CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.9.102 WindowsUpdate

This section contains recommendations related to Windows Update.

This Group Policy section is provided by the Group Policy template WindowsUpdate.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates. 18.9.102.1WindowsUpdate for Business (formerly Defer WindowsUpdates) This Group Policy section is provided by the Group Policy template WindowsUpdate.admx/adml that is included with the Microsoft Windows 10 Release 1607 & Server 2016 Administrative Templates (or newer). Note: This section was initially named Defer Windows Updates but was renamed by Microsoft to Windows Update for Business starting with the Microsoft Windows 10 Release 1709 Administrative Templates. 18.9.102.1.1 (L1) Ensure 'Manage previewbuilds' is set to 'Enabled: Disable previewbuilds' (Scored) This section contains recommendations related to Windows Update for Business.

ProfileApplicability:

 Level 1 (L1) - Corporate/Enterprise Environment (general use)

Description:

This policy setting determines whether users can access the Windows Insider Program controls in Settings -> Update and Security. These controls enable users to make their devices available for downloading and installing preview (beta) builds of Windows software.

The recommended state for this setting is: Enabled: Disable preview builds .

1174 | P a g e