The "fix" is to follow best practices established back in Windows Server 2003. A lot of people aren't, apparently-- big surprise. It's a little disappointing a

The "fix" is to follow best practices established back in Windows Server 2003. A lot of people aren't, apparently-- big surprise. It's a little disappointing a default configuration results in a less secure deployment (and Microsoft has done a lot to standardize on more secure-by-default configurations) but it's not like this was some great unknown zero-day.