Ready to be downloaded are 2 Profiles, 1 for SRW and 1 for TK that the ThinScale team created as a best practice.
All of our profiles have been tested in a safe and clean environment where no "external" dependencies like domain GPOs, DLPs or other external software would have interfered with the policy.
Windows was up to date and at the time of the publication.
These profiles will have enabled by default all the security features including but not limited to AEP, DP, TS and more
TK Profile
SRW Profile