CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Control

Set Correctly Yes No

18.9.84.2

(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled' but not 'Enabled: On' (Scored)





18.9.85 18.9.85.1

Windows Installer

(L1) Ensure 'Allow user control over installs' is set to 'Disabled' (Scored)





18.9.85.2

(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (Scored)  

18.9.85.3

(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled' (Scored)





18.9.86 18.9.86.1

Windows LogonOptions

(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled' (Scored)





18.9.87 18.9.88 18.9.89 18.9.90 18.9.91 18.9.92 18.9.93 18.9.94 18.9.95 18.9.95.1

Windows Mail

Windows Media Center

Windows Media Digital Rights Management

Windows Media Player Windows Meeting Space Windows Messenger Windows MobilityCenter Windows MovieMaker Windows PowerShell

(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled' (Scored)  

18.9.95.2

(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled' (Scored)





18.9.96 18.9.97

Windows ReliabilityAnalysis

Windows Remote Management (WinRM)

18.9.97.1 18.9.97.1.1

WinRM Client

(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Scored) (L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Scored) (L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Scored) (L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Scored) (L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Scored) WinRM Service





18.9.97.1.2





18.9.97.1.3





18.9.97.2 18.9.97.2.1





18.9.97.2.2





1273 | P a g e