CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

18.9.30.3

(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled' (Scored) (L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled' (Scored)





18.9.30.4





18.9.31 18.9.32 18.9.33 18.9.34 18.9.35 18.9.35.1 18.9.36 18.9.37 18.9.38 18.9.39 18.9.39.1 18.9.39.2 18.9.40 18.9.41 18.9.42 18.9.43 18.9.43.1

File History

Find My Device Game Explorer Handwriting

HomeGroup

(L1) Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled' (Scored)





Import Video

Internet Explorer

Internet Information Services

Location and Sensors

Windows Location Provider





(L2) Ensure 'Turn off location' is set to 'Enabled' (Scored)

Maintenance Scheduler

Maps MDM

Messaging

(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled' (Scored)





18.9.44 18.9.44.1

Microsoftaccount

(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' (Scored)





18.9.45 18.9.45.1

MicrosoftEdge

(L2) Ensure 'Allow Address bar drop-down list suggestions' is set to 'Disabled' (Scored)





(L2) Ensure 'Allow Adobe Flash' is set to 'Disabled' (Scored)  

18.9.45.2 18.9.45.3

(L2) Ensure 'Allow InPrivate Browsing' is set to 'Disabled' (Scored) (L1) Ensure 'Allow Sideloading of extension' is set to 'Disabled' (Scored)





18.9.45.4





18.9.45.5

(L1) Ensure 'Configure cookies' is set to 'Enabled: Block only 3rd-party cookies' or higher (Scored)  

18.9.45.6

(L1) Ensure 'Configure Password Manager' is set to 'Disabled' (Scored) (L2) Ensure 'Configure Pop-up Blocker' is set to 'Enabled' (Scored)





18.9.45.7





1267 | P a g e