Windows Server 2022 is Microsoft's current flagship server operating system, offering enhanced security through Secured-core Server, improved Azure hybrid integration, and significantly better performance over Windows Server 2016 and 2019.
Whether you are setting up your first server, building a home lab, or upgrading production infrastructure, this guide walks you through every step of the installation and initial configuration.
Minimum Hardware Requirements
Before you begin, verify your hardware meets these requirements:
Minimum requirements:
- Processor: 1.4 GHz 64-bit, compatible with x64 instruction set
- RAM: 512 MB (2 GB for Desktop Experience edition)
- Storage: 32 GB
- Network: Ethernet adapter capable of at least 1 Gbps
Recommended for production use:
- Processor: Multi-core, 2.0 GHz+, with virtualisation extensions (VT-x/AMD-V)
- RAM: 16–64 GB depending on workload
- Storage: 100+ GB NVMe SSD for OS, separate drives for data
- Network: Dual Gigabit or faster
For a home lab / virtual machine: 4 GB RAM and 60 GB storage is sufficient for learning purposes.
Step 1: Download Windows Server 2022
Microsoft provides a free 180-day evaluation version at the Microsoft Evaluation Center (microsoft.com/evalcenter). This is fully functional — not limited — and is perfect for learning and testing.
- Go to microsoft.com/evalcenter
- Search for "Windows Server 2022"
- Select "ISO downloads"
- Fill in the short registration form (a Microsoft account is required)
- Download the ISO file (approximately 5.2 GB)
Editions available:
- Standard — For physical or minimally virtualised environments
- Datacenter — Unlimited virtual machines, advanced features, higher cost
- Essentials — For small businesses under 25 users (limited features)
For learning and home labs, Standard is the right choice.
Step 2: Create Bootable Installation Media
For a physical server or workstation
- Download Rufus (rufus.ie) — free, safe, excellent tool
- Insert an 8 GB+ USB drive
- Open Rufus, select your USB drive from the Device dropdown
- Under Boot selection, click SELECT and choose your ISO
- Partition scheme: GPT (for modern UEFI hardware)
- File system: NTFS
- Click START
For a virtual machine
In VMware Workstation, VirtualBox, or Hyper-V, simply mount the ISO file directly as a virtual DVD drive. No USB drive needed.
Recommended VM settings for Windows Server 2022:
- RAM: 4 GB minimum (8 GB preferred)
- CPU: 2 virtual cores
- Storage: 60 GB thin-provisioned disk
- Network: Bridged (to access your local network)
Step 3: Boot from Installation Media
- Insert the USB drive (or mount the ISO in your VM)
- Restart and enter BIOS/UEFI — typically F2, F12, DEL, or ESC depending on your hardware
- Set boot order: USB drive first (or your virtual DVD for VMs)
- Save and exit BIOS
The Windows Server 2022 setup screen will load.
Step 4: Install Windows Server 2022 (Step-by-Step)
Screen 1: Language and Region
- Language: English (United States) or your preferred language
- Time and currency format: your region
- Keyboard: your layout
- Click Next, then Install now
Screen 2: Product Key
- For evaluation, click "I don't have a product key"
Screen 3: Select Edition
| Edition | Description | Choose if... |
|---|---|---|
| Server Core | No GUI, command-line only | You know PowerShell well |
| Desktop Experience | Full Windows GUI | You are learning or need GUI tools |
For beginners: Select Windows Server 2022 Standard Evaluation (Desktop Experience)
Screen 4: License Terms Check the acceptance box and click Next.
Screen 5: Installation Type Select Custom: Install Windows only (advanced).
Screen 6: Select Disk
- If the disk shows as Unallocated Space, click New to create partitions (Windows creates the required system partitions automatically)
- Select the primary partition and click Next
Installation begins. This takes 20–45 minutes on typical hardware. Your system will restart several times — this is normal.
Screen 7: Set Administrator Password Create a strong password. Windows Server enforces complexity requirements by default:
- Minimum 8 characters
- Must contain uppercase, lowercase, numbers, and special characters
- Cannot contain your username
Note this password carefully. It is the only way to access your server.
After this screen, Windows Server 2022 will complete setup and take you to the login screen.
Step 5: Initial Post-Installation Configuration
After first login, Server Manager opens automatically. Complete these configuration tasks immediately.
Rename the Server
A meaningful name makes management much easier.
