I believe some of my fellow Windows Admin's would be interested in this article and accompanying XLS spreadsheet that breaks down what should and should not be enabled or disabled in a Windows 2016 Environment.

WoW! What a great story on how all of this came to be. Loved it and learned a lot about how Docker and Microsoft worked together to get this accomplished.

Oh boy...this is getting bookmarked and added to the old One Note.