Ensure to set the following system policies:
Implement the System key and strong encryption of the password database by running SYSKEY.EXE
Use Microsoft security compliance toolkit or set local security policy.
Display legal notice at during interactive logon window.
Do not display username that was used earlier to login.
Disable Posix.
Clear virtual memory page file during shutdown.
Disable autorun.
Disable LMHOSTS lookup while setting the advanced TCP/IP settings.