- In Server Manager, click Local Server
- Click the highlighted computer name (e.g.,
WIN-A8F3K2B9) - In the System Properties dialog, click Change
- Enter a descriptive name following this convention:
ROLE-LOCATION##DC-MAIN01— Domain Controller, primary location, first unitFS-MAIN01— File ServerWEB-PROD01— Web Server, production
- Click OK and restart immediately
Assign a Static IP Address
Servers must have static IP addresses. DHCP leases can change, breaking name resolution and connections.
- Open Control Panel → Network and Sharing Center → Change adapter settings
- Right-click your network adapter → Properties
- Select Internet Protocol Version 4 (TCP/IPv4) → Properties
- Select "Use the following IP address":
- IP address:
192.168.1.10(adjust to your network range) - Subnet mask:
255.255.255.0 - Default gateway:
192.168.1.1(your router) - Preferred DNS:
8.8.8.8(for standalone servers)
- IP address:
- Click OK twice
Install All Windows Updates
Critical: Install updates before assigning production workloads.
- Go to Settings → Windows Update → Check for updates
- Install all available updates
- Restart if required
- Repeat until no updates are shown
This process may take 30–60 minutes on a fresh installation.
Configure Windows Time
Accurate time is critical for Active Directory, certificates, and logging.
Open PowerShell as Administrator and run:
w32tm /config /manualpeerlist:"pool.ntp.org" /syncfromflags:manual /reliable:YES /update
Restart-Service w32tm
w32tm /resync /force
Step 6: Security Hardening
Never leave a server in default configuration. Apply these security steps immediately.
Disable SMBv1
SMBv1 is the protocol exploited by WannaCry and NotPetya ransomware. Verify it is disabled:
# Check current status
Get-SmbServerConfiguration | Select EnableSMB1Protocol
# Disable it (it should already be disabled in Server 2022, but verify)
Set-SmbServerConfiguration -EnableSMB1Protocol $false -Force
Rename the Built-In Administrator Account
The built-in Administrator account is a known target for brute force attacks.
Server Manager → Tools → Computer Management →
Local Users and Groups → Users →
Right-click Administrator → Rename
Enable Windows Defender
Windows Defender Antivirus and Windows Defender Firewall are included. Keep both enabled unless you deploy a dedicated enterprise security solution.
Configure RDP Securely
Enable Remote Desktop but restrict access:
- Server Manager → Local Server → Remote Desktop → Enable
- Allow only specific users via Select Users
- In Windows Firewall, verify the RDP rule (port 3389) is scoped to your internal network range, not "Any" address
Set the Password Policy
# Open Local Security Policy and set:
# Minimum password length: 12
# Maximum password age: 90 days
# Account lockout threshold: 5 attempts
# Account lockout duration: 30 minutes
These settings are in secpol.msc → Account Policies.
Common Server Roles to Add Next
Once your server is configured and hardened, add the roles you need:
- Active Directory Domain Services — Centralised user and computer management
- DNS Server — Required alongside Active Directory
- DHCP Server — Automatic IP address assignment for network clients
- File and Storage Services — Shared folders and storage management
- Web Server (IIS) — Host websites and web applications
- Hyper-V — Create and manage virtual machines
Add roles through Server Manager → Manage → Add Roles and Features.
FAQ
What is the difference between Server Core and Desktop Experience in Windows Server 2022? Server Core is a minimal installation with no graphical interface — management is done entirely through PowerShell and remote tools. It uses approximately 1 GB less RAM, has a smaller attack surface, and requires fewer reboots for updates. Desktop Experience includes the familiar Windows GUI. Use Desktop Experience for learning; use Server Core for hardened production environments.
Can I run Windows Server 2022 in a virtual machine on my laptop? Yes. VirtualBox (free) or VMware Workstation Player (free for personal use) both support Windows Server 2022. Allocate at least 4 GB RAM and 60 GB storage. This is the best way to learn server administration without dedicated hardware.
How often should I update Windows Server 2022? Install updates monthly (on Patch Tuesday or the following week after testing). Security updates should be installed as soon as possible after release. Critical zero-day patches should be applied immediately.
What is the Windows Server 2022 CAL requirement? Windows Server 2022 Standard and Datacenter editions require Client Access Licenses (CALs) for every user or device accessing the server. For evaluation and learning, CALs are not required. For production, work with your Microsoft licensing partner.
How do I join Windows Server 2022 to an Active Directory domain? In Server Manager → Local Server, click the Workgroup name → Change → Member of Domain → enter your domain name → provide domain admin credentials → restart. The server is now domain-joined and managed centrally.
