https://www.lifars.com/knowledge-center/windows-10-hardening-non-enterprise-environment/