A systems administrator is preparing a newly provisioned Windows server for production. She disables unused services, removes default sample accounts, closes unnecessary ports, and applies a documented set of secure configuration settings before the server is connected to the network. What security operations practice is she performing?