sconfig baseline

sconfig.cmd

Configure basic settings on a Windows Server Core with sconfig, the menu-driven configuration tool for servers without a GUI.

Run it when you need basic configuration of a Server Core: sconfig presents the configuration menu — computer name, domain join, network (IP/DNS), activation, updates (Windows Update), remote management (WinRM), local users, and firewall. It's the tool for server administrators without a GUI: base server settings in a menu, or with inline option numbers (sconfig 2, for example, for the name). In hardening, sconfig is the starting point for the server baseline: correct name, static network, configured updates, and limited remote management.

Don't use it for advanced configuration: sconfig covers basic settings — registry, policies, roles, and features are managed with PowerShell or remote Server Manager. In a domain, configuration (name, network, policies) is centralized in GPO/DHCP: sconfig is for initial setup or servers outside the domain. And watch out for remote management: the option to enable WinRM/Remote Desktop exposes the server — it must be configured with the firewall and restricted management network. For full baseline automation, PowerShell (or DSC) is the way; sconfig is for initial interactive configuration.