Windows 10: Revert Security Baselines

Hi,I recently applied Microsoft Default Security Baselines for Windows 11 to a test group. As there are currently multiple projects running, leading to multiple problems, we decided to revert the Policies and apply them at a later point.As usual I just disabled the GPOs thinking, all the settings will be reverted. But now I noticed, there are several GPOs which will not be overwritten automatically. For example the Security Options in Computer Settings.Is there a easy way to revert all the settings to rollback to the default settings for the test group?If not, I assume I have to create another

:)

 

Microsoft Security Compliance Toolkit | Security Baseline | Challenge Question

I have applied Microsoft security baseline to Windows 10 IoT.

Can anyone please provide a workaround or a solution to revert back the system to previous/original state?

(Any way which can basically revert the system + group policy + registry settings back to the way it was without security baselines)

PS: Microsoft compliance toolkit itself does not have this option which is why I have mention even a workaround would help if you know any.

Note: Just reversing GPO will not help. We will need to revert GPO + registry + (potential changes introduced by baseline).

 

Microsoft Security Compliance Toolkit | Security Baseline | Challenge Question

I have applied Microsoft security baseline to Windows 10 IoT.

Can anyone please provide a workaround or a solution to revert back the system to previous/original state?

(Any kind of way which can basically revert the system or group policy settings back to the way it was without security baselines)

PS: Microsoft compliance toolkit itself does not have this option which is why I have mention even a workaround would help if you know any.

 

Microsoft Security Compliance Toolkit | Security Baseline | Challenge Question

Hello Greg,

Thanks for your inputs. I have checked resetting group policy settings using this option. I noticed they do reset the gpedit settings but do not reset system registry.

When we apply Microsoft Security Baselines, they do update system registry in addition to gpedit settings. Hence, we need to find a way to revert all the settings changed by Security Baseline on the system.

Thanks