Ensure ‘Devices: Prevent users from installing printer drivers’ is set to ‘Enabled’
Details For a computer to print to a shared printer, the driver for that shared printer must be installed on...
- Home
- Security Hardening
- CIS Microsoft Windows 10 Enterprise Release 21H1 V1.11.0 L2 Bl Ng
CIS Microsoft Windows 10 Enterprise Release 21H1 V1.11.0 L2 Bl Ng
Ensure ‘Downloaded Maps Manager (MapsBroker)’ is set to ‘Disabled’
Details Windows service for application access to downloaded maps. This service is started on-demand by application accessing downloaded maps. Rationale:...Ensure ‘Enable Font Providers’ is set to ‘Disabled’
Details This policy setting determines whether Windows is allowed to download fonts and font catalog data from an online font...Ensure ‘Geolocation Service (lfsvc)’ is set to ‘Disabled’
Details This service monitors the current location of the system and manages geofences (a geographical location with associated events). The...Ensure ‘Interactive logon: Machine account lockout threshold’ is set to ’10 or fewer invalid logon attempts, but not 0′
Details This security setting determines the number of failed logon attempts that causes the machine to be locked out. Failed...Ensure ‘Interactive logon: Number of previous logons to cache (in case domain controller is not available)’ is set to ‘4 or fewer logon(s)’
Details This policy setting determines whether a user can log on to a Windows domain using cached account information. Logon...Ensure ‘Link-Layer Topology Discovery Mapper (lltdsvc)’ is set to ‘Disabled’
Details Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device....Ensure ‘Log on as a batch job’ is set to ‘Administrators’
Details This policy setting allows accounts to log on using the task scheduler service. Because the task scheduler is often...Ensure ‘Microsoft iSCSI Initiator Service (MSiSCSI)’ is set to ‘Disabled’
Details Manages Internet SCSI (iSCSI) sessions from this computer to remote target devices. The recommended state for this setting is:...Ensure ‘MSS: (DisableSavePassword) Prevent the dial-up password from being saved’ is set to ‘Enabled’
Details When you dial a phonebook or VPN entry in Dial-Up Networking, you can use the ‘Save Password’ option so...