CIS Microsoft Windows Server 2022 STIG v2.0.0 NG DC

This audit file has been deprecated and will be removed in a future update.

Name: CIS Microsoft Windows Server 2022 STIG v2.0.0 NG DC

Updated: 10/30/2025

Authority: CIS

Plugin: Windows

Revision: 1.1

Estimated Item Count: 8

Filename: CIS_Microsoft_Windows_Server_2022_STIG_v2.0.0_NG_DC.audit

Size: 22.7 kB

MD5: 0e536ba52224097ea27877c38edcd439

SHA256: a847307c7e2611ed29e3dbabc24cb9b1936fff8d53620e3b281fcf07b0a09daa

Description	Categories
18.9.5.1 Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'
18.9.5.2 Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot' or higher
18.9.5.3 Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'
18.9.5.4 Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'
18.9.5.6 Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)
18.9.5.7 Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'
18.9.26.2 Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'
CIS_Microsoft_Windows_Server_2022_STIG_v2.0.0_Next_Generation_Windows_Security_-_Domain_Controller.audit from CIS Microsoft Windows Server 2022 STIG Benchmark v2.0.0