Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber

Local Group Policy Editor plus more, for all Windows editions

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

Automated CIS Benchmark Compliance Remediation for Windows Server 2019 with Ansible

Active Directory bridging tool suite

An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.

Automated CIS Benchmark Compliance Remediation for Windows Server 2016 with Ansible

Automated CIS Benchmark Compliance Remediation for Windows Server 2022 with Ansible

Windows 11 secure group policy for standalone devices

A group-policy enabled utility for logging off idle windows user sessions

Privacy and security baseline for personal Windows 10 and Windows 11

Collabora Office / LibreOffice Windows Group Policy Template

Tool to parse the Group Policy Preferences XML file which extracts the username and decrypts the cpassword attribute.

WinPriv is a utility that can enable privileges and virtually alter registry settings within a target process, amongst other things.

PowerShell scripts/GUI tools for the enterprise to harden Windows Defender Firewall via group policy (GPO). These can be used to enforce network level application whitelisting and strengthen the security posture of devices to defend against attacks such as software supply chain and can be used with privileged access workstations (PAW).

Everything you need to know about becoming a Microsoft Certified: Windows Server Hybrid Administrator Associate!

PowerShell Policy Editor

DSC resources used to apply and manage local group policies by modifying the respective .pol file.

Automated CIS Benchmark Compliance Audit for Windows Server 2019 with Ansible & GOSS