You’ve written a Terraform plan to spin up an entire Windows Server Datacenter, but something feels off. The config looks fine, yet permissions break midway, and your security team wants proof that access is controlled. Every Windows instance deployed by Terraform should be identical, auditable, and compliant. Instead, it