CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.8.7 Device Installation

This section contains recommendations related to device installation.

This Group Policy section is provided by the Group Policy template DeviceInstallation.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates. 18.8.7.1 Device InstallationRestrictions

This section contains recommendations related to device installation restrictions.

This Group Policy section is provided by the Group Policy template DeviceInstallation.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates. 18.8.7.1.1 (BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled' (Scored)

ProfileApplicability:

 Level 1 (L1) + BitLocker (BL)

 Level 2 (L2) + BitLocker (BL)

 BitLocker (BL) - optional add-on for when BitLocker is deployed

634 | P a g e