Blog Post

Microsoft Security Baselines Blog
1 MIN READ

Security baseline (FINAL) for Windows 10, version 21H1

Rick_Munck's avatar
Rick_Munck
Icon for Microsoft rankMicrosoft
May 18, 2021

We are pleased to announce the final release of the Windows 10, version 21H1 (a.k.a. May 2021 Update) security baseline package!

Please download the content from the Microsoft Security Compliance Toolkit, test the recommended configurations, and customize / implement as appropriate.

 

This Windows 10 feature update brings very few new policy settings. At this point, no new 21H1 policy settings meet the criteria for inclusion in the security baseline. We are, however, refreshing the package to ensure the latest content is available to you. The refresh contains an updated administrative template for SecGuide.admx/l (that we released with Microsoft 365 Apps for Enterprise baseline), new spreadsheets, .PolicyRules file, along with a script change (commented out the Windows Server options in the Baseline-LocalInstall.ps1 script)

 

Windows 10, version 21H1 is a client only release. Windows Server, version 20H2 is the current Windows Server Semi-Annual Channel release and per our lifecycle policy is supported until May 10, 2022.

 

As a reminder, our security baselines for the endpoint also include Microsoft 365 Apps for Enterprise, which we recently released, as well as Microsoft Edge and Windows Update.

 

Please let us know your thoughts by commenting on this post or via the Security Baseline Community.

Updated May 18, 2021
Version 1.0

7 Comments

  • grantmm's avatar
    grantmm
    Brass Contributor

    Is there any schedule on when this baseline will be available in Intune.

  • Mark_Heitbrink - what that means is that there are new Group Policy settings in Windows. However, none of them are being added to the security baseline - there's no recommendation that they need to be configured for security purposes. The "New Settings" spreadsheet lists those new policies. It's for information only, not because any action is required. 

  • > At this point, no new 21H1 policy settings meet the criteria for inclusion in the security baseline.

     

    Wonder, why there is a "New Settings in Windows 10 and Windows Server v20H2.xlsx" containing 10 new policies ... 

    Got it ... thats "NEW" in 21H1 not in Baseline ...

    THX!

  • mohessu's avatar
    mohessu
    Brass Contributor

    Windows 10, version 21H1 is a client only release. 

    Really?