SCE for Windows v2.3.0: Faster Enforcement and Enhanced Compliance Reporting # Release Notes for Puppet SCE v2.3.0 This release improves enforcement performance, provides more detailed compliance reporting, and simplifies ongoing maintenance using Puppet native modules. Security Compliance Enforcement (SCE) automates the enforcement of CIS Benchmark recommendations and DISA STIG guidance across Windows and Linux environments, helping teams maintain secure and compliant configurations at scale. SCE is included with Puppet Core and Puppet Enterprise Advanced. ## Why Upgrade? • Improve performance and scalability by reducing policy enforcement overhead. • Gain more precise visibility into compliance changes. • Simplify compliance operations by identifying, validating, and remediating configuration drift more efficiently. ## What's New? • Direct enforcement of Windows security and audit policies through Puppet native modules and Windows APIs, reducing reliance on third-party DSC content. • Per-setting reporting, with each CIS control mapped to its own resource in the Puppet catalog. ## Security and Maintenance Updates This release resolves an issue that could cause CIS compliance scans to incorrectly report AutoAdminLogon settings as non-compliant on Windows Server 2019 and 2022. ## Next Steps • Read the release notes [here](https://help.puppet.com/sce/current/windows/scew_relnotes_v230.htm). • Plan your upgrade to SCE for Windows v2.3.0. Learn More New to SCE? Explore the documentation to learn how SCE helps maintain secure configurations, thus protecting systems and data. [Learn more about SCE](https://help.puppet.com/sce/current/intro/sce_intro.htm) Sent by Zapier