https://support.microsoft.com/en-us/topic/kb5020282-account-lockout-available-for-built-in-local-administrators-bce45c4d-f28d-43ad-b6fe-70156cb2dc00

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/access-credential-manager-as-a-trusted-caller

https://learn.microsoft.com/en-us/defender-for-identity/deploy/remote-calls-sam#make-sure-the-dsa-is-allowed-to-access-computers-from-the-network-optional

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/access-this-computer-from-the-network

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/act-as-part-of-the-operating-system

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/adjust-memory-quotas-for-a-process

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/allow-log-on-locally

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/allow-log-on-through-remote-desktop-services

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/back-up-files-and-directories

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/change-the-system-time

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/change-the-time-zone

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-a-pagefile

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-a-token-object

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-global-objects

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-permanent-shared-objects

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-symbolic-links

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/debug-programs

http://support.microsoft.com/kb/2871997

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-access-to-this-computer-from-the-network

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-batch-job

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-service

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-locally

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-through-remote-desktop-services

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/enable-computer-and-user-accounts-to-be-trusted-for-delegation

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/force-shutdown-from-a-remote-system

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/generate-security-audits

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/impersonate-a-client-after-authentication

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/increase-scheduling-priority

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/load-and-unload-device-drivers

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/lock-pages-in-memory

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/log-on-as-a-batch-job

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/log-on-as-a-service

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard#what-is-the-wdagutilityaccount-local-account-

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/manage-auditing-and-security-log

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/modify-an-object-label

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/modify-firmware-environment-values

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/perform-volume-maintenance-tasks

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/profile-single-process

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/profile-system-performance

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/replace-a-process-level-token

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/restore-files-and-directories

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/shut-down-the-system

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/take-ownership-of-files-or-other-objects

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accounts

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-guest-account-status

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-limit-local-account-use-of-blank-passwords-to-console-logon-only

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-rename-administrator-account

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-rename-guest-account

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/audit-force-audit-policy-subcategory-settings-to-override

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/command-line-process-auditing#to-ensure-that-advanced-audit-policy-configuration-settings-are-not-overwritten

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/audit-shut-down-system-immediately-if-unable-to-log-security-audits

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/devices-prevent-users-from-installing-printer-drivers

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-or-sign-secure-channel-data-always

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-secure-channel-data-when-possible

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-digitally-sign-secure-channel-data-when-possible

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-disable-machine-account-password-changes

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-maximum-machine-account-password-age

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-require-strong-windows-2000-or-later-session-key

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-do-not-require-ctrl-alt-del

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-do-not-display-last-user-name

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-account-lockout-threshold

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limit

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-message-text-for-users-attempting-to-log-on

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-message-title-for-users-attempting-to-log-on

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-smart-card-removal-behavior

https://support.microsoft.com/en-us/kb/950876

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj852251(v=ws.11)

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-server-amount-of-idle-time-required-before-suspending-session

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-always

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/smbv1-microsoft-network-server-digitally-sign-communications-if-client-agrees

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-server-disconnect-clients-when-logon-hours-expire

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-server-server-spn-target-name-validation-level

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-allow-anonymous-sidname-translation

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-let-everyone-permissions-apply-to-anonymous-users

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-named-pipes-that-can-be-accessed-anonymously

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths-and-subpaths

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-restrict-anonymous-access-to-named-pipes-and-shares

https://learn.microsoft.com/en-us/defender-for-identity/remote-calls-sam

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-shares-that-can-be-accessed-anonymously

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-sharing-and-security-model-for-local-accounts

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-allow-local-system-to-use-computer-identity-for-ntlm

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-allow-localsystem-null-session-fallback

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities

https://docs.microsoft.com/en-us/azure/storage/files/storage-troubleshoot-windows-file-connection-problems#azure-files-on-premises-ad-ds-authentication-support-for-aes-256-kerberos-encryption

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-configure-encryption-types-allowed-for-kerberos

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-do-not-store-lan-manager-hash-value-on-next-password-change

