I%E2%80%99ll%20highlight%20what%20we%E2%80%99ve%20introduced%20for%20the%20single%20most%20used%20scenario%20in%20organizations%3A%20File%20Services.%20Our%20goal%20with%20Windows%20Server%202022%20was%20to%20make%20the%20same%20generational%20leap%20that%20we%20did%20with%20Windows%20Server%202012%2C%20where%20we%20first%20introduced%20SMB%203.0%20and%20its%20security%2C%20scale%2C%20and%20performance%20options.%20With%20Windows%20Server%202022%2C%20we%20focused%20on%20today's%20world%20of%20hybrid%20cloud%20computing%2C%20mobile%20and%20telecommuter%20edge%20users%2C%20and%20increasingly%20congested%20and%20untrusted%20networks.%20We%20ended%20up%20with%20a%20large%20new%20catalog%20of%20options%20for%20your%20organization%20to%20stay%20productive.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMount%20up!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-1414116459%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%20id%3D%22toc-hId-1440004095%22%3ESMB%20Compression%3C%2FH1%3E%0A%3CP%3EWindows%20Server%202022%20introduces%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsmbcompression%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESMB%20compression%3C%2FA%3E%2C%20which%20shrinks%20files%20as%20they%20transfer%20over%20the%20network.%20Compressed%20files%20use%20less%20bandwidth%20and%20take%20less%20time%20to%20transfer%2C%20at%20the%20cost%20of%20slightly%20increased%20CPU%20usage%20during%20transfers.%20For%20files%20with%20compressible%20space%2C%20the%20savings%20can%20be%20huge%20%E2%80%93%20watch%20my%20demo%20below%20of%20copying%20VHD%20files!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3C%2FP%3E%3CDIV%20class%3D%22video-embed-center%20video-embed%22%3E%3CIFRAME%20class%3D%22embedly-embed%22%20src%3D%22https%3A%2F%2Fcdn.embedly.com%2Fwidgets%2Fmedia.html%3Fsrc%3Dhttps%253A%252F%252Fwww.youtube.com%252Fembed%252FzpMS6w33H7U%253Ffeature%253Doembed%26amp%3Bdisplay_name%3DYouTube%26amp%3Burl%3Dhttps%253A%252F%252Fwww.youtube.com%252Fwatch%253Fv%253DzpMS6w33H7U%26amp%3Bimage%3Dhttps%253A%252F%252Fi.ytimg.com%252Fvi%252FzpMS6w33H7U%252Fhqdefault.jpg%26amp%3Bkey%3Db0d40caa4f094c68be7c29880b16f56e%26amp%3Btype%3Dtext%252Fhtml%26amp%3Bschema%3Dyoutube%22%20width%3D%22600%22%20height%3D%22337%22%20scrolling%3D%22no%22%20title%3D%22YouTube%20embed%22%20frameborder%3D%220%22%20allow%3D%22autoplay%3B%20fullscreen%22%20allowfullscreen%3D%22true%22%3E%3C%2FIFRAME%3E%3C%2FDIV%3E%3CP%3E%3C%2FP%3E%0A%3CH6%20id%3D%22toc-hId--788160207%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%20id%3D%22toc-hId--762272571%22%3ENarrated%20demo%20of%20SMB%20compression%20on%20Youtube%3C%2FH6%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20configure%20this%20feature%20with%20Windows%20Admin%20Center%20or%20PowerShell%2C%20and%20you%20can%20set%20compression%20on%20SMB%20shares%2C%20client%20mapped%20drives%2C%20clients%2C%20servers%2C%20or%20even%20on%20individual%20file%20copies%20using%20robocopy.%20SMB%20compression%20is%20most%20effective%20on%20networks%20with%20less%20bandwidth%2C%20such%20as%20a%20client's%201Gbps%20ethernet%20or%20Wi-Fi%20network.%20It%20supports%20your%20favorite%20SMB%20options%20like%20SMB%20signing%2C%20encryption%2C%20and%20multichannel.%20Windows%2011%20and%20Windows%20Server%202022%20both%20have%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20a%20game%20changing%20feature%20in%20a%20world%20where%20files%20and%20are%20bigger%20than%20ever%20on%20networks%20that%20are%20fuller%20than%20ever.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-2094174829%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%20id%3D%22toc-hId-2120062465%22%3ESMB%20Security%3C%2FH1%3E%0A%3CP%3EWe%20added%20a%20raft%20of%20new%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fstorage%2Ffile-server%2Fsmb-security%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESMB%20security%20features%3C%2FA%3E%20in%20Windows%20Server%202022%20for%20use%20with%20client-server%20scenarios%20as%20well%20as%20failover%20clustering%20and%20high%20speed%20RDMA%20networking.%20Security%20is%20ever%20evolving%20and%20besides%20the%20new%20options%20below%2C%20we%20have%20additional%20security%20features%20coming%20retroactively%20to%20Windows%2011%20and%20Windows%20Server%202022.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH6%20id%3D%22toc-hId--108101837%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%20id%3D%22toc-hId--82214201%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%222021-08-30_17-30-37.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307129i2DA36886F9CBF856%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%222021-08-30_17-30-37.png%22%20alt%3D%222021-08-30_17-30-37.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FH6%3E%0A%3CH6%20id%3D%22toc-hId--1915556300%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%20id%3D%22toc-hId--1889668664%22%3EWindows%20Admin%20Center%20and%20the%20SMB%20settings%20for%20encryption%20and%20signing%3C%2FH6%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--830172623%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%20id%3D%22toc-hId--804284987%22%3EAES-256%3C%2FH2%3E%0A%3CP%3ESMB%20encryption%20protects%20your%20data%20from%20being%20read%20off%20the%20network.%20Windows%20Server%202022%20now%20supports%20AES-256-GCM%20and%20AES-256-CCM%2C%20in%20addition%20to%20the%20primary%20AES-128%20encryption%20used%20today.%20This%20isn%E2%80%99t%20some%20implication%20that%20%3CA%20href%3D%22https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FAdvanced_Encryption_Standard%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EAES%3C%2FA%3E%20security%20is%20flawed%20%E2%80%93%20there%20are%20no%20practical%20attacks%20that%20would%20allow%20someone%20without%20a%20key%20to%20decrypt%20AES-128%20and%20none%20reasonably%20forecast%2C%20despite%20what%20the%20quantum%20computing%20marketing%20folks%20would%20have%20you%20believe%20%E2%80%93%20it%E2%80%99s%20to%20ensure%20that%20we%20met%20mandates%20like%20FIPS%20197%2C%20NSA%20Suite%20B%20Cryptography%2C%20and%20others%20required%20by%20top%20secret%20networks.