Free Checklist for Auditing Windows Servers

Below sample checklist for auditing windows servers that can be used to securing your system or just want to comply with some regulation such as SOX or HIPAA:

Obtain the system information and service pack version, and compare with policy requirements.
Determine if the server is running the company-provisioned firewall.
Determine if the server is running a company-provisioned antivirus program.
Ensure that all approved patches are installed per your server management policy.
Determine if the server is running a company-provisioned patch-management solution.
Review and verify startup information.
Determine what services are enabled on the system and validate their necessity with the system administrator. For necessary services, review and evaluate procedures for assessing vulnerabilities associated with those services and keeping them patched.