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-force-logoff-when-logon-hours-expire

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-ldap-client-signing-requirements

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-incoming-ntlm-traffic

https://learn.microsoft.com/en-us/defender-for-identity/configure-windows-event-collection#event-id-8004

https://blogs.technet.microsoft.com/pki/2009/06/16/what-is-a-strong-key-protection-in-windows/

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/system-objects-require-case-insensitivity-for-non-windows-subsystems

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/system-objects-strengthen-default-permissions-of-internal-system-objects

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-admin-approval-mode-for-the-built-in-administrator-account

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-standard-users

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-detect-application-installations-and-prompt-for-elevation

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-run-all-administrators-in-admin-approval-mode

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations

https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/

https://docs.microsoft.com/en-us/windows/wsl/troubleshooting#wsl-2-errors-when-ics-is-disabled

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725973(v=ws.10)

https://www.cisecurity.org/insights/blog/update-cis-microsoft-windows-10-enterprise-release-1703-benchmark-v1-0-0

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/best-practices-configuring

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-the-windows-firewall-log

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-credential-validation

https://msdn.microsoft.com/en-us/library/bb897401.aspx

https://learn.microsoft.com/en-us/windows/whats-new/feature-lifecycle#terminology

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-application-group-management

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/advanced-security-audit-policy-settings

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-security-group-management

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-user-account-management

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-pnp-activity

https://support.microsoft.com/en-us/kb/947226

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-process-creation

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-account-lockout

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-group-membership

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-logoff

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-logon

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-logonlogoff-events

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-special-logon

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-detailed-file-share

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-file-share

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-object-access-events

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-removable-storage

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-audit-policy-change

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-authentication-policy-change

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-authorization-policy-change

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-mpssvc-rule-level-policy-change

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-policy-change-events

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-sensitive-privilege-use

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-ipsec-driver

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-system-events

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-security-state-change

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-security-system-extension

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-system-integrity

https://www.microsoft.com/en-us/download/details.aspx?id=55319

http://www.microsoft.com/en-us/download/details.aspx?id=36036

https://support.microsoft.com/en-us/kb/951016

https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/local-accounts

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/disabling-smbv1-through-group-policy/ba-p/701069

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1678

https://support.microsoft.com/en-us/topic/managing-deployment-of-printer-rpc-binding-changes-for-cve-2021-1678-kb4599464-12a69652-30b9-3d61-d9f7-7201623a8b25

https://blogs.technet.microsoft.com/staysafe/2017/05/17/disable-smb-v1-in-managed-environments-with-ad-group-policy/

https://blogs.technet.microsoft.com/secguide/2017/06/15/disabling-smbv1-through-group-policy/

https://blogs.technet.microsoft.com/filecab/2017/06/01/smb1-product-clearinghouse/

https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3

https://learn.microsoft.com/en-us/windows/win32/api/wintrust/nf-wintrust-winverifytrust

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900

https://support.microsoft.com/en-us/help/956607/how-to-enable-structured-exception-handling-overwrite-protection-sehop

https://learn.microsoft.com/en-us/windows/security/threat-protection/override-mitigation-options-for-app-related-security-policies

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/45170055-a0cd-4910-9228-801d5bf7ac84

https://support.microsoft.com/en-us/kb/2871997

https://www.microsoft.com/en-us/download/details.aspx?id=36036

https://support.microsoft.com/en-us/topic/microsoft-security-advisory-update-to-improve-credentials-protection-and-management-may-13-2014-93434251-04ac-b7f3-52aa-9f951c14b649

https://support.microsoft.com/en-us/kb/324737

https://blogs.technet.microsoft.com/secguide/2016/10/02/the-mss-settings/

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/recovery-console-allow-automatic-administrative-logon

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/the-mss-settings/ba-p/701055

https://docs.microsoft.com/en-us/windows/win32/dlls/dynamic-link-library-search-order

https://docs.microsoft.com/en-us/windows-server/networking/dns/doh-client-support

https://learn.microsoft.com/en-us/windows-server/networking/dns/doh-client-support

