Ensure ‘Allow access to BitLocker-protected fixed data drives from earlier versions of Windows’ is set to ‘Disabled’
Details This policy setting configures whether or not fixed data drives formatted with the FAT file system can be unlocked...
- Home
- Security Hardening
- CIS Microsoft Windows 10 Enterprise Release 1909 V1.8.1 Bl
CIS Microsoft Windows 10 Enterprise Release 1909 V1.8.1 Bl
Ensure ‘Allow access to BitLocker-protected removable data drives from earlier versions of Windows’ is set to ‘Disabled’
Details This policy setting configures whether or not removable data drives formatted with the FAT file system can be unlocked...Ensure ‘Allow enhanced PINs for startup’ is set to ‘Enabled’
Details This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker. Enhanced startup...Ensure ‘Allow Secure Boot for integrity validation’ is set to ‘Enabled’
Details This policy setting allows you to configure whether Secure Boot will be allowed as the platform integrity provider for...Ensure ‘Allow standby states (S1-S3) when sleeping (on battery)’ is set to ‘Disabled’
Details Dictates whether or not Windows is allowed to use standby states when sleeping the computer. The recommended state for...Ensure ‘Allow standby states (S1-S3) when sleeping (plugged in)’ is set to ‘Disabled’
Details Dictates whether or not Windows is allowed to use standby states when sleeping the computer. The recommended state for...Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS’ is set to ‘Enabled: Backup recovery passwords and key packages’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives’ is set to ‘Enabled: False’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...Ensure ‘Choose how BitLocker-protected fixed drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...