https://www.grouppolicy.biz/2016/07/microsoft-guidance-ms16-072/