MSHardenedPolicyEval and/or OSConfig

Hello, JanMischo​ the tool we shared in the preview post is part of the new Windows Server vNext capabilities, which will be announced at Ignite with more details and an updated post that will better answer your questions.

Do they both play nicely together? Yes.

MSHardenedPolicyEval or OSConfig? MSHardenedPolicyEval is in-box tooling for the hardened security defaults. OSConfig manages a broader set of security settings. Once an OSConfig baseline is in place, it supersedes the initial settings.

Think of the two like this:

• Day 0: initial security, built into the image and assessed in-box with MSHardenedPolicyEval (the name is subject to change).

• Day 2: ongoing security management with OSConfig, aligned with the Windows Admin Center and Azure Policy experiences.