Introduction

Windows Admin Center (WAC) is a modern browser-based management console for Windows Server 2016. It replaces many legacy MMC snap-ins with a unified, extensible interface that supports role-based access and Azure hybrid services integration, making it the preferred management tool for modern Windows Server environments.

Installing Windows Admin Center

Install WAC on a dedicated gateway server:

Invoke-WebRequest -Uri 'https://aka.ms/WACDownload' -OutFile C:WAC.msi
msiexec /i C:WAC.msi /qn SME_PORT=443 SSL_CERTIFICATE_OPTION=generate /l*v C:wac_install.log
Get-Service ServerManagementGateway | Select-Object Status,StartType

Preparing Managed Servers

Enable WinRM on Windows Server 2016 targets for WAC connectivity:

Enable-PSRemoting -Force
Set-Item WSMan:localhostClientTrustedHosts -Value '*' -Force
# Verify connectivity from WAC gateway
Test-WSMan -ComputerName SRV-WEB01 -Authentication Default

Configuring Secure HTTPS WinRM

Use HTTPS for secure WAC-to-server communication:

$cert = New-SelfSignedCertificate -DnsName $env:COMPUTERNAME -CertStoreLocation Cert:LocalMachineMy
New-WSManInstance winrm/config/listener `
    -SelectorSet @{Address='*'; Transport='HTTPS'} `
    -ValueSet @{CertificateThumbprint=$cert.Thumbprint; Enabled='true'}
New-NetFirewallRule -DisplayName 'WinRM HTTPS' -Direction Inbound -Protocol TCP -LocalPort 5986 -Action Allow
winrm enumerate winrm/config/listener

Installing WAC Extensions

Add extensions to expand WAC functionality. From the WAC UI, go to Settings > Extensions > Available extensions and install: Active Directory, DNS, DHCP, Failover Cluster Manager, Storage Replica, and Azure Hybrid Services. These extensions add dedicated management views for each server role directly in the WAC interface.

Role-Based Access Control

Control who can manage which servers in WAC:

# WAC uses Windows authentication with role-based access
# Add WAC-specific security groups via PowerShell
New-ADGroup -Name 'WAC-ServerAdmins' -GroupScope Global -GroupCategory Security
New-ADGroup -Name 'WAC-ReadOnly' -GroupScope Global -GroupCategory Security
# Configure access in WAC UI: Settings > Role-based Access Control

Summary

Windows Admin Center on Windows Server 2016 modernises server management through a unified, extensible browser-based console. With HTTPS WinRM connectivity, role-based access, and Azure hybrid service integration, WAC becomes the central management hub that reduces administrative overhead and improves operational visibility across your server fleet.