Item Search

NameAudit NamePluginCategory
WN22-CC-000520 - Windows Server 2022 Windows Remote Management (WinRM) service must not store RunAs credentials.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000080 - Windows Server 2022 Active Directory SYSVOL directory must have the proper access control permissions.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-DC-000090 - Windows Server 2022 Active Directory Group Policy objects must have proper access control permissions.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-DC-000210 - Windows Server 2022 Active Directory AdminSDHolder object must be configured with proper audit settings.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000230 - Windows Server 2022 must be configured to audit Account Management - Computer Account Management successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000290 - Windows Server 2022 domain controller PKI certificates must be issued by the DOD PKI or an approved External Certificate Authority (ECA).DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000310 - Windows Server 2022 Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000405 - Windows Server 2022 must be configured for certificate-based authentication for domain controllers.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-MS-000040 - Windows Server 2022 must restrict unauthenticated Remote Procedure Call (RPC) clients from connecting to the RPC server on domain-joined member servers and standalone or nondomain-joined systems.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000040 - Windows Server 2022 built-in guest account must be renamed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000070 - Windows Server 2022 setting Domain member: Digitally encrypt secure channel data (when possible) must be configured to Enabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-SO-000090 - Windows Server 2022 computer account password must not be prevented from being reset.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000100 - Windows Server 2022 maximum age for machine account passwords must be configured to 30 days or less.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000210 - Windows Server 2022 must not allow anonymous SID/Name translation.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000220 - Windows Server 2022 must not allow anonymous enumeration of Security Account Manager (SAM) accounts.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000240 - Windows Server 2022 must be configured to prevent anonymous users from having the same permissions as the Everyone group.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000300 - Windows Server 2022 must be configured to prevent the storage of the LAN Manager hash of passwords.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-UC-000010 - Windows Server 2022 must preserve zone information when saving attachments.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN25-00-000170 - Windows Server 2025 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-00-000230 - Windows Server 2025 nonsystem-created file shares must limit access to groups that require it.DISA Microsoft Windows Server 2025 STIG v1r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN25-00-000240 - Windows Server 2025 must have software certificate installation files removed.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-00-000270 - Windows Server 2025 must have the roles and features required by the system documented.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-00-000300 - Windows Server 2025 must automatically remove or disable temporary user accounts after 72 hours.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-00-000340 - Windows Server 2025 must not have the Peer Name Resolution Protocol installed.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-00-000370 - Windows Server 2025 must not have the TFTP Client installed.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-00-000420 - Windows Server 2025 FTP servers must be configured to prevent anonymous logons.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-AC-000010 - Windows Server 2025 account lockout duration must be configured to 15 minutes or greater.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-AC-000040 - Windows Server 2025 password history must be configured to 24 passwords remembered.DISA Microsoft Windows Server 2025 STIG v1r1Windows

IDENTIFICATION AND AUTHENTICATION

WN25-AC-000050 - Windows Server 2025 maximum password age must be configured to 60 days or less.DISA Microsoft Windows Server 2025 STIG v1r1Windows

IDENTIFICATION AND AUTHENTICATION

WN25-AC-000060 - Windows Server 2025 minimum password age must be configured to at least one day.DISA Microsoft Windows Server 2025 STIG v1r1Windows

IDENTIFICATION AND AUTHENTICATION

WN25-AU-000050 - Windows Server 2025 permissions for the System event log must prevent access by nonprivileged accounts.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000110 - Windows Server 2025 must be configured to audit Account Management - User Account Management successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000160 - Windows Server 2025 must be configured to audit Logon/Logoff - Account Lockout failures.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000190 - Windows Server 2025 must be configured to audit logon successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000220 - Windows Server 2025 must be configured to audit Object Access - Other Object Access Events successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000240 - Windows Server 2025 must be configured to audit Object Access - Removable Storage successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000281 - Windows Server 2025 must be configured to audit Policy Change - Authorization Policy Change successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000300 - Windows Server 2025 must be configured to audit Privilege Use - Sensitive Privilege Use successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000310 - Windows Server 2025 must be configured to audit Privilege Use - Sensitive Privilege Use failures.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000350 - Windows Server 2025 must be configured to audit System - Other System Events failures.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000380 - Windows Server 2025 must be configured to audit System - System Integrity successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000390 - Windows Server 2025 must be configured to audit System - System Integrity failures.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000582 - Windows Server 2025 must be configured to audit file system successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000583 - Windows Server 2025 must be configured to audit handle manipulation failures.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000584 - Windows Server 2025 must be configured to audit handle manipulation successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000586 - Windows Server 2025 must be configured to audit registry successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-CC-000160 - Windows Server 2025 printing over HTTP must be turned off.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000320 - Windows Server 2025 Turning off File Explorer heap termination on corruption must be disabled.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000390 - Windows Server 2025 must prevent attachments from being downloaded from RSS feeds.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000410 - Windows Server 2025 must prevent Indexing of encrypted files.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT