Windows 2025 CIS Hardening

I need my standalone Windows Server 2025 brought up to full CIS Benchmarks Level 1 compliance. After the changes are applied, I also require a line-by-line report that maps each CIS control to the exact setting on the machine, clearly indicating pass/fail status and any remediations performed. Scope • Harden every item in the official CIS Windows Server 2025 Benchmark, Level 1 profile. • Work directly on a single, isolated server (no domain dependencies). • Use standard, scriptable methods—Group Policy, registry edits, PowerShell, or CIS-CAT/SCAP content—so the steps are reproducible. Deliverables 1. Hardened server meeting Level 1. 2. Detailed compliance report in CSV or XLSX showing: – CIS control ID and description – Current setting after hardening – Pass/Fail result – Notes on any deviation or justified exception 3. All scripts or configuration files used, with brief usage instructions. Acceptance Criteria • CIS-CAT or equivalent scan shows 100 % pass on Level 1 items, or documented exceptions signed off by me. • Server remains fully functional (RDP, core roles and installed software unaffected). Please estimate the time required and outline the tools you prefer so I can schedule access accordingly.