Microsoft Security Compliance Toolkit
ToolMicrosoft's official toolkit for downloading, analyzing, testing, editing, and storing the security configuration baselines that ship with Windows. It now covers Windows 11 24H2 and 25H2 plus Windows Server 2025, and those baselines can be deployed the old-school way with Group Policy or handed straight to OSConfig for continuous drift control. PolicyAnalyzer and LGPO round it out by comparing your live GPOs against Microsoft's recommendations, so you can spot exactly where reality drifted from the plan.
Key Features
Resources
Videos
Microsoft Security Compliance Toolkit (SCT) Explained
This deep dive cracks open Microsoft's Security Compliance Toolkit and walks you through every step: downloading baseline GPOs, importing them into your environment, and using Policy Analyzer to spot the gaps between your current configuration and Microsoft's recommendations. At nearly 30 minutes, it's thorough enough to replace a training course and practical enough to follow along with your own test lab running.
Stop Guessing! How to Audit and Secure Windows 11 in 5 Minutes
SecOps Insider delivers the speed-run version of Windows 11 security auditing: grab the Microsoft SCT, download the right baseline, compare it against your current posture, and apply the fixes. It's the "I have a meeting in ten minutes but my boss just asked about our security baseline" video, and it delivers on the title's promise without cutting important corners.
More in Windows Workstations
- Microsoft Security Compliance Toolkit
- App Control for Business (formerly WDAC)
- Windows Baseline Hardening Service
- HardeningKitty
- Windows Supply Chain Security Guide