18.10.92.2.3 (L1) Ensure 'Enable features introduced via servicing that are off by default' is set to 'Disabled'

Information

This policy settings configures whether or not features and enhancements that are introduced through monthly cumulative updates (servicing), are enabled on the system.

The recommended state for this setting is: Disabled

Often, new features or enhancements that are enabled by default (before IT administrators are ready to manage them) can negatively impact the user experience or introduce bugs and security risks.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\\Windows Components\Windows Update\Manage end user experience\Enable features introduced via servicing that are off by default

This Group Policy path may not exist by default. It is provided by the Group Policy template WindowsUpdate.admx/adml that is included with the Microsoft Windows 11 Release 22H2 Administrative Templates v3.0 (or newer).

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/16515

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: c195a41254b9ce5f9e7a2ee7bd40e9d216908fac9b883e675d3e82f7d1d5fe46