Security Baselines
Configuration drift: OSConfig, DSC and compliance reports
Detect and correct Windows configuration drift: OSConfig on Server 2025, PowerShell DSC auto-correct, Group Policy reprocessing, change events and reports.
Advanced
Guides tagged
#security-baselines
Security Baselines
Intune security baselines, settings catalog, GPO conflicts
Deploy Intune security baselines without conflicts: baseline versions, settings catalog layering, endpoint security overlap, MDMWinsOverGP and on-device checks.
Intermediate
Security Baselines
Policy Analyzer and LGPO: compare, test, apply baselines
Use Policy Analyzer to diff GPOs, baselines and effective policy, and LGPO.exe to test, apply and export local policy on standalone machines and lab builds.
Intermediate
Security Baselines
Windows security baselines: Microsoft SCT, CIS and STIG
Compare the Microsoft Security Compliance Toolkit, CIS Benchmarks and DISA STIGs, then apply one with Policy Analyzer and LGPO, layer your own settings and track every deviation.
Foundation