Title

Windows 10 systems must use either Group Policy or an approved Mobile Device Management (MDM) product to enforce STIG compliance. (Cat II impact)

Discussion

Without Windows 10 systems being managed, devices could be rogue and become targets of an attacker.

Check Content

Verify the Windows 10 system is receiving policy from either Group Policy or an MDM with the following steps: From a command line or PowerShell: gpresult /R OS Configuration: Member Workstation If the system is not being managed by GPO, ask the administrator to indicate which MDM is managing the device. If the Window 10 system is not receiving policy from either Group Policy or an MDM, this is a finding.

Fix Text

Configure the Windows 10 system to use either Group Policy or an approved MDM product to enforce STIG compliance.

Additional Identifiers

Rule ID: SV-268319r1028350_rule

Vulnerability ID: V-268319

Group Title: SRG-OS-000480-GPOS-00227

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.