As you have seen in the previous video,
working with Policy Analyzer is super easy,
and it's a really great tool that can help you compare your
current Group Policy to a secure baseline.
The next step would be for you to actually import that secure baseline.
Now there are two ways that you can do that.
The first is by creating a new Group Policy,
or even importing the settings from your secure
baseline into an existing Group Policy.
So I'm going to go ahead and do that, and I'll create a new Group Policy,
giving it a name, and once it's been created,
I will right‑click on my new Group Policy,
I will click on Import Settings, and then I will navigate to my secure baseline.
Within my secure baseline folder, I will select GPOs, and then click on Next.
Now I've got a list of the Group Policies that exist within the secure baseline,
and I can select a specific GPO that I would like to import.
I can also view the settings of the Group Policy by clicking on View Settings.
So for this particular GPO,
I'm going to go ahead and import the Member Server Group Policy.
I'll then click on Next, and I will use the defaults and click on Finish.
Once the settings have been imported, I can now view the settings,
which would be applied to this Group Policy.
But what if I wanted to import just the default secure baseline Group Policies?
Well, within the security baseline, we have a tool that we can use.
This tool is found within the Scripts folder of the Group Policy,
and it is a PowerShell script titled Baseline‑ADImport.
Now remember,
this is going to actually import the baselines into Active Directory,
whereas if I were to use the Baseline‑LocalInstall,
that would import the Group Policies locally.
So I want to do this using ADImport, and for that,
I'm going to open up an administrative PowerShell window.
Right, with the PowerShell window opened up,
I have navigated to the secure baseline folder,
particularly to the Scripts folder,
and I'm going to go ahead and execute this Baseline‑ADImport PowerShell script.
As the script runs,
it goes and it finds the Group Policies that exist within the baseline,
and then it imports it into Active Directory.
So now my import is completed,
let's take a look at what Group Policy Management looks like.
Navigating back to my Group Policy Objects,
I will go ahead and refresh, and now I have some additional Group Policies,
which are the Windows Server 2022 baseline Group Policies.
From here, I could simply link these Group Policies to specific OUs,
or I could edit them based on my needs.
So here we can see that importing these policies is really simple,
allowing you to quickly enhance your security posture by making use of these secure baselines.