Microsoft releases Windows 10 Version 2004 security baseline

[silversurfer]

Microsoft announced the final version of its security configuration baseline settings for Windows 10, version 2004 and Windows Server, version 2004, downloadable today using the Microsoft Security Compliance Toolkit.

As announced on June 3 when a draft of the security baseline for Windows 10 20H1 was published, Microsoft included several changes to the Windows 10, version 2004 recommended security settings among which new account password length security policies, new Defender features, and enhanced LDAP Authentication protection stand out.
 
The Windows 10 security baseline enables enterprise security admins to use Microsoft-recommended Group Policy Object (GPO) baselines to improve the overall security posture of Windows 10 systems in their environment and decrease their attack surface.
 
"The baselines are designed for well-managed, security-conscious organizations in which standard end users do not have administrative rights," Microsoft Federal Customer Success Unit (CSU) Consultant Rick Munck said yesterday.
 
According to Microsoft, new 'Relax minimum password length limits' and 'Minimum password length audit' security settings will be available in Windows 10 (Server) 2004 under Account Policies\Password Policy:

• Minimum password length audit: This security setting determines the minimum password length for which password length audit warning events are issued. This setting may be configured from 1 to 128.
• Relax minimum password length legacy limits: This setting controls whether the minimum password length setting can be increased beyond the legacy limit of 14.

Read more: https://www.bleepingcomputer.com/news/se...-baseline/