Deploy Security Measures Using Group Policy

Deploy Security Measures Using Group Policy
Student Name
College/University
Course
Professor’s Name
Due Date
Part 1
After scanning the CIS Microsoft Windows Server 2016 Benchmark, the following 10 settings/policies/security options have been chosen for each Windows Server:
Windows Server 1
Disable the Guest account
Change the default administrator account name
Enable strong password complexity
Enable the firewall
Disable LM and NTLMv1 authentication protocols
Enable audit logging
Restrict Remote Desktop Protocol (RDP) access
Disable SMBv1
Enable AppLocker
Set password expiration policy
Windows Server 2
Disable the Guest account
Change the default administrator account name
Enable strong password complexity
Enable the firewall
Disable LM and NTLMv1 authentication protocols
Enable audit logging
Restrict Remote Desktop Protocol (RDP) access
Disable SMBv1
Disable unnecessary services
Enable BitLocker
Windows Server 3
Disable the Guest account
Change the default administrator account name
Enable strong password complexity
Enable the firewall
Disable LM and NTLMv1 authentication protocols
Enable audit logging
Restrict Remote Desktop Protocol (RDP) access
Disable SMBv1
Enable Windows Defender
Enable User Account Control
Part 2
Using the selected CIS settings/policies/security options from Part 1, the following procedures have been followed to import and apply the new Group Policy settings throughout the domain:
Domain Controller: The CIS settings/policies/security options were imported into the Group Policy Management Editor.
The Group Policy settings were then applied throughout the domain.
(a)The security controls that were applied to minimize systems risks, threats, and vulnerabilities included enabling strong password complexity, disabling unnecessary services, enabling audit logging, and enabling the firewall. (b)The baseline countermeasures that should be in place include implementing regular software updates, ensuring data backups are performed regularly, and constantly monitoring system logs for any signs of suspicious activity. (c) The preventive controls needed to decrease the threat of unintentional errors or unauthorized access include enforcing access controls, training employees on safe computing practices, and implementing network segmentation.
One of the most basic security controls is enforcing strong password complexity. This helps to prevent unauthorized access by making it difficult for attackers to guess passwords. Disabling unnecessary se...