<div dir="ltr"><p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Product:<br>
BigFix Compliance</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Title:<br>
Updated Universal Checklist for Windows Server to support more recent
versions of CIS and DISA benchmarks.</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Published
Sites:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Universal
Checklist for Windows Server, site version 3.<br>
(The site version is provided for air-gap customers.)</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Details:
Universal Checklist for Windows Server</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Total
Fixlets: 508</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Total
New Fixlets: 0</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Total
Updated Fixlets:12</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Total
Deleted Fixlets: 0</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Fixlets
with Remediation: 493</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Parameterized
Fixlets : 361</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Benchmark
Sources: CIS and DISA STIGs</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Applies
To: Windows Server 2016, 2019, 2022, 2025</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">UPDATED</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Turn off toast notifications on the lock screen’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Turn off Help Experience Improvement Program’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Do not preserve zone information in file attachments’ is set to ‘Disabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Notify antivirus programs when opening attachments’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Configure Windows spotlight on lock screen’ is set to ‘Disabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Do not suggest third-party content in Windows spotlight’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Do not use diagnostic data for tailored experiences’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Turn off all Windows spotlight features’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Turn off Spotlight collection on Desktop’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Prevent users from sharing files within their profile.’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Always install with elevated privileges’ is set to ‘Disabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Ensure
‘Prevent Codec Download’ is set to ‘Enabled’</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Both
analysis and remediation checks are included</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Some
of the checks allow you to use the parameterized setting to enable
customization for compliance evaluation. Note that parameterization and
remediation actions require the creation of a custom site.</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Actions
to take:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">To
subscribe to the above site, you can use the License Overview Dashboard to
enable and gather the site. Note that you must be entitled to the BigFix
Compliance product, and you must be using BigFix version 10 and later.</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">If
you use custom sites, update your custom sites accordingly to use the latest
content. You can synchronize your content by using the Synchronize Custom
Checks wizard. For more information, see</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"><a href="https://help.hcl-software.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html" target="_blank" style="color:blue"><b><span lang="EN-IN">Using the
Synchronize Custom Checks wizard</span></b></a></span><b><span lang="EN-IN"></span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">Use
the SCM Synchronize Custom Checks wizard to update any custom checks in your
deployment whose external sources have since been updated by HCL. You can use
any additional functionality or bug fixes ...</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">More
information:<br>
To know more about the BigFix Compliance SCM checklists, please see the
following resources:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">BigFix
Forum:<br>
</span></b><span lang="EN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0" style="color:blue"><b><span lang="EN-IN">https://forum.bigfix.com/c/release-announcements/compliance</span></b></a></span><b><span lang="EN-IN"></span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">BigFix
Compliance SCM Checklists:<br>
</span></b><span lang="EN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sJEji05sRie522iksNIya8RoKSDGBtgSCKlAzsF0N%2Fo%3D&reserved=0" style="color:blue"><b><span lang="EN-IN">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></b></a></span><b><span lang="EN-IN"></span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN-IN">We
hope you find this latest release of SCM content useful and effective. Thank
you!</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><i><span lang="EN-IN">–
The BigFix Compliance team</span></i></b><b><span lang="EN-IN"></span></b></p></div>