We've completed securing our hosts using the hardening guide and are now moving on to the virtual machine security settings. Is there a way to setup the VMX config changes through a host profile or another easily automated system? We would like to get all of the "easy win" settings configured via profile so both our existing and new virtual machines are automatically configured.
I know I can use the Get-VM command to set it across all current systems but we would like it to to be more organized than that if possible.
There is no way currently to encode security bits into Host Profiles. However, you could fire off a power shell script to make all those changes. I wrote one and it is pretty straight forward.
Edward L. Haletky