An error occurred:

Microsoft Windows 10 STIG

Microsoft Windows 10 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN10-00-000005 V-220697 Domain-joined systems must use Windows 10 Enterprise Edition 64-bit version. Cat II
WN10-00-000010 V-220698 Windows 10 domain-joined systems must have a Trusted Platform Module (TPM) enabled and ready for use. Cat II
WN10-00-000015 V-220699 Windows 10 systems must have Unified Extensible Firmware Interface (UEFI) firmware and be configured to run in UEFI mode, not Legacy BIOS. Cat II
WN10-00-000020 V-220700 Secure Boot must be enabled on Windows 10 systems. Cat III
WN10-00-000025 V-220701 Windows 10 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, where ESS is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP). Cat II
WN10-00-000030 V-220702 Windows 10 information systems must use BitLocker to encrypt all disks to protect the confidentiality and integrity of all information at rest. Cat I
WN10-00-000031 V-220703 Windows 10 systems must use a BitLocker PIN for pre-boot authentication. Cat I
WN10-00-000032 V-220704 Windows 10 systems must use a BitLocker PIN with a minimum length of six digits for pre-boot authentication. Cat I
WN10-00-000035 V-220705 The operating system must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs. Cat II
WN10-00-000040 V-220706 Windows 10 systems must be maintained at a supported servicing level. Cat I
WN10-00-000045 V-220707 The Windows 10 system must use an anti-virus program. Cat I
WN10-00-000050 V-220708 Local volumes must be formatted using NTFS. Cat I
WN10-00-000055 V-220709 Alternate operating systems must not be permitted on the same system. Cat II
WN10-00-000060 V-220710 Non system-created file shares on a system must limit access to groups that require it. Cat II
WN10-00-000065 V-220711 Unused accounts must be disabled or removed from the system after 35 days of inactivity. Cat III

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.