I'm starting to work on building a security-hardened template for when we start deploying Server 2019. Windows Firewall comes with all sorts of seemingly-extraneous rules allowed by default (like ...

Microsoft rolls out new Kerberos protections to block RC4 encryption, with enforcement mode becoming mandatory for domain controllers in 2026.