CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Impact:

Group Policies will be reapplied even if they have not been changed, which could have a slight impact on performance.

Default Value:

Disabled. (Group policies are not reapplied if they have not been changed.)

References:

1. CCE-35384-7

CIS Controls:

Version 6

3.7 Deploy System Configuration Management Tools (i.e. Remediation Tools) Deploy system configuration management tools, such as Active Directory Group Policy Objects for Microsoft Windows systems or Puppet for UNIX systems that will automatically enforce and redeploy configuration settings to systems at regularly scheduled intervals. They should be capable of triggering redeployment of configuration settings on a scheduled, manual, or event-driven basis. 5.4 Deploy System Configuration Management Tools Deploy system configuration management tools that will automatically enforce and redeploy configuration settings to systems at regularly scheduled intervals. 5.5 Implement Automated Configuration Monitoring Systems Utilize a Security Content Automation Protocol (SCAP) compliant configuration monitoring system to verify all security configuration elements, catalog approved exceptions, and alert when unauthorized changes occur. Version 7

662 | P a g e