CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

18.9.78.2

(NG) Ensure 'Allow camera and microphone access in Windows Defender Application Guard' is set to 'Disabled' (Scored) (NG) Ensure 'Allow data persistence for Windows Defender Application Guard' is set to 'Disabled' (Scored) (NG) Ensure 'Allow files to download and save to the host operating system from Windows Defender Application Guard' is set to 'Disabled' (Scored)





18.9.78.3





18.9.78.4





18.9.78.5

(NG) Ensure 'Allow users to trust files that open inWindows Defender Application Guard' is set to 'Enabled: 0 (Do not allow users to manually trust files)' OR '2 (Allow users to manually trust after an antivirus check)' (Scored)  

18.9.78.6

(NG) Ensure 'Configure Windows Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host' (Scored)





18.9.78.7

(NG) Ensure 'Turn on Windows Defender Application Guard in Enterprise Mode' is set to 'Enabled: 1' (Scored)  

18.9.79 18.9.80

Windows Defender Exploit Guard Windows Defender SmartScreen

18.9.80.1 18.9.80.1.1

Explorer

(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (Scored)





18.9.80.2 18.9.80.2.1

MicrosoftEdge

(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled' (Scored) (L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled' (Scored) (L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled' (Scored)





18.9.80.2.2





18.9.80.2.3





18.9.81

Windows ErrorReporting

18.9.81.1 18.9.81.2 18.9.82 18.9.82.1

Advanced ErrorReporting Settings

Consent

Windows Game Recording and Broadcasting

(L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled' (Scored) Windows Hello forBusiness (formerlyMicrosoftPassport for Work) 



18.9.83

18.9.84 18.9.84.1

Windows Ink Workspace

(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled' (Scored)





1272 | P a g e