Skip to content
  • There are no suggestions because the search field is empty.

CIS Windows 11 Enterprise 3.0.0 - L1 (Custom)

Overview:

The Devicie CIS Windows 11 Enterprise 3.0.0 - L1 template provides configuration is to meet the CIS Enterprise 3.0 Benchmark. 

Intune Description:

Centre for Internet Security Windows 11 Enterprise Benchmark v3.0.0 Level 1 (Custom)

Scope:

This baseline should be applied to Windows devices.

Policy Impact Areas:

When deployed, this policy will impact:

  • TBA

Deployment Notes

  1. Pre-Deployment Considerations:

    • TBA

  2. Post-Deployment Validation:

    • TBA

Known Issues and Resolutions

  • Issue 1: None at this time

    • Resolution: N/A 

Configuration Settings:

OMA-URI Settings

BackupDirectory

Name

BackupDirectory

Description

18.9.25.1

OMA-URI

./Device/Vendor/MSFT/LAPS/Policies/BackupDirectory

Data type

Integer

Value

1

PasswordExpirationProtectionEnabled

Name

PasswordExpirationProtectionEnabled

Description

18.9.25.2

OMA-URI

./Device/Vendor/MSFT/LAPS/Policies/PasswordExpirationProtectionEnabled

Data type

Boolean

Value

True

ADPasswordEncryptionEnabled

Name

ADPasswordEncryptionEnabled

Description

18.9.25.3

OMA-URI

./Device/Vendor/MSFT/LAPS/Policies/ADPasswordEncryptionEnabled

Data type

Boolean

Value

True

PasswordComplexity

Name

PasswordComplexity

Description

18.9.25.4

OMA-URI

./Device/Vendor/MSFT/LAPS/Policies/PasswordComplexity

Data type

Integer

Value

4

PasswordLength

Name

PasswordLength

Description

18.9.25.5

OMA-URI

./Device/Vendor/MSFT/LAPS/Policies/PasswordLength

Data type

Integer

Value

15

PasswordAgeDays

Name

PasswordAgeDays

Description

18.9.25.6

OMA-URI

./Device/Vendor/MSFT/LAPS/Policies/PasswordAgeDays

Data type

Integer

Value

30

PostAuthenticationResetDelay

Name

PostAuthenticationResetDelay

Description

18.9.25.7

OMA-URI

./Device/Vendor/MSFT/LAPS/Policies/PostAuthenticationResetDelay

Data type

Integer

Value

4

PostAuthenticationActions

Name

PostAuthenticationActions

Description

18.9.25.8

OMA-URI

./Device/Vendor/MSFT/LAPS/Policies/PostAuthenticationActions

Data type

Integer

Value

3

AuditApplicationGuard

Name

AuditApplicationGuard

Description

18.10.43.1

OMA-URI

./Device/Vendor/MSFT/WindowsDefenderApplicationGuard/Audit/AuditApplicationGuard

Data type

Integer

Value

1

AllowCameraMicrophoneRedirection

Name

AllowCameraMicrophoneRedirection

Description

18.10.43.2

OMA-URI

./Device/Vendor/MSFT/WindowsDefenderApplicationGuard/Settings/AllowCameraMicrophoneRedirection

Data type

Integer

Value

0

AllowPersistence

Name

AllowPersistence

Description

18.10.43.3

OMA-URI

./Device/Vendor/MSFT/WindowsDefenderApplicationGuard/Settings/AllowPersistence

Data type

Integer

Value

0

SaveFilesToHost

Name

SaveFilesToHost

Description

18.10.43.4

OMA-URI

./Device/Vendor/MSFT/WindowsDefenderApplicationGuard/Settings/SaveFilesToHost

Data type

Integer

Value

0

ClipboardSettings

Name

ClipboardSettings

Description

18.10.43.5

OMA-URI

./Device/Vendor/MSFT/WindowsDefenderApplicationGuard/Settings/ClipboardSettings

Data type

Integer

Value

1

AllowWindowsDefenderApplicationGuard

Name

AllowWindowsDefenderApplicationGuard

Description

18.10.43.6

OMA-URI

./Device/Vendor/MSFT/WindowsDefenderApplicationGuard/Settings/AllowWindowsDefenderApplicationGuard

Data type

Integer

Value

1

AllowTelemetry

Name

AllowTelemetry

Description

18.10.15.1

OMA-URI

./Device/Vendor/MSFT/Policy/Config/System/AllowTelemetry

Data type

Integer

Value

0

Devicie Template Name

CIS Windows 11 Enterprise 3.0.0 - L1 (Custom)

Default Intune Deployed Name

CIS Windows 11 Enterprise 3.0.0 - L1 (Custom)

Version

1.0

Template Last Updated

Nov 8, 2024

Document Last Updated:

Jul 24, 2025