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-llmnrp/02b1d227-d7a2-4026-9fd6-27ea5651fe85

https://support.microsoft.com/en-us/help/4046019/guest-access-in-smb2-disabled-by-default-in-windows-10-and-windows-ser

https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/guest-access-in-smb2-is-disabled-by-default

https://learn.microsoft.com/en-us/dotnet/framework/network-programming/peer-name-resolution-protocol

https://technet.microsoft.com/library/security/MS15-011

https://support.microsoft.com/en-us/kb/3000483

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/guidance-on-deployment-of-ms15-011-and-ms15-014/ba-p/257759

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-dfsc/149a3039-98ce-491a-9268-2f5ddef08192

https://support.microsoft.com/en-us/kb/929852

https://learn.microsoft.com/en-us/windows/configuration/manage-wifi-sense-in-enterprise

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-22h2-security-baseline/ba-p/3632520

https://learn.microsoft.com/en-us/troubleshoot/windows-client/printing/windows-11-rpc-connection-updates-for-print#allow-rpc-over-tcp-communication

https://msrc-blog.microsoft.com/2021/08/10/point-and-print-default-behavior-change/

https://support.microsoft.com/en-gb/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872

https://support.microsoft.com/en-us/topic/kb5005010-restricting-installation-of-new-printer-drivers-after-applying-the-july-6-2021-updates-31b91c02-05bc-4ada-a7ea-183b129578a7

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36958

https://learn.microsoft.com/en-us/windows-hardware/drivers/print/installing-queue-specific-files

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1675

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481

https://support.microsoft.com/en-us/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872

https://support.microsoft.com/en-us/help/3004375/microsoft-security-advisory-update-to-improve-windows-command-line-aud

https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging_windows?view=powershell-7.2#protected-event-logging

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging_windows?view=powershell-7.2#protected-event-logging

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-0886

https://learn.microsoft.com/en-us/windows/win32/secauthn/credential-security-support-provider

https://docs.microsoft.com/en-us/windows/access-protection/remote-credential-guard

https://learn.microsoft.com/en-us/windows/security/identity-protection/remote-credential-guard

https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-requirements

https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage#disable-windows-defender-credential-guard

https://techcommunity.microsoft.com/t5/windows-os-platform-blog/understanding-hardware-enforced-stack-protection/ba-p/1247815

https://support.microsoft.com/en-us/windows/a-driver-can-t-load-on-this-device-8eea34e5-ff4b-16ec-870d-61a4a43b3dd5

https://support.microsoft.com/en-us/kb/2516445

https://docs.microsoft.com/en-us/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors

https://learn.microsoft.com/en-us/previous-versions/ms813374(v=msdn.10)?redirectedfrom=MSDN

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj618315(v=ws.11)#individual-group-policy-settings-that-affect-computer-configuration

https://learn.microsoft.com/en-us/windows/win32/lwef/pubwiz-intro

https://docs.microsoft.com/en-us/windows/security/information-protection/kernel-dma-protection-for-thunderbolt

https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-management-policy-settings

https://learn.microsoft.com/en-us/windows/win32/secauthn/ssp-aps-versus-ssps

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn408187(v=ws.11)#to-disable-lsa-protection

https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection

https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage#disabling-windows-defender-credential-guard-with-uefi-lock

https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/modern-standby

https://support.microsoft.com/en-us/kb/3073942

https://learn.microsoft.com/en-us/windows/win32/rpc/how-rpc-works

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise

https://msrc.microsoft.com/update-guide/en-US/vulnerability/ADV180028

https://support.microsoft.com/en-us/help/4057300/devices-not-working-before-log-on-a-computer-running-windows-10-1709

https://technet.microsoft.com/en-us/itpro/windows/manage/group-policies-for-enterprise-and-education-editions

https://docs.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization#manage-diagnostic-data-using-group-policy-and-mdm

https://learn.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization

https://learn.microsoft.com/en-us/windows/package-manager/

https://learn.microsoft.com/en-us/windows/win32/memory/data-execution-prevention

https://workbench.cisecurity.org/communities/50

https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/microsoft-accounts#bkmk-restrictuse