%20In%20fact%2C%20we%20still%20use%20AES-128%20by%20default%20for%20performance%20reasons%20and%20let%20you%20opt%20into%20256%20bits%20with%20group%20policy%20and%20management%20tools.%20Windows%2011%20and%20Windows%20Server%202022%20have%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1657340210%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%20id%3D%22toc-hId-1683227846%22%3EAccelerated%20signing%3C%2FH2%3E%0A%3CP%3ESMB%20signing%20prevents%20tampering%20with%20data%20on%20the%20network%2C%20as%20well%20as%20relay%2C%20interception%2C%20and%20spoofing%20attacks.%20With%20Windows%20Server%202022%2C%20we%20added%20AES-%3CA%20href%3D%22https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FGalois%2FCounter_Mode%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EGMAC%3C%2FA%3E%20acceleration%20to%20signing%2C%20meaning%20improved%20AES-NI%20hardware%20offloading%20provided%20by%20CPUs.%20When%20two%20AES-128-GMAC%20machines%20are%20signing%20SMB%20and%20running%20at%20least%20Nehalem%20processors%20%E2%80%93%20i.e.%2C%20newer%20than%2012%20years%20old%20%E2%80%93%20you%E2%80%99ll%20see%20the%20latency%20of%20signed%20SMB%20really%20drop%20and%20transfer%20speeds%20improve%2C%20especially%20on%20busy%20processors.%20For%20more%20info%20on%20signing%2C%20check%20out%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsmbsigning%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConfigure%20SMB%20Signing%20with%20Confidence%3C%2FA%3E.%20Windows%2011%20and%20Windows%20Server%202022%20have%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--150114253%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%20id%3D%22toc-hId--124226617%22%3ESMB%20Direct%20and%20RDMA%20encryption%3C%2FH2%3E%0A%3CP%3ESMB%20Direct%20and%20RDMA%20supply%20high%20bandwidth%2C%20low%20latency%20networking%20fabric%20for%20workloads%20like%20Storage%20Spaces%20Direct%2C%20Storage%20Replica%2C%20Hyper-V%2C%20Scale-out%20File%20Server%2C%20and%20MS%20SQL%20server.%20Windows%20Server%202022%20SMB%20Direct%20now%20supports%20encryption.%20Previously%2C%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Ftroubleshoot%2Fwindows-server%2Fnetworking%2Freduced-performance-after-smb-encryption-signing%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eenabling%20SMB%20encryption%20disabled%20direct%20data%20placement%3C%2FA%3E%3B%20this%20was%20intentional%2C%20but%20seriously%20impacted%20performance.%20Now%20we%20encrypt%20data%20before%20placement%2C%20leading%20to%20far%20less%20performance%20degradation%20while%20adding%20AES-128%20and%20AES-256%20protected%20packet%20privacy.%20Windows%2011%20Enterprise%2C%20Education%2C%20and%20Pro%20Workstation%2C%20as%20well%20as%20Windows%20Server%202022%2C%20have%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1957568716%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%20id%3D%22toc-hId--1931681080%22%3EFailover%20Cluster%20East-West%20security%20control%3C%2FH2%3E%0A%3CP%3EWindows%20Server%20failover%20clusters%20use%20intra-node%20communications%20instances%20for%20cluster%20shared%20volumes%20(CSV)%20and%20the%20storage%20bus%20layer%20(SBL).%20Windows%20Server%202022%20now%20allows%20granular%20control%20of%20encrypting%20intra-node%20storage%20communications%20for%20those%20networks%20beyond%20the%20%E2%80%9Cdefault%E2%80%9D%20instance%20of%20SMB%20Server.%20This%20means%20that%20when%20using%20clusters%20and%20RDMA%20networks%2C%20you%20can%20decide%20to%20encrypt%20or%20sign%20east-west%20communications%20within%20the%20cluster%20itself%20for%20higher%20security%2C%20but%20not%20necessarily%20for%20north-south%20communications%20like%20file%20copies%20or%20Hyper-V%20Live%20Migration%20%E2%80%93%20and%20the%20reverse%20as%20well.%20You%20can%20control%20this%20with%20PowerShell%20currently%2C%20there%E2%80%99s%20more%20info%20at%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Ffailover-clustering%2Fsecurity-settings-for-failover-clustering%2Fba-p%2F2544690%22%20target%3D%22_blank%22%3ESecurity%20Settings%20for%20Failover%20Clustering%3C%2FA%3E.%20Windows%20Server%202022%20failover%20clusters%20have%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--1968071820%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%20id%3D%22toc-hId--1942184184%22%3EStorage%20Migration%20Service%3C%2FH1%3E%0A%3CP%3EThe%20Storage%20Migration%20Service%20migrates%20servers%2C%20their%20storage%2C%20and%20their%20SMB%20config%20from%20old%20Windows%20and%20Linux%20to%20modern%20Windows%20Servers%20and%20clusters%20running%20on-prem%20or%20in%20Azure.%20You%20can%20now%20also%20migrate%20from%20NetApp%20FAS%20arrays%20running%20NetApp%20ONTAP%209%20or%20later.%20The%20process%20is%20almost%20identical%20to%20migrating%20from%20an%20old%20Windows%20Server%202008%20or%202012%20machine%2C%20except%20that%20now%20you%20point%20to%20a%20NetApp%20FAS%20and%20pick%20from%20its%20running%20CIFS%20SVMs%2C%20and%20you%20can%20migrate%20the%20data%20into%20folders%20on%20one%20or%20more%20volumes%20as%20NetApp%20storage%20doesn%E2%80%99t%20have%20drive%20letters.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFurthermore%2C%20SMS%20now%20integrates%20with%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fstorage%2Ffile-sync%2Ffile-sync-introduction%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20File%20Sync%3C%2FA%3E%20cloud%20tiering!%20AFS%20cloud%20tiering%20allows%20you%20to%20use%20less%20storage%20in%20your%20Windows%20File%20Server%20and%20tier%20your%20data%20into%20Azure%20for%20backups%20and%20added%20ransomware%20protection.