Which script should I use for Windows Server 2019 VM Baseline Hardening

Question

Hello Folks,

I am using Microsoft Hyper-V Server 2019 (Version 1809 : OS build 17763.3653)

There are 2 scripts available for Hardening.

*****Link for Cloud Security Best Practice*****
https://raw.githubusercontent.com/Cloudneeti/os-harderning-scripts/master/WindowsServer2019/CSBP_WindowsServer2019.ps1

****Link for CIS benchmark Windows Server****
https://raw.githubusercontent.com/Cloudneeti/os-harderning-scripts/master/WindowsServer2019/CIS_Benchmark_WindowsServer2019_v100.ps1

I am confused which one is better for my server and which one should I use. Please help me to select one of them.
Please help me resolve this issue.

Thanks and Regards,
Vikash Kumar Choudhary

Answer 1

Maybe this one could help.
https://learn.microsoft.com/en-us/azure/defender-for-cloud/apply-security-baseline

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hello Patrick,

Thanks for your reply and suggestion.

I am new to this security role.
I am not understanding about the Windows server hardening concept.

From the 2 options mentioned by me from the last mail, could you please suggest me which is better one and should be used by me.

Please suggest sir.

Thanks and Regards,
Vikash

Answer 3

From the 2 options mentioned by me from the last mail, could you please suggest me which is better one

I'd try asking them here.
https://github.com/Cloudneeti/os-harderning-scripts/issues

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

Hi,

The two scripts look almost the same except that some settings in CIS_Benchmark_WindowsServer2019_v100.ps1, like "Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'" and "Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'" are commented out.

Best Regards,
Ian Xue

-----------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.