Windows Server 2025 Released — Hotpatch and SMB over QUIC

Windows Server 2025 reaches general availability with three headline features: hotpatching (security updates without reboots), SMB over QUIC and major Active Directory improvements.

Hotpatching — Security Without Reboots

Hotpatch allows applying security updates without rebooting, reducing downtime significantly for critical servers.

# Enable hotpatch (requires Azure Arc or standalone licence)
# Via Server Manager → Windows Update → Enable Hotpatch

# Check hotpatch status via PowerShell
Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 10

SMB over QUIC

SMB over QUIC allows secure file sharing over the internet without VPN — using the same QUIC protocol that powers HTTP/3.

# Enable SMB over QUIC (requires certificate)
New-SmbServerCertificateMapping -Name "FileShare" -Thumbprint "CERT_THUMBPRINT" -StoreName "My"
Set-SmbServerConfiguration -EnableSMBQUIC $true

Active Directory Changes

• 32k database page size — massive scalability improvement
• Delegated Managed Service Accounts (dMSA)
• Better Kerberos armoring support

IIS and Web Platform

IIS 10.0 on Server 2025 adds HTTP/3 preview support and improved WebSockets performance. PHP 8.4 is fully supported via FastCGI.

Conclusion

Windows Server 2025 is a compelling upgrade for enterprises needing reduced maintenance windows. Our team provides Windows and Linux server management services.