Windows 2025 CIS Hardening

I need my standalone Windows Server 2025 brought up to full CIS Benchmarks Level 1 compliance. After the changes are applied, I also require a line-by-line report that maps each CIS control to the exact setting on the machine, clearly indicating pass/fail status and any remediations performed.

Scope
• Harden every item in the official CIS Windows Server 2025 Benchmark, Level 1 profile.
• Work directly on a single, isolated server (no domain dependencies).
• Use standard, scriptable methods—Group Policy, registry edits, PowerShell, or CIS-CAT/SCAP content—so the steps are reproducible.

Deliverables
1. Hardened server meeting Level 1.
2. Detailed compliance report in CSV or XLSX showing:
– CIS control ID and description
– Current setting after hardening
– Pass/Fail result
– Notes on any deviation or justified exception
3. All scripts or configuration files used, with brief usage instructions.

Acceptance Criteria
• CIS-CAT or equivalent scan shows 100 % pass on Level 1 items, or documented exceptions signed off by me.
• Server remains fully functional (RDP, core roles and installed software unaffected).

Please estimate the time required and outline the tools you prefer so I can schedule access accordingly.