…

..

allow network connectivity during connected standby – [ACConnectivityInStandby_2, DCConnectivityInStandby_2].xml

…

allow Windows Spotlight collections - [AllowSpotlightCollection].xml

…

disable automatic data collection for Web Threat Defense – [AutomaticDataCollection].xml

…

disable built-in Administrator account – [Accounts_EnableAdministratorAccountStatus].xml

…

disable built-in Guest account – [Accounts_EnableGuestAccountStatus].xml

…

disable elevated privileges for MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml

…

disable elevated privileges for user MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml

…

disable Internet Connection Sharing service – [ConfigureInternetConnectionSharingServiceStartupMode].xml

…

disable Microsoft FTP Service – [ConfigureMicrosoftFTPServiceStartupMode].xml

…

disable online speech recognition and personalization - [AllowInputPersonalization].xml

…

disable remote assistance - [AllowRemoteAssistance].xml

…

disable remote login - [AllowUsersToConnectRemotely].xml

…

disable Remote Procedure Call Locator service – [ConfigureRemoteProcedureCallLocatorServiceStartupMode].xml

…

disable Routing and Remote Access service – [ConfigureRoutingAndRemoteAccessServiceStartupMode].xml

…

disable simple TCPIP services – [SimpleTcp].xml

…

disable SSDP Discovery Service – [ConfigureSSDPDiscoveryServiceStartupMode].xml

…

disable UPnP Device Host service – [ConfigureUPnPDeviceHostServiceStartupMode].xml

…

disable Windows Game Recording and Broadcasting – [AllowGameDVR].xml

…

disable Windows Media Player Network Sharing Service – [ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode].xml

…

disable Windows Mobile Hotspot Service – [ConfigureWindowsMobileHotspotServiceStartupMode].xml

…

disable Windows Remote Assistance – [UnsolicitedRemoteAssistance, SolicitedRemoteAssistance].xml

…

disable Windows Spotlight features – [AllowWindowsSpotlight].xml

…

disable World Wide Web Publishing Service – [ConfigureWorldWideWebPublishingServiceStartupMode].xml

…

disable Xbox services – [Bundle].xml

…

Disallow manual MDM unenrollment - [AllowManualMDMUnenrollment].xml

…

enable Microsoft Defender SmartScreen - [EnableSmartScreen].xml

…

enable Microsoft Web Threat Defense service – [ServiceEnabled].xml

…

enable password-reuse warnings for work or school accounts – [NotifyPasswordReuse].xml

…

enable UAC prompts for application installations – [UserAccountControl_DetectApplicationInstallationsAndPromptForElevation].xml

…

enable user warnings for malicious web activity – [NotifyMalicious].xml

…

enable user warnings for unsafe applications – [NotifyUnsafeApp].xml

…

enforce account lockout policy – [AccountLockoutPolicy].xml

…

enforce device password and lock requirements – [Bundle].xml

…

enforce secure boot-start driver policy – [BootStartDriverInitialization].xml

…

enforce Windows Defender Firewall on all network profiles – [Bundle].xml

…

hide account details on sign in - [BlockUserFromShowingAccountDetailsOnSignin].xml

…

install Okta attestation certificate - [Bundle].xml

…

prevent enabling lock screen slide show – [PreventLockScreenSlideShow].xml

…

prevent users from changing date and time – [AllowDateTime].xml

…

require admin consent before UAC elevation - [ConsentPromptBehaviorAdmin].xml

…

require PIN for wireless display pairing – [RequirePinForPairing].xml

…

restrict Everyone permissions in network access - [NetworkAccess_RestrictAnonymousAccess].xml

…

set maximum device lock timeout (10 min max) - [MaxInactivityTimeDeviceLock].xml

…