Ensure to set the following system policies:
- Implement the System key and strong encryption of the password database by running SYSKEY.EXE
- Use Microsoft security compliance toolkit or set local security policy.
- Display legal notice at during interactive logon window.
- Do not display username that was used earlier to login.
- Disable Posix.
- Clear virtual memory page file during shutdown.
- Disable autorun.
- Disable LMHOSTS lookup while setting the advanced TCP/IP settings.