OSConfig for Windows Server
ToolOSConfig is Microsoft's PowerShell-based configuration engine for Windows Server 2025, built to enforce security baselines and then keep them enforced. It ships predefined baselines for Domain Controller, Member Server, and Workgroup roles, and its drift control quietly re-applies the desired state every few hours, so a well-meaning admin's temporary change never quietly becomes a permanent hole. Baselines can also be pushed through Azure Policy and Windows Admin Center for fleet-scale rollout.
Resources
Videos
Using OSConfig to manage Windows Server 2025 security baselines
Straight from Microsoft's own ITOpsTalk crew, this walkthrough takes OSConfig from PowerShell install to a fully enforced Server 2025 baseline in one sitting. You'll watch a baseline get applied, tested, and then quietly reasserted the moment someone tries to change a setting behind its back. If you've ever wished your server config came with a bouncer, consider this the audition tape.
More in Windows Servers
- Microsoft Security Baselines for Server
- OSConfig for Windows Server
- Windows Server Hardening Service
- Windows Server Supply Chain Guide