SecureAnyCloud
Deployment guide

Windows Server Windows

Overview

This page is the starting point for the SecureAnyCloud Hardened AMIs for Microsoft Windows Server 2019, 2022 & 2025 listing on AWS Marketplace. The listing is a single product that offers several products and releases as separate software versions. Subscribe once, choose a version at launch, then follow that version's guide for setup and connection.

What SecureAnyCloud adds to every version:

  • Images are built by SecureAnyCloud from the Windows Server base and fully patched at build time with every cumulative update available
  • The Microsoft Security Baseline (Member Server) is applied with Microsoft's LGPO tool, and the HardeningKitty report ships on the image
  • Each image is generalised with Sysprep, so on first boot every instance gets its own Administrator password, machine SID, computer name and RDP certificate
  • Remote Desktop requires Network Level Authentication, and the Windows Firewall allows inbound RDP (3389) only
  • SMBv1 is off, and instance metadata is IMDSv2 only
  • Build residue is removed and free space is wiped before capture

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then choose Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace, or Launch from EC2 Console for full control. In Version, select the product and release you want.
  • Choose your Region and an instance type (m5.large is recommended). Select your EC2 key pair and a security group that opens Remote Desktop (3389) from your own network only, then choose Launch.
  • After launch, open the product's guide below for first login.

Each version is a separate software version named <product> <release> <edition> - <date>, for example Windows Server 2022 Datacenter - YYYY-MM-DD. The date is when that version was added to the listing.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

Releases and variants in this listing, newest release first:

  • Windows Server: 2022 (Datacenter)

Security model

Every version in this listing follows the same model:

  • Fully patched. Every update Windows Update offers is installed when the image is built. The build fails if any update is still pending or a reboot is owed.
  • A unique Administrator password on every instance. EC2Launch sets a random password on first boot. Read it with Get Windows password and your EC2 key pair. There is no default or shared password.
  • Nothing shared between instances. Each image is generalised with Sysprep, so the machine SID, computer name and Remote Desktop certificate are created on each instance.
  • IMDSv2. Instance metadata requires a session token.
  • Only Remote Desktop (3389). Open it in your security group to your own network only. The Windows Firewall allows inbound Remote Desktop only.
  • Microsoft Security Baseline (Member Server) for Windows Server 2022 Datacenter. It is applied with Microsoft's LGPO tool and audited with HardeningKitty. The guide shows the report and the rules waived for EC2.

Choose your product

Distribution, software version and guide:

Windows Server | Windows Server 2022 Datacenter | Open guide →

How to tell which version you launched

The version you chose appears in the instance's launch record in the EC2 console (AMI name and description) and in your AWS Marketplace subscription. On the instance, run Get-ComputerInfo -Property OsName, OsVersion in PowerShell to see the Windows Server release and build. Open the matching guide above to continue.

Support

SecureAnyCloud provides 24/7 support for every version in this listing via the AWS Marketplace support channel. Raise a ticket through the Marketplace console or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened AMIs for Microsoft Windows Server 2019, 2022 & 2025 with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS