CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Date

Version Changes for this version

03-06-2019 1.5.0

ADD - 18.9.68 (L1) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'

Ticket #7593

03-06-2019 1.5.0

ADD - 18.9.77 (NG) Ensure 'Allow files to download and save to the host operating system from Windows Defender Application Guard' is set to 'Disabled'

Ticket #7594

03-06-2019 1.5.0

ADD - 5 (L2) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'

Ticket #7595

03-06-2019 1.5.0

RENAME - 5 (L2) 'Windows Store Install Service (InstallService)' TO 'Microsoft Store Install Service (InstallService)'

Ticket #7596

03-06-2019 1.5.0

ADD - 18.9.58.3.9 (L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'

Ticket #7610

03-06-2019 1.5.0

ADD - 18.9.58.3.9 (L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'

Ticket #7611

03-06-2019 1.5.0

ADD - 5 (L1) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'

Ticket #7670

03-06-2019 1.5.0

UPDATE - 2.3.9 (L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s), but not 0' to allow 0

Ticket #7969

1304 | P a g e