Server Application
• OS X Server can perform network diagnostic tests to verify your server is accessible from the Internet. Network diagnostic tests verify reachability by checking your server's host name, service ports, and DNS MX records. (Diagnostic tests using DNS MX records will be available in a subsequent release.)
• Firewall and user/ group-based service access controls can now be defined in the Access tab of Server pane. Access restrictions may be applied in multiple levels - for all networks, local networks, this Mac, custom networks, and for specific users and groups.
File Sharing
• SMB 3 is the default protocol for sharing files in OS X Yosemite. SMB 3 helps protect against tampering and eavesdropping by encrypting and signing data “in-flight.” In addition to SMB 3, OS X Yosemite maintains support for SMB 2, AFP and SMB network file sharing protocols, automatically selecting the appropriate protocol as needed.
• SMB 3 provides end-to-end encryption to protect data and secure communication on untrusted networks. SMB 3 uses AES CCM for encryption to ensure communications between client and server are private.
• To guard against tampering, SMB 3 adds a signature to every packet transmitted over the wire. SMB 3 uses AES-CMAC to validate the integrity of the signature, ensuring the packets have not been intercepted, changed or replayed and that communication between hosts is authenticated and authorized.

Profile Manager
• Profile Manager features new payload settings and Mobile Device Management (MDM) support for new features in iOS 8 and OS X Yosemite iOS and OS X
• MDM support for device renaming
• MDM query to display which VPP account is configured on a device, if any
• Network settings for WPA-2 Enterprise and WPA2-PSD security types
• VPN settings to support “Always On” and Internet Key Exchange (IKEv2) iOS 8!
• MDM support for pushing the installation of media assets including PDF, EPUB and iBook Author files
• MDM query to determine the most recent iCloud backup
• Restriction setting to Allow user to configure restrictions on a device
• Restriction setting to allow or restrict use of Handoff
• Restriction setting to prevent backup of managed books
• Restriction setting to prevent syncing of highlights and notes of managed books
• Restriction setting to allow Internet results in Spotlight search
• Restriction setting to Allow Erase of All Content and Settings
• Restriction setting to Allow Managed Apps to Store Data in iCloud
• Network setting for EAP-SIM random key challenges
• Updated Content Filter setting for third-party Plug-in filters
• Updated Mail setting with per-message S/MIME signing encryption switch
• Managed Domains setting to manage web and mail account domains OS X Yosemite
• MDM support for OS X enterprise app installation
• AD Certificate settings to support AllowAllAppsAccess and KeyIsExtractable
• SCEP and AD Certificate settings to allow specifying certificate renewal notification time
• Passcode setting to prevent login after a specified number of incorrect attempts

Mail Server
• Simpler interface for setting up email for multiple domains

Calendar Server
• Administrators can store address information for all meeting rooms in the Calendar Server. This allows Calendar clients to associate map location with a schedule-able location, support travel times, etc.

Caching Server
• IP address range registration to support caching content in non-NAT’ed networks. (This feature will be available in a subsequent seed.)