You need a configuration baseline for all of your systems. Mention of STIGs can be helpful. CIS tells you to turn off LLR. You also have least functionality controls. 3.1.5 Employ the principle of least privilege, including for specific security functions and privileged accounts.