Azure - Provisioning a Windows Server 2016 virtual machine

• Using the Windows Server 2016 Datacenter virtual machine image in the Azure Marketplace and a Microsoft retail Windows Server Datacenter license
• Using the Windows Server 2016 Datacenter virtual machine image in the Azure Marketplace and a UW-Madison Windows Server Datacenter license with Software Assurance
• Creating your own Windows Server 2016 Standard virtual machine image and a UW-Madison Windows Server Datacenter license with Software Assurance

Provisioning using the Windows Server 2016 Datacenter virtual machine image in the Azure Marketplace and a Microsoft retail Windows Server Datacenter license

• Sign in to the Azure portal
• Open Windows Server 2016 Datacenter
• Click on Create Virtual Machine. It is recommended to use the following settings during deployment:
• Basics: Location:
• Create resources in the Central US (or East US) location whenever a specific location is not required
• Basics: License:
• Already have a Windows Server license? No
• Settings: Network security group (firewall)
• Edit the default network security group to limit incoming RDP connections to your individual workstation IP address[es]
• Extensions
• Add a Custom Script Extension that uses azure-uwmadison_security_baseline-windows_server_2016_cis.ps1 as the script file. This will configure the VM to meet a subset of the CIS Microsoft Windows Server 2016 RTM Benchmark as part of the provisioning process.
• Alternatively, Add a Custom Script Extension that uses azure-uwmadison_security_baseline-windows_server_2016.ps1 as the script file. This will configure the VM to meet a subset of the Microsoft Security Baseline for Windows Server 2016 as part of the provisioning process.
• Add the Microsoft Antimalware extension to protect against viruses, spyware, and other malicious software.
• Price estimates can be found at Windows Virtual Machines Pricing
• Customers using this option pay full retail prices for Windows Server 2016 Datacenter

• Sign in to the Azure portal
• Open Windows Server 2016 Datacenter
• Click on Create Virtual Machine. It is recommended to use the following settings during deployment:
• Basics: Location:
• Create resources in the Central US (or East US) location whenever a specific location is not required
• Basics: License:
• Already have a Windows Server license? Yes
• Settings: Network security group (firewall)
• Edit the default network security group to limit incoming RDP connections to your individual workstation IP address[es]
• Extensions
• Add a Custom Script Extension that uses azure-uwmadison_security_baseline-windows_server_2016_cis.ps1 as the script file. This will configure the VM to meet a subset of the CIS Microsoft Windows Server 2016 RTM Benchmark as part of the provisioning process.
• Alternatively, Add a Custom Script Extension that uses azure-uwmadison_security_baseline-windows_server_2016.ps1 as the script file. This will configure the VM to meet a subset of the Microsoft Security Baseline for Windows Server 2016 as part of the provisioning process.
• Add the Microsoft Antimalware extension to protect against viruses, spyware, and other malicious software.
• License Windows Server 2016 Datacenter by purchasing Microsoft Windows Server Datacenter 2016 Select Per-Core License/Software Assurance Bundles from the DoIT Tech Store
• Price estimates (OS costs excluded) can be found at Windows Virtual Machines Pricing
• Customers using this option pay discounted campus prices for Windows Server 2016 Datacenter by purchasing Microsoft Windows Server Datacenter 2016 Select Per-Core License/Software Assurance Bundles from the DoIT Tech Store

• Microsoft Azure Hybrid Use Benefit
• It is recommended to use the following settings during deployment:
• Basics: Location:
• Create resources in the Central US (or East US) location whenever a specific location is not required
• Basics: License:
• Already have a Windows Server license? Yes
• Settings: Network security group (firewall)
• Edit the default network security group to limit incoming RDP connections to your individual workstation IP address[es]
• Extensions
• Add a Custom Script Extension that uses azure-uwmadison_security_baseline-windows_server_2016_cis.ps1 as the script file. This will configure the VM to meet a subset of the CIS Microsoft Windows Server 2016 RTM Benchmark as part of the provisioning process.
• Alternatively, Add a Custom Script Extension that uses azure-uwmadison_security_baseline-windows_server_2016.ps1 as the script file. This will configure the VM to meet a subset of the Microsoft Security Baseline for Windows Server 2016 as part of the provisioning process.
• Add the Microsoft Antimalware extension to protect against viruses, spyware, and other malicious software.
• License Windows Server 2016 Standard by purchasing Microsoft Windows Server Standard 2016 Select Per-Core License/Software Assurance Bundles from the DoIT Tech Store
• Price estimates (OS costs excluded) can be found at Windows Virtual Machines Pricing
• Customers using this option pay discounted campus prices for Windows Server 2016 Standard by purchasing Microsoft Windows Server Standard 2016 Select Per-Core License/Software Assurance Bundles from the DoIT Tech Store