Compared to previous versions, many new security-relevant features were added to Windows Server 2012 and Windows Server 2012 R2. In other (familiar) features, parameters, default configurations, and parts of functions were changed. If administrators have not been trained sufficiently in the particularities of the systems, configuration errors and human error can affect both the security and functionality of a system.

Non-uniform Windows Server security settings are a particular risk (e.g. for SMB, RPC, or LDAP). If configuration is not planned, documented, reviewed, and tracked systematically and in a centralised manner, it may lead to a configuration drift. The more the specific configurations of systems that are similar from a functional point of view differ for no reason and without any documentation, the more difficult it is to maintain an overview of the status quo and to maintain security in a holistic and consequent manner.