Very Easy:

Bundle ISA with next version of Windows Server, turn all security features on by default.

That'll save you some headaches right there.

Fin.

Oh yeah, if Linux can bundle everything under the sun with their distros...why cant M$?