CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

2.3.17.6

(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled' (Scored)  

2.3.17.7

(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled' (Scored) (L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled' (Scored)





2.3.17.8





3 4 5

Event Log

Restricted Groups System Services

5.1

(L2) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled' (Scored)





5.2

(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled' (Scored) (L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed' (Scored) (L2) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled' (Scored) (L2) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled' (Scored) (L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed' (Scored) (L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled' or 'Not Installed' (Scored) (L1) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled' (Scored) (L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled' (Scored) (L1) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed' (Scored) (L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed' (Scored) (L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled' (Scored) (L2) Ensure 'Microsoft Store Install Service (InstallService)' is set to 'Disabled' (Scored) (L1) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed' (Scored) (L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled' (Scored)





5.3





5.4





5.5





5.6





5.7





5.8





5.9





5.10





5.11





5.12





5.13





5.14





5.15





1245 | P a g e