CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Remediation:

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Defender Antivirus\Turn off Windows Defender AntiVirus

Note: This Group Policy path is provided by the Group Policy template WindowsDefender.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates. Note #2: In older Microsoft Windows Administrative Templates, this setting was initially named Turn off Windows Defender , but it was renamed starting with the Windows 10 Release 1703 Administrative Templates.

Impact:

None - this is the default behavior.

Default Value:

Disabled. (Windows Defender Antivirus runs and computers are scanned for malware and other potentially unwanted software.)

References:

1. CCE-33478-9

1101 | P a g e