A security baseline is a group of recommended configuration settings, such as password rules, audit policy, user rights, services and protocol hardening, that Microsoft has tested to balance security and compatibility. Applying a baseline gives every server a known, hardened starting point, and checking against it shows where servers have drifted. You need to know two ways to apply them: the Security Compliance Toolkit and, new in Windows Server 2025, OSConfig.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.