(N.B. This was previously posted in the Windows Server 2019 General forum but I couldn't see a way to move it. I think it's more appropriate to ask here.)
I'd like to know if the Security Baselines (https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines) are backwards compatible? I.e. Can I put version 1903 of the security baseline on an 1803 or 1809 server and it will just apply the settings which are valid?
Also, regarding the Privacy/Telemetry baseline (https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services) - is there a way to import the GPOs into Active Directory Group Policy to roll out to multiple machines? You have GPO backup files in the Security Baselines but not in the privacy/telemetry baseline. Why is this? Do I need to configure each setting manually?
Also, for both the Security and Privacy baselines - how do I know which policies apply to machines and which apply to users? Do I need to worry about this?
I've read all the documentation I can find on the Microsoft website but can't find any answers to these questions.
Best regards.