| WN22-DC-000110 - Windows Server 2022 organization created Active Directory Organizational Unit (OU) objects must have proper access control permissions. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | ACCESS CONTROL |
| WN22-DC-000140 - Windows Server 2022 must use separate, NSA-approved (Type 1) cryptography to protect the directory data in transit for directory service implementations at a classified confidentiality level when replication data traverses a network cleared to a lower level than the data. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN22-DC-000170 - Windows Server 2022 Active Directory Group Policy objects must be configured with proper audit settings. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN22-DC-000180 - Windows Server 2022 Active Directory Domain object must be configured with proper audit settings. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN22-DC-000350 - Windows Server 2022 Add workstations to domain user right must only be assigned to the Administrators group on domain controllers. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | ACCESS CONTROL |
| WN22-DC-000360 - Windows Server 2022 Allow log on through Remote Desktop Services user right must only be assigned to the Administrators group on domain controllers. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | ACCESS CONTROL |
| WN22-DC-000410 - Windows Server 2022 Deny log on through Remote Desktop Services user right on domain controllers must be configured to prevent unauthenticated access. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | ACCESS CONTROL |
| WN22-DC-000430 - The password for the krbtgt account on a domain must be reset at least every 180 days. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN22-MS-000090 - Windows Server 2022 Deny log on as a batch job user right on domain-joined member servers must be configured to prevent access from highly privileged domain accounts and from unauthenticated access on all systems. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | ACCESS CONTROL |
| WN22-SO-000010 - Windows Server 2022 must have the built-in guest account disabled. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN22-SO-000050 - Windows Server 2022 must force audit policy subcategory settings to override audit policy category settings. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | AUDIT AND ACCOUNTABILITY |
| WN22-SO-000080 - Windows Server 2022 setting Domain member: Digitally sign secure channel data (when possible) must be configured to Enabled. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN22-SO-000170 - Windows Server 2022 setting Microsoft network client: Digitally sign communications (if server agrees) must be configured to Enabled. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN22-SO-000220 - Windows Server 2022 must not allow anonymous enumeration of Security Account Manager (SAM) accounts. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN22-SO-000310 - Windows Server 2022 LAN Manager authentication level must be configured to send NTLMv2 response only and to refuse LM and NTLM. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN22-SO-000330 - Windows Server 2022 session security for NTLM SSP-based clients must be configured to require NTLMv2 session security and 128-bit encryption. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN22-SO-000450 - Windows Server 2022 User Account Control (UAC) must virtualize file and registry write failures to per-user locations. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN22-UR-000030 - Windows Server 2022 Allow log on locally user right must only be assigned to the Administrators group. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | ACCESS CONTROL |
| WN25-00-000001 - Windows Server 2025 must install security-relevant software updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs). | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| WN25-00-000070 - Windows Server 2025 shared user accounts must not be permitted. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN25-00-000160 - Windows Server 2025 permissions for the Windows installation directory must conform to minimum requirements. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-00-000170 - Windows Server 2025 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-00-000240 - Windows Server 2025 must have software certificate installation files removed. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000280 - Windows Server 2025 must have a host-based firewall installed and enabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-00-000310 - Windows Server 2025 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-00-000330 - Windows Server 2025 must not have the Microsoft FTP service installed unless required by the organization. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000333 - Windows Server 2025 must not have Bluetooth enabled unless required by the organization. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000420 - Windows Server 2025 FTP servers must be configured to prevent anonymous logons. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-AC-000080 - Windows Server 2025 must have the built-in Windows password complexity policy enabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN25-AU-000030 - Windows Server 2025 permissions for the Application event log must prevent access by nonprivileged accounts. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000060 - Windows Server 2025 Event Viewer must be protected from unauthorized modification and deletion. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000070 - Windows Server 2025 must be configured to audit Account Logon - Credential Validation successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000120 - Windows Server 2025 must be configured to audit Account Management - User Account Management failures. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000170 - Windows Server 2025 must be configured to audit Logon/Logoff - Group Membership successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000190 - Windows Server 2025 must be configured to audit logon successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000220 - Windows Server 2025 must be configured to audit Object Access - Other Object Access Events successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000230 - Windows Server 2025 must be configured to audit Object Access - Other Object Access Events failures. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000250 - Windows Server 2025 must be configured to audit Object Access - Removable Storage failures. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000280 - Windows Server 2025 must be configured to audit Policy Change - Authentication Policy Change successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000380 - Windows Server 2025 must be configured to audit System - System Integrity successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-CC-000010 - Windows Server 2025 must prevent the display of slide shows on the lock screen. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000190 - Windows Server 2025 users must be prompted to authenticate when the system wakes from sleep (plugged in). | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000210 - Windows Server 2025 AutoPlay must be turned off for nonvolume devices. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000230 - Windows Server 2025 AutoPlay must be disabled for all drives. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000280 - Windows Server 2025 Security event log size must be configured to a value that holds at least one week of audit records. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-CC-000320 - Windows Server 2025 Turning off File Explorer heap termination on corruption must be disabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000380 - Windows Server 2025 Remote Desktop Services must be configured with the client connection encryption set to High Level. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-CC-000390 - Windows Server 2025 must prevent attachments from being downloaded from RSS feeds. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000400 - Windows Server 2025 must disable Basic authentication for RSS feeds over HTTP. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000420 - Windows Server 2025 must prevent users from changing installation options. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
