Lion Cipher Lab
Harden a Windows machine toward a CIS Benchmark baseline
- Cyber / Security Engineer
- Intermediate
- ~60 min
- Free · no account required
Why it matters
Anyone can toggle a few settings and call a machine hardened; the professional question is 'hardened against what, and how do you know?' A configuration standard answers both. The CIS Benchmarks and Microsoft's own Security Baselines take the thousands of settings a Windows machine exposes and reduce them to a specific, published, defensible list of what secure looks like — so hardening becomes something you can point at, measure, and audit instead of a matter of taste. The skill that transfers to the job is the loop: measure the current configuration against the standard, apply the baseline…
What you'll learn
- reading a configuration standard
- Microsoft Security Baselines
- the Security Compliance Toolkit (LGPO + PolicyAnalyzer)
- measuring policy drift before and after
- applying a baseline to a test machine
- verifying hardening safely
Steps in this lab
- Two standards: the CIS Benchmark and the Microsoft Security Baseline
- Work on a machine you own — and snapshot it first
- Get the Security Compliance Toolkit and the baseline you need
- Measure your starting point with Policy Analyzer
- Review the settings that matter most
- Apply the baseline to the test machine with LGPO
- Verify it landed, then confirm nothing you need broke
- What you learned, and the habit underneath it