CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Date

Version Changes for this version

08-30-2019 1.6.0

REMOVE - 18.9.11.2 (BL) Ensure 'Require additional authentication at startup: Configure TPM startup key and PIN:' is set to 'Enabled: Do not allow startup key and PIN with TPM'

Ticket #8906

08-30-2019 1.6.0

ADD - 18.8.31 (L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'

Ticket #8907

08-30-2019 1.6.0

ADD - 18.9.78 (NG) Ensure 'Allow camera and microphone access in Windows Defender Application Guard' is set to 'Disabled'

Ticket #8908

08-30-2019 1.6.0

REMOVE - 5 (L1) Ensure Xbox Game Monitoring (xbgm)' is set to 'Disabled'

Ticket #8978

08-30-2019 1.6.0

RENAME - 18.1.2 (L1) 'Allow input personalization' TO 'Allow users to enable online speech recognition services'

Ticket #8979

08-30-2019 1.6.0

UPDATE - 18.9.14 (L1) Ensure 'Require pin for pairing' is set to 'Enabled' TO 'Enabled: First Time' OR 'Enabled: Always'

Ticket #8981

08-30-2019 1.6.0

UPDATE - 18.9.78 (NG) Ensure 'Turn on Windows Defender Application Guard in Enterprise Mode' is set to 'Enabled' TO 'Enabled: 1'

Ticket #9000

11-22-2019 1.6.1

REMOVE - 17.2 (L1) Ensure 'Audit Computer Account Management' is set to 'Success and Failure'

Ticket #9085

1309 | P a g e