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-cloud-protection-microsoft-defender-antivirus?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-attack-surface-reduction?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction?view=o365-worldwide

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/attack-surface-reduction-exploit-guard

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwide

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-windows-10-and-windows-server-version/ba-p/1543631

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-protection-features-microsoft-defender-antivirus?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-advanced-scan-types-microsoft-defender-antivirus?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-advanced-scan-types-microsoft-defender-antivirus?view=o365-worldwide#settings-and-locations

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-windows?view=o365-worldwide

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/reqs-wd-app-guard

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/group-configuration-news-and-interests-on-the-windows-taskbar/ba-p/2281005/page/2#comments

https://docs.microsoft.com/en-us/onedrive/use-group-policy

https://learn.microsoft.com/en-us/office365/servicedescriptions/onedrive-for-business-service-description

https://learn.microsoft.com/en-us/dotnet/framework/ui-automation/ui-automation-overview

https://social.technet.microsoft.com/wiki/contents/articles/5490.configure-network-level-authentication-for-remote-desktop-services-connections.aspx

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/f1c7c93b-94cc-4551-bb90-532a0185246a

https://learn.microsoft.com/en-us/microsoft-store/manage-access-to-private-store

https://support.microsoft.com/en-us/help/3135657/can-t-disable-windows-store-in-windows-10-pro-through-group-policy

https://learn.microsoft.com/en-us/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/enhanced-phishing-protection?tabs=intune

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/phishing-protection-microsoft-defender-smartscreen?tabs=intune

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/phishing-protection-microsoft-defender-smartscreen?tabs=gpo

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview

https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/restore-scpc-config-for-admins

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-faq

https://learn.microsoft.com/en-us/windows/win32/msi/windows-installer-portal

https://learn.microsoft.com/en-us/windows/win32/msi/using-windows-installer-with-uac

https://learn.microsoft.com/en-us/windows/win32/secauthn/multiple-provider-router

https://learn.microsoft.com/en-us/powershell/scripting/windows-powershell/install/windows-powershell-system-requirements?view=powershell-7.3#operating-system-requirements

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_group_policy_settings?view=powershell-7.2#turn-on-powershell-transcription

https://learn.microsoft.com/en-us/windows/win32/winrm/portal

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-file

https://learn.microsoft.com/en-us/windows/deployment/update/waas-wufb-group-policy#i-want-to-enable-features-introduced-via-servicing-that-are-off-by-default

https://aka.ms/wipforbiz

https://learn.microsoft.com/en-us/windows-insider/business/manage-builds

https://blogs.technet.microsoft.com/wsus/2017/05/05/demystifying-dual-scan/

https://blogs.technet.microsoft.com/wsus/2017/08/04/improving-dual-scan-on-1607/

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/enable-and-control-optional-updates-for-your-organization/ba-p/3905218

https://docs.microsoft.com/en-us/sysinternals/downloads/streams

https://learn.microsoft.com/en-us/windows/configuration/windows-spotlight#how-do-you-disable-windows-spotlight-for-managed-devices

https://learn.microsoft.com/en-us/windows/configuration/windows-spotlight

https://learn.microsoft.com/en-us/windows/win32/msi/alwaysinstallelevated

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/en-US

http://Microsoft.com

https://www.cisecurity.org/cis-benchmarks/en-US.

https://workbench.cisecurity.org/en-US.

