CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Date

Version Changes for this version

10-30-2017 1.3.0

UPDATE - Rename and Reorder '18.7 - SCM: Pass the Hash Mitigations' to '18.3 - MS Security Guide'

Ticket #5416

10-30-2017 1.3.0

ADD - 18.9.11 (BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'

Ticket #5438

10-30-2017 1.3.0

ADD - 18.9.16 (L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'

Ticket #5440

10-30-2017 1.3.0

ADD - 18.9.42 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'

Ticket #5441

10-30-2017 1.3.0

ADD - 18.9.43 (L2) Ensure 'Allow Address bar drop-down list suggestions' is set to 'Disabled'

Ticket #5442

10-30-2017 1.3.0

ADD - 19.7.7 (L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'

Ticket #5443

10-30-2017 1.3.0

ADD - 5 (L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'

Ticket #5444

10-30-2017 1.3.0

ADD - 5 (L1) Ensure 'Xbox Game Monitoring (xbgm)' is set to 'Disabled'

Ticket #5445

1294 | P a g e