Tightening up Windows Security

Interesting thread here, and Dimitrios's medium article has interesting ideas too.