Windows Vulnerability Mitigation Process

Question

Dear Team,

I want to Windows Server vulnerability mitigation process, need to configure on Windows server 2016. Below the items.

1. DNS Server Detection.
   (internal hosts only if the service is available externally.)
2. WS-Management Server Detection (Limit incoming traffic to this port if desired)

Please share Windows Vulnerability Mitigation Process step by step docs.

Answer 1

You can follow along here.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/best-practices-for-securing-active-directory

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Dear DSPatrick

Please share specific Server hardening part for above issues.

Thanks

Answer 3

These ones might help.
https://support.microsoft.com/en-us/topic/kb4569509-guidance-for-dns-server-vulnerability-cve-2020-1350-6bdf3ae7-1961-2d25-7244-cce61b056569
https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/dns-server-cache-snooping-attacks
https://support.microsoft.com/en-us/topic/ms08-037-vulnerabilities-in-dns-could-allow-spoofing-a12595df-dba6-43ec-a381-15e36346c4dd

--please don't forget to upvote and Accept as answer if the reply is helpful--