Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.javascript > #87592

Cis Benchmark Windows Server 2016 Download

Show all headers | View raw

I would like to know if there is a benchmark allowing me to test performance on a Windows vm and assign a score or indicate how long it lasted so I can compare the results. I want to test several CPU configuration to find the best one for my environment.



cis benchmark windows server 2016 download

Download Zip https://t.co/LIr6PwudNw 






We have got an Active Directory domain with Windows Server 2016 on the domain controller and up-to-date Windows 10 on all clients. Not long ago I began deploying the Center for Internet Security (CIS) Level-1 security benchmarks on the domain via the Group Policy: Windows 10 ones in the default domain policy, with overrides based on the Windows Server 2012 R2 document (there isn't one for 2016 yet) in the default controller policy. I've been bitten by careless hardening of Windows before so this time I've been going through all the settings one by one, with the relevant documents open and checking the impact of any unfamiliar options. It worked fine - until today, when I managed to finally mess something up. The symptoms are as follows


Unfortunately I've just realised I forgot to check the corresponding error code in the Event Log, however given that if I point Explorer to \contoso.com\sysvol\ (or for that matter any share on that server, using both the host and the domain name in the path) I get asked for credentials and have yet to find ones that work, my bet is on "access is denied" again. Accessing sysvol via the local path on the DC works fine, by the way.


Now, I've got up-to-date backups so I could just restore to last working state and be done with it. However, what I would really like is to a) understand what settings exactly might have caused this problem (otherwise I'll likely run into the same issue again soon), and b) figure out how to make my domain work with all the hardening in place (CIS Level-1 benchmarks are baseline, they are not supposed to have much effect on functionality...). Oh, and c) if I can still actually do anything with the current configuration.






Anyone out there with experience with either hardening Windows in general or applying CIS benchmarks specifically, who could give me a nudge in the right direction? If so, thank you very much in advance!


I am using Windows Server 2019 with Citrix virtual apps and desktops 1912. I have recreated this environment to replace an older production one that is not compatible with VMware NSX. 

 

I am required to use the CIS benchmarks security in which my colleague has created a group policy to implement. I was told that he had used the 2016 benchmarks to create the policy as they had not come out with 2019 yet. However, they noted the added changes that were needed for the 2019 benchmark. With that said, applying this benchmark policy you cannot open applications. it appears to try and then does nothing. No error, no events, no log in Firewall or anything that says what and why its being denied. 

 

Has anyone went through this and discovered the settings required to get applications to start on the VDAs? I figured someone has already figured the required exceptions for this. 

 

Let me know if you have any questions. 

 

Thank you, 

Justin


The benchmark typically includes a comprehensive list of security controls, system settings, and configuration recommendations that should be implemented to enhance the security posture of Windows Server 2019. These recommendations cover various aspects of the operating system, including user authentication, network security, system hardening, access controls, auditing, and more.


A benchmark Windows assessment is a process of evaluating the performance, capabilities, or compliance of a system, product, or process against a predefined set of standards or benchmarks. It involves comparing the performance or characteristics of the subject being assessed to established reference points or industry best practices. The purpose of a benchmark assessment can vary depending on the specific context, but it typically aims to:


Measure Performance: Benchmark assessments help determine how well a system, product, or process performs compared to established benchmarks. This allows organizations to identify areas of improvement and set performance goals.


Identify Weaknesses and Gaps: By conducting benchmark assessments, organizations can identify weaknesses, vulnerabilities, or inefficiencies in their systems or processes. This helps in prioritizing improvements and implementing corrective actions.


Organizations use a cross platform benchmark to assess their Windows Server 2019 configurations, comparing them to prescribed standards. This entails reviewing settings, applying updates, implementing security controls, and conducting audits for ongoing system performance and compliance. The assessment results guide action plans for addressing gaps and enhancing performance or compliance.


On the CIS website CIS-CAT Pro is their benchmark software and you will also find a CIS Benchmark list that identifies 8 categories the Benchmarks can be categorized in for ease of use. Those categories are:


The Microsoft Windows Server 2019 Benchmark Profile Applicability refers to the assessment of how applicable a specific benchmark profile is to the Windows Server 2019 operating system. In the context of benchmarking, a benchmark profile is a set of criteria, tests, and configurations designed to evaluate the performance, security, or other aspects of a software or hardware system.


