I can't comment on all the mentioned features, but I know for example telnet (mentioned) isn't installed by default (even the client isn't available). Rdp I'm guessing requires the Terminal services role which you are only going to enable if you need it. A lot of these things get switched on in initial configuration and then gets forgotten about or even finds its way onto the master vm image until something gets pwned. That said, whilst we're on the topic of leaving unnecessary software not running, can you have a chat with your buddies working in telemetry?
Biting the hand that feeds IT
