StudyToCert

All certifications / AZ-802 / Lessons

Microsoft Certified: Windows Server Administrator Associate (exam AZ-802: Administering Windows Server) AZ-802 · Domain 6: Secure Windows Server infrastructure

Security baselines: OSConfig on Windows Server 2025, Microsoft Security Compliance Toolkit baselines, drift control

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

A security baseline is a group of recommended configuration settings, such as password rules, audit policy, user rights, services and protocol hardening, that Microsoft has tested to balance security and compatibility. Applying a baseline gives every server a known, hardened starting point, and checking against it shows where servers have drifted. You need to know two ways to apply them: the Security Compliance Toolkit and, new in Windows Server 2025, OSConfig.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study AZ-802 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the AZ-802 study plan