Auditing:
GPO: Comp/User config > Policies > Windows > Security > local > Audit
Bekijk event viewer logs security tab

IPSec:
Computer Configuration > Policies > Windows Settings > Security Settings > IP Security Policies on Active Directory.
https://thebackroomtech.com/2019/05/13/how-to-configure-ipsec-on-windows/

Remove local admins:
GPO: Comp config > Preferences > Windows > Cpanel settings > local users and groups
New > Local Group > Group name: Administrators. Domain admins en admin user toevoegen

STIG, maak checklist en controleer registry, gpo of andere settings in het check text kader
set status in checklist. Open betekent komt niet overeen, not a finding betekent niets mis

Secpol.msc
mmc > ipsec