An error occurred:

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN10-EP-000310 V-220902 Windows 10 Kernel (Direct Memory Access) DMA Protection must be enabled. Cat II
WN10-PK-000005 V-220903 The DoD Root CA certificates must be installed in the Trusted Root Store. Cat II
WN10-PK-000010 V-220904 The External Root CA certificates must be installed in the Trusted Root Store on unclassified systems. Cat II
WN10-PK-000015 V-220905 The DoD Interoperability Root CA cross-certificates must be installed in the Untrusted Certificates Store on unclassified systems. Cat II
WN10-PK-000020 V-220906 The US DoD CCEB Interoperability Root CA cross-certificates must be installed in the Untrusted Certificates Store on unclassified systems. Cat II
WN10-RG-000005 V-220907 Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained. Cat II
WN10-SO-000005 V-220908 The built-in administrator account must be disabled. Cat II
WN10-SO-000010 V-220909 The built-in guest account must be disabled. Cat II
WN10-SO-000015 V-220910 Local accounts with blank passwords must be restricted to prevent access from the network. Cat II
WN10-SO-000020 V-220911 The built-in administrator account must be renamed. Cat II
WN10-SO-000025 V-220912 The built-in guest account must be renamed. Cat II
WN10-SO-000030 V-220913 Audit policy using subcategories must be enabled. Cat II
WN10-SO-000035 V-220914 Outgoing secure channel traffic must be encrypted or signed. Cat II
WN10-SO-000040 V-220915 Outgoing secure channel traffic must be encrypted when possible. Cat II
WN10-SO-000045 V-220916 Outgoing secure channel traffic must be signed when possible. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.