Microsoft UK reps commented at a Win2k3 presentation that I went to that customers had complained NT4 didn't do enough out of the box. All sorts of features it

Microsoft UK reps commented at a Win2k3 presentation that I went to that customers had complained NT4 didn't do enough out of the box. All sorts of features it was capable of required specific configuration and enabling. They made the point about security etc to their customers, but lots of customers still requested features to be turned on by default. The internet was still fairly nascent at the time, there hadn't been a major vulnerability through such mechanism etc. etc. They listened to their customers. Which is often the right thing to do, but rarely when it comes to things with security implications, but it's fair to say that in general the tech industry was still fairly naive back then. Win2k came with IIS enabled by default, etc. etc. etc. It was a security disaster. Microsoft decided from the next version on that convenience didn't trump security and went back to requiring you to consciously turn on services.