WN12-00-000007 - Windows 2012/2012 R2 password for the built-in Administrator account must be changed at least annually or when a member of the administrative team leaves the organization.
WN12-00-000210 - PowerShell script block logging must be enabled on Windows 2012/2012 R2 - Patch
WN12-AC-000001 - Windows 2012 account lockout duration must be configured to 15 minutes or greater.
