This project is specifically made for brand new directories and ease their creation with all security rules in place:
Remove legacy protocols/setup used by Microsoft for compliance purposes
Enforce the use of modern alogrithm for cyphering and authentication
Enforce LDAPS when a client requests a connection to your DC
Enforce the default password strategy to match with modern expectation
Add other Domain Controllers to your secured domain