In the past year, we've done several SBS upgrades to 2016 Essentials or 2016 Full w/Essentials Role installed (all of these moved Exchange to 365).
Something I can't explain and can't find any documentation on, however, is that when we bring online NEW Windows 10 workstations into the domain, we cannot PING them or see file-sharing services. Yet... all the migrated Windows 10 computers are fine (ping/file sharing). I can't find anything on this anywhere and am wondering if the policies between 2008/2011 changed and are the rules no longer being added? If so - does anyone have a list of what the rules "should" be to allow servers to fully communicate with workstations (this includes pushing software out - which I also discovered today that the remote registry service is now disabled by default - just set a GPO to change that to manual so at least we can push out software again).
Any advice/pointers would be appreciated. Thank you.
The migrated clients probably have the SBS client computer stuff installed and that also opens ports. I will have a new Group Policy ready with the migration guide that migrated WSE 2016 to Windows Server 2019 + Admin Center. That policy will take care of all the stuff you really want and need as an admin.