Securing a Windows Server 2012 R2 environment requires moving beyond default configurations to a hardened state that minimizes attack surfaces. The is a crucial package provided by Microsoft that contains the "final" recommended security configurations for this operating system.
tool (included in the SCT) to compare their current server settings against these Microsoft recommendations. Customization: windows server 2012 r2 security baseline.zip
When you extract the package, you will typically find the following resources: GPO Backups: Securing a Windows Server 2012 R2 environment requires
A typical baseline ZIP for Windows Server 2012 R2 contains the following directories and files: : windows server 2012 r2 security baseline.zip