Navigate

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
WN10-CC-000320	V-220858	Users must be notified if a web-based program attempts to install software.	Cat II
WN10-CC-000325	V-220859	Automatically signing in the last interactive user after a system-initiated restart must be disabled.	Cat II
WN10-CC-000326	V-220860	PowerShell script block logging must be enabled on Windows 10.	Cat II
WN10-CC-000327	V-252896	PowerShell Transcription must be enabled on Windows 10.	Cat II
WN10-CC-000330	V-220862	The Windows Remote Management (WinRM) client must not use Basic authentication.	Cat I
WN10-CC-000335	V-220863	The Windows Remote Management (WinRM) client must not allow unencrypted traffic.	Cat II
WN10-CC-000345	V-220865	The Windows Remote Management (WinRM) service must not use Basic authentication.	Cat I
WN10-CC-000350	V-220866	The Windows Remote Management (WinRM) service must not allow unencrypted traffic.	Cat II
WN10-CC-000355	V-220867	The Windows Remote Management (WinRM) service must not store RunAs credentials.	Cat II
WN10-CC-000360	V-220868	The Windows Remote Management (WinRM) client must not use Digest authentication.	Cat II
WN10-CC-000365	V-220869	Windows 10 must be configured to prevent Windows apps from being activated by voice while the system is locked.	Cat II
WN10-CC-000370	V-220870	The convenience PIN for Windows 10 must be disabled.	Cat II
WN10-CC-000385	V-220871	Windows Ink Workspace must be configured to disallow access above the lock.	Cat II
WN10-CC-000390	V-220872	Windows 10 should be configured to prevent users from receiving suggestions for third-party or additional applications.	Cat III
WN10-CC-000391	V-256894	Internet Explorer must be disabled for Windows 10.	Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.