Home
Security Hardening
CIS Microsoft Windows 10 Enterprise Release 20H2 V1.10.1 Bl

CIS Microsoft Windows 10 Enterprise Release 20H2 V1.10.1 Bl

Ensure ‘Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs’ is set to ‘PCICC_0C0A’
Details This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for...
Ensure ‘Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.’ is set to ‘True’ (checked)
Details This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device...
Ensure ‘Prevent installation of devices using drivers that match these device setup classes’ is set to ‘Enabled’
Details This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device...
Ensure ‘Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup’ is set to ‘IEEE 1394 device setup classes’
Details This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device...
Ensure ‘Require additional authentication at startup: Allow BitLocker without a compatible TPM’ is set to ‘Enabled: False’
Details This policy setting allows you to configure whether you can use BitLocker without a Trusted Platform Module (TPM), instead...
Ensure ‘Require additional authentication at startup’ is set to ‘Enabled’
Details This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether...

CIS Microsoft Windows 10 Enterprise Release 20H2 V1.10.1 Bl

Ensure ‘Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs’ is set to ‘PCICC_0C0A’

Ensure ‘Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.’ is set to ‘True’ (checked)

Ensure ‘Prevent installation of devices using drivers that match these device setup classes’ is set to ‘Enabled’

Ensure ‘Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup’ is set to ‘IEEE 1394 device setup classes’

Ensure ‘Require additional authentication at startup: Allow BitLocker without a compatible TPM’ is set to ‘Enabled: False’

Ensure ‘Require additional authentication at startup’ is set to ‘Enabled’