CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.9.78.7 (NG) Ensure 'Turn onWindows Defender Application Guard in Enterprise Mode' is set to 'Enabled: 1' (Scored) ................................................................1118 18.9.79Windows Defender Exploit Guard ................................................................................1120 18.9.80Windows Defender SmartScreen ..................................................................................1121 18.9.80.1.1 (L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (Scored) ...................................................................1121 18.9.80.2.1 (L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled' (Scored) ............................................................................................................................1124 18.9.80.2.2 (L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled' (Scored) .....................................................................1126 18.9.80.2.3 (L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled' (Scored) ....................................................................1128 18.9.81Windows Error Reporting ................................................................................................1130 18.9.82Windows Game Recording and Broadcasting .........................................................1131 18.9.82.1 (L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled' (Scored) ...........................................................................1131 18.9.83Windows Hello for Business (formerly Microsoft Passport for Work) ......1132 18.9.84Windows Ink Workspace ..................................................................................................1133 18.9.84.1 (L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled' (Scored) ...........................................................................................................................1133 18.9.84.2 (L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled' but not 'Enabled: On' (Scored) ...........1135 18.9.85Windows Installer ................................................................................................................1137 18.9.85.1 (L1) Ensure 'Allow user control over installs' is set to 'Disabled' (Scored) .................................................................................................................................................1137 18.9.85.2 (L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (Scored) .................................................................................................................................................1140 18.9.85.3 (L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled' (Scored) ......................................................................1142 18.9.86Windows Logon Options ...................................................................................................1144 18.9.86.1 (L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled' (Scored) .........................................................................................1144 18.9.87Windows Mail .........................................................................................................................1146

37 | P a g e