여러 권장사항을 적용하여 Microsoft Windows Server를 실행하는 Compute Engine 인스턴스를 최적화할 수 있습니다. 이 도움말에서는 Google Cloud에서 제공하는 다른 제품을 활용하여 성능, 보안, 중복성, 가용성 면에서 Windows 인스턴스가 최적의 성능을 발휘하도록 하는 방법을 설명합니다. Windows 인스턴스의 구성 및 설정에 관한 자세한 내용은 Windows 워크로드를 참고하세요. Microsoft SQL 인스턴스의 경우 SQL Server 권장사항을 참고하세요.
Windows를 실행하는 경우 바이러스 백신 소프트웨어를 실행해야 합니다.
멀웨어 및 소프트웨어 바이러스는 네트워크에 연결된 모든 시스템에 심각한 위험을 초래합니다. 이러한 위협으로부터 데이터를 보호할 수 있는 간단한 완화 조치가 바로 바이러스 백신 소프트웨어입니다. Microsoft는 바이러스 백신 소프트웨어에 관한 조언을 제공합니다.
VM 오류가 발생한 경우 이전 백업에서 빠르게 복구하기 위해 일반 영구 디스크 스냅샷을 사용 설정합니다.
데이터 볼륨 및 애플리케이션이 VSS와 호환되는 경우에만 VSS 스냅샷을 사용 설정합니다. VSS 서비스는 이 디스크를 읽기 전용으로 표시하므로 운영체제 디스크에서 VSS 스냅샷 만들기를 피하는 것이 좋습니다.
패치 관리
Windows 운영체제가 최신 버전으로 업데이트되었으며 모든 시스템 및 품질 업데이트('누적 업데이트' 또는 '누적 품질 업데이트'라고도 함)가 설치되어 있는지 확인합니다.
인스턴스에서 자동 Windows 업데이트를 활용합니다. Microsoft는 적어도 매월 둘째 주 화요일마다 패치를 출시합니다. 알려진 버그 또는 취약점으로부터 시스템을 보호하는 데 도움이 되도록 이러한 업데이트를 적용하기 위한 전략을 마련해야 합니다. 자동 다시 시작이 불가능한 경우 업데이트를 예약하고 적절한 시점에 인스턴스를 다시 시작할 수 있도록 VM Manager를 사용하여 패치 작업을 생성하는 것을 고려해 보세요.
로깅 및 모니터링
현재 운영체제 상태를 더욱 잘 파악하고 인스턴스에 액세스할 수 없는 경우 콘솔을 볼 수 있도록 가상 디스플레이를 사용 설정합니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[[["\u003cp\u003eUtilize supported Windows Server versions, staying informed about their lifecycle and end-of-support dates on Google Cloud, and use the latest Google Cloud public image versions for new instances.\u003c/p\u003e\n"],["\u003cp\u003eImplement security measures, such as using antivirus software, managing user privileges, and adhering to the principle of least privilege, especially when using Active Directory.\u003c/p\u003e\n"],["\u003cp\u003eRegularly review and verify your backup and recovery plan, enable persistent disk snapshots for quick recovery, and apply VSS snapshots only on data volumes of compatible applications.\u003c/p\u003e\n"],["\u003cp\u003eKeep the Windows operating system updated with the latest system and quality patches, potentially using VM Manager to schedule updates and manage instance restarts.\u003c/p\u003e\n"],["\u003cp\u003eEnable virtual displays, stream serial port output to Cloud Logging, centralize logs using the Ops Agent, and keep the guest environment updated with the latest Google Cloud drivers and agents to ensure optimal performance and troubleshooting capabilities.\u003c/p\u003e\n"]]],[],null,["# Best practices for Windows Server VMs\n\nWindows\n\n*** ** * ** ***\n\nYou can apply several best practices to optimize Compute Engine instances\nthat run Microsoft Windows Server. This article describes how you can utilize\nother products available on Google Cloud and to ensure your Windows instances\nare performing optimally in terms of performance, security, redundancy and\navailability. For further information on configuration and setup of Windows\ninstances, see [Windows Workloads](/compute/docs/instances/windows). For\nMicrosoft SQL instances, refer to\n[Best Practices for SQL Server](/compute/docs/instances/sql-server/best-practices).\n\nGeneral Compute Engine best practices\n-------------------------------------\n\n- Understand which [versions of Windows Server](/compute/docs/images/os-details#windows_server) are supported, best suited for your use case, and which versions might be coming up to the [end of Windows Server support on Google Cloud](/compute/docs/instances/windows/end-of-support). Further information can be found at [Lifecycle FAQ from Microsoft](https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates).\n- Understand how to correctly [Add a persistent disk to your Windows VM](/compute/docs/disks/format-mount-disk-windows).\n- Enable or disable Windows Server operating system features not required for the services run by your organization, unused features will consume resources you might not be using.\n- Launch new instances with the latest image version provided by Google Cloud public images, if you are using [Pay-as-you-go (PAYG) licence](/compute/docs/licenses/about).\n\nSecurity\n--------\n\n- If you are running Windows, you should be running antivirus software. Malware and software viruses present a significant risk to any system connected to a network, and antivirus software is a simple mitigation step you can use to protect your data. Microsoft provides advice about on [antivirus software](https://support.microsoft.com/en-US/windows-antivirus-software-providers).