CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.8.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' (Scored) ............................... 647 18.8.7.1.6 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True' (checked) (Scored) ........................................................................ 650 18.8.8 Device Redirection .................................................................................................................... 652 18.8.9 Disk NV Cache.............................................................................................................................. 653 18.8.10 Disk Quotas ................................................................................................................................ 653 18.8.11 Display .......................................................................................................................................... 653 18.8.12 Distributed COM ...................................................................................................................... 653 18.8.13 Driver Installation .................................................................................................................. 653 18.8.14 Early Launch Antimalware................................................................................................. 654 18.8.14.1 (L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical' (Scored) ..................................................................... 654 18.8.15 Enhanced Storage Access .................................................................................................... 656 18.8.16 File Classification Infrastructure ..................................................................................... 656 18.8.17 File Share Shadow Copy Agent ......................................................................................... 657 18.8.18 File Share Shadow Copy Provider................................................................................... 657 18.8.19 Filesystem (formerly NTFS Filesystem) ...................................................................... 657 18.8.20 Folder Redirection.................................................................................................................. 657 18.8.21 Group Policy .............................................................................................................................. 658 18.8.21.2 (L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE' (Scored) ...................... 658 18.8.21.3 (L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE' (Scored) .......... 661 18.8.21.4 (L1) Ensure 'Continue experiences on this device' is set to 'Disabled' (Scored) ................................................................................................................................................... 663 18.8.21.5 (L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled' (Scored) ............................................................................................................................. 665 18.8.22 Internet Communication Management ........................................................................ 667 18.8.22.1.1 (L2) Ensure 'Turn off access to the Store' is set to 'Enabled' (Scored) ...................................................................................................................................................................... 667

21 | P a g e