| 1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - onent.exe | CIS Microsoft Office 2016 v1.1.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - outlook.exe | CIS Microsoft Office 2016 v1.1.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOAccess999 - The version of Access running on the system must be a supported version. | DISA STIG Microsoft Office Access 2016 v2r1 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| DTOO104 - Disabling of user name and password syntax from being used in URLs must be enforced. | DISA STIG Microsoft Office Access 2016 v2r1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO117 - Saved from URL mark to assure Internet zone processing must be enforced. | DISA STIG Microsoft Office Access 2016 v2r1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO124 - Scripted Window Security must be enforced. | DISA STIG Microsoft Office Access 2016 v2r1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO132 - File Downloads must be configured for proper restrictions. | DISA STIG Microsoft Office Access 2016 v2r1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO209 - Protection from zone elevation must be enforced. | DISA STIG Microsoft Office Access 2016 v2r1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOOffice999 - The version of Office running on the system must be a supported version. | DISA Microsoft Office System 2016 STIG v2r5 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| O365-AC-000003 - VBA macros not digitally signed must be blocked in Access. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | CONFIGURATION MANAGEMENT |
| O365-CO-000004 - Custom user interface (UI) code must be blocked from loading in all Office applications. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | CONFIGURATION MANAGEMENT |
| O365-CO-000005 - ActiveX Controls must be initialized in Safe Mode. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-CO-000019 - The MIME Sniffing safety feature must be enabled in all Office programs. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | IDENTIFICATION AND AUTHENTICATION |
| O365-CO-000022 - Protection from zone elevation must be enabled in all Office programs. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-EX-000005 - Open/save of dBase III / IV format files must be blocked. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-EX-000014 - Open/save of Excel 95 workbooks must be blocked. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-EX-000015 - Open/save of Excel 95-97 workbooks and templates must be blocked. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-EX-000016 - The default file block behavior must be set to not open blocked files in Excel. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-EX-000017 - Open/save of Web pages and Excel 2003 XML spreadsheets must be blocked. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-EX-000022 - AutoRepublish warning alert in Excel must be enabled. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | CONFIGURATION MANAGEMENT |
| O365-EX-000023 - File extensions must be enabled to match file types in Excel. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | CONFIGURATION MANAGEMENT |
| O365-EX-000028 - Trust Bar notification must be enabled for unsigned application add-ins in Excel and blocked. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | CONFIGURATION MANAGEMENT |
| O365-OU-000003 - Scripts associated with public folders must be prevented from execution in Outlook. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-OU-000013 - Outlook must be configured to allow retrieving of Certificate Revocation Lists (CRLs) always when online. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | IDENTIFICATION AND AUTHENTICATION |
| O365-OU-000020 - When a custom action is executed that uses the Outlook object model, Outlook must automatically deny it. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-OU-000021 - When an untrusted program attempts to programmatically access an Address Book using the Outlook object model, Outlook must automatically deny it. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-OU-000027 - Outlook must be configured to not allow hyperlinks in suspected phishing messages. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | CONFIGURATION MANAGEMENT |
| O365-PT-000009 - Files downloaded from the Internet must be opened in Protected view in PowerPoint. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-PT-000012 - If file validation fails, files must be opened in Protected view in PowerPoint with ability to edit disabled. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-PU-000001 - Publisher must be configured to prompt the user when another application programmatically opens a macro. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-WD-000003 - Files downloaded from the Internet must be opened in Protected view in Word. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-WD-000008 - Open/Save of Word 2 and earlier binary documents and templates must be blocked. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| O365-WD-000018 - VBA Macros not digitally signed must be blocked in Word. | DISA Microsoft Office 365 ProPlus STIG v3r5 | Windows | CONFIGURATION MANAGEMENT |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT Edge v117 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT Edge v133 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT Edge v139 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT edge v96 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| WN25-MS-000060 - Windows Server 2025 must restrict remote calls to the Security Account Manager (SAM) to Administrators on domain-joined member servers and stand-alone or nondomain-joined systems. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-MS-000120 - The Windows Server 2025 'Deny log on through Remote Desktop Services' user right on domain-joined member servers must be configured to prevent access from highly privileged domain accounts and all local accounts and from unauthenticated access on all systems. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-SO-000030 - The Windows Server 2025 built-in administrator account must be renamed. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000060 - The Windows Server 2025 setting Domain member: Digitally encrypt or sign secure channel data (always) must be configured to Enabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SO-000090 - Windows Server 2025 computer account password must not be prevented from being reset. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN25-SO-000230 - Windows Server 2025 must not allow anonymous enumeration of shares. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SO-000340 - Windows Server 2025 session security for NTLM SSP-based servers must be configured to require NTLMv2 session security and 128-bit encryption. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000360 - Windows Server 2025 must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SO-000390 - Windows Server 2025 UIAccess applications must not be allowed to prompt for elevation without using the secure desktop. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SO-000410 - Windows Server 2025 User Account Control (UAC) must automatically deny standard user requests for elevation. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SO-000430 - Windows Server 2025 User Account Control (UAC) must only elevate UIAccess applications that are installed in secure locations. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-UR-000040 - The Windows Server 2025 'Back up files and directories' user right must only be assigned to the Administrators group. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-UR-000190 - The Windows Server 2025 'Perform volume maintenance tasks' user right must only be assigned to the Administrators group. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
