An error occurred:

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN10-SO-000215 V-220940 The system must be configured to meet the minimum session security requirement for NTLM SSP based clients. Cat II
WN10-SO-000220 V-220941 The system must be configured to meet the minimum session security requirement for NTLM SSP based servers. Cat II
WN10-SO-000230 V-220942 The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing. Cat II
WN10-SO-000240 V-220943 The default permissions of global system objects must be increased. Cat III
WN10-SO-000245 V-220944 User Account Control approval mode for the built-in Administrator must be enabled. Cat II
WN10-SO-000250 V-220945 User Account Control must, at minimum, prompt administrators for consent on the secure desktop. Cat II
WN10-SO-000251 V-220946 Windows 10 must use multifactor authentication for local and network access to privileged and nonprivileged accounts. Cat II
WN10-SO-000255 V-220947 User Account Control must automatically deny elevation requests for standard users. Cat II
WN10-SO-000260 V-220948 User Account Control must be configured to detect application installations and prompt for elevation. Cat II
WN10-SO-000265 V-220949 User Account Control must only elevate UIAccess applications that are installed in secure locations. Cat II
WN10-SO-000270 V-220950 User Account Control must run all administrators in Admin Approval Mode, enabling UAC. Cat II
WN10-SO-000275 V-220951 User Account Control must virtualize file and registry write failures to per-user locations. Cat II
WN10-SO-000280 V-220952 Passwords for enabled local Administrator accounts must be changed at least every 60 days. Cat II
WN10-UC-000015 V-220954 Toast notifications to the lock screen must be turned off. Cat III
WN10-UC-000020 V-220955 Zone information must be preserved when saving attachments. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.