Windows Server 2012 is a complex operating system with a large number of functions and configuration options. There is also a great deal of freedom regarding integration into domains and networking with other IT systems and services. Even though state-of-the-art Windows versions include good default settings in many areas, the basic configuration is not always the most secure. Without sufficient planning, this can lead to a multitude of attack vectors that can be easily exploited by unauthorised third parties. Furthermore, if central decisions are not made prior to installation, Windows Server 2012 will run in an insecure and undefined state that is difficult to remedy afterwards.