Windows 10: Building/ Creating Secure Host Baseline Image for Windows 11

Bryan Simpson1 · Oct 4, 2023

Hello,I am in the process of creating new SHB image for Windows 11. The process is basically the same as it was for creating a SHB image for Windows 10. The problem that I am having with creating an image for Windows 11, is that the my customsettings changes are not being applied to the reference image after I run SHB Toolbox.exe.Steps that I have takenOpen up Deployment WorkbenchSelect and Right-Click Deployment Share v11.xxxxxxx>PropertiesGeneral Tab x64 is selectRules Tab My Custom Settings are inputted Lockscreen, Wallpaper, Provisoner Accounts etc...Windows PE Tab x64 is the platfo

:)

Nicole Aljecera · Oct 4, 2023

Secure Host Baseline PolicyEngine.exe

Hi, I’m Nicole, I’ll be happy to help you out today.

The PolicyEngine.exe file is typically associated with software from Secure Host, which is a security company that provides a range of products and services for securing endpoints, networks, and data.

To obtain a version of PolicyEngine.exe that is compatible with Windows 10 Version 22H2, you should first check with Secure Host to see if they have released an updated version of the software that supports the latest version of Windows.

You can contact Secure Host directly via their website or customer support channels to inquire about compatibility with your specific version of Windows. They should be able to provide you with information on the latest version of PolicyEngine.exe and any additional steps that may be required to ensure it runs properly on your system.

If Secure Host does not have an updated version of PolicyEngine.exe that is compatible with Windows 10 Version 22H2, you may need to consider alternative security solutions that are compatible with your operating system. It's important to ensure that any security software you use is fully compatible with your system to ensure that it provides the necessary protection without causing any issues or conflicts.

Regards

SuperSoph_WD · Oct 4, 2023

Help, cant create windows image

Hello there, @fullinfusion!

It seems like some sort of an OS confusion has happened with your secondary WD Black and I'm sorry to hear about that. *Frown
Maybe re-formatting it would help indeed as the community already mentioned. I'd suggest to take a look at this step-by-step how to partition and format an HDD: http://products.wdc.com/support/kb.ashx?id=PYCoid
Keep in mind that this will wipe clean the drive, so you should backup all important data from the drive somewhere else.
I noticed from the screenshots that your HDD appears as Disk 0, this means that it's plugged in the primary SATA port where the SSD (as an OS drive) should be. Actually it is possible that because of this Windows cannot create the image there. Swap the ports of the SSD and the HDD, this might help as well.

Keep me posted. Hope this helped! *Smile
SuperSoph_WD

Brink · Oct 4, 2023

Security baseline (DRAFT) release for Chromium-based Microsoft Edge 79

We are pleased to announce the draft security baseline for the initial stable release of the new Microsoft Edge! Please review the security baseline (DRAFT) for Microsoft Edge version 79, and send us your feedback through the Baselines Discussion site.

What are security baselines?

Every organization faces security threats. However, the types of security threats that are of most concern to one organization can be completely different from another organization. For example, an e-commerce company may focus on protecting its Internet-facing web apps, while a hospital may focus on protecting confidential patient information. The one thing that all organizations have in common is a need to keep their apps and devices secure.

A security baseline is a group of Microsoft-recommended configuration settings that explains their security impact. These settings are based on feedback from Microsoft security engineering teams, product groups, partners, and customers.

Why are security baselines needed?

Security baselines are an essential benefit to your organization because they bring together expert knowledge from Microsoft, partners, and customers.

For example, there are 200+ Microsoft Edge Group Policy settings for Windows. Of these settings, only some are security-related. Although Microsoft provides extensive guidance on these policies, exploring each one can take a long time. You would have to determine the security impact of each setting on your own. Then, you would still need to determine the appropriate value for each setting.

In modern organizations, the security threat landscape is constantly evolving, and IT administrators and policy-makers must keep up with security threats and make required changes to Microsoft Edge security settings to help mitigate these threats. To enable faster deployments and make managing Microsoft Edge easier, Microsoft provides customers with security baselines that are available in consumable formats, such as Group Policy Objects backups.

Security baseline principles

As with our current Windows and Office security baselines, our recommendations for Microsoft Edge configuration follow a streamlined and efficient approach to baseline definition when compared with the baselines we published before Windows 10. The foundation of that approach is essentially this:

The baselines are designed for well-managed, security-conscious organizations in which standard end users do not have administrative rights.

A baseline enforces a setting only if it mitigates a contemporary security threat and does not cause operational issues that are worse than the risks they mitigate.

A baseline enforces a default only if it is otherwise likely to be set to an insecure state by an authorized user:

If a non-administrator can set an insecure state, enforce the default.

If setting an insecure state requires administrative rights, enforce the default only if it is likely that a misinformed administrator will otherwise choose poorly.

(For further explanation, see the “Why aren’t we enforcing more defaults?” section in this blog post.)

How can you use security baselines?

You can use security baselines to:

Ensure that user and device configuration settings are compliant with the baseline.

Set configuration settings. For example, you can use Group Policy, System Center Configuration Manager, or Microsoft Intune to configure a device with the setting values specified in the baseline.

Download the security baselines

For version 78, see Security baseline (DRAFT) for Chromium-based Microsoft Edge, version 78.

For version 79, see Security baseline (DRAFT) for Chromium-based Microsoft Edge, version 79.

Future draft security baselines versions will be posted to the Microsoft Security Baselines Blog, and final security baselines will be available in the Security Compliance Toolkit (SCT).

Learn about Microsoft Edge in the enterprise

Check out our Microsoft Edge enterprise documentation to learn more about deploying and managing the next version of Microsoft Edge.

– Forbes Higman, Program Manager, Microsoft Edge enterprise security
– Brian Altman, Program Manager, Microsoft Edge manageability
Click to expand...

Source: https://blogs.windows.com/msedgedev/...draft-edge-79/

Tweet

— Twitter API (@User) View on Twitter

Windows 10: Building/ Creating Secure Host Baseline Image for Windows 11

Building/ Creating Secure Host Baseline Image for Windows 11

Building/ Creating Secure Host Baseline Image for Windows 11

Building/ Creating Secure Host Baseline Image for Windows 11

Building/ Creating Secure Host Baseline Image for Windows 11 - Similar Threads - Building Creating Secure

Microsoft Baseline Security Analyzer

23h2 security baseline. Whats new from 2021 baseline?

Revert Security Baselines

Revert Security Baselines

Building/ Creating Secure Host Baseline Image for Windows 11

Secure Host Baseline PolicyEngine.exe

Secure Host Baseline PolicyEngine.exe

Secure Host Baseline PolicyEngine.exe

December Hosted Build Image Updates