The CalNet AD team has created several Group Policy Objects (GPOs) templates for system administrators to utilize. These templates, or Build Kits, are based on the Center for Internet Security’s (CIS) benchmarks and allow for quick and easy implementation of CIS Benchmark configurations.
It is highly recommended that all sysadmins review these Build Kits and use them to create and customize their own GPO templates. The Build Kits are available for most major Windows server and desktop operating systems* and application of the CIS Benchmarks complies with MSSEI 3.1 Secure Device Configuration
Documentation on the components of the CIS Microsoft Windows Build Kit and instructions on how to implement it within your environment may be found at: https://berkeley.sharepoint.com/sites/calnetad/Pages/CIS-Security-Benchmark.aspx (CalNet login required)
Sysadmins can find all CIS template GPOs using the Group Policy Management Console (GPMC); follow the naming convention "ActiveDirectory-CIS-[server/OS-version]".
*Not all CIS standards have template GPOs created at this time. If additional templates are needed please send an email to win-ticket@berkeley.edu