Enforcement mode for the Netlogon Domain Controller will be enabled by default with the Feb. 9 security update.