CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Remediation:

To establish the recommended configuration via GP, set the following UI path to Enabled:

Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MicrosoftEdge.admx/adml that is included with the Microsoft Windows 10 RTM (Release 1507) Administrative Templates (or newer). Note #2: In the Microsoft Windows 10 RTM (Release 1507) Administrative Templates, this setting was initially named Allows you to configure SmartScreen . In the Microsoft Windows 10 Release 1511 Administrative Templates, it was renamed to Turn off the SmartScreen Filter . In the Microsoft Windows 10 Release 1607 & Server 2016 Administrative Templates, it was renamed (again) to Configure SmartScreen Filter . Finally, it was given its current name of Configure Windows Defender SmartScreen starting with the Windows 10 Release 1703 Administrative Templates.

Impact:

None - this is the default behavior.

Default Value:

Enabled. (SmartScreen Filter is turned on.)

CIS Controls:

Version 6

2 Inventory of Authorized and Unauthorized Software Inventory of Authorized and Unauthorized Software

Version 7

8.1 Utilize Centrally Managed Anti-malware Software Utilize centrally managed anti-malware software to continuously monitor and defend each of the organization's workstations and servers.

1125 | P a g e