7.OS_Harden

1.All server get executable files from salt master salt -N 'OS-Windows' cp.get_file salt://security_policy_command.bat 'D:\security_policy_command.bat' salt -N 'OS-Windows' cp.get_file salt://security_policy_infchange.inf 'D:\security_policy_infchange.inf'

2.Execute salt -N 'OS-Windows' cmd.run 'pushd D:\ && security_policy_command.bat'

3.Confirm result can check by check list

4.delete files salt -N 'OS-Windows' cmd.run 'del D:\security_policy_command.bat' salt -N 'OS-Windows' cmd.run 'del D:\security_policy_infchange.inf' salt -N 'OS-Windows' cmd.run 'del D:\secedit.sdb'