#How to setup a vm install
#How to setup a vm Patch

#How to setup a vm install

You also need to pay attention to the role that your server is performing, which will install additional files and settings to the base operating system, for example if it's running IIS or SQL Server. Download the presentation deck and the demo videos here: Orin-Thomas/HardenWinSvr: Hardening Windows Server presentation () It includes things like Credential Guard, Privileged Administration Workstations, Shielded VMs and more. Hardening your Windows Server - In addition, my colleague Orin Thomas does a great presentation on Hardening your Windows Server environment. This guidance applies to Windows Server whether it's on-premises or in the Cloud. On the Microsoft Security Baselines blog, you can keep track of changes to the baselines through the Draft and Final stages, for example as they relate to the Windows Server version 20H2 release Provided inside the Security Compliance Toolkit, the baselines bring together feedback from Microsoft security engineering teams, product groups, partners, and customers into a set of Microsoft-recommended configuration settings and their security impact.

#How to setup a vm Patch

To keep up with the current advice, relevant to your server's current patch levels, we recommend the use of the Windows Security Baselines. In addition, security guidance can change, especially as we learn from the latest threats. Traditional Windows Server hardening guidance can now get out of date easily, as we ship more frequent updates and changes to the operating system, though some practices are universally good to apply. Windows Security Baselines - Most server administrators would start by configuring the default Group Policy settings to meet their organization's security requirements and would search for guidance on other settings that could be tweaked to make the environment more restrictive. But if you run a Windows Server VM in Azure, apart from not having to manage the physical security of the underlying compute hardware, what on-premises concepts still apply, what may you need to alter and what capabilities of Azure should you include?

If you've built and managed Windows Servers in an on-premises environment, you may have a set of configuration steps as well as regular process and monitoring alerts, to ensure that server is as secure as possible.