Applying CIS Benchmarks to Harden Windows 11 VDI Systems

The report outlines CIS’s approach to securing a Windows 11 Virtual Desktop Infrastructure (VDI) using Omnissa Horizon by applying CIS Benchmarks via Group Policy and Active Directory. It describes a structured process—creating a clean golden image, optimizing performance with Horizon tools, domain joining, and deploying CIS-aligned GPOs (including Build Kits)—to standardize and scale hardening across VDI and physical endpoints. The outcome emphasizes flexibility, scalability, and consistent security posture without sacrificing usability.