When Creator Owner is removed from NTFS permissions, change permissions is still given when a person with Modify rights creates a new folder/file. If the Modify permission is the only permission granted, a person who creates a new folder/file should not be granted the Change Permissions when Creator Owner has been removed from the NTFS permissions.

Post a list of what the error codes mean in the error log for transferring files with storage migration service. I have no idea what code 2, 32 or 40973 mean! Would be nice to know so I can know why files failed to copy.

Error message that i spend 3 month search for a solution no one knows what's the problem

Getting this error in server 2019 and 2016 after closing GPMC.msc

Error ID 1000

The massage is:

Faulting application name: mmc.exe, version: 10.0.17763.1, time stamp: 0x176b88f0
Faulting module name: GPOAdmin.dll, version: 10.0.17763.1, time stamp: 0x84e18916
Exception code: 0xc0000005
Fault offset: 0x00000000000bb4cb
Faulting process id: 0x980
Faulting application start time: 0x01d50e351f75ca91
Faulting application path: C:\Windows\system32\mmc.exe
Faulting module path: C:\Windows\System32\GPOAdmin.dll
Report Id: 918fa381-d469-4623-9544-9a949e90666d
Faulting package full name:
Faulting package-relative application ID:

DNS Dynamic Update Registration Credentials in DHCP Management Console or PowerShell (Set-DHCPServerDNSCredential) do not support the use of Group Managed Service Accounts (gMSA) when specifying credentials.

There doesn't appear to be any way to set up SSL/STARTTLS configuration for email notifications from File Server Resource Manager.

Can this ability be added so that email can be securely sent?

It would be nice if you could enable ctrl+left click as right click, the people (like me) who use a one buttom mouse the current way it works is a bit anoying.

"If you find a bug with Windows Server please open a support case at https://support.microsoft.com and report it – these cases are free."

If you go to the link suggested how exactly are you supposed to open a "free" support case for Windows Server bug reports. In the contact us chatbot, there isn't even an option for Windows server. If you select "view all Microsoft products" and select Windows Server it just takes you to the Windows Server docs. So please explain, step by step like I'm a 5 year old, how I'm supposed to report a Windows server bug.

Add Support for Remote Desktop using a Biometric for Key Trust environments

I'd like to join all of my on-premise machines to Azure AD (and remove them from the local domain). However, it is procedures such as this one that are incredibly complex to set up. I'd like to recommend that Azure engineers refine and simplify such a process as this.

https://docs.microsoft.com/en-us/windows-server/administration/hybrid-cloud-print/hybrid-cloud-print-deploy

The easier you make doing a task such as this one, the quicker folks like me will migrate users over to Azure. It should not be so difficult to implement something so basic such as accessing an on-premise printer (that's joined to a local domain) from AAD joined machine.

Windows Server Update Services (WSUS) is able to send email notifications via an SMTP using Options / E-Mail Notifications.

However at present it does not support STARTTLS or SSL - which means it is impossible to use directly with Office 365 or Gmail, it sends any authentication details in plain text, and the emails themselves are sent unencrypted. It's 2019 - can we get basic security support built into this product, please?

On a normal working Windows 2016 server I pretty much always have 1 or 2 errors on the Server manager dashboard. Those 2 errors pretty much always relate to 2 services that have no use on a server as they relate to user stuff like syncronising mail and maps.
Could you either simply by default disable those 2 services on a server or make the server manager smarter by not reporting those 2 services not running as an error. By the way, the Sync_Host... service seems to appear and disappear at random.

Issue: Microsoft Remote Desktop for ipadOS cannot create new Remote Resources. Does not allow you to put a user or password. Please help!!!

Implement a command like Set-AdfsRelyingPartyWebTheme but for Application Groups.
Currently it is not possible to define a theme per application group.

Please add support for ADFS managed from within Admin Center.

ADFS 2019 allows for 300 IPs to be added to the "Banned IP list"

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-banned-ip#adding-banned-ips

As there are nearly four billion public IPs on the internet, 300 is woefully inadequate.

Small customers that are only trying to block a few users aren't likely using ADFS anyway. Large organizations that rely on ADFS will hit the 300 limit almost immediately.

I'd like to see this number raised to 65538 (/16) or something similar.

When is (did?) the regedit address bar coming (come) to Windows Server?

It would be a big help navigating remote registries. We would save bandwidth and improve performance to go directly to a location in registry on our remote clients on slow networks, instead of slowly opening trees.

While never fully supported, the support WinPE had for WPF was enough to allow folks to build flexible, customized tools. Most of us who have done it are SCCM admins building custom front-ends for the OSD process.

The excellent community has found a workaround to keep WPF going, but it would be nice to have support officially back to at least the level it was.

Thanks!