Many CIS benchmarks, such as the Windows Server 2019 benchmark, span over 1,000 pages, containing various recommendations. Machine learning aids in tracking and approving configuration updates via a workflow to ensure compliance, support audits, and incident response.


CalCom Hardening Automation Suite (CHS) is an automation platform that enhances infrastructure security and compliance while minimizing operational costs. CHS maintains a hardened and secure posture for servers, ensuring availability and significantly reducing time spent by security operations administrators. You can watch our webinar on: Windows 2019 hardening webinar: Ensuring CIS compliance while avoiding production outages


For this session I used a tool from Microsoft, which Microsoft experts are using to benchmark MS SQL Server or MS Exchange. Why? Because the result is the same. If a storage system is fast for MS SQL Server, it is fast for 4D. If it is slow for them, it is slow for 4D.


Just keep in mind that the 4D server is a SERVER, It is not just another machine you could turn off when YOU want or when Microsoft need to apply an update and restart the real machine to apply this update.


ah, then it is easy. Select any tool allowing you to test a computer. Tools like CrystalDiskMark. There are similar tools for CPU speed.

Run this tool once on the real hardware (the host) - and one on the guest (VM). That shows you the price to virtualize. If the price looks too high (meaning the performance drop is too big), either think about if virtualising is the way to go, or if you need better hardware - or if you need to hire an expert knowing better how to set it up.

As long as your virtual computer is using a virtual hard disk located on a nvmi based SSD (something like Samsung 980 Pro, something optimized for server and not for gaming) you cannot do much wrong.

But if you decide to use a SAN, you need at least 10 times the budget and you really need to know what you are doing.


From this screenshot, Il understand that interesting results for a data base use are lines 3-4, small packets, while lines 1-2 are interesting for file server use (bigger packets). Wrong or true? Any advice? (TIA)


So, do everything that Thomas recommends regarding VM optimization and benchmarking, use 4D Info Component to monitor/understand caching and consider setting up a mirror (or multiple mirrors). And keep an old hardware server (or buy a new M1 Apple!) for one of the mirrors.


HardeningKitty is a open source Powershell script using CIS and other Security checklists as a csv database and Audit your windows 10 and windows server security settings. In addition to Audit, it can make Hardening on your machine.


When Microsoft rolled out their Windows 10 October 2018 Update they also released Windows Server 2019. Now over the slower holiday period I am finally getting caught up in benchmarking Windows Server 2019. For this initial benchmark comparison is a look at the Microsoft Windows Server 2019 performance against a handful of Linux distributions as well as FreeBSD 12.0 for seeing how this latest Windows Server performance compares on a dual AMD EPYC 7601 server.


This initial benchmarking was done on the Dell PowerEdge R7425 server, which features two EPYC 7601 processors for a combined 64 cores / 128 threads while the server was equipped with 512GB DDR4-2666 memory and each OS was installed to the SSDSCKJB120G7R Intel M.2 SSD (the twenty Samsung 860 EVO SSDs weren't part of this round of OS benchmarking). For those interested in the Intel Core/Xeon performance with Windows Server 2019 against Linux, those results will be coming in the days ahead -- this level of testing is quite time consuming.


For today's tests there is unfortunately no Windows Server 2016 reference point as the Windows Server 2016 install was hanging or indefinitely stuck at the Windows Server installer's loading screen on this particular platform. With the planned Intel tests, at least there I have vetted Windows Server 2016 previously on that same server so will be able to do a 2016 vs. 2019 benchmark comparison there.


One of the new features with Windows Server 2019 is now having the Windows Subsystem for Linux (WSL) similar to Windows 10. I did run some Windows Server 2019 WSL benchmarks for seeing how its performance is as well while using the Ubuntu 18.04 WSL image. From this Dell PowerEdge 2P EPYC server, the following operating systems were each installed and tested in their out-of-the-box configuration and all available stable release updates:

 35fe9a5643

Back to comp.lang.javascript | Previous | Next | Find similar | Unroll thread

Thread

Cis Benchmark Windows Server 2016 Download Shara Mchale <sharamchale555@gmail.com> - 2024-01-07 17:35 -0800

csiph-web