Onboarding Accelerator -

Implementing Security Baselines - Base

Proactively secure your enterprise with a phased,
actionable approach to your security posture

Does your organization struggle to effectively apply security baselines? Has your organization’s security journey
been hampered by environmental roadblocks in your infrastructure?
If you answered yes to one or both questions, then the Onboarding Accelerator – Implementing Security Baselines -
Base can help you. It provides a repeatable, scalable solution to quickly and cost-effectively help mitigate security
blockers by designing a plan to implement Microsoft hardening best practices for Domain Controllers, member
servers or domain clients.

OUTCOMES
Functioning environment and education for Implementing Security Baselines

UNDERSTANDING HANDS ON A DETAILED

THE TECHNOLOGY
Get deep technical understanding
on how to implement Security
Baselines in your production
environment, on the tools used
and on the recommended settings,
through detailed knowledge
transfer sessions.
EXPERIENCE
Hands-on experience by using the
required tools to merge the Security
Baselines with the existing Group
Policies in your production or test
environment.
ROLLOUT PLAN
An individual, detailed and phased
plan will be provided on how to
rollout the newly created Security
Baseline templates in your
environment and what to monitor
before activating.
,

CAPABILITIES
Onboarding Accelerator – Implementing Security Baselines - Base is a 5-day engagement designed to help you
creating several Group Policy templates and a structured plan on how to implement Security Baselines into your
environment to provide you with knowledge and experience on recommended configurations and implementing
impactful settings.

OUR
EXPERTISE
With deep expertise in Security
Baselines, we are able to provide
unique insights and best practices
PROVEN GO TO
METHODOLOGIES PRODUCTION
Microsoft uses proven practices, Production ready implementation
methodology, and innovative tools with a detailed Operations Guide.
 SCOPE
The Onboarding Accelerator – Implementing Security Baselines: Base service for your environment is a five-
day engagement (four days on-site + 1 day off-site ) delivered by a Microsoft Premier Field Engineer (PFE).
During this time, hardening concepts and procedures are discussed, the desired Microsoft baseline (for
Domain Controllers, Member Servers or Domain Clients) is tuned to the customer environment, an
implementation plan is created, and a compliance checking mechanism is set up to measure progress of the
environment against the baseline.
On top of this, an add-on can be included to extend the service to cover recommendations, extending the
onsite engagement by an additional week.
Our recommended approach to implement baselines is the following:

Base
Knowledge transfer
Addon Addon
Domain Controllers
Baseline tuning Member server Windows Client
baseline baseline
Implementation plan
Compliance checking

TYPE OF
ENGAGEMENT
The base Onboarding Accelerator is a 5-day engagement (4-days on-site & 1-day remote reporting)
where you will learn how to effectively implement Security Baselines within your environment.
The engagement covers the following areas:

Education on Security Baselines: Scenarios covered in the delivery:

• Server hardening workshop: learn about • Environment Survey and Application Assessment
hardening concepts and important settings • Merging the existing Group Policies with the
• Understand how to use the tools to create your Security Baselines
very own customized Security Baselines • Creating several baselines, ordered by impact
• Operations Guide to support the rollout
ADDITIONAL
DETAILS
In Scope Not In Scope
• Knowledge transfer around current attacks, • Project ownership or management
hardening concepts and tools • Incident Response planning.
• Assessing the current environment with the • Detection of threats or suspicious activities
customer for application dependencies • Active Directory Security Assessment or any
• Creating templates, Planning the deployment related Assessment from Microsoft Premier
& Discussing impactful security settings Offering
• Deployment into Production • Resolution of blocking issues discovered during
• Implementing one baseline (Domain the engagement by the PFE(s) or customer
Controller, Member Server or Client baseline) • Implementing more than one baseline
• Single-Forest-Scope • Deployment in more than single forest

NEXT STEPS: If you are interested in the Onboarding Accelerator – Implementing Security Baselines service
or have more questions about the delivery, please contact your Microsoft Account Representative.

2019 © Microsoft Corporation. All rights reserved. This data sheet is for informational purposes only.
MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY