You are reading the article Windows 10 2004 Security Baseline Has 4 Settings Changes updated in December 2023 on the website Cancandonuts.com. We hope that the information we have shared is helpful to you. If you find the content interesting and meaningful, please share it with your friends and continue to follow and support us for the latest updates. Suggested January 2024 Windows 10 2004 Security Baseline Has 4 Settings Changes
Windows 10 2004 security baseline has 4 settings changes749
Share
X
Microsoft announced new changes to Windows 10 2004 security baseline.
The updates touch on password length policies, Microsoft Defender ATP, and more Windows security features.
To discover other ways to optimally secure your PC, check out the Windows 10 Security section.
You can always stop by the Windows 10 for news and all matters updates pertaining to the operating system and Windows apps, including Microsoft Office.
Applying best practices to your Windows 10 security is no easy task, even with all the antivirus tools available to you, including Microsoft Defender Advanced Threat Protection (MDATP).
But the Microsoft security baseline can make things a lot easier for you when you’re configuring your environment to minimize its attack surface.
Well, Microsoft recently released the fundamental security configuration settings for Windows 10 and Windows Server 2004.
1. Extended Protection for LDAP AuthenticationMicrosoft has updated the MS Security Guide to make Extended Protection for LDAP Authentication part of Windows. The setting isn’t new though as it came with the Windows Server v1809 Domain Controller baseline.
With the latest security baseline changes, you can use Extended Protection for LDAP Authentication without having to create a custom ADMX. In addition, the policy is available to all Active Directory domain controllers.
The Extended Protection for LDAP Authentication baseline value remains the same though. Only its location has changed.
However, you need to have installed the March 10, 2023 security patch to configure the policy on Windows 10.
2. Microsoft Defender ATP file hashMDATP users now have the option to turn on file hashing and enhance blocking for custom indicators in the Windows antivirus.
When the new setting is on, Windows computes a file hash for every executable file that MDATP scans.
But there’s a catch—MDATP file hashing may slow down your PC. It’ll certainly take a toll on your machine if you frequently install or develop executables or update your applications.
Microsoft explains:
The scenarios where you may want to test more thoroughly for performance include devices where you frequently create new executable content (for example, developers) or where you install or update applications extremely frequently.
The tool mitigates the performance impact by generating file hashes only once for each scanned executable. Still, you may want to keep the new setting off if you don’t use Microsoft Defender ATP.
If you really have to use the setting, Microsoft recommends that you implement it in a controlled manner. This will allow you to do a thorough performance cost analysis.
3. Windows 10 Account Password LengthMicrosoft appears very committed to building systems that require no passwords to access. You can tell that from the latest improvements on features like Windows Hello.
After deprecating the Windows 10 account password expiry policy, the Redmond tech giant introduced two new password security settings.
Relax minimum password length limits is one of the new settings, and it allows admins to enforce user password lengths of up to 128 characters. Before this update, users couldn’t set passwords longer than 14 characters.
Longer passwords are obviously more difficult to guess and are an important safeguard against brute force attacks.
Microsoft says that the new setting may be incompatible with existing systems and processes, however. That’s why there’s the new Minimum password length audit setting.
The additional feature lets you assess the impact of changing your password length policy. Apart from that, it includes three new SAM events for configuration, errors, and awareness.
This way, you’re less likely to change your password length policies oblivious of the damage the changes may cause to other Windows systems.
Nonetheless, the new policy isn’t part of the security baseline for Windows 10 2004.
4. Behavior MonitoringMicrosoft doesn’t think Behavior Monitoring requires enforcement, so it removed it from the security baseline. As a result, the feature is no longer in its usual location.
Microsoft added:
We are removing Computer ConfigurationAdministrative TemplatesWindows ComponentsMicrosoft Defender AntivirusReal-time ProtectionTurn on behavior monitoring.
Besides announcing the security baseline changes, Microsoft revealed that it will be releasing updates for LGPO and Policy Analyzer.
Was this page helpful?
x
Start a conversation
You're reading Windows 10 2004 Security Baseline Has 4 Settings Changes
Windows Update And Security Settings In Windows 10
Looking for Windows Updates on your Windows 10 PC? Go to the Windows 10 Settings app to find the latest Windows Update and install them on your PC. In this post, we will have a look at the Windows Update and Security Settings in Windows 10 and learn how to change and update them on your PC.
Windows Update & Security Settings in Windows 10
Windows Update
Delivery Optimization
Windows Security
Backup
Troubleshoot
Recovery
Activation
Find my device
For developers
Continue reading to know more about all these categories of settings.
1. Windows UpdateAdvanced options include update options and update notifications where you can turn on/off the settings for the following.
Receive updates for other Microsoft products when you update Windows
Download updates over metered connections
Restart the device as soon as possible when a restart is required to install an update
Show a notification when your PC requires a restart to finish updating
You will also find links to pause updates, delivery optimization, and privacy settings.
Furthermore, in the Windows Update tab, under Related links, you will see the options such as Check Storage and OS build info.
Windows Update will work differently in Windows 10. There will be no Patch Tuesdays. Microsoft has said it will use two different methods to provide updates: regular updates to normal users and periodic updates to users operating mission-critical operations. Consumers will be delivered the updates and new features as soon as they are available. Businesses will be able to opt-in to the fast-moving consumer pace, or lock-down mission-critical environments, to receive only security and critical updates to their systems.
TIPS:
You can use Quiet Hours to schedule restarts.
You can now log in automatically after Windows Update if you enable the Use my sign in info to automatically finish setting up my device after an update setting.
2. Delivery OptimizationYou can also download Windows Updates & Apps from other Windows 10 PCs. When this option is turned ON, your PC may also send parts of previously downloaded Windows Updates and apps to PCs on your local network or PCs on the internet, depending on what’s selected from the provided options.
Advanced options include settings where the users can limit how much bandwidth is used for downloading or uploading updates, monthly upload limit, and such. Activity monitor will show the download statistics and upload statistics.
See this post if you wish to learn about a workaround to Turn Off Windows Update in Windows 10. You can also make Windows 10 notify you before downloading Updates. This post shows how to run Windows Updates from Command-Line.
3. Windows Security
Virus & threat protection
Account protection
Firewall & network protection
App & browser control
Device security
Device performance & health
Family options
Read: Windows 10 Security features.
4. Backup 5. TroubleshootRunning the troubleshooter might help your device keep functioning properly.
Further below, you will see various options where you can run the troubleshooter to find and fix problems.
Internet connections
Playing audio
Printer
Windows update
Bluetooth
Incoming connections
Keyboard
Network adapter
Power
Program compatibility troubleshooter
Recording audio
Search and indexing
Shared folders
Speech
Video playback
Windows store apps
6. RecoveryIn this tab, you will find the option to reinstall Windows in case your PC is giving you problems. It is also possible to go back to the previous version of Windows 10 on your PC within a span of 10 days or so. Advanced startup will enable you to restore Windows from a system image, change Windows Startup settings, and so on.
You can explore and learn more about the recovery options.
If by any chance you don’t like the updated Windows 10 OS, you can roll back to your previous build of Windows from here using a system image or a removable drive. The recovery option also gives you a chance to Reset your PC where you can reinstall Windows in your PC while keeping your files safe.
7. ActivationHere, you will find details of the Windows edition and activation. Users can go to the store to upgrade your version of Windows and change the product key.
8. Find my deviceThis is a feature that can help you locate any of your Windows 10 device such as a PC, laptop, Surface, or a Surface Pen when it is lost or stolen. To use this feature, the location should be turned on. You have to sign in to your device with a Microsoft account and be sure you are an administrator on it. This is not applicable to a work or school account, iOS devices, Android devices, or Xbox consoles.
Select Change for the device you want to change.
9. For developersAs the name suggests, this tab includes settings only for developers and is linked to the official Microsoft website where developers can enable their device for development, and sideload apps.
You have to sign in as an administrator in order to make changes to these settings.
These settings are to be used for development purposes only.
We have, thus, covered all about the Windows Update and Security Settings in Windows 10.
I hope this was a useful read!
Windows 10 Update Kb4579311 Releases For Version 2004
Microsoft is making available the update KB4579311 for PCs running Windows 10 version 2004. This is the ninth quality update available for this version, and it’s a small update that addresses several problems.
KB4579311 bumps the version number to build 19041.572, and according to the software giant, fixes a problem with verifying usernames and password, and improves security for Office apps and Windows performs basic operations. (Since version 2004 and 20H2 share the same core file system, both versions are receiving the same fixes.)
Microsoft has announced KB4579311 in the Windows support site, and it’s referred as “October 13, 2023—KB4579311 (OS Build 19041.572).” If you’re already running the Windows 10 May 2023 Update, this update will address these problems:
Addresses an issue with creating null ports using the user interface.
Fixes a problem with a possible elevation of privilege in win32k.
Addresses an issue with the Group Policy service that might recursively delete critical files in alphabetic order from %systemroot%systm32.
Security updates to Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Media, Windows Fundamentals, Windows Authentication, Windows Virtualization, and Windows Kernel.
You can download the updates to install them manually for version 2004 with the links below:
Microsoft has announced KB4577671 in the Windows support site, and it’s referred as “October 13, 2023—KB4577671 (OS Builds 18362.1139 and 18363.1139).” If you’re already running the Windows 10 November 2023 Update or May 2023 Update on your device, this quality update will fix these issues:
Security updates to Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Media, Windows Fundamentals, Windows Authentication, Windows Virtualization, and Windows Kernel.
Addresses an issue with the Group Policy service that might recursively delete critical files the System32 folder.
Fixes a problem with creating null ports using the user interface.
Addresses an issue with a possible elevation of privilege in win32k.
Microsoft has also announced KB4577668 in the Windows support site, and it’s referred as “October 13, 2023—KB4577668 (OS Build 17763.1518).” If you’re already running the October 2023 Update on your computer, this update will address these problems:
Fixes a problem that causes apps that use Dynamic Data Exchange (DDE) to stop responding when closing the app.
Addresses an issue with the Group Policy service that might recursively delete critical files in alphabetic order from the System32 folder.
Fixes a problem with a possible elevation of privilege in win32k.
Security patches for vulnerabilities in Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Media, Windows Shell, Windows Cloud Infrastructure, Windows Fundamentals, Windows Authentication, Windows Virtualization, Windows Kernel, and Windows Storage and Filesystems.
The April 2023 Update (version 1803) has reached the end of support on November 12, 2023, but the company has released update KB4580330 to address problems while bumping the version number to build 17134.1792.
The version 1709 (Fall Creators Update) is no longer supported, but organizations running the Enterprise or Education edition of Windows 10 are getting update KB4580328 to address a several issues and bumps the version number to 16299.2166.
In addition, Microsoft has ended support for Windows 10 version 1703 (Creators Update), but organizations with computers still running this release can now download KB4580370, which resolves a few issues. Also, the update ramps the version number to build 15063.2525.
Windows 10 Anniversary Update (version 1607) is getting update KB4580346 to address serveral issues, even though operating system is no longer supported, and the quality update bumps the version number to build 14393.3986.
Finally, the original release of Windows 10 (version 1507) is getting update KB4580327. The release increase the version number to 10240.18725 and fixes several problems.
If the KB4579311 update is causing issues on your device, you can always uninstall it to revert the changes.
To uninstall KB4579311, or any other update, use these steps:
Open Start.
Type the following command to view the update history and press Enter:
wmic qfe list brief /format:table
Check the Windows Update history of your device, and identify the update by its HotFixID and InstalledOn information.
Type the following command to uninstall the update from your computer and press Enter:
wusa /uninstall /kb:4579311In the command, replace “4579311” for KB number that correspond to the update that you’re trying to uninstall. For example, if you’re trying to uninstall update KB4579311, then the number that you can have to use in the command is “4579311.”
Continue with the on-screen directions (if applicable).
Once you complete the steps, the recently installed update will be removed from your computer fixing any issues as a result of the release.
If your computer won’t boot after installing KB4579311, you can remove update from the Advanced startup environment using these steps.
How To Lock Microphone Settings On Windows 10.
If you are using Windows 10 and are sick and tired of your microphone sounding different in each and every app that you use. This article will show you how to lock your Microphone settings so that apps and programs can’t automatically adjust settings according to their needs. This is an important change you need to make if you are having microphone issues across different software.
Related: How to set a maximum volume for devices on Windows 10.
For a long, long time I thought setting up and using a microphone on Windows 10 was an easy process. I have always considered it a plug and play affair. Although this is the case for a lot of people, anyone chasing good quality sound that stays the same across the entire operating system is a lot more complicated than you originally thought. Apart from all the obvious things you need to consider, like interference and the quality of your microphone, you also need to consider how Windows Manages Microphones.
Recently we put together a guide about fixing microphone cracking and interference which you can find here. However, for this guide, we’ll be focusing primarily on making sure Windows stops letting software adjust microphone settings. Locking your Microphone volume to your desired volume. Before you start the steps shown below, make sure you have also done a virus/malware scan on your PC using Windows Defender and Malwarebytes or whatever program you have chosen as your defence. If everything comes back clear, jump straight into the steps shown below.
How do you lock your microphone volume settings on Windows 10?
To begin, the first thing you need to change is the level of control applications have over your Microphone. This won’t stop the software from using your Microphone entirely, but it will stop annoying changes in sound levels and quality.
After you have made this change you should have stable microphone settings moving forward. If this still doesn’t solve your Microphone issues, you can try stopping Windows adjust sound settings whenever it detects communications.
From this menu select Communications, then choose the Do nothing option at the bottom of the page.
When you have made both of these changes Windows 10 will stop trying to do what it thinks is best for your Microphone settings. However even though you have made these changes, you will still need to configure your Microphone settings within whatever app/program you are using. This time around you’ll have the added benefit of Windows not trying to intervene when it feels something isn’t going according to plan.
Configure Pen And Windows Ink Workspace Settings In Windows 11/10
We have seen how Microsoft is evolving Windows 11/10 with all the major releases since its launch. Today we are going to see how Microsoft is working very hard, especially for its Surface Devices. You may have come across or may have heard about Windows Ink Experience, it’s a new name for Pen and touch devices working with the OS.
Pen and Windows Ink Settings in Windows 11/10To open Pen and Windows Ink settings, go to:
You would see that the whole page to be divided into different sections which will include settings for Pen and Windows Ink Workspace.
PenIn the Pen section, you may see the settings on what task should the Pen performs when connected, which hand you are using to hold the pen, etc. If a pen is not connected then you may find a different scenario when Pen & Windows Ink settings are opened up.
When paired, Windows assumes that you are a right-handed person and works accordingly. Its because when a pen is used for opening the context menus, the menu opens on the opposite side of the hand being used. Its because if you are right-handed and the menu opens on the right side of the tip then you might not be able to see it.
The settings for Pen also includes the options for Visual Effects and Cursor that appears while using the Pen. Yes, you can disable them any time you want. The cursor is shown as a dot on the position where the tip of Pen is hovering. Another setting that will definitely come handy to you is “Ignore touch input when I’m using my pen”. This setting will ignore your hand gestures and touch when a pen is connected or being used.
At last, there is one more setting that you might want to use. It will allow you to write anything using Pen and it will be converted into text. It is named as “Show the handwriting panel when in not tablet mode and there’s no keyboard attached”. When enabled. it will show you a keyboard icon in the notification area.
Windows Ink ExperienceWindows Ink Experience is just like the app drawer or start menu which gathers all the applications you can use with the help of a stylus or a digital Pen. To access Windows Experience you need to enable Windows Ink Workspace.
Enable Windows Ink Workspace
A new button should appear on the right end of the taskbar.
The workspace used to include applications like Sticky notes, Sketchpad, Screensketch, and recent applications.
But with an update to Windows 10, it has changed. Right now you get two options which include Windows Whiteboard and Fullscreen snip.
You may have figured out that these applications in Windows Ink Workspace are the ones that can work with a Pen and can do wonders.
If you have a Surface device then you may have already understood the wonders I’m talking about.
Let us know about your experience of using Pen with your Windows device.
How do I calibrate my Surface Pen Windows 11?Sometimes, your Pen does not work properly on your Surface device. This can be caused due to the corrupted diver. Apart from this, calibrating the Pen can also help. To calibrate your Surface Pen on Windows 11, search Calibrate and then tap on Settings. Now, check that the monitor shown on the screen matches the monitor you want to calibrate. After that, follow the on-screen instructions to calibrate your Pen.
How do I get the Pen menu on Windows 11?You can easily bring the Pen menu on your screen on Windows 11. If you have a Pen, tap it on the screen. After that, the Pen menu will appear at the corner of the Taskbar.
I hope this helps.
22 New Features In Windows 10 Version 2004 From May 2023
22 New Features In Windows 10 Version 2004 From May 2023
424
Share
X
We propose to see 22 of the best
features
that come with the new
Windows 10
version
2004.
2004 is not a year, and not even a consequent
version
number. The first two digits, 20 come from the last two digits of the year (2023), and the last two digits, 04, come from the month it was issued.
If you want to read more about Windows Updates, go straight to our Update & Security section.
Do you need to read more news about Windows 10? We’ve got you covered with the Windows 10 News Hub.
We are hours away from a Windows 10 version 2004 rollout or how it was previously called, version 20H1. It seemed like a pretty long journey, and Insiders have witnessed every single new feature, culminating with the Windows Build 2023 event.
As we reached the imminent release, we propose to see some of the best features that come with the new Windows 10 version 2004.
Windows 10 version 2004 best improvementsFirst of all, let’s clear up what this 2004 means. Although it might be confusing, 2004 is not a year, and not even a consequent version number.
The first two digits, 20 come from the last two digits of the year (2023), and the last two digits, 04, come from the month it was issued. In this case, it might be a little confusing because Microsoft delayed the rollout from April to May.
To follow the example, the previous version was 1909 as it was issued in September 2023.
That being said, let’s go briefly through the new improvements:
1. Windows Hello in safe modeYou will be able to launch Windows Hello in the diagnostic mode of Windows 10 2004. In other words, Microsoft is enabling you to use biometric authentication when you need to troubleshoot your computer in Safe Mode.
To use it, you will simply be able to configure Windows Hello PIN sign-in for safe mode. This way, you will be able to access your system’s diagnostic mode to troubleshoot your hardware without providing your password.
2. Reserved Storage is improvedReserved Storage is a feature that arrived with the May 2023 Update and its role is to reserve a portion of the disk for future updates and drivers.
In version 2004, it will be easier to manage the Reserved Storage because it will include DISM options. You will be able to disable it on your devices, and you will be able to check the status of the occupied storage using DISM.
3. New Cortana appVersion 2004 is also bringing a new Cortana app, but not all news is good about it. The assistant will lose some features that aren’t very work-focused like music, connected home, and third-party skills.
The new version will allow you to type or speak out requests to find people or files, or quickly create or queue up emails.
You are also able to use it to check out your calendar, set a reminder, or add entries to your lists in Microsoft To Do.
The end-goal for these changes is to finally transform Cortana into a full-fledged work assistant that will focus more on productivity, helping you quickly find the information you want across Microsoft 365.
4. WSL 2 for Linux integrationWSL is a subsystem that allows Windows users to run native, unmodified Linux command-line tools and apps directly in Windows.
Microsoft added that from 2006 but now it received a stable version, WLS 2, a lot faster, with full Linux kernel, which enables full system call compatibility. Moreover, the kernel will get updated through Windows Update, just like Windows.
5. Task Manager improvementsTask Manager has two new useful functions in Windows 10 version 2004.
For starters, in the Performance tab, if you have a dedicated GPU (I don’t!), you will also see its temperature right next to the usage percentage.
Expert tip:
The other improvement is that it will show the type of disk you have in the left pane and in the details below in the window.
6. Accessibility improvementsWindows 10 version 2004 comes with a lot of accessibility improvements for people with vision problems.
You now have some new settings to make the cursor more visible, the Magnifier option now follows your mouse pointer, so that you don’t have look hard for it. The mouse pointer will now always be in the center of the display.
Also, they improved the Narrator and the Narrator inside Outlook.
We prepared a guide on how to use them if you need more information.
7. Language settings are a lot more clearIt’s not really a big update but the language settings page seems a lot more clear on the new version.
That’s because it includes many features among which there are links to the language and region settings, and also the Windows language, the regional format, and more important, the app language.
Of course, this is the page where you can install new languages.
8. Connect Bluetooth devices fasterIn the new 2004 version, you can connect the devices directly from the notification you get when the Windows device detects the Bluetooth device. Moreover, the OS even tries to show a device name when it identifies it.
Also, Microsoft updated the text of the Add a Device dialog so the list of examples under Bluetooth includes controllers in Windows 10.
We have a guide on how to pair your Bluetooth controller really fast.
9. Data usage in Network settingsMicrosoft has redesigned the network connections settings page. Aside from the fact that it looks a lot better, you can now see data usage information.
10. Mouse cursor speedIn the previous version, the cursor speed setting was set in the Control Panel. Now it’s placed more conveniently in the Mouse category from the Settings app.
You can easily find this page if you type mouse in the Windows Search window.
Other significant improvements and modifications found in the Windows 10 version 2004
Notepad improvements – the Find feature can find wrap-around text, and if you select text before opening the Find dialog, it will get it right into the search box with the selected automatically.
Windows Search improvements – Windows Search
got into File Explorer and has a refreshed design. This means that you get search result suggestions as you type.
Windows Sandbox and virtual desktops –
you can change certain settings such as enabling or disabling the vGPU, allowing network access because
you can now use the configuration files with the Windows Sandbox.
Optional features management –
it’s now possible to select multiple optional features and install them together, and you can see their status after installation.
Update and recovery settings –
there are new controls for how much bandwidth you can use in a given situation. These settings can now use absolute numbers so you can precisely limit the bandwidth usage.
Resetting from the cloud –
you can reset your PC using a new image of Windows 10 downloaded from the cloud.
SwiftKey in more languages – the intelligent prediction and autocorrection capabilities to the built-in Windows 10 keyboard is available in 38 new languages.
You have new kaomoji –
more kaomoji have been added to the list.
Renaming the Virtual Desktops –
Obviously, you can now rename your virtual desktops.
Restarting apps at sign-in –
When turned on, Windows automatically saves your restartable apps when signing out, restarting, or shutting down Windows, and restarts them next time you sign in.
Was this page helpful?
x
Start a conversation
Update the detailed information about Windows 10 2004 Security Baseline Has 4 Settings Changes on the Cancandonuts.com website. We hope the article's content will meet your needs, and we will regularly update the information to provide you with the fastest and most accurate information. Have a great day!