[ad_1]
Microsoft has launched the ultimate model of safety configuration baseline settings for Home windows 10, model 21H2, out there in the present day from the Microsoft Safety Compliance Toolkit.
“This Home windows 10 characteristic replace brings only a few new coverage settings,” Microsoft safety advisor Rick Munck mentioned.
“One setting has been added for this launch for printer driver set up restrictions (which was additionally added to the Home windows 11 launch). Moreover, all Microsoft Edge Legacy settings have been eliminated,”
Safety from human-operated ransomware
Nonetheless, the spotlight of the brand new Home windows 10 safety baseline is the addition of tamper safety as a setting to allow by default (this was additionally made a default setting within the Home windows 11 safety baseline two months in the past).
When toggling on the Microsoft Safety Baseline for Home windows 10 21H2, Redmond urges admins to toggle on Defender for Endpoint’s tamper safety characteristic to guard in opposition to human-operated ransomware assaults.
This characteristic does that by blocking makes an attempt by ransomware operators or malware to disable OS security measures and safety options to realize simpler entry to delicate knowledge and deploy additional malware or malicious instruments.
Tamper safety mechanically locks Microsoft Defender Antivirus utilizing the default safe values, thwarting makes an attempt to vary them utilizing the registry, PowerShell cmdlets, or group insurance policies.
After enabling it, ransomware operators would have a significantly more difficult activity when making an attempt to:
- Disable virus and menace safety
- Disable real-time safety
- Turnoff conduct monitoring
- Disable antivirus (comparable to IOfficeAntivirus (IOAV))
- Disable cloud-delivered safety
- Take away safety intelligence updates
- Disable automated actions on detected threats
PrintNightmare and Edge Legacy
With the brand new Home windows 10 21H2 safety baseline, Redmond eliminated all Microsoft Edge Legacy settings after its EdgeHTML-based internet browser reached finish of assist in March.
“Going ahead, please use the brand new Microsoft Edge (Chromium-based) baseline, which is on a separate launch cadence and out there as a part of the Microsoft Safety Compliance Toolkit,” Munck added.
Microsoft additionally added a brand new setting to the MS Safety Information customized administrative template designed to limit printer driver set up to customers with Administrator privileges.
The brand new advice follows safety updates launched beginning with July 2021 to handle the CVE-2021-34527 PrintNightmare distant code execution flaw impacting the Home windows Print Spooler service.
Now out there for obtain
Home windows safety baselines present Microsoft-recommended safety configurations which scale back Home windows methods’ assault floor and improve the general safety posture of enterprise endpoints.
“A safety baseline is a gaggle of Microsoft-recommended configuration settings that explains their safety influence,” as Microsoft explains. “These settings are primarily based on suggestions from Microsoft safety engineering groups, product teams, companions, and clients.”
The Home windows 10 21H2 safety baseline is now out there for obtain through the Microsoft Safety Compliance Toolkit, and it consists of Group Coverage Object (GPO) backups and stories, the scripts wanted to use settings to the native GPO, in addition to Coverage Analyzer guidelines.
“Please obtain the content material from the Microsoft Safety Compliance Toolkit, take a look at the really useful configurations, and customise / implement as acceptable,” Munck added.
Extra data on the modifications that the brand new Home windows 10 21H2 safety baseline comes with is out there on this Microsoft Safety Baselines weblog submit.
[ad_2]
