Securing the Windows Server Operating System
While the Windows Server operating system is designed to be secure out of the box, additional security features and controls can be implemented to enhance the security posture of your devices and computing environments. In this chapter, we will cover how to configure and manage settings such as exploit protection and SmartScreen, Windows Defender Application Control (WDAC) and Credential Guard, firewall, and antimalware features such as Microsoft Defender for Endpoint. We will also learn how to implement additional system security configurations using Group Policy and configuration baselines.
In this chapter, we are going to cover the following main topics: