All Computer Default Protections N/A Enabled EMET protections OS Configuration\Administrative for Recommended Templates\Windows Software Components\EMET All Computer ASLR N/A Enabled: EMET protections OS Configuration\Administrative Application Opt-In Templates\Windows Components\EMET All Computer System DEP N/A Enabled: EMET protections OS Configuration\Administrative Application Opt-Out Templates\Windows Components\EMET All Computer System N/A Enabled: EMET protections OS Configuration\Administrative Application Opt-Out Templates\Windows Components\EMET Updated Guidance This section defines settings in all baselines covered by this report that should be added or changed to be consistent with other baselines. Baseline Policy Path Policy Name Old New Value Rationale All Computer Specify the maximum log file 20480 32768 Make consistent with Server OS Client Configuration\Windows size (KB) recommendations and increase OS Components\Event Log diagnostic and forensic abilities. Service\Application All Computer Specify the maximum log file 20480 196608 Make consistent with Server OS Client Configuration\Windows size (KB) recommendations and increase OS Components\Event Log diagnostic and forensic abilities. Service\Security
All OS Computer Configuration\Administrative Templates\Windows Components\EMET Default Protections for Recommended Software N/A Enabled EMET protections All OS Computer Configuration\Administrative Templates\Windows Components\EMET ASLR N/A Enabled: Application Opt-In EMET protections All OS Computer Configuration\Administrative Templates\Windows Components\EMET System DEP N/A Enabled: Application Opt-Out EMET protections All OS Computer Configuration\Administrative Templates\Windows Components\EMET System N/A Enabled: Application Opt-Out EMET protections Updated Guidance This section defines settings in all baselines covered by this report that should be added or changed to be consistent with other baselines. Baseline Policy Path Policy Name Old New Value Rationale All Client OS Computer Configuration\Windows Components\Event Log Service\Application Specify the maximum log file size (KB) 20480 32768 Make consistent with Server OS recommendations and increase diagnostic and forensic abilities. All Client OS Computer Configuration\Windows Components\Event Log Service\Security Specify the maximum log file size (KB) 20480 196608 Make consistent with Server OS recommendations and increase diagnostic and forensic abilities.
Recommended%20Security%20Baseline%20Settings.docx