Build Kit Trouble
Product Name
CIS Build Kit
Product Version
All
Date/
May 19, 2021
Ā
Problem
[Blank] isnāt working after applying a CIS Build Kit
Ā
Solution
Here are some initial tips to help you resolve the issue.
First, it may be helpful to revert back to a working policy in your production environment and continue testing in a test environment.
Secondly, prior to applying a Build Kit, verify that the most recent Microsoft Windows Administrative Templates have been downloaded directly from Microsoft and applied to the system. Applying the Build Kit to a system without proper testing and review will result in a negative impact within your environment. It is a time consuming process to fix.
Lastly, it is important to read the Build Kit README before getting started with Build Kits.
If you have not done so, please read through the BuildKit README that is included with your BuildKit.
If you are still having trouble after following the above tips, keep reading to see how to turn off the recommendation that may be causing the negative impact.
Search through the benchmark for the remediation that is causing the impact
Through searching keywords, you should find which recommendations are causing the issue and then reverse the remediation directions to turn the recommendation off.
For example, if you are using Windows 2016 Server and you are having an issue with the RDP configuration, you should:
Login to CIS WorkBench - https://workbench.cisecurity.org/
Go to Benchmarks on the top Navigation bar
Search for Windows Server 2016
Download the PDF version of the Benchmark
Search for the word āRDPā or other related words such as 'remote connection' using ctr+f
Go to the recommendations related to RDP and remote connections
Recommendation
18.9.59.3.9.3 (L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL' (Automated)
Relates to RDP.Read the recommendation
Under the Remediation section, there is an explanation of how to enable or disable the recommendation.
Rinse and repeat for each issue you are having.
Keywords; BuildKit GPO
Content by Label
Ā