It's ok, Microsoft has more than enough people that should care today.
Overall imo the biggest issue with windows is that it almost never replaces things, it adds layers on top and becomes slowly this convoluted mess.
The biggest annoyance for me were the basic tools like MMC snap ins, regedit, ... have not been touched in years. They need a major overhaul at this point. If you change something in cloud defender, intune - you won't even see that change in those tools anywhere.
Instead 365 cloud admin sites have been redesigned every year only to cause confusion if you don't open them every day.
Also MS Graph? Some simple scripts turned into a mess (not sure if that changed).
1) Microsoft needs to remove some of the old stuff but also new stuff that makes it more difficult to understand for sysadmins. Nobody needs 5 ways of configuring GPOs like Intune has it (+ Azure policies). There should be a single way only for everything in the GUI/web + understandable API/cmdlets.
2) Templates and defaults - Secure setup within the products should be the default, why do I need to create 200+ GPO policies onprem to have at least 75% of CIS covered? Same with MS365, some policies have just reckless defaults.
I'd much rather set up 20 policies for each machine specifically to disable things I don't need rather than this. On the other hand - allow me to disable whatever I want (even those security updates), if I shoot myself in the foot, that's my problem. And if I need something quickly, why don't config templates for the entire OS exist? If I have a webserver - give me a list of things I should set up in one place. If I have a db, if I want to disable spyware stuff - same thing.
I don't want or need a copilot in exchange or every admin portal, I want to have everything on couple clicks and as fast as possible.
