Forum Discussion

PhilippZiemke's avatar
PhilippZiemke
Copper Contributor
Feb 10, 2025

Server 2025 Security Baseline breaks Failover Cluster

Hello everyone,  while testing the Server 2025 Security Baseline with our Hyper-V Hosts in a Failover Cluster, we noticed the Cluster Service (ClusSvc) was unable to start correctly. It failed with ...
security
security baseline
security compliance toolkit
hoanghungg's avatar
hoanghungg
Icon for Microsoft rankMicrosoft
Jul 08, 2025

Thanks for flagging this! One thing I’m trying to reconcile — the baseline doesn’t enforce the setting to block custom SSPs/APs on Member Server instances, so not totally sure why you are hitting this issue. Would love to understand more about the environment where this is happening.

PhilippZiemke's avatar
PhilippZiemke
Copper Contributor
Jul 10, 2025

Hi hoanghungg​, it seems that was a mistake on our part - enforcing and mixing up some settings that are part of the Client Security Baseline made their way into our Member Server Security Baseline GPO.

Nevertheless, it's good to see this getting attention, as we would be happy to be able to enforce this on Member Servers, too!

Resources