Windows 2019 Hardening Guide

Question

Hi, Can anybody provide me the Server 2019 Hardening Guide or any link regarding this.

Answer 1

Hi @karthikeyan v ,

You can find the Windows 10 Version 1809 and Windows Server 2019 Security Baseline from the link below:
https://www.microsoft.com/en-us/download/details.aspx?id=55319

It contains Group Policy settings, documentations and other information for most Windows Server settings that will ensure you use the security settings as per Microsoft's best practices.

You'll also find more information about the Windows Security Baselines over here:
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines

You can also have a look at the following Windows Server Hardening checklist:
https://www.netwrix.com/windows_server_hardening_checklist.html

----------

(If the reply was helpful please don't forget to upvote or accept as answer, thank you)

Best regards,
Leon

Answer 2

Hey @karthikeyan v

Check out Thomas Jung's Windows Server 2019 OS Hardening: https://cybersecurity.att.com/blogs/security-essentials/windows-server-2019-os-hardening

Also, this guide from Power Admin: https://www.poweradmin.com/blog/hardening-your-windows-server-in-2020/

Answer 3

Hi,
Besides the links shared above, you could also take a look at the Windows server 2016 security guide as a reference and the blogs provided by OrinThomas which discuessed "Third Party Security Configuration Baselines" and"Hardening IIS via Security Control Configuration".

Reference links:
Windows Server 2016 Security Guide
https://cloudblogs.microsoft.com/windowsserver/2017/08/22/now-available-windows-server-2016-security-guide/

Windows Server 101: Configuring Split-Brain DNS on Windows Server
https://techcommunity.microsoft.com/t5/itops-talk-blog/windows-server-101-configuring-split-brain-dns-on-windows-server/ba-p/359726

Windows Server 101: Hardening IIS via Security Control Configuration
https://techcommunity.microsoft.com/t5/itops-talk-blog/windows-server-101-hardening-iis-via-security-control/ba-p/329979

Hope this helps and please help to accept as Answer if the response is useful.

Thanks,
Jenny

Answer 4

There is a checklist Windows Server hardening guide for Windows Server 2019 on: https://cloudinfrastructureservices.co.uk/windows-server-hardening-security-checklist-windows-2016-2019-2022/