MSHardenedPolicyEval and/or OSConfig

These tools overlap in security configuration, but Microsoft has not described MSHardenedPolicyEval as an OSConfig replacement in the announcement. OSConfig’s Windows Server 2025 baselines apply desired configuration and protect it against drift. MSHardenedPolicyEval was introduced in a Server vNext preview to assess a curated hardening catalogue and optionally apply or revert settings. For an initial comparison, use its documented no-argument evaluation from an elevated administrator prompt; that mode is read-only. Do not assume that applying both tools’ policies will be conflict-free: overlapping settings with different target values could compete, particularly where drift enforcement is active. Compare the actual settings on a disposable test VM before choosing which mechanism owns enforcement. The preview announcement does not establish a retirement date for OSConfig or certify combined enforcement. Continue following OSConfig’s supported baseline guidance and request an explicit compatibility statement from the Server team.