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH6%20id%3D%22toc-hId-912590269%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%20id%3D%22toc-hId-938477905%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%222021-08-31_15-53-53.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307130iCF344AA5BEC31A87%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%222021-08-31_15-53-53.png%22%20alt%3D%222021-08-31_15-53-53.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FH6%3E%0A%3CH6%20id%3D%22toc-hId--894864194%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%20id%3D%22toc-hId--868976558%22%3EWindows%20Admin%20Center%20and%20the%20Storage%20Migration%20Service%20enabling%20AFS%20sync%20on%20each%20volume%3C%2FH6%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EApplications%20must%20be%20aware%20of%20AFS%20cloud%20tiering%2C%20though%3B%20when%20they%20copy%20a%20large%20data%20set%20and%20AFS%20says%20%E2%80%9Chey%2C%20this%20volume%20is%20full%20%E2%80%93%20please%20wait%20for%20me%20to%20dehydrate%20these%20old%20files%20into%20Azure%2C%E2%80%9D%20the%20app%20has%20to%20pause%20IO.%20SMS%20understands%20this%20and%20you%20can%20configure%20AFS%20cloud%20tiering%20on%20your%20destination%20so%20that%20the%20migration%20and%20AFS%20happen%20simultaneously.%20For%20more%20info%20on%20AFS%20cloud%20tiering%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fstorage%2Ffile-sync%2Ffile-sync-cloud-tiering-overview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUnderstand%20Azure%20File%20Sync%20cloud%20tiering%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH6%20id%3D%22toc-hId-1592648639%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%20id%3D%22toc-hId-1618536275%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%222021-08-31_15-55-19.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307131iD6827F9091559097%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%222021-08-31_15-55-19.png%22%20alt%3D%222021-08-31_15-55-19.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FH6%3E%0A%3CH6%20id%3D%22toc-hId--214805824%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%20id%3D%22toc-hId--188918188%22%3EWindows%20Admin%20Center%20and%20the%20Storage%20Migration%20Service%20about%20to%20begin%20a%20transfer%20with%20AFS%20enabled%3C%2FH6%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20steps%20on%20SMS%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fstorage%2Fstorage-migration-service%2Fmigrate-data%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUse%20Storage%20Migration%20Service%20to%20migrate%20a%20server%3C%2FA%3E.%20Windows%20Server%202022%20and%20Windows%20Server%202019%20with%20an%20update%20both%20have%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-1627293414%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%20id%3D%22toc-hId-1653181050%22%3EStorage%20and%20Networking%3C%2FH1%3E%0A%3CP%3EWhile%20not%20specific%20to%20File%20Services%2C%20the%20Networking%2C%20Hyper-V%2C%20and%20local%20storage%20teams%20have%20been%20busy%20adding%20more%20performance%20options%20for%20SMB%20and%20file%20servers%20to%20gain%20on%20Windows%20Server%202022.%20You%E2%80%99ll%20be%20configuring%20the%20new%20standalone%20storage%20bus%20cache%20feature%20based%20on%20your%20drive%20configuration%3B%20the%20networking%20features%20are%20on%20by%20default%20and%20just%20work!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--51078330%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%20id%3D%22toc-hId--25190694%22%3ETCP%20%26amp%3B%20UDP%20Networking%3C%2FH2%3E%0A%3CP%3EWindows%20Server%202022%20implements%20TCP%20%3CA%20href%3D%22https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Fdraft-ietf-tcpm-hystartplusplus-00%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EHyStart%2B%2B%3C%2FA%3E%20to%20reduce%20packet%20loss%20during%20connection%20start%20up%20-%20especially%20helpful%20in%20high-speed%20networks%20-%20and%20%3CA%20href%3D%22https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Frfc8985%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3ERACK%3C%2FA%3E%20to%20reduce%20Retransmit%20Time%20Outs%20(RTO).%20These%20features%20are%20enabled%20in%20the%20transport%20stack%20by%20default%20and%20provide%20a%20smoother%20network%20data%20flow%20with%20better%20performance%20at%20high%20speeds.%20Windows%2011%20and%20Windows%20Server%202022%20both%20have%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFurthermore%2C%20UDP%20is%20becoming%20a%20more%20popular%20protocol%20carrying%20more%20networking%20traffic.%20In%20Windows%20Server%202022%20we%20added%20the%20game%20changing%20UDP%20Segmentation%20Offload%20(USO).%20USO%20moves%20much%20of%20the%20work%20needed%20to%20send%20UDP%20packets%20from%20the%20CPU%20to%20the%20NIC's%20specialized%20hardware.%20We%20also%20added%20UDP%20Receive%20Side%20Coalescing%20(UDP%20RSC)%20which%20coalesces%20packets%20and%20reduces%20CPU%20usage%20for%20UDP%20processing.%20%E2%80%9CBut%E2%80%9D%20you%20exclaim%2C%20%E2%80%9CSMB%20uses%20TCP%20and%20RDMA%2C%20what%20does%20this%20matter%3F%E2%80%9D%20Read%20on%2C%20noble%20IT%20Pro%2C%20to%20see%20why%20this%20is%20important.%20Windows%2011%20and%20Windows%20Server%202022%20both%20have%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1858532793%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%20id%3D%22toc-hId--1832645157%22%3EvSwitch%20networking%3C%2FH2%3E%0A%3CP%3EThe%20odds%20that%20your%20file%20servers%20are%20virtualized%20are%20extremely%20high%20and%20Windows%20Server%202022%20improves%20the%20Hyper-V%20vSwitch%20with%20updated%20Receive%20Segment%20Coalescing%20(RSC).%20This%20allows%20the%20hypervisor%20network%20to%20coalesce%20packets%20and%20process%20as%20one%20larger%20segment.%20This%20reduces%20CPU%20cycles%20and%20segments%20will%20remain%20coalesced%20across%20the%20entire%20data%20path%20until%20processed%20by%20the%20intended%20application.