Windows Server 2019 addresses security in several ways. First, the new server operating system accesses services from the cloud: Windows Defender Advanced Threat Protection monitors the server for malware and stops processes that are classified as dangerous. Microsoft also wants to use the cloud service to combat zero-day attacks and root kits. The link between Azure and Windows Server 2019 also gives admins the opportunity to use the functions of Azure AD for their security concepts.
Microsoft uses shielded VMs as additional protection functions. Sensitive tasks can be performed in a secure virtual machine. This now also applies to Linux servers, which can be protected in this way. Additionally, encryption options have been expanded, with the 2019 version, data transfer between virtual machines can now also be encrypted.