Quantcast
Channel: Microsoft Security Guidance blog
Browsing index pages (39 articles)

Moving to a new blog platform

The content on Microsoft's MSDN and TechNet blog platforms will soon become read-only. Look for future blog posts about Microsoft's security configuration baselines and the Security Compliance Toolkit...

View Article


Security baseline (FINAL) for Windows 10 v1903 and Windows Server v1903

Microsoft is pleased to announce the final release of the security configuration baseline settings for Windows 10 version 1903 (a.k.a., “19H1”), and for Windows Server version 1903. Download the...

View Article


Security baseline (DRAFT) for Windows 10 v1903 and Windows Server v1903

Microsoft is pleased to announce the draft release of the security configuration baseline settings for Windows 10 version 1903 (a.k.a., “19H1”), and for Windows Server version 1903. Please evaluate...

View Article

Issue with SystemGuard Launch setting in Windows 10 v1809 and Windows Server...

Customers that deployed Microsoft’s security baseline for Windows 10 v1809 and Windows Server 2019 on systems with UEFI secure boot enabled might experience device boot failures. The Device Guard GPO...

View Article

Remote Use of Local Accounts: LAPS Changes Everything

  Long overdue post revisiting the question about whether and when to block the use of local accounts, particularly for remote administration. Beginning in 2014 with our baselines for Windows 8.1 and...

View Article


Security baseline (FINAL) for Windows 10 v1809 and Windows Server 2019

Microsoft is pleased to announce the final release of the security configuration baseline settings for Windows 10 October 2018 Update (a.k.a., version 1809, “Redstone 5” or “RS5”), and for Windows...

View Article

Security baseline (DRAFT) for Windows 10 v1809 and Windows Server 2019

Microsoft is pleased to announce the draft release of the security configuration baseline settings for Windows 10 version 1809 (a.k.a., “Redstone 5” or “RS5”), and for Windows Server 2019. Please...

View Article

Image may be NSFW.
Clik here to view.

Policy Analyzer – minor update

Policy Analyzer is a utility in the Security Compliance Toolkit for analyzing and comparing sets of Group Policy Objects (GPOs). We have just posted a minor update that resolves a localization bug...

View Article


Security baseline for Windows 10 “April 2018 Update” (v1803) – FINAL

Microsoft is pleased to announce the final release of the security configuration baseline settings for Windows 10 “April 2018 Update,” also known as version 1803, “Redstone 4,” or RS4. Download the...

View Article


Security baseline for Windows 10 v1803 “Redstone 4” – DRAFT

Microsoft is pleased to announce the draft release of the security configuration baseline settings for the upcoming Windows 10 version 1803, codenamed “Redstone 4.” Please evaluate this proposed...

View Article

Security baseline for Office 2016 and Office 365 ProPlus apps – FINAL

Microsoft is pleased to announce the final release of the recommended security configuration baseline settings for Microsoft Office Professional Plus 2016 and Office 365 ProPlus 2016 apps. There are no...

View Article

Security baseline for Office 2016 and Office 365 ProPlus apps – DRAFT

Microsoft is pleased to announce the draft release of the recommended security configuration baseline settings for Microsoft Office Professional Plus 2016 and Office 365 ProPlus 2016 apps. Please...

View Article

Issue with BitLocker/DMA setting in Windows 10 “Fall Creators Update” (v1709)

Customers that deployed Microsoft’s security baseline for Windows 10 v1709 might have experienced device and component failures. The BitLocker GPO settings recommended in the Windows security...

View Article


Security baseline for Windows 10 “Fall Creators Update” (v1709) – FINAL

Microsoft is pleased to announce the final release of the recommended security configuration baseline settings for Windows 10 “Fall Creators Update,” also known as version 1709, “Redstone 3,” or RS3....

View Article

Security baseline for Windows 10 “Fall Creators Update” (v1709) – DRAFT

Microsoft is pleased to announce the draft release of the recommended security configuration baseline settings for Windows 10 “Fall Creators Update,” also known as version 1709, “Redstone 3,” or RS3....

View Article


Security baseline for Windows 10 “Creators Update” (v1703) – FINAL

Microsoft is pleased to announce the final release of the recommended security configuration baseline settings for Windows 10 “Creators Update,” also known as version 1703, “Redstone 2,” or RS2. The...

View Article

Disabling SMBv1 through Group Policy

Version 1 of the Server Message Block (SMB) protocol was developed in the early days of personal computer networking, and as Ned Pyle describes in his blog post, Stop using SMB1 there are many reasons...

View Article


Image may be NSFW.
Clik here to view.

Dropping the "Untrusted Font Blocking" setting

With the Windows 10 v1703 security configuration baseline, Microsoft is removing the recommendation to enable the “Untrusted Font Blocking” Group Policy setting in Computer Configuration |...

View Article

Security Compliance Manager (SCM) retired; new tools and procedures

Microsoft reluctantly announces the retirement of the Security Compliance Manager (SCM) tool. At the same time, we are reaffirming our commitment to delivering robust and useful security guidance for...

View Article

Security baseline for Windows 10 "Creators Update" (v1703) – DRAFT

Microsoft is pleased to announce the beta release of the recommended security configuration baseline settings for Windows 10 “Creators Update,” also known as version 1703, “Redstone 2,” or RS2. Please...

View Article
Browsing index pages (39 articles)


Latest Images