Securing Microsoft Windows Desktop

An objective, consensus-driven security guideline for the Microsoft Windows Desktop Operating Systems.

NOTE: We've removed Microsoft Windows build numbers (i.e., 21H2) from the names of our CIS Microsoft Windows 10 and 11 Benchmarks. CIS recommends using the most recent version of the CIS Microsoft Windows Benchmarks regardless of the OS build version you're using. The overview section within the CIS Benchmarks lists the most recent OS build version it covers.

A step-by-step checklist to secure Microsoft Windows Desktop:

Download Latest CIS Benchmark Free to Everyone
For Microsoft Windows Desktop Win10-SA (CIS Microsoft Windows 10 Stand-alone Benchmark version 1.0.0)

CIS has worked with the community since 2009 to publish a benchmark for Microsoft Windows Desktop.

Other CIS Benchmark versions:

For Microsoft Windows Desktop (CIS Microsoft Windows 10 EMS Gateway Benchmark version 1.1.0)
Complete CIS Benchmark Archive

Want to skip most manual steps?

Assess and/or remediate Only Available to CIS SecureSuite Members
Build Kit available for Benchmark version 3.1.0
CIS-CAT Pro is included with membership and can automatically test for compliance and remediate with this benchmark.
Microsoft Windows Desktop is in CIS-CAT Lite edition too
Try CIS-CAT Lite for free

CIS Covers Other Server Technologies

See the full list