Windows security baselines. They suck. Not because they are bad, but because they aren’t enforced defaults. Turning them on breaks something and you have to dig through decades of policy and app configuration to figure out why.

I wish once a year MS would have just made a security defaults update month and made a few changes so we could anticipate them and fix them collectively over time.