CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

18.8.37.1

(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (Scored) (L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (Scored)





18.8.37.2





18.8.38 18.8.39 18.8.40 18.8.41 18.8.42 18.8.43 18.8.44 18.8.45 18.8.46 18.8.47

Removable StorageAccess

Scripts

Server Manager

Service Control Manager Settings

Shutdown

Shutdown Options Storage Health Storage Sense System Restore

Troubleshooting andDiagnostics ApplicationCompatibility Diagnostics

18.8.47.1 18.8.47.2 18.8.47.3 18.8.47.4 18.8.47.5 18.8.47.5.1 18.8.47.6 18.8.47.7 18.8.47.8 18.8.47.9 18.8.47.10 18.8.47.11 18.8.47.11.1 18.8.48 18.8.49 18.8.49.1 18.8.50 18.8.51 18.8.52 18.8.52.1 18.8.52.1.1

Corrupted FileRecovery

DiskDiagnostic

Fault TolerantHeap

MicrosoftSupport DiagnosticTool

(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled' (Scored)





MSI Corrupted FileRecovery

ScheduledMaintenance Scripted Diagnostics

Windows BootPerformance Diagnostics Windows Memory Leak Diagnosis

Windows Performance PerfTrack

(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled' (Scored)





Trusted PlatformModule Services

User Profiles

(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled' (Scored)





Windows File Protection

Windows HotStart

Windows Time Service

Time Providers

(L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled' (Scored)





1259 | P a g e