Security settings

Common to all nodes (bastion server, active node, standby node)

Configure Windows Defender Firewall appropriately for your environment and the applications you are using. In this guide, it is set to OFF as shown below.

• Select Server Manager > Local Server > Windows Defender Firewall > domain and disable all private and public networks.

The above settings can also be configured by running the following script in PowerShell for administrators.

• Check
  

  PS > Get-NetFirewallProfile | select Name, Enabled
  

• Disable
  

  PS > Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled false
  

Cluster node (active node, standby node)

Set IE enhanced security configuration appropriately. In this guide, it is set to off as shown below.

• Select Server Manager > Local Server and turn off IE enhanced security configuration

The above settings can also be configured by running the following script in PowerShell for administrators.

• Set registry key path to variable
  
  PS > $AdminPath = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}"
  PS > $UserPath = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}"
  
• Disable
  

  PS > Set-ItemProperty -Path $AdminPath -Name "IsInstalled" -Value 0
  PS > Set-ItemProperty -Path $UserPath -Name "IsInstalled" -Value 0