Windows Server 2025 security baseline: LDAP signing, Kerberos encryption, and SMB encryption defaults
Windows Server 2025 tightens defaults that affect authentication, directory traffic and shared storage. Microsoft’s OSConfig provides a baseline starting point, but the practical question is where stricter LDAP, Kerberos and SMB behaviour will break legacy apps and workflows before you roll it out.