An error occurred:

Microsoft Windows 11 STIG

Microsoft Windows 11 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN11-CC-000085 V-253372 Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers. Cat II
WN11-CC-000090 V-253373 Group Policy objects must be reprocessed even if they have not changed. Cat II
WN11-CC-000100 V-253374 Downloading print driver packages over HTTP must be prevented. Cat II
WN11-CC-000105 V-253375 Web publishing and online ordering wizards must be prevented from downloading a list of providers. Cat II
WN11-CC-000110 V-253376 Printing over HTTP must be prevented. Cat II
WN11-CC-000115 V-253377 Systems must at least attempt device authentication using certificates. Cat II
WN11-CC-000120 V-253378 The network selection user interface (UI) must not be displayed on the logon screen. Cat II
WN11-CC-000130 V-253379 Local users on domain-joined computers must not be enumerated. Cat II
WN11-CC-000145 V-253380 Users must be prompted for a password on resume from sleep (on battery). Cat II
WN11-CC-000150 V-253381 The user must be prompted for a password on resume from sleep (plugged in). Cat II
WN11-CC-000155 V-253382 Solicited Remote Assistance must not be allowed. Cat I
WN11-CC-000165 V-253383 Unauthenticated RPC clients must be restricted from connecting to the RPC server. Cat II
WN11-CC-000170 V-253384 The setting to allow Microsoft accounts to be optional for modern style apps must be enabled. Cat III
WN11-CC-000175 V-253385 The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft. Cat III
WN11-CC-000180 V-253386 Autoplay must be turned off for non-volume devices. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.