Microsoft quietly tightens Windows Server 2025 security baseline with key defaults flipped and legacy risks shut down.