Win server 2019 hardening, importing GPO with LGPO

Question

Hi,

We have a stand-alone win server 2019 that after running the LGPO.exe to import the previous GPO from another machine, our nessus scanner reflecting over 100 non-compliance.

However, if we were to run the baseline script on top of the above, the findings falls to the level that we first saw in the nessus scanner.

The compliance we selected are CIS Microsoft Windows Server 2019 MS, L1 and L2 together.

Wonder if anyone encounter such issue before and was resolve it. Where only 1 full GPO is been exported.

Thank you.

Answer 1

Hi @dan den ,

I found some similar threads that might be helpful for you , you can try out the steps shared in these forums

https://learn.microsoft.com/en-us/answers/questions/44252/hardening-group-policy-template-adn-importing-it-t.html

https://social.technet.microsoft.com/Forums/en-US/ce8d4e22-2e14-4ec9-b5b0-3368664813bf/hardening-group-policy-template-and-importing-it-to-windows-server-2016-group-policy?forum=winserversecurity

----------

--If the reply is helpful, please Upvote and Accept it as an answer--