New Windows policies will block unvetted kernel drivers, forcing enterprises to confront hidden dependencies on legacy systems.