Ensure ‘Configure use of passwords for removable data drives’ is set to ‘Disabled’
Details This policy setting allows you to specify whether a password is required to unlock BitLocker-protected removable data drives. Note:...
- Home
- Security Hardening
- CIS Windows 7 Workstation BitLocker V3.2.0
CIS Windows 7 Workstation BitLocker V3.2.0
Ensure ‘Configure use of passwords for fixed data drives’ is set to ‘Disabled’
Details This policy setting specifies whether a password is required to unlock BitLocker-protected fixed data drives. Note: This setting is...Ensure ‘Configure use of smart cards on fixed data drives’ is set to ‘Enabled’
Details This policy setting allows you to specify whether smart cards can be used to authenticate user access to the...Ensure ‘Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives’ is set to ‘Enabled: True’
Details This policy setting allows you to specify whether smart cards must be used to authenticate user access to the...Ensure ‘Configure use of smart cards on removable data drives’ is set to ‘Enabled’
Details This policy setting specifies whether smart cards can be used to authenticate user access to BitLocker-protected removable data drives...Ensure ‘Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives’ is set to ‘Enabled: True’
Details This policy setting specifies whether smart cards must be used to authenticate user access to BitLocker-protected removable data drives...Ensure ‘Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization’ is set to ‘Enabled: False’
Details This policy setting configures whether the computer will be able to write data to BitLocker-protected removable drives that were...Ensure ‘Deny write access to removable drives not protected by BitLocker’ is set to ‘Enabled’
Details This policy setting configures whether BitLocker protection is required for a computer to be able to write data to...Ensure ‘Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.’ is set to ‘True’ (checked)
Details This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device...Ensure ‘Prevent installation of devices using drivers that match these device setup classes’ is set to ‘Enabled’
Details This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device...