Windows 10 Endpoint Hardening
Budget: ₹12,500 – ₹37,500 INR
I’m looking for someone who has already rolled out operating-system hardening at scale—ideally across a thousand endpoints or more—to bring that same discipline to our Windows 10 environment. The goal is to lock down every production workstation without disrupting daily workflows, then document the process so it can be repeated and audited.
Scope
• Windows 10 on the following device types:
– Desktops
– Laptops
– Tablets
What you’ll actually do
First, review our current build images and live machines, measure them against the latest CIS Benchmarks and Microsoft security baselines, and identify all gaps. Next, create a hardened baseline that can be enforced through Group Policy, Intune, or a scripted solution—whichever fits best with our existing AD setup. Once the policies are tested in a pilot group, we’ll schedule a phased rollout, track compliance, and tune any settings that break business-critical apps. Thorough documentation (step-by-step implementation notes, rollback plan, and a final compliance report) is part of the deliverable.
Acceptance criteria
• Minimum CIS benchmark score of 90 % on every Windows 10 device
• No critical business application failures post-deployment
• A version-controlled baseline (GPO backup or Intune JSON) plus a clear change log
If you’ve already navigated these exact challenges before, let’s talk about timelines and the best way to get started.
Scope
• Windows 10 on the following device types:
– Desktops
– Laptops
– Tablets
What you’ll actually do
First, review our current build images and live machines, measure them against the latest CIS Benchmarks and Microsoft security baselines, and identify all gaps. Next, create a hardened baseline that can be enforced through Group Policy, Intune, or a scripted solution—whichever fits best with our existing AD setup. Once the policies are tested in a pilot group, we’ll schedule a phased rollout, track compliance, and tune any settings that break business-critical apps. Thorough documentation (step-by-step implementation notes, rollback plan, and a final compliance report) is part of the deliverable.
Acceptance criteria
• Minimum CIS benchmark score of 90 % on every Windows 10 device
• No critical business application failures post-deployment
• A version-controlled baseline (GPO backup or Intune JSON) plus a clear change log
If you’ve already navigated these exact challenges before, let’s talk about timelines and the best way to get started.