https://www.cisecurity.org/white-papers/cis-password-policy-guide/en-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/password-policyen-US

https://support.microsoft.com/en-us/topic/minimum-password-length-auditing-and-enforcement-on-certain-versions-of-windows-5ef7fecf-3325-f56b-cc10-4fd565aacc59en-US

https://support.microsoft.com/en-us/topic/kb5020282-account-lockout-available-for-built-in-local-administrators-bce45c4d-f28d-43ad-b6fe-70156cb2dc00en-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/access-credential-manager-as-a-trusted-calleren-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/access-this-computer-from-the-networken-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/act-as-part-of-the-operating-systemen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/adjust-memory-quotas-for-a-processen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/allow-log-on-locallyen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/allow-log-on-through-remote-desktop-servicesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/back-up-files-and-directoriesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/change-the-system-timeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/change-the-time-zoneen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-a-pagefileen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-a-token-objecten-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-global-objectsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-permanent-shared-objectsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-symbolic-linksen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/debug-programsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-access-to-this-computer-from-the-networken-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-batch-joben-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-as-a-serviceen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-locallyen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/deny-log-on-through-remote-desktop-servicesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/enable-computer-and-user-accounts-to-be-trusted-for-delegationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/force-shutdown-from-a-remote-systemen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/generate-security-auditsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/impersonate-a-client-after-authenticationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/increase-scheduling-priorityen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/load-and-unload-device-driversen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/lock-pages-in-memoryen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/log-on-as-a-batch-joben-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/log-on-as-a-serviceen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard#what-is-the-wdagutilityaccount-local-account-en-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/manage-auditing-and-security-logen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/modify-an-object-labelen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/modify-firmware-environment-valuesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/perform-volume-maintenance-tasksen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/profile-single-processen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/profile-system-performanceen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/replace-a-process-level-tokenen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/restore-files-and-directoriesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/shut-down-the-systemen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/take-ownership-of-files-or-other-objectsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-block-microsoft-accountsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-guest-account-statusen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-limit-local-account-use-of-blank-passwords-to-console-logon-onlyen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-rename-administrator-accounten-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/accounts-rename-guest-accounten-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/audit-force-audit-policy-subcategory-settings-to-overrideen-US

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/command-line-process-auditing#to-ensure-that-advanced-audit-policy-configuration-settings-are-not-overwrittenen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/audit-shut-down-system-immediately-if-unable-to-log-security-auditsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/devices-prevent-users-from-installing-printer-driversen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-or-sign-secure-channel-data-alwaysen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-digitally-encrypt-secure-channel-data-when-possibleen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-digitally-sign-secure-channel-data-when-possibleen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-disable-machine-account-password-changesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-maximum-machine-account-password-ageen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-require-strong-windows-2000-or-later-session-keyen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-do-not-require-ctrl-alt-delen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-do-not-display-last-user-nameen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-account-lockout-thresholden-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-machine-inactivity-limiten-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-message-text-for-users-attempting-to-log-onen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-message-title-for-users-attempting-to-log-onen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-availableen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expirationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-smart-card-removal-behavioren-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-alwaysen-US

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj852251

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-client-send-unencrypted-password-to-third-party-smb-serversen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-server-amount-of-idle-time-required-before-suspending-sessionen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-server-digitally-sign-communications-alwaysen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/smbv1-microsoft-network-server-digitally-sign-communications-if-client-agreesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-server-disconnect-clients-when-logon-hours-expireen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/microsoft-network-server-server-spn-target-name-validation-levelen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-allow-anonymous-sidname-translationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accountsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-sharesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authenticationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-let-everyone-permissions-apply-to-anonymous-usersen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-named-pipes-that-can-be-accessed-anonymouslyen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-pathsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-remotely-accessible-registry-paths-and-subpathsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-restrict-anonymous-access-to-named-pipes-and-sharesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-callsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-shares-that-can-be-accessed-anonymouslyen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-sharing-and-security-model-for-local-accountsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-allow-local-system-to-use-computer-identity-for-ntlmen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-allow-localsystem-null-session-fallbacken-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identitiesen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-configure-encryption-types-allowed-for-kerberosen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-do-not-store-lan-manager-hash-value-on-next-password-changeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-force-logoff-when-logon-hours-expireen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-levelen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-ldap-client-signing-requirementsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clientsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-serversen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-audit-incoming-ntlm-trafficen-US

