CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

18.5.20 18.5.20.1

Windows Connect Now

(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (Scored) (L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled' (Scored) (L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet' (Scored) (L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 1 = Minimize simultaneous connections' (Scored) (L1) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (Scored) Windows ConnectionManager





18.5.20.2





18.5.21 18.5.21.1





18.5.21.2





18.5.21.3





18.5.22 18.5.23

Wireless Display

WLAN Service

18.5.23.1 18.5.23.2 18.5.23.2.1

WLAN Media Cost

WLAN Settings

(L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled' (Scored)





18.6 18.7

Printers

Start Menu and Taskbar

18.7.1 18.7.1.1

Notifications

(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled' (Scored)





18.8

System

18.8.1 18.8.2 18.8.3 18.8.3.1

Access-DeniedAssistance

App-V

Audit Process Creation

(L1) Ensure 'Include command line in process creation events' is set to 'Disabled' (Scored)





18.8.4 18.8.4.1

CredentialsDelegation

(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients' (Scored) (L1) Ensure 'Remote host allows delegation of non- exportable credentials' is set to 'Enabled' (Scored)





18.8.4.2





18.8.5

Device Guard

1254 | P a g e