Australian Cybersecurity Centre recommendations for hardening Windows.

[pingu-the-penguin]

I haven't gone through the entire document to compare with the policies set here but my suggestion to disable autoplay and autorun stemmed from this document. Could be worth a look to see if there are policies implemented that might be missing from the app.

PROTECT - Hardening Microsoft Windows 10 and Windows 11 Workstations (July 2024).pdf

There's also one for Microsoft apps (not sure if they are just listing the Microsoft 365 Security Baselines but worth a lookover anyway)

Hardening Microsoft 365, Office 2021, Office 2019 and Office 2016 (July 2023).pdf