An error occurred:

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN10-SO-000167 V-220933 Remote calls to the Security Account Manager (SAM) must be restricted to Administrators. Cat II
WN10-SO-000180 V-220934 NTLM must be prevented from falling back to a Null session. Cat II
WN10-SO-000185 V-220935 PKU2U authentication using online identities must be prevented. Cat II
WN10-SO-000190 V-220936 Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites. Cat II
WN10-SO-000195 V-220937 The system must be configured to prevent the storage of the LAN Manager hash of passwords. Cat I
WN10-SO-000205 V-220938 The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM. Cat I
WN10-SO-000210 V-220939 The system must be configured to the required LDAP client signing level. Cat II
WN10-SO-000215 V-220940 The system must be configured to meet the minimum session security requirement for NTLM SSP based clients. Cat II
WN10-SO-000220 V-220941 The system must be configured to meet the minimum session security requirement for NTLM SSP based servers. Cat II
WN10-SO-000230 V-220942 The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing. Cat II
WN10-SO-000240 V-220943 The default permissions of global system objects must be increased. Cat III
WN10-SO-000245 V-220944 User Account Control approval mode for the built-in Administrator must be enabled. Cat II
WN10-SO-000250 V-220945 User Account Control must, at minimum, prompt administrators for consent on the secure desktop. Cat II
WN10-SO-000251 V-220946 Windows 10 must use multifactor authentication for local and network access to privileged and nonprivileged accounts. Cat II
WN10-SO-000255 V-220947 User Account Control must automatically deny elevation requests for standard users. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.