Audit Policy Settings  Enable Audit policy according to audit policy best practices. Windows audit policy defines what types of events are written in the Security logs of your Windows servers.  Configure the Event Log retention method to overwrite as needed and size up to 4GB.  Configure log shipping to SIEM for monitoring. Software Security Guide  Install and enable anti-virus software. Configure it to update daily.  Install and enable anti-spyware software. Configure it to update daily.  Install software to check the integrity of critical operating system files. Windows has a feature called Windows Resource Protection that automatically checks certain key files and replaces them if they become corrupted. Finalization  Make an image of each OS using GHOST or Clonezilla to simplify further Windows Server installation and hardening.  Enter your Windows Server 2016/2012/2008/2003 license key.  Enter the server into the domain and apply your domain group policies. 8