Admin Workstation Standard¶
Purpose¶
Define the standard configuration for management workstations.
Baseline¶
| Setting | Requirement |
|---|---|
| Domain joined | Yes |
| Static IP | Preferred for management workstation |
| Firewall enabled | Yes |
| BitLocker | Required once GPO baseline is available |
| Defender | Enabled |
| RSAT | Installed |
| PowerShell 7 | Installed |
| Windows Terminal | Installed |
| Git | Installed |
| VS Code | Installed |
Restrictions¶
- No personal browsing.
- No gaming or non-admin software.
- No shared administrator sessions.
- No direct exposure to the Internet.
Approved tools¶
- RSAT
- PowerShell
- Windows Terminal
- VS Code
- Git
- Windows Admin Center
- Browser for admin portals only