Hi all
Was task to think of a way to implement on our Windows Servers where we can monitor the security baselines against a approve standard. For example we have a set of group policy settings that apply on these servers (approx 300). These are your baselines. Now that must be monitored every day/week so if they change on some servers people must be alerted and action taken. An example: Lets say 2 GPO settings that applies on servers is to disable the guest account and to switch off the firewall. So when the server is setup and the GPO's apply, these settings will take affect. When a local admin log onto the server and enable the guest account that server is not on the security baseline anymore and someone must be notified
Do you guys have a policy in you company that define that you must do this? If so, how do you do this? is there tools out there that monitor the server baseline against the approved baselines?
Would appreciate any help