Previously I had done several separate threads to announce these MSG Security Baseline releases but figured now it would be best to combine in a single thread. Security baseline (DRAFT) for Windows 10 v1809 and Windows Server 2019 Link: https://blogs.technet.microsoft.com...for-windows-10-v1809-and-windows-server-2019/ October 1, 2018 I will tidy thread later and link to previous baseline releases later.
Security baseline (FINAL) for Windows 10 v1809 and Windows Server 2019 November 20, 2018 Link: https://blogs.technet.microsoft.com...for-windows-10-v1809-and-windows-server-2019/ There are quite a few changes, so check out the blog link above if this is of any interest to you. Personally, I just make use of the Group Policy templates for the most part but also I use the spreadsheets to follow some other security details which I follow those few things manually.
Is it a good idea for home users to use security baselines, and if so, which ones are the most relevant?
That's a great question that I had never really thought of before. No, I don't think that these baseline security policies would be that relevant or worthwhile for home users and adds likely too much complexity for home user systems. The only part that I use is the group policy templates by copying the .adml and .admx files from the extracted Templates directory to C:\Windows\PolicyDefinitions and the relevant language (en-US, etc.) sub directory. Those have a few interesting settings that I still make use of via group policy.
Security baseline (DRAFT) for Windows 10 v1903 and Windows Server v1903 April 24, 2019 https://blogs.technet.microsoft.com...or-windows-10-v1903-and-windows-server-v1903/
Security baseline (FINAL) for Windows 10 v1903 and Windows Server v1903 May 23, 2019 https://blogs.technet.microsoft.com...or-windows-10-v1903-and-windows-server-v1903/
Security baseline for Microsoft Edge v83 May 26, 2020 https://techcommunity.microsoft.com...-baseline-for-microsoft-edge-v83/ba-p/1417634
Security baseline (DRAFT): Windows 10 and Windows Server, version 2004 May 27, 2020 https://techcommunity.microsoft.com...ws-10-and-windows-server-version/ba-p/1419213
Microsoft releases Windows 10 Version 2004 security baseline August 5, 2020 https://www.bleepingcomputer.com/ne...es-windows-10-version-2004-security-baseline/ Microsoft: Security baseline (FINAL): Windows 10 and Windows Server, version 2004
Security baseline for Microsoft Edge version 85 August 28, 2020 https://techcommunity.microsoft.com...ne-for-microsoft-edge-version-85/ba-p/1618585 The Register: Microsoft reprieves SHA-1 deprecation in Edge 85 security baseline
Security baseline for Microsoft Edge version 86 October 9, 2020 https://techcommunity.microsoft.com...ne-for-microsoft-edge-version-86/ba-p/1758453
Windows 10 20H2 adds faster malware detection to security baseline October 21, 2020 https://www.bleepingcomputer.com/ne...aster-malware-detection-to-security-baseline/ Microsoft: Security baseline (DRAFT): Windows 10 and Windows Server, version 20H2
Security baseline for Microsoft Edge version 87 December 2, 2020 https://techcommunity.microsoft.com...ne-for-microsoft-edge-version-87/ba-p/1950297
Office 365 security baseline adds macro signing, JScript protection May 1, 2021 https://www.bleepingcomputer.com/ne...seline-adds-macro-signing-jscript-protection/ Microsoft: Security baseline for Microsoft 365 Apps for enterprise v2104 - FINAL
Security baseline for Microsoft Edge v94 September 27, 2021 https://techcommunity.microsoft.com...-baseline-for-microsoft-edge-v94/ba-p/2784793
Security baseline for Windows 11 was just released by Microsoft October 7, 2021 https://windowsreport.com/windows-11-security-baseline/ Microsoft: Windows 11 Security baseline
Security baseline for Microsoft Edge v95 October 28, 2021 https://techcommunity.microsoft.com...-baseline-for-microsoft-edge-v95/ba-p/2897269
Windows 10 21H2 adds ransomware protection to security baseline December 21, 2021 Microsoft: Security baseline for Windows 10, version 21H2