%20This%20means%20improved%20performance%20in%20both%20network%20traffic%20from%20an%20external%20host%2C%20received%20by%20a%20virtual%20NIC%2C%20as%20well%20as%20from%20a%20virtual%20NIC%20to%20another%20virtual%20NIC%20on%20the%20same%20host.%20Windows%20Server%202022%20has%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-628980040%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%20id%3D%22toc-hId-654867676%22%3EStorage%20bus%20cache%3C%2FH2%3E%0A%3CP%3EWindows%20failover%20clusters%20with%20Storage%20Spaces%20Direct%20have%20supported%20a%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fstorage%2Fstorage-spaces%2Funderstand-the-cache%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ecaching%20feature%3C%2FA%3E%20for%20many%20years%20and%20now%20the%20option%20is%20available%20for%20standalone%20servers%20using%20Storage%20Spaces%20as%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fstorage%2Fstorage-spaces%2Fstorage-spaces-storage-bus-cache%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Estorage%20bus%20cache%3C%2FA%3E.%20Storage%20bus%20cache%20can%20significantly%20improve%20read%20and%20write%20performance%20by%20tiering%20smaller%20fast%20flash%20drives%20above%20slower%20but%20higher%20capacity%20drives.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH6%20id%3D%22toc-hId--662143547%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%20id%3D%22toc-hId--636255911%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%222021-08-31_15-25-14.png%22%20style%3D%22width%3A%20728px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307132i0371E6B1C8B4EDEB%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%222021-08-31_15-25-14.png%22%20alt%3D%222021-08-31_15-25-14.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FH6%3E%0A%3CH6%20id%3D%22toc-hId-1825369286%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%20id%3D%22toc-hId-1851256922%22%3EA%20diagram%20of%20SSD%20and%20HDD%20drives%20arranged%20into%20mirror%20cache%20tiers%20and%20parity%20capacity%20tiers%3C%2FH6%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESBC%20can%20work%20both%20as%20a%20read%20cache%20and%20a%20read-write%20cache%2C%20depending%20on%20your%20hardware.%20It%20adds%20performance%20to%20a%20file%20server%20without%20breaking%20the%20bank.%20Windows%20Server%202022%20has%20this%20new%20capability.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-70663169%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%20id%3D%22toc-hId-96550805%22%3ESMB%20over%20QUIC%20(preview)%3C%2FH1%3E%0A%3CP%3EFinally%2C%20we%20come%20to%20the%20next%20generation%20of%20hybrid%20file%20services%3A%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsmboverquic%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESMB%20over%20QUIC%3C%2FA%3E.%20SMB%20over%20QUIC%20(preview)%20provides%20secure%20and%20reliable%20connectivity%20to%20edge%20file%20servers%20over%20untrusted%20networks%20like%20the%20Internet%2C%20and%20brings%20an%20%22SMB%20VPN%22%20to%20telecommuters%2C%20mobile%20device%20users%2C%20and%20high%20security%20organizations.%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fnetworking-blog%2Fwhat-s-quic%2Fba-p%2F2683367%22%20target%3D%22_blank%22%3EQUIC%3C%2FA%3E%20is%20an%20IETF-standardized%20protocol%20with%20many%20benefits%20over%20TCP%2C%20including%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EAll%20applications%20using%20QUIC%20travel%20over%20UDP%20and%2C%20by%20default%2C%20the%20firewall-friendly%20port%20443%3C%2FLI%3E%0A%3CLI%3ETLS%201.3%20ensures%20encryption%20of%20all%20packets%20and%20a%20certificate%20provides%20non-repudiation%3C%2FLI%3E%0A%3CLI%3EParallel%20streams%20of%20reliable%20and%20unreliable%20application%20data%3C%2FLI%3E%0A%3CLI%3EImproved%20congestion%20control%20and%20loss%20recovery%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAll%20SMB%20traffic%2C%20including%20authentication%20and%20authorization%2C%20occurs%20within%20the%20tunnel%20and%20is%20never%20exposed%20to%20the%20underlying%20network.%20SMB%20over%20QUIC%20supports%20Kerberos%20but%20even%20if%20you%20decide%20to%20use%20NTLMv2%2C%20no%20challenge%20or%20response%20is%20exposed%20to%20the%20network.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHere's%20a%20demonstration%20of%20deploying%20SMB%20over%20QUIC%20and%20the%20user%20experience%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3C%2FP%3E%3CDIV%20class%3D%22video-embed-center%20video-embed%22%3E%3CIFRAME%20class%3D%22embedly-embed%22%20src%3D%22https%3A%2F%2Fcdn.embedly.com%2Fwidgets%2Fmedia.html%3Fsrc%3Dhttps%253A%252F%252Fwww.youtube.com%252Fembed%252FL0yl5Z5wToA%253Ffeature%253Doembed%26amp%3Bdisplay_name%3DYouTube%26amp%3Burl%3Dhttps%253A%252F%252Fwww.youtube.com%252Fwatch%253Fv%253DL0yl5Z5wToA%26amp%3Bimage%3Dhttps%253A%252F%252Fi.ytimg.com%252Fvi%252FL0yl5Z5wToA%252Fhqdefault.jpg%26amp%3Bkey%3Db0d40caa4f094c68be7c29880b16f56e%26amp%3Btype%3Dtext%252Fhtml%26amp%3Bschema%3Dyoutube%22%20width%3D%22600%22%20height%3D%22337%22%20scrolling%3D%22no%22%20title%3D%22YouTube%20embed%22%20frameborder%3D%220%22%20allow%3D%22autoplay%3B%20fullscreen%22%20allowfullscreen%3D%22true%22%3E%3C%2FIFRAME%3E%3C%2FDIV%3E%3CP%3E%3C%2FP%3E%0A%3CH6%20id%3D%22toc-hId--1091377699%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%20id%3D%22toc-hId--1065490063%22%3ENarrated%20demo%20of%20SMB%20over%20QUIC%20on%20Youtube%3C%2FH6%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESMB%20behaves%20normally%20within%20the%20QUIC%20tunnel%3B%20as%20you%20saw%20in%20the%20demo%2C%20the%20user%20experience%20doesn't%20change.%20SMB%20features%20like%20multichannel%2C%20signing%2C%20compression%2C%20continuous%20availability%2C%20and%20directory%20leasing%20work%20normally.