Microsoft rolled out new default security protections that mitigate NTLM relaying attacks across Exchange, AD CS, and LDAP services.