CIS Microsoft Windows Server 2025 v2.1.0 NG DC

Name: CIS Microsoft Windows Server 2025 v2.1.0 NG DC

Updated: 8/21/2026

Authority: CIS

Plugin: Windows

Revision: 1.0

Estimated Item Count: 8

Filename: CIS_Microsoft_Windows_Server_2025_v2.1.0_NG_DC.audit

Size: 26.1 kB

MD5: 1a0b5cc945c86460e9e06b8d68f51ec4

SHA256: 8b277dacfae45fc2fd8f17063822f263a17f6bca4c5ef3254d1d29132570cf56

Description	Categories
18.9.5.1 Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'	SYSTEM AND INFORMATION INTEGRITY
18.9.5.2 Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot' or higher	SYSTEM AND INFORMATION INTEGRITY
18.9.5.3 Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'	SYSTEM AND INFORMATION INTEGRITY
18.9.5.4 Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'	SYSTEM AND INFORMATION INTEGRITY
18.9.5.6 Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)	SYSTEM AND INFORMATION INTEGRITY
18.9.5.7 Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'	SYSTEM AND INFORMATION INTEGRITY
18.9.27.2 Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'	SYSTEM AND INFORMATION INTEGRITY
CIS_Microsoft_Windows_Server_2025_v2.1.0_NG_DC.audit from CIS Microsoft Windows Server 2025 v2.1.0