I will be adding to this as time goes on to include basic usage instructions and more tools or methods, but these are a few links to help with setting up and locking down Server 2012/16.
Microsoft Compliance Manager – Technet – Application
NIST Server 2016 Security checklist (docs and more)
NIST Server 2012 Security Checklist (docs and more)
Microsoft Virtual Academy – AD and Server 12/16 videos
LOG-MD – (do logging better) – Tool
Active Directory docs from adSecurity