Product Name
Windows Build Kits
Product Version
Windows Server and Workstation
Date
Problem
| Info |
|---|
We have successfully deployed all of the CIS L* GPOs to all computers running windows 10 20Hx. Now we’re upgrading those computers to Windows 21Hx. |
Solution
The Window’s GPO updating process can be maintained as there are typically a small number of recommendations to update yearly.
The Server and Workstation Benchmark publications are always 2nd point releases**, and a typical year’s worth of Change Logs is about 15 entries.
We highly recommend making backups, using test OUs before placing anything in the Production Environments, and fully reading and understanding the Impact and Rational behind the recommendations before taking it to production.
Once you have applied a set of CIS Build Kit GPOs, per your Organizational needs, the best method to keep the GPOs up-to-date and in-accordance with new Benchmark publications is going to be to manually update, test, and apply anything from the Change Log into the existing GPOs.
At the end of all Windows Benchmarks PDF Documents there is a Change Log. The Log shows if Recommendations have been removed, added or updated. See this KB for more information on Change Logs: Is there a way to compare changes between Benchmark older and newer versions?
You’ll look at the Change Log Appendix
Go to that updated/ added/ removed Recommendation and remediate per the updated Recommendations.
If the Recommendation is for Level 1 Member Server, adjust that within the L1 Member Server GPO
Or copy the existent GPO, edit it, test it, and then go into production with it. Whichever your SysAdmin prefers.
| Note |
|---|
**Meaning that these specific Benchmarks don’t start from scratch, but build on each other until a completely new OS is released, such as Server 2022, which is its own unique BM from Server 2019. |
Keywords; GPO Update Upgrading
Content by Label
| Filter by label (Content by label) | ||||||
|---|---|---|---|---|---|---|
|
| Page Properties | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||
|