Ensure ‘Allow access to BitLocker-protected fixed data drives from earlier versions of Windows’ is set to ‘Disabled’
Details This policy setting configures whether or not fixed data drives formatted with the FAT file system can be unlocked...
- Home
- Security Hardening
- CIS Microsoft Windows 10 Enterprise Release 1709 V1.4.0 Bitlocker
CIS Microsoft Windows 10 Enterprise Release 1709 V1.4.0 Bitlocker
Ensure ‘Allow access to BitLocker-protected removable data drives from earlier versions of Windows’ is set to ‘Disabled’
Details This policy setting configures whether or not removable data drives formatted with the FAT file system can be unlocked...Ensure ‘Allow data recovery agent’ is set to ‘Enabled: False’
Details 18.9.11.2.4 Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent’ is set to ‘Enabled:...Ensure ‘Allow data recovery agent’ is set to ‘Enabled: True’
Details 18.9.11.3.3 Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: True’...Ensure ‘Allow enhanced PINs for startup’ is set to ‘Enabled’
Details This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker. Enhanced startup...Ensure ‘Allow Secure Boot for integrity validation’ is set to ‘Enabled’
Details This policy setting allows you to configure whether Secure Boot will be allowed as the platform integrity provider for...Ensure ‘Allow standby states (S1-S3) when sleeping (on battery)’ is set to ‘Disabled’
Details Dictates whether or not Windows is allowed to use standby states when sleeping the computer. The recommended state for...Ensure ‘Allow standby states (S1-S3) when sleeping (plugged in)’ is set to ‘Disabled’
Details Dictates whether or not Windows is allowed to use standby states when sleeping the computer. The recommended state for...Ensure ‘Also apply to matching devices that are already installed.’ is set to ‘True’ (checked)
Details 18.8.7.1.6 Ensure ‘Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices...Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...