Baseline Comparison
The baseline comparison feature allows users to compare and analyze the applied settings by their group policy objects on their own active directory environment with the baselines that are prepared by the Microsoft.
Baselines that are created by the Microsoft are prepared by considering the security best practices of these settings.
Input fields are ;
GPO: The group policy object list belong to your active directory environments.
Baseline: Predefined security best practices of the GPO settings prepared by the Microsoft.
Baselines are categorized according to the applied Windows operating system by the Microsoft.
After selecting the relevant gpo and baseline, FSProtect automatically compares the applied settings and reveals the results.
Comparison Result
Colored labels and numbers that are above and right side of the result table describe the categories and the number of the identified settings that belong to these categories of the comparison result.
Clicking on these badges allows you to filter the result table.
Colours of the badges are categorized as;
| Colour | Definition |
|---|---|
Uncompatible | |
Not Configured | |
Not Defined | |
Compatible | |
All |
Uncompatible : Setting that is configured by the GPO is not secure according to the Microsoft's baseline.
Not Configured: Setting that is mentioned by the Microsoft's baseline is not defined/configured by the GPO.
Not Defined: Setting that is defined/configured by the GPO is not defined in the Microsoft's baseline.
Compatible: Setting that is configured by the GPO is secure according to the Microsoft's baseline.
All: All settings that is either defined/configured by the GPO or mentioned by the Microsoft's baseline.
Tooltip provider that is above and right side on the table allows us to;
Search: Search in the comparison result table according to the names of the settings.
Export: Exports the comparison result table and respective information that is listed in this table as a CSV file.
The table contains regarding information about the results of the group policy object settings comparison,
Status: Comparison result of the applied gpo settings.
Type: Type of the applied settings.
Policy Group or Registry Key: Group policy configuration path of the applied settings.
Setting: Name of the applied settings.
GPO: Value of the setting that is defined/configured by the group policy object.
Baseline: Value of the setting that is defined/configured by the Microsoft baseline.
In addition, each setting in the rows displays the summary information about the definition of the relevant setting.
Last updated
