CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

18.9.45.8

(L2) Ensure 'Configure search suggestions in Address bar' is set to 'Disabled' (Scored)   (L1) Ensure 'Configure the Adobe Flash Click-to-Run setting' is set to 'Enabled' (Scored)  

18.9.45.9

18.9.45.10

(L2) Ensure 'Prevent access to the about:flags page in Microsoft Edge' is set to 'Enabled' (Scored) (L1) Ensure 'Prevent certificate error overrides' is set to 'Enabled' (Scored) (L2) Ensure 'Prevent using Localhost IP address for WebRTC' is set to 'Enabled' (Scored)





18.9.45.11





18.9.45.12





18.9.46 18.9.47 18.9.48 18.9.49 18.9.50 18.9.51 18.9.52 18.9.52.1 18.9.53 18.9.54 18.9.55 18.9.56 18.9.57 18.9.58 18.9.58.1

MicrosoftFIDO Authentication

MicrosoftSecondaryAuthentication Factor MicrosoftUser Experience Virtualization

NetMeeting

Network Access Protection

Network Projector

OneDrive (formerly SkyDrive)

(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled' (Scored)





Online Assistance

OOBE

Password Synchronization Portable Operating System

Presentation Settings

Push To Install

(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled' (Scored) Remote DesktopServices (formerlyTerminal Services)





18.9.59

18.9.59.1 18.9.59.2 18.9.59.2.1 18.9.59.2.2 18.9.59.3 18.9.59.3.1 18.9.59.3.2 18.9.59.3.2.1

RD Licensing (formerlyTS Licensing) Remote DesktopConnectionClient RemoteFX USB DeviceRedirection

(L1) Ensure 'Donot allow passwords to be saved' is set to 'Enabled' (Scored) Remote DesktopSessionHost (formerly Terminal Server)





ApplicationCompatibility

Connections

(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled' (Scored)





18.9.59.3.3

Device and ResourceRedirection

1268 | P a g e