Security baseline (FINAL) for Windows 10 v1909 and Windows Server v1909

Good to hear the loosening of computer account password expiration.  IMHO, computer account expiration policies just make it more likely that over time more and more machines will become non-compliant with important security settings pushed out via GPO.  Ensuring that a higher % of machines are getting up-to-date GPO settings is, IMHO, more important than the risk of an attacker being given the access of a single computer account; if they can compromise one machine to local admin/system, they probably already have a regular everyday account to use of equal or greater privilege, anyway.