GPO security baselines
Applying and testing a security baseline with Group Policy, and handling the exceptions.
DRAFT OUTLINE. This page is a structure to fill in, not finished research.
# Lab environment
- A small home Active Directory lab (details kept general on purpose)
- [TBD: generic lab summary for this write-up: no host names, IPs or domain names]
# Choosing a baseline
- Microsoft Security Baselines vs CIS
- [TBD: which you used and why]
# Importing and comparing
- Comparing the baseline to current policy
- [TBD: tools used and what differed]
# Rollout plan
- Test OU first, then staged
- [TBD: your rollout order]
# Exceptions
- [TBD: settings you had to relax and the reason]
# Keeping it current
- [TBD: how you track drift]
# References
- [TBD: sources you used]