Microsoft Releases New Security Baseline Package for Windows 11

Microsoft recently released a new Baseline Security Package for Windows 11. Baseline Security Packages are Microsoft-recommended configuration settings for adequate security in organizations. Two new settings are added to this release, along with a couple of changes.

Script Scanning

Script Scanning is a Windows Defender feature related to automating anti-malware functions. This was only enabled for Domain-jointed computers, and now it is also coming to MDM configurations. Going forward Microsoft will enforce the enablement of script scanning.

Driver Installation Restrictions

Microsoft uncovered a nasty vulnerability in Windows this year dubbed ‘PrintNightmare’. This enabled an attacker to gain domain administrative privileges just by compromising a single PC in a network.

Microsoft released a subsequent patch and has now added it as a new setting for MS Security Guide custom administrative template for SecGuide.admx/l.

We have added a new setting to the MS Security Guide custom administrative template for SecGuide.admx/l (Administrative Templates\MS Security Guide\Limits print driver installation to Administrators) and enforced the enablement.

Microsoft Edge Legacy

Microsoft Edge Legacy-related settings have been removed from the baseline package. Users are advised to use the new Microsoft Edge based on Chromium.

Tamper Protection

Tamper Protection is also a Windows Defender feature that secures the Antivirus and prevents malicious attempts to change security settings. With the new Security Baseline package, Microsoft recommends the enabling of this setting.

We have added a new setting to the MS Security Guide custom administrative template for SecGuide.admx/l (Administrative Templates\MS Security Guide\Limits print driver installation to Administrators) and enforced the enablement.

Indranil Chowdhury
Indranil is a Med school student and an avid gamer. He puts his absolute faith in Lord Gaben and loves to write. Crazy about the Witcher lore, he plays soccer too. When not playing games or writing, you can find him on 9gag spreading the Pcmasterrace propaganda.