%20Windows%2011%20and%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FAutomanageWindowsServer%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAutomanage%20for%20Windows%20Server%20Services%20(with%20Windows%20Server%202022%20Datacenter%3A%20Azure%20Edition%20Preview)%3C%2FA%3E%20both%20have%20this%20new%20capability%2C%20and%20it%20is%20coming%20to%20Azure%20Files%20and%20Android%20Phones%20later.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20another%20game%20changer%20feature.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-750721539%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%20id%3D%22toc-hId-776609175%22%3ESummary%3C%2FH1%3E%0A%3CP%3EWoo%20that%E2%80%99s%20a%20bunch%20of%20new%20stuff%20to%20learn.%20If%20you%E2%80%99re%20looking%20to%20get%20your%20feet%20wet%2C%20I%20recommend%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsmbcompression%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESMB%20compression%3C%2FA%3E%20as%20the%20quickest%20place%20to%20start%2C%20then%20dig%20into%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsmboverquic%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESMB%20over%20QUIC%3C%2FA%3E.%20For%20more%20important%20info%20on%20Windows%20Server%202022%20in%20general%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EGet%20Started%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fwindows-server%252Fget-started%252Fget-started-with-windows-server%26amp%3Bdata%3D04%257C01%257Cnedpyle%2540microsoft.com%257Cd1b839feecf64155491908d96bd0dec5%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637659367105462157%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3De%252BitBUXCfxOAxpYv7ivxaLSDFBWpaRKc9h9nPW%252FuW4k%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fget-started%2Fget-started-with-windows-server%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EWhat's%20New%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fwindows-server%252Fget-started%252Fwhats-new-in-windows-server-2022%26amp%3Bdata%3D04%257C01%257Cnedpyle%2540microsoft.com%257Cd1b839feecf64155491908d96bd0dec5%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637659367105462157%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3Dlcc%252B9dH1T0%252FXu0d%252FLyo69CxjERFmwzTRFQ4IJt%252BPxfg%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fget-started%2Fwhats-new-in-windows-server-2022%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EEditions%20Comparisons%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fwindows-server%252Fget-started%252Feditions-comparison-windows-server-2022%26amp%3Bdata%3D04%257C01%257Cnedpyle%2540microsoft.com%257Cd1b839feecf64155491908d96bd0dec5%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637659367105472155%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3D0Jqrh5m76tK47GKdLlgMLJZhtJCZbSxIU%252F0pq2Y8doY%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fget-started%2Feditions-comparison-windows-server-2022%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EHardware%20requirements%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fwindows-server%252Fget-started%252Fhardware-requirements%26amp%3Bdata%3D04%257C01%257Cnedpyle%2540microsoft.com%257Cd1b839feecf64155491908d96bd0dec5%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637659367105472155%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3DDDiJ9B0FrtyOMgjzEhhhF4zJKHPFKPS%252F8B9J0rj%252FTnw%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fget-started%2Fhardware-requirements%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3ERemoved%20Features%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fwindows-server%252Fget-started%252Fremoved-deprecated-features-windows-server-2022%26amp%3Bdata%3D04%257C01%257Cnedpyle%2540microsoft.com%257Cd1b839feecf64155491908d96bd0dec5%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637659367105482158%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3DPIbbuGSu0iFbxxs1fnDLk5xvQeK0%252FV8d%252BTKn6AwsTpU%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fget-started%2Fremoved-deprecated-features-windows-server-2022%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EWindows%2011%20Insider%20Preview%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fblogs.windows.com%2Fwindows-insider%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EHome%20%7C%20Windows%20Insider%20Blog%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDon%E2%80%99t%20forget%20to%20add%20%3CA%20href%3D%22https%3A%2F%2Fmyignite.microsoft.com%2Fhome%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Ignite%3C%2FA%3E%20to%20your%20calendar%20for%20November%20%E2%80%93%20there%20will%20be%20tons%20of%20Windows%20Server%20info.%20And%20%3CEM%3Ereally%20%3C%2FEM%3Edon%E2%80%99t%20forget%20to%20register%20for%20the%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fwindowsserversummit%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Efree%20Windows%20Server%20Summit%20on%20September%2016%2C%202021%3C%2FA%3E.%20I%20have%20a%20presentation%20with%20Rick%20Claus%20that%20features%20great%20info%2C%20discussion%2C%20demos%2C%20and%20a%20special%20guest!%20Who%20could%20it%20be%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH6%20id%3D%22toc-hId--411319329%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%20id%3D%22toc-hId--385431693%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Picture1.png%22%20style%3D%22width%3A%20540px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307133i0EE25F7F167EB9F5%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Picture1.png%22%20alt%3D%22Picture1.