Limiting Domain Controller Attack Surface: Why less services, less software, less agents = less exposure.