https://learn.microsoft.com/en-us/defender-for-identity/configure-windows-event-collection#event-id-8004en-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computeren-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/system-objects-require-case-insensitivity-for-non-windows-subsystemsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/system-objects-strengthen-default-permissions-of-internal-system-objectsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-admin-approval-mode-for-the-built-in-administrator-accounten-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-modeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-behavior-of-the-elevation-prompt-for-standard-usersen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-detect-application-installations-and-prompt-for-elevationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locationsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-run-all-administrators-in-admin-approval-modeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locationsen-US

https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/en-US

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527en-US

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc725973

https://www.cisecurity.org/insights/blog/update-cis-microsoft-windows-10-enterprise-release-1703-benchmark-v1-0-0en-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/best-practices-configuringen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-the-windows-firewall-logen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-credential-validationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-application-group-managementen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/advanced-security-audit-policy-settingsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-security-group-managementen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-user-account-managementen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-pnp-activityen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-process-creationen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-account-lockouten-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-group-membershipen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-logoffen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-logonen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-logonlogoff-eventsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-special-logonen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-detailed-file-shareen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-file-shareen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-object-access-eventsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-removable-storageen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-audit-policy-changeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-authentication-policy-changeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-authorization-policy-changeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-mpssvc-rule-level-policy-changeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-policy-change-eventsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-sensitive-privilege-useen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-ipsec-driveren-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-system-eventsen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-security-state-changeen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-security-system-extensionen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-system-integrityen-US

https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/local-accountsen-US

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/disabling-smbv1-through-group-policy/ba-p/701069en-US

https://support.microsoft.com/en-us/topic/managing-deployment-of-printer-rpc-binding-changes-for-cve-2021-1678-kb4599464-12a69652-30b9-3d61-d9f7-7201623a8b25en-US

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1678en-US

https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3en-US

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900en-US

https://learn.microsoft.com/en-us/windows/win32/api/wintrust/nf-wintrust-winverifytrusten-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/override-mitigation-options-for-app-related-security-policiesen-US

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/45170055-a0cd-4910-9228-801d5bf7ac84en-US

https://www.microsoft.com/en-us/download/details.aspx?id=36036en-US

https://support.microsoft.com/en-us/topic/microsoft-security-advisory-update-to-improve-credentials-protection-and-management-may-13-2014-93434251-04ac-b7f3-52aa-9f951c14b649en-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/recovery-console-allow-automatic-administrative-logonen-US

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/the-mss-settings/ba-p/701055en-US

https://learn.microsoft.com/en-us/windows-server/networking/dns/doh-client-supporten-US

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-llmnrp/02b1d227-d7a2-4026-9fd6-27ea5651fe85en-US

https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/guest-access-in-smb2-is-disabled-by-defaulten-US

https://learn.microsoft.com/en-us/dotnet/framework/network-programming/peer-name-resolution-protocolen-US

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-dfsc/149a3039-98ce-491a-9268-2f5ddef08192en-US

https://learn.microsoft.com/en-us/windows/configuration/manage-wifi-sense-in-enterpriseen-US

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-22h2-security-baseline/ba-p/3632520en-US

https://learn.microsoft.com/en-us/troubleshoot/windows-client/printing/windows-11-rpc-connection-updates-for-print#allow-rpc-over-tcp-communicationen-US

https://support.microsoft.com/en-us/topic/kb5005010-restricting-installation-of-new-printer-drivers-after-applying-the-july-6-2021-updates-31b91c02-05bc-4ada-a7ea-183b129578a7en-US

https://support.microsoft.com/en-gb/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872en-US

https://learn.microsoft.com/en-us/windows-hardware/drivers/print/installing-queue-specific-filesen-US

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36958en-US

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1675en-US

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481en-US

https://msrc-blog.microsoft.com/2021/08/10/point-and-print-default-behavior-change/en-US

https://support.microsoft.com/en-us/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872en-US

