We used to make them ourselves. Unfortunately to lock Windows down enough to make us somewhat happy with the security (they were locked down hard) caused a lot of support calls when people couldn't do various things on their machines. We had several baselines for several computer roles with different things locked down, but it still caused problems.
We didn't really have that problem with the Sun, HP/UX and Linux systems.