1. Download the Microsoft Security Compliance Toolkit 1.0
https://www.microsoft.com/en-us/download/details.aspx?id=55319
2. Copy the LGPO.exe to the folder under script
2. Run Powershell command:
Get-ChildItem -Path "C:\Source\Windows-10-v22H2-Security-Baseline" -Recurse | Unblock-File PowerShell.exe -ExecutionPolicy RemoteSigned -File .\Baseline-LocalInstall.ps1 -Win10NonDom
3. Reboot the machine
Reference:
Applying
Microsoft Security Baselines | STIG and Microsoft Security
Baseline-Based Hardening of a VMware Horizon on VxRail-Based VDI
Environment | Dell Technologies Info Hub
https://infohub.delltechnologies.com/en-us/l/stig-and-microsoft-security-baseline-based-hardening-of-a-vmware-horizon-on-vxrail-based-vdi-environment/applying-microsoft-security-baselines/
