related to ADFS 2016:

it would be great if we can force a specific authentication method at ADFS for a relying party. in general forms and certificate authtentication is possible for our users, but for specific apps only certificate should be possible for security reasons. adding certificate as MFA is not a good solution from the users point of view because they will be forced to enter first their credentials before they have to use a certificate (which is more secure than forms and because of this sufficient).

Default IIS HTTPS settings should get a good grade on https://www.ssllabs.com/
If legacy operating system support is needed, that should have to be enabled on a per-site basis.

Enable Scheduled Jobs/Tasks in Task Scheduler to Run at Log off. Presently due to updates on Server 2008 and higher, against security risk, a scheduled task does not run when the user is logged off. Supposedly due to a "Session 0 Isolation" from the updates.

Facility for firwall protections should be incorporated

Ever since I’ve moved to the Skip Ahead builds (10.0.18214.1000 & the earlier one), MS-Word is reporting incorrect page # for the doc.

Here in page # reflected for Current & Total pages is incorrect.

how to move the file in network Server 1 location to Server 2 location by using forefile

Print from an iPad

In the normal RDP client there is an option to connect local resources to your RDP session. Unfortunately this is not available in de RD Client (available in the Windows Store). Please add this functionality also in this client.

I can remote in from my samsung tab s3 to my windows desktop, but it won't allow me to login as the remote machine doesn't recognize the smart card in my tablet USB-C connector. My machine requires I have the smart card plugged in but the remote app for android doesn't seem to support usb redirecting so it doesn't recognize the card

RDP is already a feature. If you were looking to assist users that had an active session on a machine and could implement the Offer Remote Assistance from inside the WAC with a button push, it'd make life easier.

We need a way to tell a Remote App to turn on the On-Screen Keyboard. Currently the client has no way of doing this. I have a remote app I cannot use because my devices function key doe **** work to select letters.

Good

Continue support and updates for Advanced Group Policy Management. Our company uses AGPM extensively and would like to see future enhancements and support continued. If there is a replacement Microsoft product, it doesn't seem to be found.

Add ability to setup quotas on shares when using Windows Server core installation

You know, Drag & Drop is a useful feature.
It's annoyoing, that RDP does not support Drag & Drop from / to the remote session.

Hi,

In terms of the Extranet Smart Lockout featre (ADFS Windows Server 2016), it would be really good if, instead of merely locking out users' acocunts whom are the suspected target of a brute force attack, to banning the source IP of the attack instead.

This could operate in a similar fashion to the Linux-based fail2ban whereby an offending IP address gets put in 'jail' for a timeout threshold.

I think this is a better option than punishing the user (who is locked out as result of brute force attempt that is out of their control).

Hi,

In terms of the Extranet Smart Lockout featre (ADFS Windows Server 2016), it would be really good if, instead of merely locking out users' acocunts whom are the suspected target of a brute force attack, to banning the source IP of the attack instead.

This could operate in a similar fashion to the Linux-based fail2ban whereby an offending IP address gets put in 'jail' for a timeout threshold.

I think this is a better option than punishing the user (who is locked out as result of brute force attempt that is out of their control).

A voice activated program that allows you to draw hands free for chikdren who can't draw due to illness, handicap, or circumstances