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FH6%3E%0A%3CH6%20id%3D%22toc-hId-2076193504%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%20id%3D%22toc-hId-2102081140%22%3EAuthor's%20very%20embarrassed%20dogs%20wearing%20Halloween%20costumes%20of%20a%20viking%20and%20cowboy-riding%20horse%3C%2FH6%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUntil%20then%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E-%20Ned%20%E2%80%9CSo%20Much%20Beauty%E2%80%9D%20Pyle%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2637323%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELearn%20the%20new%20file%20services%20options%20included%20in%20Windows%20Server%202022%3C%2FP%3E%0A%3CP%3E%3CLI-WRAPPER%3E%20%3C%2FLI-WRAPPER%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2709829%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2709829%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3ESMB%20compression%3A%3C%2FSTRONG%3E%3CBR%20%2F%3E%3CBR%20%2F%3EDon't%20be%20shy%20to%20add%20nice%20pics%20from%20WAC%202103.2%20and%20latest%20File%20and%20Share%20Plugin%20too.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F52778%22%20target%3D%22_blank%22%3E%40Ned%20Pyle%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fyourwacgateway.tailspintoys.local%2Fservermanager%2Fconnections%2Fserver%2Fyourfileserver.tailspintoys.local%2Ftools%2Ffiles%2Fshare%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fyourwacgateway.tailspintoys.local%2Fservermanager%2Fconnections%2Fserver%2Fyourfileserver.tailspintoys.local%2Ftools%2Ffiles%2Fshare%3C%2FA%3E%3C%2FP%3E%3CP%3EWAC%20Gateway%20%26gt%3B%20connect%20to%20Server%20%26gt%3B%20Files%20and%20File%20Sharing%20%26gt%3B%20File%20Shares%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESelect%20a%20share%20(non%20administrative%20shares%20only).%20x%24%20share%20cause%20issues%20%26gt%3B%20Edit%20Share%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22K_WesterEbbinghaus_0-1630543375503.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307455i6390E6613561CE3F%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22K_WesterEbbinghaus_0-1630543375503.png%22%20alt%3D%22K_WesterEbbinghaus_0-1630543375503.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20anyone%20thinks%20these%20bells%20and%20whistles%20are%20for%20enterprise%20only%3F%20Nope%20all%20the%20good%20stuff%20like%20SMB%20compression%20and%20SMB%20over%20QUIC%20is%20also%20functional%20on%20the%20very%20same%20OS%20%22cobalt%22%20release%2021H2%20of%20Windows%2010%20and%2011.%3CBR%20%2F%3EAnd%20might%20is%20even%20partly%20backported%20to%20Vibranium%20(2004).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20an%20%3CSTRONG%3Eabsolutely%20practical%20usecase%20%23sarcasm%3C%2FSTRONG%3E%26nbsp%3Bof%20SMB%20compression%20in%20a%20Home%20NAS%20solution%20powered%20by%20Windows%20Server%202022%20LTSC%20as%20SMB%20target%20%2F%20Windows%2011%20as%20a%20client.%3C%2FP%3E%3CP%3EWhat%20I%20am%20going%20to%20do%3F%3C%2FP%3E%3CP%3E-%20Copying%20WinSxS%20folder%20and%20an%20extracted%20ZIP%20of%20Intel%20NIC%20Driver%2026.x%20package%20to%20have%20really%20much%20and%20compressable%20files.%20This%20is%20something%20everybody%20does%20everyday%2C%20right%3F%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%3CU%3E%3CSTRONG%3EResults%3A%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%3CP%3E300%20Mbytes%2F%20seconds%20throughput%20on%20a%201%20Gbit%20link%20%3CSTRONG%3Efor%20small%20files%3C%2FSTRONG%3E%20isn't%20that%20bad%20is%20it%3F%20I%20think%20it%20was%201%20-%2020%20Mbyte%2Fs%20with%20File%20Explorer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3ESmall%20files%20-%20NO%20SMB%20Compression%20-%20File%20Explorer%20-%20Windows%2011%20%26gt%3B%20Server%202022%20LTSC%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CSTRONG%3E(seems%20not%20to%20use%20it%20still%20on%20Windows%2011%20-%20would%20be%20great%20if%20so)%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22K_WesterEbbinghaus_3-1630544974561.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307458i810E3E6707547A36%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22K_WesterEbbinghaus_3-1630544974561.png%22%20alt%3D%22K_WesterEbbinghaus_3-1630544974561.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3ESmall%20files%20-%20SMB%20Compression%20-%20Robocopy%20-%20Windows%2011%20%26gt%3B%20Server%202022%20LTSC%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22K_WesterEbbinghaus_1-1630543701535.png%22%20style%3D%22width%3A%201312px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307456i8634A4BF88A55B19%2Fimage-dimensions%2F1312x276%3Fv%3Dv2%22%20width%3D%221312%22%20height%3D%22276%22%20role%3D%22button%22%20title%3D%22K_WesterEbbinghaus_1-1630543701535.png%22%20alt%3D%22K_WesterEbbinghaus_1-1630543701535.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3Esource%20files%3A%20%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EWin11%20WinSXS%20(of%20all%20accessible%20files%20without%20elevation)%3C%2FP%3E%3CP%3EIntel%20Network%20Driver%20Package%20zip%20extracted%3C%2FP%3E%3CP%3ETotal%3A%2060.944%20files%2C%207.27%20GByte%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EHW%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3ESource%20and%20target%20are%20SSD%20disk%20so%20the%20Ethernet%201%20G%20Link%20is%20the%20bottleneck.%20Plenty%20RAM%20and%20CPU%20available.%3C%2FP%3E%3CP%3ERemeber%20SMB%20compression%20is%20not%20enabled%20by%20default%2C%20so%20you%20need%20PowerShell%20or%20preferably%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fwindows-server%2Fwindows-admin-center%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EWindows%20Admin%20Center%3C%2FA%3E%20to%20manage%20it%20on%20the%20particular%20network%20shares%20or%20network%20drives.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Erobocopy%20%22i%3A%5Ctest%5Csmall%20files%22%20%22%5C%5Cmhv02.tailspintoys.local%5CRepository%5Ctest%20compress%22%20%2Fs%20%2Fe%20%2Fmt%3A16%20%2Fw%3A1%20%2Fr%3A1%20%2Fcompress%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22K_WesterEbbinghaus_2-1630544126998.