Microsoft Security Baselines

Learn more:  aka.ms/baselines    |    Download the Security Compliance Toolkit:  aka.ms/SCT
Options
10.7K
Rick_Munck on 08-04-2020 10:51 AM
3,477
Rick_Munck on 07-16-2020 02:27 PM
13.6K
Rick_Munck on 05-27-2020 10:00 AM
5,330
Rick_Munck on 05-26-2020 08:00 AM
5,827
Rick_Munck on 04-13-2020 12:31 PM
8,699
Rick_Munck on 03-17-2020 11:16 AM
19.7K
Aaron Margosis on 01-15-2020 09:25 PM
13.7K
Aaron Margosis on 12-13-2019 02:33 PM
49K
Aaron Margosis on 11-20-2019 03:24 PM
13.7K
Aaron Margosis on 10-24-2019 07:10 PM
12.1K
Aaron Margosis on 10-03-2019 04:40 AM
13.5K
Aaron Margosis on 09-24-2019 11:09 AM
13.9K
Aaron Margosis on 07-24-2019 03:46 AM
22.3K
Aaron Margosis on 06-18-2019 01:16 PM
7,954
Aaron Margosis on 06-18-2019 01:16 PM
9,959
Aaron Margosis on 06-18-2019 01:16 PM
2,060
Aaron Margosis on 06-18-2019 01:16 PM
2,506
Aaron Margosis on 06-18-2019 01:16 PM
795
Aaron Margosis on 06-18-2019 01:16 PM
753
Aaron Margosis on 06-18-2019 01:16 PM
8,343
Aaron Margosis on 06-18-2019 01:16 PM
2,579
Aaron Margosis on 06-18-2019 01:16 PM
16.3K
Aaron Margosis on 06-18-2019 01:15 PM
3,247
Aaron Margosis on 06-18-2019 01:15 PM
1,800
Aaron Margosis on 06-18-2019 01:15 PM
5,807
Aaron Margosis on 06-18-2019 01:15 PM
1,163
Aaron Margosis on 06-18-2019 01:15 PM
990
Aaron Margosis on 06-18-2019 01:15 PM
706
Aaron Margosis on 06-18-2019 01:15 PM
17.8K
Aaron Margosis on 06-18-2019 01:15 PM

Latest Comments

Hi Rick Any plans to consider enforcing Kerberos Armoring AKA FAST as part of a future security baseline? - https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831747(v=ws.11)#kerberos-armoring-flexible-authentication-secure-tunneling-fast It is not an...
0 Likes
@Rick_Munck @AaronMargosis_Tanium yes, HasIM asked a good question. Another question:GPO applies "Credential Guard Configuration: Enabled with UEFI lock" to a member server and later I want to promote this server to a DC (no CG is possible/advised?) - do have to remove this UEFI lock manually?
0 Likes
Hi,I would like to install a new Server2016 Domain Controller. Which baseline should I use for it? The old one for 2016 or the newest available like this v2004? And should I use the "normal" server member baseline settings AND DomainController baseline settings OR only the DC baseline settings? Than...
1 Likes
Just wondering if the location for the enterprise site mode list (IE mode) being located at an https:// location will be included in the baseline, if indeed it's recommended this way due to security?
0 Likes
@Serhiy SMAHLYUK yes absolutely. We are working with the Intune team and they will be coming out with an update as well.
1 Likes