I needed to harden a couple of standalone servers in a jiffy. I remembered there some tools for this and the Security Compliance Manager to the rescue!
- Make a copy of the baseline
- Tweak
- Save as a GPO.
- Push into the target server/s using
LocalGPOLGPO