CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Date

Version Changes for this version

08-30-2019 1.6.0

ADD - New sections fromWindows 10 Release 1809 & Server 2019 Administrative Templates

Ticket #8156

08-30-2019 1.6.0

ADD - 18.8.26 (BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'

Ticket #8663

08-30-2019 1.6.0

ADD - 18.9.45 (L1) Ensure 'Allow Sideloading of extension' is set to 'Disabled'

Ticket #8664

08-30-2019 1.6.0

ADD - 18.9.77 (L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'

Ticket #8665

08-30-2019 1.6.0

ADD - 18.9.45 (L1) Ensure 'Prevent certificate error overrides' is set to 'Enabled'

Ticket #8720

08-30-2019 1.6.0

ADD - 18.9.78 (NG) Ensure 'Allow users to trust files that open in Windows Defender Application Guard' is set to 'Enabled: 0 (Do not allow users to manually trust files)' OR '2 (Allow users to manually trust after an antivirus check)'

Ticket #8727

08-30-2019 1.6.0

ADD - 18.9.102 (L1) Ensure 'Remove access to “Pause updates” feature' is set to 'Enabled'

Ticket #8734

08-30-2019 1.6.0

REMOVE - 18.3 (L1) Ensure 'Turn onWindows Defender protection against Potentially Unwanted Applications' is set to 'Enabled'

Ticket #8858

1307 | P a g e