User Manual
Increasingly sophisticated attacks
require new layers of security
Evolving cyber threats have made it harder than ever for IT to secure their
applications and data. Attackers are getting more sophisticated, often using
compromised, highly privileged admin credentials to control access. These
credentials make it easy for them to remain undetected for long periods of
time or create an instant, devastating attack.
Virtualized environments are particularly at risk. Virtual machines don’t
have the hardware-rooted security capabilities of physical servers. Since
virtual machines are instantiated from les that can be copied and modied,
any attacker that is able to access the fabric storage, network, or compute
resources immediately has unchecked privileges for all virtual machines. An
attacker can simply copy your SQL and domain controller VMs into a USB
drive and walk out with your crown jewels.
Protect, detect, and respond
Windows Server 2016 includes built-in breach resistance mechanisms to
thwart attacks on your systems and help meet compliance goals. Even if
someone nds a way into your environment, the layers of security built
into every Windows Server 2016 system limit the damage they can cause.
Several credential isolation and threat defense capabilities are activated
upon deployment. Other security features can be enabled as needed to
help you:
• Block Pass-the-Hash attacks and other attempts to compromise admin
credentials.
• Prevent malware and ransomware from being injected into servers.
• Quickly identify behavior that indicates a server breach.
• Extend protection that exists for your physical servers to your virtual
machines.
“ Shielded Virtual Machines remove
a hosting obstacle and are a huge
competitive differentiator. No one but
Microsoft has this technology now.”
– Philip Moss
Chief Product Ofcer
Acuutech
Global data breach costs per
organization ($M)
The cost of data breaches continues to
grow every year and now averages $4M
per incident.
Source: Cost of Data Breach Study, IBM, Ponemon
4.1
4
3.9
3.8
3.7
3.6
3.5
3.4
3.3
3.1
2014 2015 2016
Better security starts at the OS
with Windows Server 2016