Suggestions building a group policy

jah8887

Hi all,
I just built a Windows server 2016 Essentials box (non vm) for a small business. They are looking to become NIST 800-171 compliant with Windows 10 devices (rev 1703 all are 64 bit). I am looking to find a starting point on building the policy. I know about the basics of disabling USB drives, account lockout times etc.. but I would like to see if I could get some help further with finding out how to make these devices all compliant.

I appreciate the help.

yoba222

Use the CIS benchmark.