Hardened for Microsoft Windows Server 2019, 2022 & 2025

This is a repackaged software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

What cloudimg adds to every version

• Every image is built by cloudimg from the Windows Server base, fully patched at build time with every cumulative update available, and hardened with the Microsoft Security Baseline (Member Server) applied with Microsoft's LGPO tool; the HardeningKitty report ships on the image.
• Each image is generalised with Sysprep, so on first boot every instance gets its own per-instance Administrator password, machine SID, computer name and RDP certificate.
• Remote Desktop requires Network Level Authentication, the Windows Firewall allows inbound RDP (3389) only, SMBv1 is off and instance metadata is IMDSv2 only.
• Build residue is removed and free space is wiped before capture.

Included products

• Windows Server 2019 Datacenter
• Windows Server 2022 Datacenter
• Windows Server 2025 Datacenter

How to choose a version

• Standard: the full server image

Licensing

The Windows Server licence is included in the AWS instance charge; cloudimg's charge covers the hardening and setup only.

This listing is a collection of separate AMIs, one per release, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

Microsoft and Windows Server are trademarks of the Microsoft group of companies. cloudimg is not affiliated with or endorsed by Microsoft.