Return to the list of client alerts 

Microsoft has released a set of tools to make hardening Windows 10 devices much more reasonable to do.  They have defined 5 levels of hardening.  Intune users get help in doing with with Intune.

Since there are 3,000 group policy settings for Windows 10 plus another 1,800 for Internet Explorer, doing this by hand can be a bit tedious 🙂 .

Microsoft has released the Security Compliance Toolkit to help admins automate this process.  The SCT also includes the recommended baselines themselves.

One of the tools is the Policy Analyzer, which detects missing or inconsistent policies, among other things.

Microsoft says that if you are still starting, bring everyone up to level 5.  Once you have done that, you can figure out next steps.

But you need to be clear, this is a journey and you can’t get there overnight.

Here are some links to give you more information:

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines 

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-compliance-toolkit-10