An error occurred:

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN10-UR-000045 V-220963 The Create a token object user right must not be assigned to any groups or accounts. Cat I
WN10-UR-000050 V-220964 The Create global objects user right must only be assigned to Administrators, Service, Local Service, and Network Service. Cat II
WN10-UR-000055 V-220965 The Create permanent shared objects user right must not be assigned to any groups or accounts. Cat II
WN10-UR-000060 V-220966 The Create symbolic links user right must only be assigned to the Administrators group. Cat II
WN10-UR-000065 V-220967 The Debug programs user right must only be assigned to the Administrators group. Cat I
WN10-UR-000070 V-220968 The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems. Cat II
WN10-UR-000075 V-220969 The "Deny log on as a batch job" user right on domain-joined workstations must be configured to prevent access from highly privileged domain accounts. Cat II
WN10-UR-000080 V-220970 The Deny log on as a service user right on Windows 10 domain-joined workstations must be configured to prevent access from highly privileged domain accounts. Cat II
WN10-UR-000085 V-220971 The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems. Cat II
WN10-UR-000090 V-220972 The Deny log on through Remote Desktop Services user right on Windows 10 workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems. Cat II
WN10-UR-000095 V-220973 The Enable computer and user accounts to be trusted for delegation user right must not be assigned to any groups or accounts. Cat II
WN10-UR-000100 V-220974 The Force shutdown from a remote system user right must only be assigned to the Administrators group. Cat II
WN10-UR-000110 V-220975 The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service. Cat II
WN10-UR-000120 V-220976 The Load and unload device drivers user right must only be assigned to the Administrators group. Cat II
WN10-UR-000125 V-220977 The Lock pages in memory user right must not be assigned to any groups or accounts. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.