Microsoft begins phase two of WDS security hardening, disabling insecure hands-free deployments after CVE-2026-0386 concerns.