Windows Server 2016 Build 14393.970 En-us April 2017 [best] Online

Build 14393.970 introduced hardening for Host Guardian Service (HGS) and supported attestations (TPM, admin-trusted). This was crucial for enterprises deploying shielded virtual machines against privileged host threats.

Get-ItemProperty "HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion" | Select-Object BuildLabEx Windows Server 2016 Build 14393.970 En-US April 2017