Lena, a sysadmin at Ridgeline IT, hardens a server fleet built for convenience, tile by tile across the eight-tile hardening board: accounts move from one shared admin password to LAPS, authentication gets SMB signing and Credential Guard against relay, idle IIS and the Print Spooler are removed, RDP moves behind a jump host, logs go off the box with Sysmon and event forwarding, patches are verified, WDAC is piloted before enforcement, and backups move offline with a tested restore. A PowerShell console shows the changes being made and checked.

CY-MID-028Mid Level · Windows Hardening

Windows Server Hardening — The Hardening Board

A hands-on mid-level course that hardens a fleet of Windows Servers to a defensible baseline. Work the hardening board - eight domains: Accounts, Authentication, Services & Roles, Network, Logging & Audit, Updates, App Control, and Backup & Recovery - applying the CIS Benchmark via group policy, LAPS, Credential Guard, SMB signing, WDAC/AppLocker, and audit policy. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Apply a CIS-aligned baseline across accounts, services, and network.
Harden authentication and shut down credential-theft paths.
Turn on meaningful audit logging and keep systems patched.
Add application control and ransomware-resilient backup and recovery.

Price:৳8,000