Clik here to view.
IT Infrastructure Threat Modeling Guide
The IT Infrastructure Threat Modeling Guide is now available. Organizations today face an increasing number of threats to their computing environments. You need a proactive approach to assist you in...
View ArticleClik here to view.
HIPAA or PCI or FISMA Baseline? (FAQ)
A teammate of mine posted a FAQ this week about the GRC space and how it intersects with Microsoft Baselines. Check it out!...
View ArticleClik here to view.
The Data Classification Toolkit for Windows Server 2012 is now available!
Get the most out of Windows Server 2012 with new features that help you to quickly identify, classify, and protect data in your private cloud! This toolkit is designed to help you to: Identify,...
View ArticleClik here to view.
IT Infrastructure Threat Modeling Guide
The IT Infrastructure Threat Modeling Guide is now available. Organizations today face an increasing number of threats to their computing environments. You need a proactive approach to assist you in...
View ArticleClik here to view.
HIPAA or PCI or FISMA Baseline? (FAQ)
A teammate of mine posted a FAQ this week about the GRC space and how it intersects with Microsoft Baselines. Check it out!...
View ArticleClik here to view.
The Data Classification Toolkit for Windows Server 2012 is now available!
Get the most out of Windows Server 2012 with new features that help you to quickly identify, classify, and protect data in your private cloud! This toolkit is designed to help you to: Identify,...
View ArticleLGPO.exe – Local Group Policy Object Utility, v1.0
LGPO.exe is a new command-line utility to automate the management of local group policy. It replaces the no-longer-maintained LocalGPO tool that shipped with the Security Compliance Manager (SCM), and...
View ArticleClik here to view.
New tool: Policy Analyzer
Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). It can highlight when a set of Group Policies has redundant settings or internal inconsistencies, and can...
View ArticleSecurity baseline for Windows 10 (v1507, build 10240, TH1, LTSB) — UPDATE
Based on continuing discussions with security experts in Microsoft, the Center for Internet Security, and customers, we are publishing a few changes to the security configuration baseline...
View ArticleSecurity baseline for Windows 10 (v1511, "Threshold 2") — FINAL
Microsoft is pleased to announce the final release of the security configuration baseline settings for Windows 10 version 1511, also known as "November Update," "Build 10586," "Threshold 2," or "TH2."...
View ArticleSecurity baseline for Windows Server 2016 Technical Preview 5 (TP5)
Microsoft is pleased to announce the draft release of the security configuration baseline settings for Windows Server 2016, corresponding to Technical Preview 5 (TP5). The final version of Windows...
View ArticleSecurity Compliance Manager 4.0 now available for download!
The Security Compliance Manager (SCM) is a free tool from Microsoft that enables you to quickly configure, and manage the computers in your environment using Group Policy and Microsoft System Center...
View ArticleLGPO.exe v2.0 PRE-RELEASE: support for MLGPO and REG_QWORD
LGPO.exe is a command-line utility to automate the management of local group policy objects (LGPO). Version 1.0 was released last January. The PRE-RELEASE LGPO.exe v2.0 is attached to this blog post,...
View ArticleClik here to view.
The MSS settings
You can download the custom Administrative Template for the “MSS (Legacy)” settings here: MSS-legacy. Note that it is available only for “en-us” (US English). Explanation: Many years ago, before the...
View ArticleClik here to view.
Security baseline for Windows 10 v1607 (“Anniversary edition”) and Windows...
Microsoft is pleased to announce the release of the security configuration baseline settings for Windows 10 version 1607, also known as “Anniversary edition” and internally as “Redstone 1”. The...
View ArticlePolicy Analyzer v3.1 PRE-RELEASE
Lots of updates to Policy Analyzer in this unsigned, pre-release preview build — please post comments here to let me know how well it addresses your needs and what else it could add. Download here:...
View ArticleGuidance on Disabling System Services on Windows Server 2016 with Desktop...
[Primary authors: Dan Simon and Nir Ben Zvi] The Windows operating system includes many system services that provide important functionality. Different services have different default startup...
View ArticleSecurity baseline for Windows 10 "Creators Update" (v1703) – DRAFT
Microsoft is pleased to announce the beta release of the recommended security configuration baseline settings for Windows 10 “Creators Update,” also known as version 1703, “Redstone 2,” or RS2. Please...
View ArticleSecurity Compliance Manager (SCM) retired; new tools and procedures
Microsoft reluctantly announces the retirement of the Security Compliance Manager (SCM) tool. At the same time, we are reaffirming our commitment to delivering robust and useful security guidance for...
View ArticleClik here to view.
Dropping the "Untrusted Font Blocking" setting
With the Windows 10 v1703 security configuration baseline, Microsoft is removing the recommendation to enable the “Untrusted Font Blocking” Group Policy setting in Computer Configuration |...
View Article
