CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.9.88Windows Media Center ......................................................................................................1146 18.9.89Windows Media Digital Rights Management ...........................................................1146 18.9.90Windows Media Player ......................................................................................................1146 18.9.91Windows Meeting Space....................................................................................................1147 18.9.92Windows Messenger ...........................................................................................................1147 18.9.93Windows Mobility Center .................................................................................................1147 18.9.94Windows Movie Maker.......................................................................................................1147 18.9.95Windows PowerShell ..........................................................................................................1148 18.9.95.1 (L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled' (Scored) ...........................................................................................................................1148 18.9.95.2 (L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled' (Scored) .................................................................................................................................................1150 18.9.96Windows Reliability Analysis..........................................................................................1151 18.9.97Windows Remote Management (WinRM) ................................................................1152 18.9.97.1.1 (L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Scored) ....................................................................................................................................................................1152 18.9.97.1.2 (L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Scored) ....................................................................................................................................................................1155 18.9.97.1.3 (L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Scored) .................................................................................................................................................1157 18.9.97.2.1 (L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Scored) ....................................................................................................................................................................1159 18.9.97.2.2 (L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Scored) ......................................................................................................................1161 18.9.97.2.3 (L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Scored) ....................................................................................................................................................................1163 18.9.97.2.4 (L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Scored) ............................................................................................................................1165 18.9.98Windows Remote Shell ......................................................................................................1167 18.9.98.1 (L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled' (Scored) ....................................................................................................................................................................1167 18.9.99Windows Security (formerly Windows Defender Security Center) .............1170

38 | P a g e