CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.8.21 GroupPolicy

This section contains recommendations for configuring group policy-related settings.

This Group Policy section is provided by the Group Policy template GroupPolicy.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates. 18.8.21.1 Loggingand tracing

This section is intentionally blank and exists to ensure the structure of Windows benchmarks is consistent.

This Group Policy section is provided by the Group Policy template GroupPolicyPreferences.admx/adml that is included with the Microsoft Windows Server 2008 (non-R2) Administrative Templates (or newer). 18.8.21.2 (L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE' (Scored)

ProfileApplicability:

 Level 1 (L1) - Corporate/Enterprise Environment (general use)

Description:

The "Do not apply during periodic background processing" option prevents the system fromupdating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.

The recommended state for this setting is: Enabled: FALSE (unchecked).

Rationale:

Setting this option to false (unchecked) will ensure that domain policy changes take effect more quickly, as compared to waiting until the next user logon or system restart.

658 | P a g e