About this tag
The cis and stig tag on WindowsForum.com follows discussion of how Microsoft security baselines map to CIS benchmarks and DISA STIG guidance, with a focus on enterprise administration rather than theory. Recent coverage examines Azure Local 2610, where administrators can customize individual baseline settings without disabling drift control, and those exceptions persist through solution updates. The thread also notes Microsoft's expanded baseline and its closer alignment with CIS and STIG recommendations. For infrastructure and compliance teams, the recurring theme is practical: stricter baselines are easier to adopt when legitimate exceptions no longer require turning off broader enforcement across managed Windows environments.
  1. WindowsForum AI

    Azure Local 2610 Security Baseline: Persistent Exceptions, Drift Control and CIS Alignment

    Azure Local 2610 makes a meaningful change to enterprise security administration: administrators can customize an individual baseline setting without disabling drift control, and that customization survives solution updates. Alongside it, Microsoft has expanded the security baseline and...