Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Product Name

CIS Build Kits®

Product Version

All versions

Date



Problem

Info

Our Cloud Servers are not domain joined and the CIS Build Kits® cannot be pushed via GPO, can we still use the Build Kits?

Solution

CIS Windows Build Kits:

Our CIS Window’s Build Kits® are GPOs. The README.doc included in the CIS Windows Build Kits® states “Inside each Build Kit you will find folders containing broken out GPO settings… The Benchmarks are designed to support domain-joined enterprise systems; as such you will be importing the GPOs contained in the Build Kit into your group policy of your domain controller… Once imported, edit the GPOs accordingly before applying to any system. Once the GPOs are tailored to the organization’s needs and properly tested, begin rollout to a small group of systems.”

Tip

As of August 2022 CIS now offers the “Microsoft Windows 10 Stand-alone Benchmark v1.0.1” and associated Build Kit.

Adjustments/tailoring to the benchmark recommendations can be done a number of ways including Local Group Policy Editor, Group Policy Management Console on Windows Server (GPMC), and Microsoft's Local Group Policy Object tool (LGPO).

CIS Linux Build Kits:

The Build Kits for UNIX and LINUX environments are basic shell scripts that can be run from the machine or through another organizationally-approved tool.

Notewarning

PLEASE NOTE, reviewing the content within the corresponding Benchmark PDF is imperative for an overall successful application of the Build Kit, as there may be some settings that your organization needs to exempt itself from due to unique operational requirements.

Applying the Build Kit to a system without proper testing and review may result in a negative impact within your environment. In some cases, less than 100% of the CIS Benchmark will be applied; it is the responsibility and decision of each organization to determine which settings are applicable to their unique needs.


Copyright © 2020 2021

Center for Internet Security®


Page Properties
hiddentrue

Action

Name(s)

Date

Linked ticket

https://cisecurity.atlassian.net/browse/

Jira Legacy
serverSystem JIRA
serverIdb90ca2a8-9df7-3869-89db-c424866c1b16
keySUPPORT-9828

Created by

Amanda McGown

Reviewed by

Andrew Preston Amanda McGown Maricielo Ortega Rojas (Unlicensed) Chris Boldiston

Re-reviewed

Amanda McGown Stand alone content added

Approved by

Andrew Preston Amanda McGown Maricielo Ortega Rojas (Unlicensed) Chris Boldiston

Remove by