| DTOO104 - Outlook - Disable user name and password syntax from being used in URLs | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO111 - OneNote - Enabling IE Bind to Object functionality must be present. | DISA Microsoft OneNote 2010 STIG v1r10 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO117 - Saved from URL mark to assure Internet zone processing must be enforced | DISA STIG Microsoft Publisher 2016 v1r3 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO126 - Add-on Management functionality must be allowed | DISA STIG Microsoft Publisher 2016 v1r3 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO126 - Outlook - Add-on Management functionality must be allowed. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO127 - Add-ins to Office applications must be signed by a Trusted Publisher | DISA STIG Microsoft Publisher 2016 v1r3 | Windows | CONFIGURATION MANAGEMENT |
| DTOO128 - OneNote - Data Execution Prevention must be enforced. | DISA Microsoft OneNote 2010 STIG v1r10 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO209 - Outlook - Protection from zone elevation must be enforced. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO209 - Protection from zone elevation must be enforced | DISA STIG Microsoft Publisher 2016 v1r3 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO214 - Outlook - Read EMail as plain text must be enforced. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | CONFIGURATION MANAGEMENT |
| DTOO215 - Outlook - Read signed email as plain text must be enforced. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | CONFIGURATION MANAGEMENT |
| DTOO218 - Outlook - Level of calendar details that a user can publish must be restricted. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | CONFIGURATION MANAGEMENT |
| DTOO246 - Outlook - Scripts in One-Off Outlook forms must be disallowed. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO247 - Outlook - Custom Outlook Object Model (OOM) action execution prompts must be configured. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO254 - Outlook - Object Model Prompt behavior for accessing User Property Formula must be configured. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO273 - Outlook - IE Trusted Zones assumed 'trusted' must be blocked. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | CONFIGURATION MANAGEMENT |
| DTOO279 - Outlook - RPC encryption between Outlook and Exchange server must be enforced. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | IDENTIFICATION AND AUTHENTICATION |
| DTOO286 - Outlook - User Entries to Server List must be disallowed. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | CONFIGURATION MANAGEMENT |
| DTOO304 - Warning Bar settings for VBA macros must be configured | DISA STIG Microsoft Publisher 2016 v1r3 | Windows | CONFIGURATION MANAGEMENT |
| DTOO313 - Outlook - Automatically downloading enclosures on RSS must be disallowed. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | CONFIGURATION MANAGEMENT |
| DTOO315 - Outlook - Outlook must be configured not to prompt users to choose security settings if default settings fail. | DISA Microsoft Outlook 2010 STIG v1r14 | Windows | CONFIGURATION MANAGEMENT |
| DTOO322 - Fatally corrupt files must be blocked from opening | DISA STIG Microsoft Publisher 2016 v1r3 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN10-SO-000270 - User Account Control must run all administrators in Admin Approval Mode, enabling UAC. | DISA Microsoft Windows 10 STIG v3r6 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN10-UR-000040 - The Create a pagefile user right must only be assigned to the Administrators group. | DISA Microsoft Windows 10 STIG v3r6 | Windows | ACCESS CONTROL |
| WN10-UR-000045 - The Create a token object user right must not be assigned to any groups or accounts. | DISA Microsoft Windows 10 STIG v3r6 | Windows | ACCESS CONTROL |
| WN10-UR-000060 - The Create symbolic links user right must only be assigned to the Administrators group. | DISA Microsoft Windows 10 STIG v3r6 | Windows | ACCESS CONTROL |
| WN10-UR-000120 - The Load and unload device drivers user right must only be assigned to the Administrators group. | DISA Microsoft Windows 10 STIG v3r6 | Windows | ACCESS CONTROL |
| WN10-UR-000125 - The Lock pages in memory user right must not be assigned to any groups or accounts. | DISA Microsoft Windows 10 STIG v3r6 | Windows | ACCESS CONTROL |
| WN10-UR-000165 - The Take ownership of files or other objects user right must only be assigned to the Administrators group. | DISA Microsoft Windows 10 STIG v3r6 | Windows | ACCESS CONTROL |
| WN11-00-000015 - Windows 11 systems must have Unified Extensible Firmware Interface (UEFI) firmware and be configured to run in UEFI mode, not Legacy BIOS. | DISA Microsoft Windows 11 STIG v2r11 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN11-00-000030 - Windows 11 information systems must use BitLocker to encrypt all disks to protect the confidentiality and integrity of all information at rest. | DISA Microsoft Windows 11 STIG v2r11 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN11-00-000031 - Windows 11 systems must use a BitLocker PIN for pre-boot authentication. | DISA Microsoft Windows 11 STIG v2r11 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN11-00-000035 - The operating system must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000075 - Only accounts responsible for the backup operations must be members of the Backup Operators group. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000110 - Simple TCP/IP Services must not be installed on the system. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000115 - The Telnet Client must not be installed on the system. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000135 - A host-based firewall must be installed and enabled on the system. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000155 - The Windows PowerShell 2.0 feature must be disabled on the system. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000175 - The Secondary Logon service must be disabled on Windows 11. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000230 - The system must notify the user when a Bluetooth device attempts to connect. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000240 - Administrative accounts must not be used with applications that access the internet, such as web browsers, or with potential internet sources, such as email. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000260 - The Windows 11 time service must synchronize with an appropriate DoW time source. | DISA Microsoft Windows 11 STIG v2r11 | Windows | AUDIT AND ACCOUNTABILITY |
| WN11-AC-000005 - Windows 11 account lockout duration must be configured to 15 minutes or greater. | DISA Microsoft Windows 11 STIG v2r11 | Windows | ACCESS CONTROL |
| WN11-AC-000010 - The number of allowed bad logon attempts must be configured to three or less. | DISA Microsoft Windows 11 STIG v2r11 | Windows | ACCESS CONTROL |
| WN11-AC-000015 - The period of time before the bad logon counter is reset must be configured to 15 minutes. | DISA Microsoft Windows 11 STIG v2r11 | Windows | ACCESS CONTROL |
| WN11-AC-000020 - The password history must be configured to 24 passwords remembered. | DISA Microsoft Windows 11 STIG v2r11 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN11-AC-000030 - The minimum password age must be configured to at least 1 day. | DISA Microsoft Windows 11 STIG v2r11 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WPAW-00-001400 - PAWs used to manage Active Directory must only allow groups specifically designated to manage Active Directory, such as Enterprise and Domain Admins and members of the local Administrators group, to log on locally. | DISA Microsoft Windows PAW STIG v3r2 | Windows | CONFIGURATION MANAGEMENT |
| WPAW-00-001700 - The Windows PAW must use a trusted channel for all connections between a PAW and IT resources managed from the PAW. | DISA Microsoft Windows PAW STIG v3r2 | Windows | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| WPAW-00-002200 - The Windows PAW must be configured so that all outbound connections to the Internet from a PAW are blocked. | DISA Microsoft Windows PAW STIG v3r2 | Windows | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
