Security baseline (FINAL) for Windows 10 v1909 and Windows Server v1909

Moin from Germany,

I read the change regarding Exploit Protection in the blog article. I also saw the remove script in the download package
But which setting regarding the Exploit Protection within the GPOs has changed? I don't see anything there in the change history.

[Aaron Margosis] Good question. The way Exploit Protection (EP) is intended to be deployed through Group Policy is with the "Use a common set of exploit protection settings" setting in "Computer Configuration\Administrative Templates\Windows Components\Windows Defender Exploit Guard\Exploit Protection." You configure that setting with the full path to an XML file (specific path is up to you, for example on a file share) that contains EP configuration settings. We could never include that directly in the baselines because we can't specify a path that works for everyone. If you never deployed that XML file then you don't need to do anything to undo its effects!