VDI Security - Hyper-V Operating System Installation Type

You can install Hyper-V with either the Full or the Server Core installation options of the 64-bit editions of Windows Server 2008 (Standard, Enterprise, or Datacenter). Server Core is a minimal server installation option that provides a low-maintenance server environment with limited functionality. With a Server Core installation (as with Hyper-V Server 2008), only the minimal components that are necessary to support core functionality and key server roles are installed, including Hyper-V (if selected).

Using Server Core for Hyper-V physical computers provides three main security benefits:

· A minimized attack surface for the management operating system.

· A reduced computer footprint.

· Improved system uptime because there are fewer components that require updates.

Potential drawbacks of using Server Core include the following:

· Server Core cannot be managed locally using the traditional graphical user interfaces (GUIs) such as Server Manager. Remote administration consoles and specialized WMI command-line scripts are required to manage the server, which might require additional training for administrative staff.

· Some drivers, software agents, and applications are not compatible with a Server Core management operating system. In particular, the Microsoft .NET Framework is not included with Server Core installations, so you will not be able to run any .NET applications with the management operating system. Validating all applications, drivers, and software agents is especially important when deploying a Server Core installation.

 

For detailed information please refer to Hyper-V Security Guide