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F307457i175C8160E6F54475%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22K_WesterEbbinghaus_2-1630544126998.png%22%20alt%3D%22K_WesterEbbinghaus_2-1630544126998.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EFun%20Fact%3A%3C%2FSTRONG%3E%20deleting%20the%20files%20from%20a%20File%20Share%20via%20SMB%20remotely%20in%20Windows%20Explorer%20takes%20a%20lot%20longer%20than%20copying%20them%20to%20this%20very%20File%20Share%20via%20SMB%20compression%2C%20because%20of%20the%20%22processed%20preview%22%20%3A)%3C%2Fimg%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2710915%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2710915%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Ned%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECongrats%20for%20the%20release%2C%20as%20it%20seems%20you%20are%20the%20last%20Product%20Team%20still%20interested%20in%20putting%20new%20features%20into%20Windows%20Server%20from%20what%20I%20saw%20from%20the%20Release%20Notes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESome%20quick%20questions%20for%20you%20%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-%20Regarding%20SMB%20Security%2C%20how%20do%20you%20manage%20conflicts%20with%20similar%20GPO%20parameters%20%3F%20(I'm%20expecting%20GPO%20to%20win%2C%20but...)%3C%2FP%3E%3CP%3E-%20Do%20you%20plan%20to%20update%20Storage%20Migration%20Services%20to%20migrate%20shares%20and%20not%20volumes%20only%20%3F%3C%2FP%3E%3CP%3E-%20Dynamic%20Access%20Control%20GUI%20is%20currently%20only%20available%20on%20the%20deprecated%20Active%20Directory%20Administrative%20Center.%20Any%20plans%20to%20move%20it%20to%20Windows%20Admin%20Center%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2714483%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2714483%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F431722%22%20target%3D%22_blank%22%3E%40Alban1999%3C%2FA%3E%26nbsp%3BThanks!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E-%20Security%20policy%20mostly%20isn't%20really%20policy%2C%20it's%20preference%20-%20it%20has%20only%20one%20registry%20setting%20and%20isn't%20really%20GP.%20This%20is%20because%20it's%20older%20than%20GP%20and%20comes%20from%20NT%3C%2FP%3E%0A%3CP%3E-%20SMS%20already%20migrates%20shares%20not%20volumes%20by%20default%3B%20you%20have%20to%20opt%20into%20shares.%20Maybe%20I%20am%20misunderstanding%3F%3C%2FP%3E%0A%3CP%3E-%20I%20have%20no%20ownership%20or%20knowledge%20of%20DAC%20or%20its%20future%2C%20sorry.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2716970%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2716970%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3E%22Dynamic%20Access%20Control%20GUI%20is%20currently%20only%20available%20on%20the%20deprecated%20Active%20Directory%20Administrative%20Center.%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EFactually%20this%20tool%20is%20not%20deprecated.%20In%20fact%20the%20most%20still%20use%20Active%20Directory%20Users%20and%20Computers%20(ADUC).%20For%20Server%202022%20I%20have%20even%20worked%20hard%20to%20get%20a%20long%20standing%20issue%20from%202012%20fixed%20in%20ADAC.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EOtherwise%20there%20will%20be%20no%20changes%20in%20GUI%20tools%2C%20neither%20ADAC%20or%20ADUC.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F431722%22%20target%3D%22_blank%22%3E%40Alban1999%3C%2FA%3E%26nbsp%3Bdo%20you%20have%20a%20Microsoft%20statement%20that%20ADAC%20is%20deprecated%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20would%20not%20use%20DAC%20as%20there%20is%20no%20counterpart%20in%20Azure%20at%20all.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2745648%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2745648%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Ned%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESorry%20for%20the%20delay%20in%20the%20response.%3C%2FP%3E%3CP%3E-%20You're%20right%20on%20security%20settings%2C%20those%20are%20preferences%20not%20policies.%20I'm%20an%20idiot%20for%20forgetting%20about%20this.%3C%2FP%3E%3CP%3E-%20My%20question%20was%20really%2C%20really%20badly%20written%20(guess%20that%20wasn't%20a%20good%20day%20to%20write%20anything).%3C%2FP%3E%3CP%3EHere%20is%20my%20use%20case%20%3A%3C%2FP%3E%3CP%3EI'm%20migrating%20file%20servers%20on%20a%20regular%20basis%2C%20mostly%20from%202008%20R2%2F2012%20R2%20to%202019.%20Most%20of%20those%20migrations%20imply%20merging%20or%20dispatching%20data%20from%2Fto%20one%2Fseveral%20file%20shares.%20I'm%20still%20relying%20on%20good%20old%20robocopy%20because%20some%20options%20are%20still%20not%20available%20within%20file%20storage%20services%2C%20like%20copy%20data%20without%20retaining%20ACL%20by%20example.%3C%2FP%3E%3CP%3EBasically%2C%20do%20you%20aim%20to%20provide%20similar%20features%20between%20robocopy%20and%20SMS%20in%20the%20future%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2746839%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2746839%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F431722%22%20target%3D%22_blank%22%3E%40Alban1999%3C%2FA%3E%26nbsp%3Bno%20worries%20%26amp%3B%20you're%20definitely%20not%20an%20idiot%20%3A)%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESo%20you%20want%20to%20migrate%20files%20using%20SMS%20but%26nbsp%3B%3CEM%3Enot%3C%2FEM%3E%20have%20the%20ACL's%20migrate%3F%20I.e.%20just%20inherit%20the%20destination%20file%20system's%20inherited%20defaults%3F%20Or%20do%20you%20mean%20you%20want%20to%20move%20where%20the%20files%20get%20migrated%20to%20so%20that%20they%20aren't%20a%20mirrored%20copy%20of%20the%20source%20but%20instead%20merged%20together%20under%20some%20new%20folder%20structure%3F%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20want%20to%20be%20sure%20I%20understand%20real%20clearly%20here%2C%20sorry%20for%20endless%20questions.