CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

18.9.11.3.16

(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True' (Scored) (BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled' (Scored)





18.9.11.3.17





18.9.11.3.18

(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False' (Scored)  

18.9.11.4

(BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled' (Scored)





18.9.12 18.9.12.1

Camera

(L2) Ensure 'Allow Use of Camera' is set to 'Disabled' (Scored)





18.9.13 18.9.13.1

CloudContent

(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled' (Scored)  

18.9.14 18.9.14.1

Connect

(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always' (Scored)





18.9.15 18.9.15.1

Credential User Interface

(L1) Ensure 'Donot display the password reveal button' is set to 'Enabled' (Scored) (L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled' (Scored) (L1) Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled' (Scored)





18.9.15.2





18.9.15.3





18.9.16 18.9.16.1

Data Collectionand Preview Builds

(L1) Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only]' or 'Enabled: 1 - Basic' (Scored)  

18.9.16.2

(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage' (Scored) (L1) Ensure 'Donot show feedback notifications' is set to 'Enabled' (Scored) (L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled' (Scored)





18.9.16.3





18.9.16.4





18.9.17 18.9.17.1

DeliveryOptimization

(L1) Ensure 'Download Mode' is NOT set to 'Enabled: Internet' (Scored)





18.9.18

Desktop Gadgets

1265 | P a g e