Microsoft released pre-built configuration packs for Desired Configuration Management (DCM) for CM07. Many of those packs are quite old and not easily found, so we recommend the Microsoft Security Compliance Manager (SCM) . With SCM, you can download pre-built baselines, clone and edit for your own use, compare to Microsoft defaults, and most importantly, export a cab file to be imported into CM12 to make new baselines.
CM12 gives you the ability to do revisions of baselines so that as you change them over time, you can phase out old ones and enforce or report on new ones. But we advise you to maintain the same revisions in SCM so that you can fully leverage its full capabilities.
Download and install SCM. Get well acquainted with SCM before proceeding. What we are going to do is clone the enterprise class Windows 7 security baseline in SCM and export a cab file for use in CM12 as a new baseline.