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging_windows?view=powershell-7.2#protected-event-loggingen-US

https://learn.microsoft.com/en-us/windows/win32/secauthn/credential-security-support-provideren-US

https://learn.microsoft.com/en-us/windows/security/identity-protection/remote-credential-guarden-US

https://techcommunity.microsoft.com/t5/windows-os-platform-blog/understanding-hardware-enforced-stack-protection/ba-p/1247815en-US

https://support.microsoft.com/en-us/windows/a-driver-can-t-load-on-this-device-8eea34e5-ff4b-16ec-870d-61a4a43b3dd5en-US

https://learn.microsoft.com/en-us/previous-versions/ms813374

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj618315

https://learn.microsoft.com/en-us/windows/win32/lwef/pubwiz-introen-US

https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-management-policy-settingsen-US

https://learn.microsoft.com/en-us/windows/win32/secauthn/ssp-aps-versus-sspsen-US

https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protectionen-US

https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage#disabling-windows-defender-credential-guard-with-uefi-locken-US

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn408187

https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/modern-standbyen-US

https://learn.microsoft.com/en-us/windows/win32/rpc/how-rpc-worksen-US

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterpriseen-US

https://msrc.microsoft.com/update-guide/en-US/vulnerability/ADV180028en-US

https://learn.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organizationen-US

https://learn.microsoft.com/en-us/windows/package-manager/en-US

http://Office.com

https://learn.microsoft.com/en-us/windows/win32/memory/data-execution-preventionen-US

https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/microsoft-accounts#bkmk-restrictuseen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-cloud-protection-microsoft-defender-antivirus?view=o365-worldwideen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-attack-surface-reduction?view=o365-worldwideen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction?view=o365-worldwideen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwideen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirusen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-protection-features-microsoft-defender-antivirus?view=o365-worldwideen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-advanced-scan-types-microsoft-defender-antivirus?view=o365-worldwideen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-advanced-scan-types-microsoft-defender-antivirus?view=o365-worldwide#settings-and-locationsen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus?view=o365-worldwideen-US

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-windows?view=o365-worldwideen-US

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/group-configuration-news-and-interests-on-the-windows-taskbar/ba-p/2281005/page/2#commentsen-US

https://learn.microsoft.com/en-us/office365/servicedescriptions/onedrive-for-business-service-descriptionen-US

https://learn.microsoft.com/en-us/dotnet/framework/ui-automation/ui-automation-overviewen-US

https://social.technet.microsoft.com/wiki/contents/articles/5490.configure-network-level-authentication-for-remote-desktop-services-connections.aspxen-US

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/f1c7c93b-94cc-4551-bb90-532a0185246aen-US

https://learn.microsoft.com/en-us/microsoft-store/manage-access-to-private-storeen-US

https://learn.microsoft.com/en-us/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/enhanced-phishing-protection?tabs=intuneen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/phishing-protection-microsoft-defender-smartscreen?tabs=intuneen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/phishing-protection-microsoft-defender-smartscreen?tabs=gpoen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overviewen-US

https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/restore-scpc-config-for-adminsen-US

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-faqen-US

https://learn.microsoft.com/en-us/windows/win32/msi/windows-installer-portalen-US

https://learn.microsoft.com/en-us/windows/win32/msi/using-windows-installer-with-uacen-US

https://learn.microsoft.com/en-us/windows/win32/secauthn/multiple-provider-routeren-US

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_group_policy_settings?view=powershell-7.2#turn-on-powershell-transcriptionen-US

https://learn.microsoft.com/en-us/windows/win32/winrm/portalen-US

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-fileen-US

https://learn.microsoft.com/en-us/windows/deployment/update/waas-wufb-group-policy#i-want-to-enable-features-introduced-via-servicing-that-are-off-by-defaulten-US

http://insider.windows.com

https://aka.ms/wipforbizen-US

https://learn.microsoft.com/en-us/windows-insider/business/manage-buildsen-US

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/enable-and-control-optional-updates-for-your-organization/ba-p/3905218en-US

https://learn.microsoft.com/en-us/windows/configuration/windows-spotlight#how-do-you-disable-windows-spotlight-for-managed-devicesen-US

https://learn.microsoft.com/en-us/windows/configuration/windows-spotlighten-US

https://learn.microsoft.com/en-us/windows/win32/msi/alwaysinstallelevateden-US