SOLVED

Does Microsoft have any scripts to create CIS-baselines for on-prem Windows Server images?

%3CLINGO-SUB%20id%3D%22lingo-sub-714412%22%20slang%3D%22en-US%22%3EDoes%20Microsoft%20have%20any%20scripts%20to%20create%20CIS-baselines%20for%20on-prem%20Windows%20Server%20images%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-714412%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20appears%20that%20there%20are%20a%20bunch%20of%20CIS-hardened%20Virtual%20Machines%20available%20in%20Azure.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fazuremarketplace.microsoft.com%2Fen-us%2Fmarketplace%2Fapps%3Fsearch%3DCIS%26amp%3Bpage%3D1%26amp%3Bfilters%3Dpartners%253Bpay-as-you-go%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fazuremarketplace.microsoft.com%2Fen-us%2Fmarketplace%2Fapps%3Fsearch%3DCIS%26amp%3Bpage%3D1%26amp%3Bfilters%3Dpartners%253Bpay-as-you-go%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20would%20also%20like%20to%20refine%20the%20creation%20of%20new%20Windows%20Server%20CIS%20images%20for%20data%20centers%2C%20but%20need%20an%20easier%20way%20to%20create%20them.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-717006%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20have%20any%20scripts%20to%20create%20CIS-baselines%20for%20on-prem%20Windows%20Server%20images%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-717006%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F364705%22%20target%3D%22_blank%22%3E%40SuperSquatch%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20download%20Group%20Policy%20Objects%20if%20you%20are%20a%20member%20of%20CIS%20SecureSuite%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.cisecurity.org%2Fcis-securesuite%2Fcis-securesuite-remediation-content%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.cisecurity.org%2Fcis-securesuite%2Fcis-securesuite-remediation-content%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-900111%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20have%20any%20scripts%20to%20create%20CIS-baselines%20for%20on-prem%20Windows%20Server%20images%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-900111%22%20slang%3D%22en-US%22%3EWith%20the%20remediation%20kit%20available%20from%20the%20CIS%20Group%20(available%20to%20members)%20one%20can%20apply%20the%20remediation%20kit%20GPO%20as%20local%20policy%2C%20and%20then%20use%20that%20template%20for%20your%20build.%3C%2FLINGO-BODY%3E
Highlighted
Occasional Visitor

It appears that there are a bunch of CIS-hardened Virtual Machines available in Azure.
https://azuremarketplace.microsoft.com/en-us/marketplace/apps?search=CIS&page=1&filters=partners%3Bp...

 

We would also like to refine the creation of new Windows Server CIS images for data centers, but need an easier way to create them.

2 Replies
Highlighted
Best Response confirmed by TheOtherJosh (Occasional Contributor)
Highlighted
With the remediation kit available from the CIS Group (available to members) one can apply the remediation kit GPO as local policy, and then use that template for your build.