(BL) Ensure ‘Allow access to BitLocker-protected fixed data drives from earlier versions of Windows’ is set to ‘Disabled’
Details This policy setting configures whether or not fixed data drives formatted with the FAT file system can be unlocked...
- Home
- Security Hardening
- CIS Microsoft Windows 10 Enterprise Release 1607 V1.2.0 L1 Bitlocker
CIS Microsoft Windows 10 Enterprise Release 1607 V1.2.0 L1 Bitlocker
(BL) Ensure ‘Allow access to BitLocker-protected removable data drives from earlier versions of Windows’ is set to ‘Disabled’
Details This policy setting configures whether or not removable data drives formatted with the FAT file system can be unlocked...(BL) Ensure ‘Allow data recovery agent’ is set to ‘Enabled: False’
Details 18.9.11.2.4 (BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent’ is set to...(BL) Ensure ‘Allow data recovery agent’ is set to ‘Enabled: True’
Details 18.9.11.3.3 (BL) Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent’ is set to ‘Enabled:...(BL) Ensure ‘Allow enhanced PINs for startup’ is set to ‘Enabled’
Details This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker. Enhanced startup...(BL) Ensure ‘Allow Secure Boot for integrity validation’ is set to ‘Enabled’
Details This policy setting allows you to configure whether Secure Boot will be allowed as the platform integrity provider for...(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Key’ is set to ‘Enabled: Allow 256-bit’
Details 18.9.11.1.5 (BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Key’ is set to ‘Enabled: Allow 256-bit...(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...