An error occurred:

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN10-00-000145 V-220726 Data Execution Prevention (DEP) must be configured to at least OptOut. Cat I
WN10-00-000150 V-220727 Structured Exception Handling Overwrite Protection (SEHOP) must be enabled. Cat I
WN10-00-000155 V-220728 The Windows PowerShell 2.0 feature must be disabled on the system. Cat II
WN10-00-000160 V-220729 The Server Message Block (SMB) v1 protocol must be disabled on the system. Cat II
WN10-00-000165 V-220730 The Server Message Block (SMB) v1 protocol must be disabled on the SMB server. Cat II
WN10-00-000170 V-220731 The Server Message Block (SMB) v1 protocol must be disabled on the SMB client. Cat II
WN10-00-000175 V-220732 The Secondary Logon service must be disabled on Windows 10. Cat II
WN10-00-000190 V-220733 Orphaned security identifiers (SIDs) must be removed from user rights on Windows 10. Cat II
WN10-00-000210 V-220734 Bluetooth must be turned off unless approved by the organization. Cat II
WN10-00-000220 V-220735 Bluetooth must be turned off when not in use. Cat II
WN10-00-000230 V-220736 The system must notify the user when a Bluetooth device attempts to connect. Cat II
WN10-00-000240 V-220737 Administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email. Cat I
WN10-00-000250 V-220738 Windows 10 nonpersistent VM sessions must not exceed 24 hours. Cat II
WN10-00-000395 V-257593 Windows 10 must not have portproxy enabled or in use. Cat II
WN10-AC-000005 V-220739 Windows 10 account lockout duration must be configured to 15 minutes or greater. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.