search

nsacyber / Windows-Secure-Host-Baseline

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
Other
1.55k stars 287 forks source link

Add Windows Server 2016 SHB policies and update the scripts #32

Open iadgovuser1 opened 7 years ago

iadgovuser1 commented 7 years ago

Windows Server 2016 SHB was recently released. I need to add the GPOs and update the scripts that apply the GPOs.

iadgovuser1 commented 7 years ago
  1. Rename the Windows folder to Windows 10.
  2. Add a new Windows Server 2016 folder which will have similar content to the Windows 10 folder. Upload the GPO and create a Nessus audit file.
  3. Update New-PolicyDefinitions.ps1 to add Windows Server 2016. Perhaps add a Role or SystemRole property that can have 'Server' and 'Desktop' or 'Server','Desktop' (or 'Member Server, Domain Controller, Workstation' like Win32_OperatingSystem.ProductType) as values. $osVersion may need to be split into desktop and server versions.
  4. Update GroupPolicy.psm1 to have 'Windows 10' and 'Windows Server 2016' as options for -PolicyNames argument. Maybe need to add a SystemRole argument.