How to implement os recommendations

[LA1976]

I wonder if anyone has found an easy way to implement the OS vulnerability 

I can create a GPO and use this to become compliant but why not be able to download the json from the portal to have it converted to DSC or GPO?

I cannot get a clear picture how this makes life easy and would advocate moving stuff to the cloud?

[#2]

@LA1976 GPO is the recommended way to implement these settings. Regarding this statement "why not be able to download the json from the portal to have it converted to DSC or GPO" <== this capability is not currently available.

We are revisiting this UI, and we should bring some changes to the way these recommendations can be implemented. I don't have a ETA to share, but changes are coming to this experience. Thanks for sharing your feedback!