CIS check '18.10.3.2 Ensure 'Prevent non-admin users from installing packaged Windows apps' is missing from CIS Windows 11 Intune v2.0.0 Standard

Products

• Control Compliance Suite Standards Database
• Control Compliance Suite
• Control Compliance Suite Standards Server
• Control Compliance Suite Standards Module

Issue/Introduction

Control Compliance Suite (CCS)

You are looking for the CIS check '18.10.3.2 Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled' in the CIS Microsoft Intune for Windows 11 Benchmark v2.0.0 standard in CCS, but the check is missing from this version of the CCS Standard.

Environment

CCS 12.6.x

CCS 12.7

Cause

As per the CIS Microsoft Intune for Windows 11 Benchmark v2.0.0 PDF file, it looks like that check was removed by CIS:

Resolution

The Center for Internet Security (CIS) removed this check from the CIS Microsoft Intune for Windows 11 Benchmark v2.0.0, so the check in the CCS standard for Windows 11 Intune was removed as well as the CCS standard needs to reflect the CIS Benchmarks to be able to certify with CIS that the CCS standards reflect their recommendations.