Re: An OS update that changes your server's firmware?
Windows doesn't affect your hardware. Simply blacklist some UEFI policies which are deemed insecure. Of course the system won't boot if it relies on them.
But wouldn't that be the ultimate method for making MSWin secure; prevent it from ever booting up?