CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Default Value:

Disabled. (The Logon UI will not enumerate local users on domain-joined computers.)

References:

1. CCE-34838-3

CIS Controls:

Version 6

16.9 Configure Account Access Centrally Configure access for all accounts through a centralized point of authentication, for example Active Directory or LDAP. Configure network and security devices for centralized authentication as well.

Version 7

16.2 Configure Centralized Point of Authentication Configure access for all accounts through as few centralized points of authentication as possible, including network, security, and cloud systems.

709 | P a g e