I'd like to know if the Security Baselines (https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines) are backwards compatible? I.e. Can I put version 1909 of the security baseline on a 1903 server and it will just apply the settings which are valid?
Also, for a Domain Controller do I need only apply the policies named "Domain Controller" or do I also need to apply the "Member Server" policies?
Regarding the Privacy/Telemetry baseline (https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services) - is there a way to import the GPOs into Active Directory Group Policy to roll out to multiple machines rather than just applying them locally to each machine individually?
I've read all the documentation I can find on the Microsoft website but can't find any answers to these questions.
Best regards.
