WinSecurityBaseline

# Windows security baselines

**Applies to**

- Windows Server 2022+

- Windows 10+

### Package Specific

#### Package Parameters

The following package parameters can be set:

* `/OSType:workstation\server` - Default value is server

#### Package Uninstallation

* Package LGPO settings cannot be uninstalled programmatically once installed. This needs to be done manually!

#### Package Versions

Windows Server 2022 LTSC | 22.0.0

Windows 10 21H2 | 22.0.0

Windows Server 2019 LTSC - 1803 | 20.1803

Windows 10 LTSC - 1803 | 20.1803

## Using security baselines in your organization

Microsoft is dedicated to providing its customers with secure operating systems, such as Windows 10 and Windows Server, and secure apps, such as Microsoft Edge. In addition to the security assurance of its products, Microsoft also enables you to have fine control over your environments by providing various configuration capabilities.

Even though Windows and Windows Server are designed to be secure out-of-the-box, many organizations still want more granular control over their security configurations. To navigate the large number of controls, organizations need guidance on configuring various security features. Microsoft provides this guidance in the form of security baselines.

We recommend that you implement an industry-standard configuration that is broadly known and well-tested, such as Microsoft security baselines, as opposed to creating a baseline yourself. This helps increase flexibility and reduce costs.

Here is a good blog about [Sticking with Well-Known and Proven Solutions](https://blogs.technet.microsoft.com/fdcc/2010/10/06/sticking-with-well-known-and-proven-solutions/).