Hi Raj,
Below are the Top Group polices, which can help to build a strong security however, its only recommendation and please refer to my PDF that i have attached for reference
Moderating Access to Control Panel
Prevent Windows from Storing LAN Manager Hash
Control Access to Command Prompt
Disable Forced System Restarts
Disallow Removable Media Drives, DVDs, CDs, and Floppy Drives
Restrict Software Installations
Disable Guest Account
Set Minimum Password Length to Higher Limits
Set Maximum Password Age to Lower Limits
Disable Anonymous SID Enumeration
P
128258-top-secuirty-group-policies.pdf
If the Answer is helpful, please click Accept Answer and up-vote, so that it can help others in the community looking for help on similar topics.