18.1.1.1 Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'
18.1.1.2 Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'
18.2.2 Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'
18.2.3 Ensure 'Enable Local Admin Password Management' is set to 'Enabled'
18.3.1 Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'
18.3.3 Ensure 'Configure SMB v1 server' is set to 'Disabled'
18.3.4 Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'
18.3.5 Ensure 'WDigest Authentication' is set to 'Disabled'
18.4.5 Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled' - Disabled
18.4.7 Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled' - Enabled
18.5.11.2 Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'
18.5.21.1 Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'
18.8.22.1.2 Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled' - Enabled
18.8.22.1.4 Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled' - Enabled
18.8.28.2 Ensure 'Do not display network selection UI' is set to 'Enabled' - Enabled
18.8.28.4 Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' - Disabled
18.8.28.5 Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled' - Enabled
18.8.28.6 Ensure 'Turn off picture password sign-in' is set to 'Enabled' - Enabled
18.8.28.7 Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled' - Disabled
18.8.34.6.5 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' - Enabled
18.8.34.6.6 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled' - Enabled
18.8.36.1 Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'
18.8.36.2 Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'
18.8.37.1 Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'
18.8.4.1 Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'
18.9.102.1.1 Ensure 'Allow Basic authentication' is set to 'Disabled' - Disabled
18.9.102.1.2 Ensure 'Allow unencrypted traffic' is set to 'Disabled' - Disabled
18.9.102.1.3 Ensure 'Disallow Digest authentication' is set to 'Enabled' - Enabled
18.9.102.2.1 Ensure 'Allow Basic authentication' is set to 'Disabled' - Disabled
18.9.102.2.3 Ensure 'Allow unencrypted traffic' is set to 'Disabled' - Disabled
18.9.102.2.4 Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' - Enabled
18.9.16.2 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled' - Disabled
18.9.31.2 Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled' - Disabled
18.9.31.3 Ensure 'Turn off heap termination on corruption' is set to 'Disabled' - Disabled
18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'
18.9.65.2.2 Ensure 'Do not allow passwords to be saved' is set to 'Enabled' - Enabled
18.9.66.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - Enabled
18.9.8.1 Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'
18.9.91.1 Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled' - Disabled
19.7.4.2 Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'
