There are also numerous free to download PowerShell scripts you can download and run.
Many of these also tighten security holes.
The beauty of this is when you patch, many times, ms invades the system and puts crap back. They're also infamous for reducing important security settings which safety-conscious admins might apply.