They have a habit of ‘fixing’ CVEs by you “just updating with windows update” then find out via a vulnerability scanner, that buried in the update KB article that you actually had to add some obscure registry keys to actually implement the fix contained within the update

I’m still fucking annoyed about this, and this was from me having to support dozens of windows terminal services and domain controllers YEARS ago