CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BL + NG

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BL + NG

Updated: 8/3/2022

Authority: Operating Systems and Applications

Plugin: Windows

Revision: 1.5

Estimated Item Count: 427

Audit Changelog

 
Revision 1.5

Aug 3, 2022

Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Revision 1.4

Jun 13, 2022

Functional Update
  • 18.4.13 Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'
  • 2.3.10.7 Ensure 'Network access: Remotely accessible registry paths' is configured
  • 2.3.9.1 Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'
  • 2.3.9.5 Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher
Revision 1.3

Apr 25, 2022

Functional Update
  • 17.5.3 Ensure 'Audit Logoff' is set to include 'Success'
Revision 1.2

Mar 29, 2022

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.1

Oct 29, 2021

Functional Update
  • 19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'
  • 19.1.3.2 Ensure 'Password protect the screen saver' is set to 'Enabled'
  • 19.1.3.3 Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'
  • 19.5.1.1 Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'
  • 19.7.28.1 Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'
  • 19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'
  • 19.7.4.2 Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'
  • 19.7.43.1 Ensure 'Always install with elevated privileges' is set to 'Disabled'
  • 19.7.8.1 Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'
  • 19.7.8.2 Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'
Miscellaneous
  • References updated.