CEM for Windows
You can deploy CEM for Windows to help ensure that your servers and workstations on Microsoft Windows operating systems comply with CIS Benchmarks.
By default, CEM enforces the Level 1 server profile on Windows Server 2016 and Windows Server 2019. CEM enforces the Level 1 corporate enterprise profile on Windows 10 Enterprise. For more information about CIS Benchmarks, see Center for Internet Security (CIS) rules.
To take advantage of new features, fixes, and improvements, install the latest version of CEM. You can learn about the latest release by reviewing the Release notes. Then, to install CEM, follow the instructions in Installing CEM. By default, CEM runs automatically on any classified nodes and does not require configuration. However, if you want to configure CEM to meet your organization's requirements, follow the instructions in Configuring CEM.