Glossary: Endpoint and Application Security
Security baselines (Microsoft)
Also written: Microsoft security baselines, Security Compliance Toolkit
Ready-made GPOs of recommended Windows settings, published free in Microsoft's Security Compliance Toolkit. Import one, test it, then link it widely.