What's New in Recommended Security Baseline Settings for Windows 8.1, Windows Server 2012 R2, and Internet Explorer 11

The attachment on this post describes what's new in the security baseline recommendations for Windows 8.1, Windows Server 2012 R2 and Internet Explorer 11, relative to the baselines published for Windows 8, Windows Server 2012 and Internet Explorer 10.  It is included as a Word document in the download from yesterday's announcement blog post.  We are posting the document here…

1

Configuring Account Lockout

We can recommend an ideal configuration for most of the settings in our security guidance. For example, the “Debug programs” privilege should be granted to Administrators and to no one else. For account lockout, however, there is no “one size fits all” setting, but there’s a lot of heated discussion whenever anyone tries to pick…

11

Changes in the Security Guidance for Windows 8.1, Server 2012 R2 and IE11 since the beta

We have made a small number of changes in the baseline security guidance for Windows 8.1, Windows Server 2012 R2 and Internet Explorer 11 since we released the beta version of our guidance last April. This blog post discusses those changes and the reasons for them. Account Lockout Threshold: we’re changing the incorrect-password threshold that…

2

Security baselines for Windows 8.1, Windows Server 2012 R2 and Internet Explorer 11 – FINAL

Microsoft is pleased to announce the final release of security baseline settings for Windows 8.1, Windows Server 2012 R2 and Internet Explorer 11. Some of the highlights of the new security baselines (many of which we intend to backport to older versions of Windows and IE): Use of new and existing settings to help block…

29

SCM v2 Beta: LocalGPO Rocks!

This is a guest blog post by Alan Burchill who is an IT Consultant for over 10 years and a Group Policy MVP. He is also the author of the Group Policy Center web site and you can also follow him on twitter at @alanburchill. Along with the recent release of the Security Compliance Manager…

9

SCM v2 (BETA) + New Baselines Available to Download

[UPDATE: September 6th, 2011] The Beta review period for SCM2 ended August 31st, 2011 (and the download is no longer available).  We’ve been working on stabilizing the build and meeting release requirements.  Look for the RTW of SCM2 on September 15th, 2011. Hello world! I know a lot of you have been waiting for us to…

27

SCM v2 (CTP) Available to Download

UPDATE: The SCM v2 CTP has been removed from MS Connect, please download the SCM v2 Beta. Thanks for the patience! -jeff [Jun 27th, 2011]   Hello everyone! You’ve all been very patient with the SCM team and I wanted to thank you for that. I’ve received (literally) hundreds of emails in the last month…

42

Wow, great SCM demo video on TechNet Edge

Hello SCM people! Yes, I’m way behind on email. Sorry if I owe you a reply! We are DAYS away from releasing the SCM v2 CTP featuring GPO Import. Let me wrap this baby up and you will see it shortly on MS Connect. Thanks for the patience! Check out this awesome SCM video. It’s…

0

New beta setting packs for Windows 7 and Internet Explorer 8

The Solution Accelerators team is happy to announce the most recent additions to the Security Compliance Manager Baseline Beta Review Program: new setting packs for Windows 7 and Internet Explorer 8. Join the Security Compliance Manager Baseline Beta Review Program. Members, bookmark this link to get the latest project details. These setting packs, which can…