Window 10 Harden Guide 20H2 (intentionally blank)

Question

Hi all,

I am confuse on the hardening guide release by Microsoft (CIS_Microsoft_Windows_10_Enterprise_Release_20H2_Benchmark_v1.10.0) ,
I have scroll through the page and I realise a lot of GPO setting is "Intentionally blank" as show in the Pic below. then I copy those "adml" text and paste it on the internet to find more information e.g "WindowsMediaDRM.admx/adml" or "WindowsMediaPlayer.admx/adml" but I cannot get a ideas what am I suppose to set? what am I suppose to set on those setting? as they are too many those "Intentionally blank" and I got a audit coming soon and my company have told me to harden all those window 10 devices.

Answer 1

Hello @Toh ,

Thank you for posting here.

After my view, I can indeed see a lot of GPO settings are "Intentionally blank" in the document (CIS_Microsoft_Windows_10_Enterprise_Release_20H2_Benchmark_v1.10.0).

my discussion with my colleague, for the GPO settings are "Intentionally blank", maybe Microsoft's recommendation for these settings are "undefined", you can keep it blank or set them depending on your company's requirements if needed, before seting them, you need to download the corresponding ADMX\ADML.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou