Every operating system should be appropriately secured, especially server platforms, which will be accessed by multiple users and store confidential company information. Public-facing servers are at the greatest risk for malicious attacks and/or data breaches, and particular caution should be applied when deploying these.
While not the most recent Windows Server version, Windows Server 2016 nevertheless enjoys a robust market share and offers proven stability and reliability. It also provides complex and elaborate security controls, which can be enacted to protect your organizations and users.
Here is a checklist from TechRepublic Premium for getting the maximum security protection out of your Windows 2016 servers.