\n- Understand how to [create new local users](/compute/docs/instances/windows/generating-credentials#create_a_local_user_account) and [grant/revoke Administrator privileges](/compute/docs/instances/windows/generating-credentials#grant_local_users_administrator_privileges) on local accounts to limit critical applications and system files.\n- If you are using Active Directory, make use of [Configuring User Access Control and Permissions](https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/configure/user-access-control) to implement the principle of least privilege for user permissions within the Windows operating system. For further information see [summary of best practices for Active Directory](https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn487442(v=ws.11)).\n\nBackup \\& Recovery\n------------------\n\n- Routinely review and verify your backup and recovery strategy.\n- Enable regular [Persistent Disk Snapshots](/compute/docs/disks/snapshots) for a quick recovery from a previous backup if there is a VM failure.\n - Only enable [VSS](https://learn.microsoft.com/en-us/windows-server/storage/file-server/volume-shadow-copy-service) snapshots on data volumes and where the application is VSS compatible. Avoid [creating VSS snapshots](/compute/docs/instances/windows/creating-windows-persistent-disk-snapshot#create-snapshot) on the operating system disk because the VSS service marks this disk as read-only.\n\nPatch Management\n----------------\n\n- Confirm your Windows operating system is updated to the latest version and all system and quality updates (also referred to as \"cumulative updates\" or \"cumulative quality updates\") are installed.\n- Make use of automatic Windows Update on your instance. Microsoft releases patches every second Tuesday of each month at minimum. You should have a strategy for applying these updates to help safeguard the system from known bugs and/or vulnerabilities. If automatic restarts are not an option, consider [creating patch jobs by using VM Manager](/compute/docs/os-patch-management), which can schedule updates and restart your instances at an appropriate time.\n\nLogging and Monitoring\n----------------------\n\n- [Enable virtual displays](/compute/docs/instances/enable-instance-virtual-display) to better understand the current state of the operating system, and to allow you to view the console in case your instance is inaccessible.\n- If your VM instance is stopped, logs from the [serial console](/compute/docs/troubleshooting/troubleshooting-using-serial-console) will no longer be available, to retain these logs you can [stream serial port\n output to Cloud Logging](/compute/docs/troubleshooting/viewing-serial-port-output#enable-stackdriver) and use the output stored to assist with troubleshooting and auditing.\n- Consider configuring the [Ops Agent](/logging/docs/agent/ops-agent) to centralize the logs you see in Event Viewer by [streaming logs to Cloud Logging](/logging/docs/agent/ops-agent/authorization), this allows for easier retrieval of the logs and more consistent retention. This step is completely optional, but recommended.\n- Consider installing the [Ops Agent](/logging/docs/agent/ops-agent) to monitor and retain the monitoring data of your instance performance.\n- Consider [streaming logs from third-party Applications](/logging/docs/agent/ops-agent/third-party).\n\nGoogle related drivers, agents \\& features\n------------------------------------------\n\n- When you use Microsoft software, you are responsible for understanding and complying with any licensing agreements that you might have with Microsoft. To understand the requirements and options for licensing, refer to the [Microsoft Licenses](/compute/docs/instances/windows/ms-licensing) documentation.\n- Keep the guest environment updated in line with your Windows Update strategy. Regularly [updating the guest environment](/compute/docs/images/install-guest-environment#update-guest) of your Windows instance will ensure you are running the latest and most stable version of all necessary Google Cloud agents and drivers."]]
