(L2) Ensure ‘Enable Font Providers’ is set to ‘Disabled’
Details This policy setting determines whether Windows is allowed to download fonts and font catalog data from an online font...
- Home
- Security Hardening
- CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2
CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2
(L2) Ensure ‘Geolocation Service (lfsvc)’ is set to ‘Disabled’
Details This service monitors the current location of the system and manages geofences (a geographical location with associated events). The...(L2) Ensure ‘Interactive logon: Number of previous logons to cache (in case domain controller is not available)’ is set to ‘4 or fewer logon(s)’
Details This policy setting determines whether a user can log on to a Windows domain using cached account information. Logon...(L2) Ensure ‘Remote Desktop Services UserMode Port Redirector (UmRdpService)’ is set to ‘Disabled’
Details Allows the redirection of Printers/Drives/Ports for RDP connections. The recommended state for this setting is: Disabled. Rationale: In a...(L2) Ensure ‘MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted’ is set to ‘Enabled: 3’
Details This setting controls the number of times that TCP retransmits an individual data segment (non-connect segment) before the connection...(L2) Ensure ‘Peer Name Resolution Protocol (PNRPsvc)’ is set to ‘Disabled’
Details Enables serverless peer name resolution over the Internet using the Peer Name Resolution Protocol (PNRP). The recommended state for...(L2) Ensure ‘Peer Networking Grouping (p2psvc)’ is set to ‘Disabled’
Details Enables multi-party communication using Peer-to-Peer Grouping. The recommended state for this setting is: Disabled. Rationale: Peer Name Resolution Protocol...(L2) Ensure ‘Peer Networking Identity Manager (p2pimsvc)’ is set to ‘Disabled’
Details Provides identity services for the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services. The recommended state for this...(L2) Ensure ‘PNRP Machine Name Publication Service (PNRPAutoReg)’ is set to ‘Disabled’
Details This service publishes a machine name using the Peer Name Resolution Protocol. Configuration is managed via the netsh context...(L2) Ensure ‘Problem Reports and Solutions Control Panel Support (wercplsupport)’ is set to ‘Disabled’
Details This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions...