WN16-AU-000030 - Permissions for the Application event log must prevent access by non-privileged accounts.
WN16-AU-000040 - Permissions for the Security event log must prevent access by non-privileged accounts.
WN16-AU-000050 - Permissions for the System event log must prevent access by non-privileged accounts.
WN16-DC-000080 - The Active Directory SYSVOL directory must have the proper access control permissions.
WN16-MS-000370 - The Deny access to this computer from the network user right on member servers must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems, and from unauthenticated access on all systems.
WN16-MS-000380 - The Deny log on as a batch job user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems and from unauthenticated access on all systems.
WN16-MS-000400 - The Deny log on locally user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems and from unauthenticated access on all systems.
WN16-MS-000410 - The Deny log on through Remote Desktop Services user right on member servers must be configured to prevent access from highly privileged domain accounts and all local accounts on domain systems and from unauthenticated access on all systems.