When going to apply updates, there should at least be an option to check for updates if updates are already found. This was previously an option through Server 2012 R2 and is no longer possible. Because of this, changes to available updates may not be received by the client computer until after the update list is applied and the server is rebooted. Given how locked down the update interface is now, even having that option automatically happen in the background would be great.

In my environment, I use WSUS to patch all of my servers. This month, KB4041691 was installed as both a CU and a Delta (the delta appears to have been a mistake). I didn't realize this until after the fact, but this means that the update was installed twice and caused my servers to not boot. The patch was expired 7 hours after being released, however any server that had checked into WSUS before that expiration still had the Delta as a required update. If the server had checked back into WSUS before applying the updates, it would have realized that the update was no longer valid. This would have saved several hours of troubleshooting. I ultimately had to use the recovery options to remove the update which caused the server to not boot using information from https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/monthly-delta-update-isv-support-without-wsus

Allow Microsoft Edge Favorites to be easily managed like the Internet Explorer Favorites folder structure (end user-manageable) and support folder redirection (especially in the Enterprise edition of Windows 10). The IE Favorites folder can be redirected to a network location and available on any computer a user logs into, Edge Favorites are stuck on the local hard drive in a non-user manageable form (ESE database). The same goes for Sticky Notes, in Windows 7 they were stored in the Roaming AppData folder and followed a user across computers. Now they have been converted to a "modern UI app" which is not readily supportable in the enterprise.

In my opinion Microsoft is following a wrong paradigm when it comes to providing server admins with context based background information while working on a server desktop.
It is regarding the use of referrals in the interface to sources on the internet in order to provide the administrator with more information. I know that, when Microsofts recommendation is followed and the core version is chosen, this is no issue at all, but since several server implementations still require the full graphical version (e.g. Exchange Server 2016) and many IT organisations still choose to use RDS for server administration, many admins will still be faced with this phenomenon.

An example: While on the desktop in an interactive session of a Windows Server 2016 machine, I click start -> settings (leftmost part of the startmenu), in the settings window I click “update & security”. Right at the bottom there is a link “Learn more”. Clicking on this link causes Internet Explorer to open in IEESC mode. The page that IE tries to open however needs Java script to be enabled, and without Java script enabled, no content is shown.

And this is my main concern: The Windows interface provides the admin with links that encourage enabling features that undermine security best practices.

What makes it even worse: there is no alternative way to obtain the information via another PC (e.g. from a RD session, copying the link and paste it in the browser of your admin PC), so the admin is forced to configure the server in a manner that conflicts with security best practices (best is to avoid using a browser at all, is my opinion, but apparently that is not Microsofts point of view).

I would like to encourage Microsoft to move to text-only referrals/urls or provide at least a way to copy the link to the clipboard. If that is not feasible somehow, make the web pages behind these links as plain as possible, so there is no need for browser extensions on the server.

I do believe that servers do not need a GUI and probably should not have one for performance and security reasons. With Windows Server 2016, the default installation is Server Core, and I do think this is a very good thing.

However, there are scenarios when a GUI can be handy, particularly for small business with limited IT resources (for example, for the Essentials role). In this scenario, instead of installing a GUI on the server (with calculator, Explorer, Internet Explorer, etc.) the user should be able to access and configure the server from a webpage just like most routers or many other appliances.

When I hit start and type "Active", for example, the start menu correctly finds "Active Directory Users and Computers", "Active Directory Domains and Trusts", etc. on Windows 10 and Windows 2012R2.
that is NOT the case in Windows 2016 TP5. I have to type in "administrative" to get to "Windows Administrative Tools" and then run my mmc.

I don't know if it is a setting I should enable (maybe Cortana), or I have to wait for some indexing to finish (I've already waited waaay to long; besides Windows 2012R2 does not have this index-wait-time) for this comprehensive search to happen, but now the search function on start menu of Windows 2016 TP5 does not return all the relevant results as it does in other previous versions.

I am working on a new lockdown group policy that will be used for our future Windows 2016 XenApp servers.

As this will be used for a lot of users, certain things will need to be locked down. For example the Settings need to be locked down in the same way as it possible with Control Panel.

I want to be able to manage what settings is visible in Settings with GPO.

We cannot allow users on a shared RDSH server to install windows update, add VPN connection, check what application is installed etc etc.
With Control Panel it was possible to hide certain settings, with Settings its all or nothing.