| 4.4.3 Ensure 'Configure SMB v1 server' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 4.4.5 Ensure 'WDigest Authentication' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.5.3 Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.5.9 Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 4.6.11.1 Ensure 'Hardened UNC Paths' is set to 'Enabled, with 'Require Mutual Authentication', 'Require Integrity', and 'Require Privacy' set for all NETLOGON and SYSVOL shares' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 4.6.18.1 Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 4.7.3 Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 4.10.4.1 Ensure 'Include command line in process creation events' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 4.10.26.5 Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 4.10.29.5.1 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL |
| 4.10.44.1.2 Ensure 'Enable Windows NTP Server' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 4.11.5.1 Ensure 'Do not preserve zone information in file attachments (User)' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 4.11.6.1 Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | MEDIA PROTECTION |
| 4.11.6.3 Ensure 'Turn off Autoplay' is set to 'Enabled: All drives' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | MEDIA PROTECTION |
| 4.11.8.1 Ensure 'Do not display the password reveal button' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 4.11.15.2.1 Ensure 'Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 4.11.15.3.1 Ensure 'Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 4.11.15.4.1 Ensure 'Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 4.11.18.3 Ensure 'Turn off heap termination on corruption' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 4.11.27.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL |
| 4.11.30.1 Ensure 'Prevent users from sharing files within their profile. (User)' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL |
| 4.11.35.4.11.1 Ensure 'Do not delete temp folders upon exit' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY |
| 4.11.54.1.1 Ensure 'Allow Basic authentication' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.11.54.1.2 Ensure 'Allow unencrypted traffic' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.11.54.1.3 Ensure 'Disallow Digest authentication' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.11.54.2.1 Ensure 'Allow Basic authentication' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.11.54.2.4 Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.9 Ensure 'Audit Changes to Audit Policy' is set to include 'Success' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 6.12 Ensure 'Audit Security Group Management' is set to include 'Success' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 6.13 Ensure 'Audit Security System Extension' is set to include 'Success' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 6.15 Ensure 'Audit User Account Management' is set to 'Success and Failure' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 6.27 Ensure 'System Audit System Integrity' is set to 'Success and Failure' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 49.6 Ensure 'Interactive logon: Do not display last signed-in' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 49.9 Configure 'Interactive logon: Message text for users attempting to log on' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL |
| 49.11 Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL |
| 49.17 Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL |
| 49.27 Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL |
| 49.31 Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL |
| 55.1 Ensure 'Allow apps from the Microsoft app store to auto update' is set to 'Allowed' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 55.2 Ensure 'Allow Game DVR' is set to 'Block' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 82.3 Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 82.34 Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 90.3 Ensure 'Act As Part Of The Operating System' is set to 'No One' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 90.8 Ensure 'Create Page File' is set to 'Administrators' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 90.14 Ensure 'Deny Local Log On' to include 'Guests' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 90.24 Ensure 'Modify Firmware Environment' is set to 'Administrators' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 90.27 Ensure 'Remote Shutdown' is set to 'Administrators' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 90.29 Ensure 'Take Ownership' is set to 'Administrators' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 98.2 Ensure 'Minimum PIN Length' is set to '6 more character(s)' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 99.2 Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: but the user can't access it above the lock screen' OR 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
