) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
CIS Microsoft Windows 10 Enterprise Benchmark 3.0.0 Checklist Details (Checklist Revisions)
Supporting Resources:
-
Download Prose - CIS Microsoft Windows 10 Enterprise Benchmark v3.0.0
- Center for Internet Security (CIS)
Target:
| Target | CPE Name |
|---|---|
| Microsoft Windows 10 | cpe:/o:microsoft:windows_10:- (View CVEs) |
Checklist Highlights
- Checklist Name:
- CIS Microsoft Windows 10 Enterprise Benchmark
- Checklist ID:
- 1162
- Version:
- 3.0.0
- Type:
- Compliance
- Review Status:
- Final
- Authority:
- Third Party: Center for Internet Security (CIS)
- Original Publication Date:
- 02/22/2024
Checklist Summary:
This document provides prescriptive guidance for establishing a secure configuration posture for Microsoft Windows. This secure configuration guide is based on Microsoft windows 10 and is intended for all versions of the Windows 10 operating system, including older versions. This secure configuration guide was tested against Microsoft Windows 10 Release 22H2 Enterprise. To ensure all new and updated group policy objects (GPOs) are installed on the system, please download the latest version of the ADMX/ADML templates for Windows 11. Templates can be downloaded from Microsoft at: Download ADMX Templates for Windows 11 2023 Update [23H2] from Official Microsoft Download Center. To obtain the latest version of this secure configuration guide, please visit https://www.cisecurity.org/cis-benchmarks/. If you have questions, comments, or have identified ways to improve this guide, please write us at feedback@cisecurity.org.
Checklist Role:
- Operating System
Known Issues:
Not provided.
Target Audience:
The Windows CIS Microsoft Windows Benchmarks are written for Active Directory domain-joined systems using Group Policy, not standalone/workgroup systems. Adjustments/tailoring to some recommendations will be needed to maintain functionality if attempting to implement CIS hardening on standalone systems or a system running in the cloud.
Target Operational Environment:
- Managed
- Specialized Security-Limited Functionality (SSLF)
Testing Information:
Not provided.
Regulatory Compliance:
Not provided.
Comments/Warnings/Miscellaneous:
Not provided.
Disclaimer:
Not provided.
Product Support:
Not provided.
Point of Contact:
feedback@cisecurity.org
Sponsor:
Not provided.
Licensing:
Not provided.
Change History:
new checklist - 2/29/24 updated status to FINAL - 3/29/24
Dependency/Requirements:
| URL | Description |
|---|
References:
| Reference URL | Description |
|---|