As part of our latest testing, we've observed that Attack Surface Reduction (ASR) works as expected on Windows 11. This is great news for users looking to enhance their security posture, as ASR provides advanced protection against malicious activities and exploits.
However, when testing Server 2025, we found that ASR is not currently supported, and it did not work as intended in our environment. At this time, it appears that the necessary updates or support for ASR on Server 2025 have not been introduced yet.
If you're considering implementing ASR for your environment, we recommend focusing on Windows 11 for now, while keeping an eye out for future updates regarding Server 2025 compatibility.
https://learn.microsoft.com/en-us/defender-endpoint/enable-attack-surface-reduction