Operating System Hardening for SANsymphony

Overview

The DataCore Software Hardening Tool (DcsHardeningTool.ps1) is a PowerShell-based framework designed to harden Windows Server systems where SANsymphony is installed, while preserving SANsymphony functionality.

OS hardening reduces the attack surface of the Windows operating system by disabling unnecessary services, enforcing stricter security policies, and aligning system configurations with security best practices. These changes help improve system security, reduce vulnerability exposure, and support compliance with industry standards.

Hardening modifies operating system–level configurations such as user policies, access controls, and system settings. It does not modify SANsymphony services, storage configurations, or user data.

The hardening configurations are derived from industry-standard security recommendations, including Center for Internet Security (CIS) Benchmarks and Microsoft Security Baselines, and are adapted from the HardeningKitty framework to ensure compatibility with SANsymphony environments.

The DCS Hardening Tool (DcsHardeningTool.ps1) provides the ability to:

• Apply OS hardening configurations
• Audit existing system security settings
• Back up current configurations
• Restore previously saved configurations.

For more information about SANsymphony, refer to the DataCore SANsymphony documentation.

This section includes:

• Getting Started
• Performing OS Hardening Actions