Security isn't just the domain of the cyber security folks, it's a constant threat that needs to be constantly monitored and tweaked. System administrators need to be aware of, and deploy, policies that compliment security tools while mitigating the spread of malicious actions. This discussion will focus on the mind-boggling array of tools (many of them free) Microsoft and others provide, and give examples of ways to automate the deployment and maintenance of security enhancing features like user and device white lists, hardware, software, and BIOS version reporting, patching, and mitigating vulnerabilities detected during security scans. Tools and methods covered may include Powershell, Active Directory, System Center Configuration Manager, Windows Sysinternals, Least Privilege Model, and more. Actual topics may vary based on interaction with attendees.
