My colleague Juergen published a guide to hardening Windows using CIS (or Microsoft benchmarks) through JumpCloud's Commands. It was extremely easy to do in three steps:
1) Download the benchmark (CSV) and PS Script from the Hardening Kitty repository on Git.
2) Create your policy in JumpCloud, along with a script, and upload the two files.
3) Run it either manually or on a schedule against a / multiple device groups - once you added a device to the group, it will get the cmd run in the next schedule.