Posted in

How to Enable and Configure Built-In SSH Server on Windows Server 2025 for Secure Remote Access

by ailona•

Windows Server 2025 simplifies enabling SSH server with built-in support, eliminating the need for third-party tools. This guide covers activating SSH, configuring firewall rules, managing user access, and connecting remotely, making secure command-line access easier than ever. Unique :

Configure SSH Server on Windows Server 2025: What You Need to Know

If you’ve ever struggled to enable SSH on Windows Server, good news is here. Windows Server 2025 simplifies SSH setup with a built-in server. No more third-party tools or complicated tweaks. This update is a game-changer for IT pros who want secure remote command-line access fast and hassle-free.

What’s New in Windows Server 2025 SSH

Windows Server 2025 introduces a native SSH server that you can enable directly from Server Manager. Just navigate to the Local Server node and find the new Remote SSH Access option. By default, it’s disabled, but a simple click runs a script to activate it.

“Enabling SSH on Windows Server has historically required third-party tools or complex configuration.”

This script not only enables SSH but also provides essential firewall info and user access details. It’s a neat, one-stop setup that saves time and reduces errors.

Major Updates: Firewall and User Access Management

Once SSH is enabled, configuring Windows Defender Firewall is crucial. Head to Inbound Rules and locate OpenSSH SSH Server. Make sure it’s enabled for both Domain and Private profiles. By default, it’s only active on private networks, which might block access on domain setups.

Next, user access is managed via a new local group called OpenSSH Users. Add individual users or entire domain groups here to grant SSH permissions. This approach streamlines access control across multiple servers.

Connecting to Your Windows Server 2025 via SSH

To connect remotely, use any SSH client. Windows 10 and later include a built-in client, or you can install Microsoft’s OpenSSH client via winget. The connection syntax looks like this:

ssh DOMAIN\username@server_name

Replace DOMAIN, username, and server_name with your actual details. The first connection prompts you to verify the server’s key fingerprint. Just type yes and enter your password when asked.

“You should now have a remote SSH session into your Windows Server 2025 machine.”

From here, you can customize the SSH server further—like changing the default shell or enabling key-based authentication. For advanced setups, Microsoft’s official docs provide detailed guidance.

Why This Matters for IT Pros

Windows Server 2025’s built-in SSH server is a big win for sysadmins and developers. It cuts down setup time, improves security, and integrates seamlessly with existing Windows tools. If you manage Windows servers remotely, this update is worth exploring right now.

  • Activate the built-in SSH server directly via Server Manager with a simple script.
  • Adjust Windows Defender Firewall rules to allow SSH traffic on domain and private networks.
  • Create and manage the OpenSSH Users group to control SSH access permissions.
  • Use Windows’ built-in or Microsoft OpenSSH client to connect remotely via PowerShell or terminal.
  • Advanced options include customizing shells and enabling key-based authentication for enhanced security.

    • From the New blog articles in Microsoft Community Hub