Build Kit Trouble

Problem

Solution

Here are some initial tips to help you resolve the issue.

First, it may be helpful to revert back to a working policy in your production environment and continue testing in a test environment.
Secondly, prior to applying a Build Kit, verify that the most recent Microsoft Windows Administrative Templates have been downloaded directly from Microsoft and applied to the system. Applying the Build Kit to a system without proper testing and review will result in a negative impact within your environment. It is a time consuming process to fix.
Lastly, it is important to read the Build Kit README before getting started with Build Kits.

If you have not done so, please read through the BuildKit README that is included with your BuildKit.

If you are still having trouble after following the above tips, keep reading to see how to turn off the recommendation that may be causing the negative impact.

Search through the benchmark for the remediation that is causing the impact

Through searching keywords, you should find which recommendations are causing the issue and then reverse the remediation directions to turn the recommendation off.

For example, if you are using Windows 2016 Server and you are having an issue with the RDP configuration, you should:

1. Login to CIS WorkBench - CIS WorkBench / Home

2. Go to Benchmarks on the top Navigation bar

3. Search for Windows Server 2016

4. Download the PDF version of the Benchmark

5. Search for the word ‘RDP’ or other related words such as 'remote connection' using ctr+f

6. Go to the recommendations related to RDP and remote connections

7. Recommendation 18.9.59.3.9.3 (L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL' (Automated) Relates to RDP.

8. Read the recommendation

9. Under the Remediation section, there is an explanation of how to enable or disable the recommendation.

10. Rinse and repeat for each issue you are having.

Keywords; BuildKit GPO

Content by Label