%20A%20diagram%20might%20help%20here%20too.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2748258%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2748258%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20like%20option%202%20matches%20my%20needs.%20Let%20me%20give%20you%20one%20scenario%20I%20worked%20on.%3C%2FP%3E%3CP%3EI%20could%20describe%20more%20similar%20scenarios%20but%20that%20would%20be%20converting%20your%20comment%20section%20into%20a%20KB%20%3Ap%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECase%201%20%3A%20Bob%20the%20fat%20file%20server.%3C%2FP%3E%3CP%3EBob%20is%20ten-ish%20year%20old.%20Bob%20holds%206%2B%20To%20of%20data%2C%20including%20application%2C%20user%20and%20office%20data.%20No%20one%20care%20for%20Bob%2C%20yet%20everyone%20knows%20if%20Bob%20fails%2C%20the%20company%20halts.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20I'm%20moving%20Bob's%20data%20over%20newly%20build%20file%20servers.%20I%20wish%20to%20separate%20user%20data%2C%20application%20data%2C%20office%20data%20(one%20file%20server%20being%20dedicated%20to%20one%20type%20of%20data%20only).%20I%20build%20and%20apply%20a%20brand%20new%20delegation%20model%20(including%20file%20directories%20and%20permissions)%20on%20those%20new%20file%20servers%20and%20their%20new%20shares.%20And%20I%20check%20with%20my%20customer%20what%20to%20move%20and%20where.%3C%2FP%3E%3CP%3EIf%20I'm%20very%20lucky%2C%20I%20just%20need%20to%20copy%20the%20content%20of%20one%20of%20Bob's%20share%20to%20a%20newly%20created%20share.%20If%20I'm%20not%20(and%20most%20of%20the%20time%2C%20I'm%20not)%2C%20I%20need%20to%20copy%20a%20part%20of%20a%20share%20(like%20a%20single%20or%20multiple%2C%20specific%20folders)%20to%20another%20share%20%3A%20by%20example%2C%20user%20data%20being%20mixed%20with%20application%20data%2C%20customer%20wishing%20to%20isolate%20sensitive%20data%20to%20a%20dedicated%20share%2C%20etc.%3C%2FP%3E%3CP%3EIn%20both%20case%20I%20likely%20do%20not%20wish%20to%20copy%20ACL%20because%20the%20destination%20has%20already%20been%20pre-configured%20%3A%20I%20put%20my%20trust%20in%20my%20delegation%20model.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETL%3BDR%20%3A%20during%20most%20of%20my%20file%20migration%20scenario%2C%20it%20is%20not%20enough%20to%20work%20on%20volume%2Fshare%20level%2C%20I%20frequently%20need%20to%20work%20on%20a%20folder%20level%20to%20be%20able%20to%20reorganize%20data.%20Also%2C%20it%20is%20likely%20I%20do%20not%20want%20to%20retain%20ACL%20because%20I'm%20also%20implementing%20a%20new%20delegation%20model.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERobocopy%20is%20able%20to%20do%20that%2C%20not%20SMS%20(yet).%20Thus%20my%20question.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBy%20the%20way%2C%20thanks%20a%20lot%20for%20taking%20some%20of%20your%20very%20precious%20time%20to%20gather%20feedback%20from%20us%20IT%20pros.%20This%20is%20very%2C%20very%20much%20appreciated.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2750981%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2750981%22%20slang%3D%22en-US%22%3E%3CP%3EAh%20yeah.%20Sorry.%20We%20definitely%20only%20support%20the%20ACL%20mirror%20model%20-%20in%20fact%20we%20go%20even%20further%20and%20support%26nbsp%3B%3CEM%3Elocal%3C%2FEM%3E%20user%20and%20groups%20(with%20their%20new%20SIDs)%20so%20that%20we%20don't%20lose%20access%20to%20data%20or%20expose%20it%20by%20mistake%2C%20something%20robocopy%20cannot%20handle.%20I%20think%20robocopy%20is%20going%20to%20be%20your%20best%20option%2C%20perhaps%20combined%20with%20the%20ancient-but-still-useable%20built%20in%20'server%20migration%20tool'%20you'll%20see%20listed%20as%20a%20feature.%20That%20tool%20can%20be%20run%20in%20a%20%22recreate%20the%20shares%20only%22%20mode%20where%20you%20wouldn't%20have%20to%20manually%20do%20all%20the%20shares%20over%20yourself.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThen%20you're%20just%20left%20with%20dealing%20with%20cutover%20manually.%20We%20did%20document%20what%20it%20does%20so%20you%20have%20kind%20of%20a%20checklist%20though%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fstorage%2Fstorage-migration-service%2Fcutover%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHow%20cutover%20works%20in%20Storage%20Migration%20Service%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESorry%20for%20my%20bummer%20answer.%20I've%20never%20had%20anyone%20ask%20for%20this%20functionality%20before.%20I%20guess%20one%20other%20thing%20would%20be%20to%20just%20run%20the%20migration%2C%20let%20it%20do%20all%20the%20security%2C%20and%20then%20just%20blow%20it%20away%20yourself%20with%20ICACLs%20afterwards%3F%20Meh...%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2756108%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202022%20is%20full%20of%20new%20file%20services!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2756108%22%20slang%3D%22en-US%22%3E%3CP%3EFrom%20experience%20I%20can%20confirm%20rewriting%20ACL%20is%20hell%2C%20and%20I%20try%20to%20stay%20away%20from%20it%20-%20just%20like%20local%20groups-based%20ACL.%20I%20do%20appreciate%20you%20fully%20support%20this%20kind%20of%20migration%20for%20customers%20who%20need%20it%20however.%3C%2FP%3E%3CP%3ERegarding%20ACL-less%20migration%20model%20%2C%20maybe%20create%20a%20Powershell%20only%20option%2C%20with%20-Confirm%20switch%20on%20top%20of%20it%20%3F%20But%20I%20know%20your%20engineering%20resources%20aren't%20infinite%20and%20cannot%20implement%20every%20possible%20feature...%20And%20as%20you%20said%2C%20some%20alternate%20tools%20are%20already%20available.%20Was%20worth%20asking%20anyway%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20response.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Sep 01 2021 06:22 PM
Updated by:
www.000webhost.com