CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

18.9.19 18.9.20 18.9.21 18.9.22 18.9.23 18.9.24 18.9.25 18.9.26

Desktop WindowManager

Device and Driver Compatibility

Device Registration (formerly Workplace Join)

Digital Locker

Edge UI

EMET

Event Forwarding Event Log Service

18.9.26.1 18.9.26.1.1

Application

(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled' (Scored) (L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater' (Scored) (L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled' (Scored) (L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater' (Scored) (L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled' (Scored) (L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater' (Scored) (L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled' (Scored) Security Setup System





18.9.26.1.2





18.9.26.2 18.9.26.2.1





18.9.26.2.2





18.9.26.3 18.9.26.3.1





18.9.26.3.2





18.9.26.4 18.9.26.4.1





18.9.26.4.2

(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater' (Scored)  

18.9.27 18.9.28 18.9.29 18.9.30

Event Logging Event Viewer

Family Safety (formerlyParental Controls) File Explorer (formerlyWindows Explorer)

18.9.30.1 18.9.30.2

Previous Versions

(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled' (Scored)





1266 | P a g e