Moving to a new blog platform
The content on Microsoft's MSDN and TechNet blog platforms will soon become read-only. Look for future blog posts about Microsoft's security configuration baselines and the Security Compliance Toolkit...
View ArticleSecurity baseline (FINAL) for Windows 10 v1903 and Windows Server v1903
Microsoft is pleased to announce the final release of the security configuration baseline settings for Windows 10 version 1903 (a.k.a., “19H1”), and for Windows Server version 1903. Download the...
View ArticleSecurity baseline (DRAFT) for Windows 10 v1903 and Windows Server v1903
Microsoft is pleased to announce the draft release of the security configuration baseline settings for Windows 10 version 1903 (a.k.a., “19H1”), and for Windows Server version 1903. Please evaluate...
View ArticleIssue with SystemGuard Launch setting in Windows 10 v1809 and Windows Server...
Customers that deployed Microsoft’s security baseline for Windows 10 v1809 and Windows Server 2019 on systems with UEFI secure boot enabled might experience device boot failures. The Device Guard GPO...
View ArticleRemote Use of Local Accounts: LAPS Changes Everything
Long overdue post revisiting the question about whether and when to block the use of local accounts, particularly for remote administration. Beginning in 2014 with our baselines for Windows 8.1 and...
View ArticleSecurity baseline (FINAL) for Windows 10 v1809 and Windows Server 2019
Microsoft is pleased to announce the final release of the security configuration baseline settings for Windows 10 October 2018 Update (a.k.a., version 1809, “Redstone 5” or “RS5”), and for Windows...
View ArticleSecurity baseline (DRAFT) for Windows 10 v1809 and Windows Server 2019
Microsoft is pleased to announce the draft release of the security configuration baseline settings for Windows 10 version 1809 (a.k.a., “Redstone 5” or “RS5”), and for Windows Server 2019. Please...
View ArticlePolicy Analyzer – minor update
Policy Analyzer is a utility in the Security Compliance Toolkit for analyzing and comparing sets of Group Policy Objects (GPOs). We have just posted a minor update that resolves a localization bug...
View ArticleSecurity baseline for Windows 10 “April 2018 Update” (v1803) – FINAL
Microsoft is pleased to announce the final release of the security configuration baseline settings for Windows 10 “April 2018 Update,” also known as version 1803, “Redstone 4,” or RS4. Download the...
View ArticleSecurity baseline for Windows 10 v1803 “Redstone 4” – DRAFT
Microsoft is pleased to announce the draft release of the security configuration baseline settings for the upcoming Windows 10 version 1803, codenamed “Redstone 4.” Please evaluate this proposed...
View ArticleSecurity baseline for Office 2016 and Office 365 ProPlus apps – FINAL
Microsoft is pleased to announce the final release of the recommended security configuration baseline settings for Microsoft Office Professional Plus 2016 and Office 365 ProPlus 2016 apps. There are no...
View ArticleSecurity baseline for Office 2016 and Office 365 ProPlus apps – DRAFT
Microsoft is pleased to announce the draft release of the recommended security configuration baseline settings for Microsoft Office Professional Plus 2016 and Office 365 ProPlus 2016 apps. Please...
View ArticleIssue with BitLocker/DMA setting in Windows 10 “Fall Creators Update” (v1709)
Customers that deployed Microsoft’s security baseline for Windows 10 v1709 might have experienced device and component failures. The BitLocker GPO settings recommended in the Windows security...
View ArticleSecurity baseline for Windows 10 “Fall Creators Update” (v1709) – FINAL
Microsoft is pleased to announce the final release of the recommended security configuration baseline settings for Windows 10 “Fall Creators Update,” also known as version 1709, “Redstone 3,” or RS3....
View ArticleSecurity baseline for Windows 10 “Fall Creators Update” (v1709) – DRAFT
Microsoft is pleased to announce the draft release of the recommended security configuration baseline settings for Windows 10 “Fall Creators Update,” also known as version 1709, “Redstone 3,” or RS3....
View ArticleSecurity baseline for Windows 10 “Creators Update” (v1703) – FINAL
Microsoft is pleased to announce the final release of the recommended security configuration baseline settings for Windows 10 “Creators Update,” also known as version 1703, “Redstone 2,” or RS2. The...
View ArticleDisabling SMBv1 through Group Policy
Version 1 of the Server Message Block (SMB) protocol was developed in the early days of personal computer networking, and as Ned Pyle describes in his blog post, Stop using SMB1 there are many reasons...
View ArticleDropping the "Untrusted Font Blocking" setting
With the Windows 10 v1703 security configuration baseline, Microsoft is removing the recommendation to enable the “Untrusted Font Blocking” Group Policy setting in Computer Configuration |...
View ArticleSecurity Compliance Manager (SCM) retired; new tools and procedures
Microsoft reluctantly announces the retirement of the Security Compliance Manager (SCM) tool. At the same time, we are reaffirming our commitment to delivering robust and useful security guidance for...
View ArticleSecurity baseline for Windows 10 "Creators Update" (v1703) – DRAFT
Microsoft is pleased to announce the beta release of the recommended security configuration baseline settings for Windows 10 “Creators Update,” also known as version 1703, “Redstone 2,” or RS2. Please...
View Article