CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

5.40 (L1) Ensure 'WorldWide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed' (Scored) ........................................................................................ 374 5.41 (L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled' (Scored) ............................................................................................................................. 376 5.42 (L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled' (Scored) ................................................................................................................................................... 378 5.43 (L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled' (Scored) ................................................................................................................................................... 380 5.44 (L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled' (Scored) ............................................................................................................................. 382 6 Registry ............................................................................................................................................................... 383 7 File System ........................................................................................................................................................ 383 8Wired Network (IEEE 802.3) Policies.................................................................................................. 383 9Windows Firewall with Advanced Security ...................................................................................... 384 9.1 Domain Profile........................................................................................................................................ 384 9.1.1 (L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)' (Scored) .............................................................................................................. 384 9.1.2 (L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)' (Scored) ................................................................................................................ 386 9.1.3 (L1) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)' (Scored)................................................................................................................ 388 9.1.4 (L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No' (Scored) ............................................................................................................................. 390 9.1.5 (L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log' (Scored) .................. 392 9.1.6 (L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater' (Scored) ................................................................................................... 394 9.1.7 (L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes' (Scored) ........................................................................................................................... 396 9.1.8 (L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes' (Scored) ........................................................................................... 398 9.2 Private Profile ......................................................................................................................................... 400 9.2.1 (L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)' (Scored) .............................................................................................................. 400

12 | P a g e