I report this over a year ago (CIS 3.9) and it has not been fixed.
Temporary files files group contains:
C:\Users\ADMIN_NAME\AppData\Local\Microsoft\Windows\Temporary Internet Files*
Startup folders contains:
C:\Users\ADMIN_NAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
These will only protect the user who installed CIS. It would be better to use a wild card for the users name and protect all users.
Windows 7 64 bit
CIS 4.1.149672.916