Security baseline for Windows 10 (“Threshold 2”) – DRAFT

[Removing the attachment from this post. Please see updated baseline content for Windows 10 v1507 (TH1) and Windows 10 v1511 (TH2).]

Microsoft is pleased to announce the beta release of the security baseline settings for Windows 10 version 1511 (Build 10586, a.k.a., “Version 1511,” “Threshold 2,” “TH2,” “November Update”) along with updated baseline settings for Internet Explorer 11. Note that we are also separately releasing final guidance for the original Windows 10 release, build 10240, a.k.a., “Version 1507,” “Threshold 1” or “TH1.” The only differences between the TH1 final and the TH2 draft are the new settings that apply only to TH2.

The downloadable attachment to this blog post includes importable GPOs, tools for applying the GPOs to local GPO, custom ADMX files for Group Policy settings, and all the settings in spreadsheet form. We will also be publishing SCM .CAB files for this Windows 10 baseline shortly, and will announce their availability on the Security Guidance blog. (Note that we will not be providing updated SCM .CAB files for the IE11 guidance. For that content, see the attachment on this blog post.)

We will post shortly about technical details and issues in the baselines.

[Attachment updated, 15-Nov-2015 15:42 US Eastern to address minor issues.]