An error occurred:

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN10-CC-000038 V-220800 WDigest Authentication must be disabled. Cat II
WN10-CC-000039 V-220801 Run as different user must be removed from context menus. Cat II
WN10-CC-000040 V-220802 Insecure logons to an SMB server must be disabled. Cat II
WN10-CC-000044 V-220803 Internet connection sharing must be disabled. Cat II
WN10-CC-000050 V-250319 Hardened UNC paths must be defined to require mutual authentication and integrity for at least the \\*\SYSVOL and \\*\NETLOGON shares. Cat II
WN10-CC-000052 V-220805 Windows 10 must be configured to prioritize ECC Curves with longer key lengths first. Cat II
WN10-CC-000055 V-220806 Simultaneous connections to the internet or a Windows domain must be limited. Cat II
WN10-CC-000060 V-220807 Connections to non-domain networks when connected to a domain authenticated network must be blocked. Cat II
WN10-CC-000063 V-268319 Windows 10 systems must use either Group Policy or an approved Mobile Device Management (MDM) product to enforce STIG compliance. Cat II
WN10-CC-000065 V-220808 Wi-Fi Sense must be disabled. Cat II
WN10-CC-000066 V-220809 Command line data must be included in process creation events. Cat II
WN10-CC-000068 V-220810 Windows 10 must be configured to enable Remote host allows delegation of non-exportable credentials. Cat II
WN10-CC-000070 V-220811 Virtualization Based Security must be enabled on Windows 10 with the platform security level configured to Secure Boot or Secure Boot with DMA Protection. Cat II
WN10-CC-000075 V-220812 Credential Guard must be running on Windows 10 domain-joined systems. Cat I
WN10-CC-000080 V-252903 Virtualization-based protection of code integrity must be enabled. Cat III

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.