Custom Baselines

This page contains a list of existing GPO baselines and allows you to clone built-in baselines or import an existing GPO as a baseline.

Baselines

The widgets in the upper-right side of the table allow us to;

  • Search: Search the GPO baselines table across all table columns.

  • New Baseline: Create a new GPO baseline by cloning a predefined baseline or importing an existing GPO.

Create new Custom Baseline

The table contains relevant information about the baselines and allows us to perform operations on them using the three-dot button.

General Information

  • Enabled: Current status of the baseline.

  • Type: Name of the organization that created the baseline.

  • Name: Name of the baseline.

  • Operating System: Appropriate Operating System for the baseline.

  • Total Settings: Total settings count of the baseline.

Actions for GPO Baselines

Three-dot button on each row allows us to perform the following operations on a baseline;

  • Edit: Redirects the user to the Edit/View GPO Baseline page. This page allows to modify all configurations and specifications related to the GPO baseline.

  • Clone: Clone the selected baseline.

  • Enable/Disable: Change the status of the selected baseline.

  • Delete: Delete the selected baseline.

Baseline Settings

Edit baseline operations over the data table redirects the user to the Edit GPO Baseline page seen below;

GPO Baseline Settings

The GPO baseline edit page consists of two different configurations, edit baseline name/OS and add/edit setting.

Add/Edit baseline setting

The following table describes each setting type;

Setting Type
Description

Audit Policy

This setting type checks for value defined in Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy.

User Rights

This setting type checks for value defined in Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.

Registry Settings

This setting type is used to check the value of a registry key.

Check Registry Setting Exists

This setting type is used to exist check the value of a registry key.

Check Account

This setting type start with "Account:" for value defined in Computer Configuration > Windows Settings > Security Settings > Security Options.

Anonymous SID

This setting type checks for value defined in Computer Configuration > Windows Settings > Security Settings > Security Options > Network access: Allow anonymous SID/Name translation.

Kerberos Policy

This setting type checks for value defined in Computer Configuration > Windows Settings > Security Settings > Account Policies > Kerberos Policy.

Lockout Policy

This setting type checks for value defined in Computer Configuration > Windows Settings > Security Settings > Account Policies > Account Lockout Policy.

Password Policy

This setting type checks for value defined in Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy.

Example

For example, the following figure shows how to add a Registry Setting policy.

Example add new setting

Last updated

Was this helpful?