; ----------------------------------------------------------------------
; CIS Benchmark Policies

Computer
SYSTEM\CurrentControlSet\Control\Lsa
RunAsPPL
DWORD:1

Computer
SOFTWARE\Policies\Microsoft\Windows\System
AllowCustomSSPsAPs
DWORD:0

Computer
Software\Policies\Microsoft\Windows\CloudContent
DisableConsumerAccountStateContent
DWORD:1

Computer
SOFTWARE\Policies\Microsoft\Dsh
AllowNewsAndInterests
DWORD:0

Computer
SOFTWARE\Policies\Microsoft\Windows\DataCollection
LimitDumpCollection
DWORD:1

Computer
SOFTWARE\Policies\Microsoft\Windows\DataCollection
LimitDiagnosticLogCollection
DWORD:1

Computer
Software\Microsoft\Windows\CurrentVersion\Policies\System\Audit
ProcessCreationIncludeCmdLine_Enabled
DWORD:1

Computer
Software\Policies\Microsoft\Windows NT\DNSClient
EnableNetbios
DWORD:2

Computer
Software\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9
DCSettingIndex
DWORD:0

Computer
Software\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9
ACSettingIndex
DWORD:0

Computer
Software\Policies\Microsoft\Windows\DataCollection
DisableOneSettingsDownloads
DWORD:1

Computer
Software\Policies\Microsoft\Windows\DataCollection
EnableOneSettingsAuditing
DWORD:1

Computer
Software\Policies\Microsoft\Windows\EventLog\Application
Retention
SZ:0

Computer
Software\Policies\Microsoft\Windows\EventLog\Security
Retention
SZ:0

Computer
Software\Policies\Microsoft\Windows\EventLog\Setup
Retention
SZ:0

Computer
Software\Policies\Microsoft\Windows\EventLog\Setup
MaxSize
DWORD:36768

Computer
Software\Policies\Microsoft\Windows\EventLog\System
Retention
SZ:0

Computer
Software\Policies\Microsoft\Windows\Explorer
NoDataExecutionPrevention
DWORD:0

Computer
Software\Policies\Microsoft\Windows\Explorer
NoHeapTerminationOnCorruption
DWORD:0

Computer
Software\Policies\Microsoft\Windows\HomeGroup
DisableHomeGroup
DWORD:1

Computer
Software\Policies\Microsoft\Windows\OneDrive
DisableFileSyncNGSC
DWORD:1

Computer
Software\Policies\Microsoft\Windows\System
EnableCdp
DWORD:0

Computer
Software\Policies\Microsoft\Windows\System
NoLocalPasswordResetQuestions
DWORD:1

Computer
Software\Policies\Microsoft\Windows\Windows Search
AllowCortana
DWORD:0

Computer
Software\Policies\Microsoft\Windows\Windows Search
AllowCortanaAboveLock
DWORD:0

Computer
Software\Policies\Microsoft\Windows\Windows Search
AllowSearchToUseLocation
DWORD:0

Computer
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
PreXPSP2ShellProtocolBehavior
DWORD:0

Computer
Software\Policies\Microsoft\InputPersonalization
AllowInputPersonalization
DWORD:0

Computer
Software\Policies\Microsoft\MicrosoftAccount
DisableUserAuth
DWORD:1

Computer
Software\Policies\Microsoft\MicrosoftEdge\Internet Settings
ProvisionedHomePages
SZ:about:blank

Computer
Software\Policies\Microsoft\Windows\Network Connections
NC_AllowNetBridge_NLA
DWORD:0

Computer
Software\Policies\Microsoft\Windows NT\Printers
RegisterSpoolerRemoteRpcEndPoint
DWORD:2

Computer
Software\Policies\Microsoft\Windows NT\Printers
RedirectionGuardPolicy
DWORD:1

Computer
Software\Policies\Microsoft\Windows NT\Terminal Services
fAllowUnsolicited
DWORD:0

Computer
Software\Policies\Microsoft\Windows NT\Terminal Services
fAllowUnsolicitedFullControl
DELETE

Computer
Software\Policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
*
DELETEALLVALUES

Computer
Software\Policies\Microsoft\WindowsStore
RequirePrivateStoreOnly
DWORD:1

Computer
Software\Policies\Microsoft\Windows\Device Metadata
PreventDeviceMetadataFromNetwork
DWORD:1

Computer
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
DisableCAD
DWORD:0

Computer
SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters
RequireSecuritySignature
DWORD:1

Computer
SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
LogFilePath
SZ:%systemroot%\\system32\\logfiles\\firewall\\domainfw.log

Computer
SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging
LogFilePath
SZ:%systemroot%\\system32\\logfiles\\firewall\\privatefw.log

Computer
SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging
LogFilePath
SZ:%systemroot%\\system32\\logfiles\\firewall\\publicfw.log

Computer
SYSTEM\CurrentControlSet\Control\Lsa
RestrictAnonymous
DWORD:1

Computer
SYSTEM\CurrentControlSet\Control\Lsa
DisableDomainCreds
DWORD:1

Computer
SYSTEM\CurrentControlSet\Control\Lsa
LmCompatibilityLevel
DWORD:5

Computer
SYSTEM\CurrentControlSet\Control\Lsa\pku2u
AllowOnlineID
DWORD:0

Computer
Software\Policies\Microsoft\Windows NT\DNSClient
EnableMDNS
DWORD:0

Computer
Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint
NoWarningNoElevationOnInstall
DWORD:0

Computer
Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint
UpdatePromptSettings
DWORD:0

Computer
Software\Microsoft\Windows\CurrentVersion\Policies\System
EnableMPR
DWORD:0

Computer
Software\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
DisableWpad
DWORD:1
