CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.5.14.1 (L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares' (Scored) ................................................................................................................................... 589 18.5.15 Offline Files ................................................................................................................................ 592 18.5.16 QoS Packet Scheduler............................................................................................................ 592 18.5.17 SNMP ............................................................................................................................................. 592 18.5.18 SSL Configuration Settings ................................................................................................. 592 18.5.19 TCPIP Settings .......................................................................................................................... 593 18.5.19.2.1 (L2) Disable IPv6(Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)') (Scored)............................................................................................................ 594 18.5.20Windows Connect Now ........................................................................................................ 597 18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (Scored) ............................................................................................... 597 18.5.20.2 (L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled' (Scored).................................................................................................................. 599 18.5.21Windows Connection Manager ........................................................................................ 601 18.5.21.1 (L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet' (Scored) .............................................................................................................................. 601 18.5.21.2 (L1) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (Scored) ............ 604 18.5.22Wireless Display ...................................................................................................................... 606 18.5.23WLAN Service ........................................................................................................................... 606 18.5.23.2.1 (L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled' (Scored) ........................................................................................ 607 18.6 Printers.................................................................................................................................................... 609 18.7 Start Menu and Taskbar .................................................................................................................. 610 18.7.1 Notifications ................................................................................................................................. 610 18.7.1.1 (L2) Ensure 'Turn off notifications network usage' is set to 'Enabled' (Scored) ................................................................................................................................................... 610 18.8 System...................................................................................................................................................... 612 18.8.1 Access-Denied Assistance...................................................................................................... 612

19 | P a g e