CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Date

Version Changes for this version

12-20-2019 1.7.0

ADD - New sections fromWindows 10 Release 1903 Administrative Templates

Ticket #9564

12-20-2019 1.7.0

RENAME - 18.9.86 (L1) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled' TO Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'

Ticket #9565

12-20-2019 1.7.0

MOVE & RENAME - 18.5.4 (L1) Set 'NetBIOS node type' TO 18.3 (L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'

Ticket #9566

12-20-2019 1.7.0

ADD - 18.9.5 (L1) Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'

Ticket #9571

12-20-2019 1.7.0

ADD - 18.9.15 (L1) Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'

Ticket #9572

12-20-2019 1.7.0

REMOVE - 18.9.11 (BL) Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled: XTS-AES 256-bit'

Ticket #9573

12-20-2019 1.7.0

UPDATE - 18.5.21.1 (L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled' TO 'Enabled: 3 = Prevent Wi-Fi when on Ethernet' (Scored)

Ticket #9684

1310 | P a g e