Home
Security Hardening
CIS Microsoft Windows 10 Enterprise Release 20H2 V1.10.1 Bl

CIS Microsoft Windows 10 Enterprise Release 20H2 V1.10.1 Bl

Ensure ‘Configure use of hardware-based encryption for removable data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption’ is set to ‘Enabled: False’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on removable data drives and specify which...
Ensure ‘Configure use of hardware-based encryption for removable data drives: Use BitLocker software-based encryption when hardware encryption is not available’ is set to ‘Enabled: True’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on removable data drives and specify which...
Ensure ‘Configure use of passwords for fixed data drives’ is set to ‘Disabled’
Details This policy setting specifies whether a password is required to unlock BitLocker-protected fixed data drives. Note: This setting is...
Ensure ‘Configure use of passwords for operating system drives’ is set to ‘Disabled’
Details This policy setting specifies the constraints for passwords used to unlock BitLocker-protected operating system drives. Note: This setting is...
Ensure ‘Configure use of smart cards on fixed data drives’ is set to ‘Enabled’
Details This policy setting allows you to specify whether smart cards can be used to authenticate user access to the...
Ensure ‘Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives’ is set to ‘Enabled: True’
Details This policy setting allows you to specify whether smart cards must be used to authenticate user access to the...
Ensure ‘Enumeration policy for external devices incompatible with Kernel DMA Protection’ is set to ‘Enabled: Block All’
Details This policy is intended to provide additional security against external DMA-capable devices. It allows for more control over the...
Ensure ‘Interactive logon: Machine account lockout threshold’ is set to ’10 or fewer invalid logon attempts, but not 0′
Details This security setting determines the number of failed logon attempts that causes the machine to be locked out. Failed...
Ensure ‘Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.’ is set to ‘True’ (checked)
Details This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for...
Ensure ‘Prevent installation of devices that match any of these device IDs’ is set to ‘Enabled’
Details This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for...

Prev Next

CIS Microsoft Windows 10 Enterprise Release 20H2 V1.10.1 Bl

Ensure ‘Configure use of hardware-based encryption for removable data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption’ is set to ‘Enabled: False’

Ensure ‘Configure use of hardware-based encryption for removable data drives: Use BitLocker software-based encryption when hardware encryption is not available’ is set to ‘Enabled: True’

Ensure ‘Configure use of passwords for fixed data drives’ is set to ‘Disabled’

Ensure ‘Configure use of passwords for operating system drives’ is set to ‘Disabled’

Ensure ‘Configure use of smart cards on fixed data drives’ is set to ‘Enabled’

Ensure ‘Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives’ is set to ‘Enabled: True’

Ensure ‘Enumeration policy for external devices incompatible with Kernel DMA Protection’ is set to ‘Enabled: Block All’

Ensure ‘Interactive logon: Machine account lockout threshold’ is set to ’10 or fewer invalid logon attempts, but not 0′

Ensure ‘Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.’ is set to ‘True’ (checked)

Ensure ‘Prevent installation of devices that match any of these device IDs’ is set to ‘Enabled’