- Checking Library and System Folders for World Writable Files
- Create User Accounts
- Demote User Accounts to Standard
- Don't allow the Guest user to log in
- Monitor encryption status of Time Machine volumes
- Report user accounts with FileVault Recovery Keys escrowed to iCloud
- Restart after X Number of Days of Continuous Uptime
- Setting umask for All Users