Windows 2025 server has a new feature called OSConfig that permits you to configure Microsoft"s recommended security settings.
This can be done through powershell, Windows Admin center and Azure Policy
More details and command lines could be found here:
If you need to execute powershell scripts on remote computers you might give a look to following article:
https://sid-500.com/2025/01/13/powershell-how-to-execute-powershell-scripts-ps1-on-remote-computers/
UAC is a windows feature implented for security reasons.
In any case it could be bypassed to this reasons on Windows 11 you should enable Administrator Protection
More details can be found here:
https://4sysops.com/archives/enable-administrator-protection-in-windows-11/
I am mentioning an article that well explain as automated advanced AI permitted to bypass Cloudflare’s ‘I Am Not a Robot’
Cybersecurity experts have long relied on CAPTCHA systems as a fundamental barrier against automated attacks, spam generation, and unauthorized access attempts.
The apparent ease with which advanced AI systems can now navigate these defenses suggests a critical vulnerability in current digital security infrastructure.
Full article is here indicated:
https://cyberpress.org/chatgpt-cloudflares-i-am-not-a-robot/
Storage Sense is a Windows feature that helps automatically free up disk space by deleting unnecessary files—like temporary files, items in the recycle bin, and offline content from OneDrive. For IT administrators, especially those managing large device fleets, configuring Storage Sense is a low-effort, high-impact way to ensure devices remain performant and up to date. When left unmanaged, low disk space can prevent critical updates from installing, degrade system performance, and lead to user frustration. When configuring Storage Sense through policy settings, IT admins can automate storage maintenance and reduce support overhead.
https://learn.microsoft.com/en-us/windows/configuration/storage/storage-sense?tabs=intune
You need to grant Sophos Endpoint security permissions to run on your Macs.