An error occurred:

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN10-SO-000055 V-220918 The maximum age for machine account passwords must be configured to 30 days or less. Cat III
WN10-SO-000060 V-220919 The system must be configured to require a strong session key. Cat II
WN10-SO-000070 V-220920 The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver. Cat II
WN10-SO-000075 V-220921 The required legal notice must be configured to display before console logon. Cat II
WN10-SO-000080 V-220922 The Windows dialog box title for the legal banner must be configured. Cat III
WN10-SO-000085 V-220923 Caching of logon credentials must be limited. Cat III
WN10-SO-000095 V-220924 The Smart Card removal option must be configured to Force Logoff or Lock Workstation. Cat II
WN10-SO-000100 V-220925 The Windows SMB client must be configured to always perform SMB packet signing. Cat II
WN10-SO-000110 V-220926 Unencrypted passwords must not be sent to third-party SMB Servers. Cat II
WN10-SO-000120 V-220927 The Windows SMB server must be configured to always perform SMB packet signing. Cat II
WN10-SO-000140 V-220928 Anonymous SID/Name translation must not be allowed. Cat I
WN10-SO-000145 V-220929 Anonymous enumeration of SAM accounts must not be allowed. Cat I
WN10-SO-000150 V-220930 Anonymous enumeration of shares must be restricted. Cat I
WN10-SO-000160 V-220931 The system must be configured to prevent anonymous users from having the same rights as the Everyone group. Cat II
WN10-SO-000165 V-220932 Anonymous access to Named Pipes and Shares must be restricted. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.