Application Control
AppLocker rollout: scripts, installers and packaged apps
Roll out AppLocker safely: Application Identity service, audit mode, publisher rules for EXE, script, MSI and packaged apps, and writable-folder gaps.
Intermediate
Guides tagged
#group-policy
Windows Firewall
Managing Windows Firewall at scale with GPO and Intune
Run Windows Firewall policy across a fleet: how GPO and Intune rules merge, why block beats allow, disabling local merge and checking the active store.
Intermediate
Security Baselines
Policy Analyzer and LGPO: compare, test, apply baselines
Use Policy Analyzer to diff GPOs, baselines and effective policy, and LGPO.exe to test, apply and export local policy on standalone machines and lab builds.
Intermediate
Accounts & Privileged Access
Remove local admin rights from users without chaos
Take local admin rights away from users: inventory who has them, enforce membership with GPO or Intune, handle elevation with EPM, keep a break-glass path.
Foundation
Patching & Updates
Windows Update policies: deferrals, deadlines and restarts
Configure Windows Update client policies in GPO and Intune: quality and feature deferrals, compliance deadlines, grace periods, restarts and verification.
Intermediate
Security Baselines
Windows security baselines: Microsoft SCT, CIS and STIG
Compare the Microsoft Security Compliance Toolkit, CIS Benchmarks and DISA STIGs, then apply one with Policy Analyzer and LGPO, layer your own settings and track every deviation.
Foundation