| 1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - groove.exe | CIS Microsoft Office 2016 v1.1.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - msaccess.exe | CIS Microsoft Office 2016 v1.1.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - powerpnt.exe | CIS Microsoft Office 2016 v1.1.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - winproj.exe | CIS Microsoft Office 2016 v1.1.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.25 O365-CO-000023 | CIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.60 (L2) Ensure 'AutoLaunch Protocols Component Enabled' is set to 'Disabled' | CIS Microsoft Intune for Edge v1.0.0 L2 | Windows | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| Control which extensions cannot be installed | MSCT Microsoft Edge Version 80 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT Edge v107 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT Edge v141 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT Edge v98 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT Edge v151 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| WN25-AU-000110 - Windows Server 2025 must be configured to audit Account Management - User Account Management successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000150 - Windows Server 2025 must be configured to audit Logon/Logoff - Account Lockout successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000160 - Windows Server 2025 must be configured to audit Logon/Logoff - Account Lockout failures. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000260 - Windows Server 2025 must be configured to audit Policy Change - Audit Policy Change successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000300 - Windows Server 2025 must be configured to audit Privilege Use - Sensitive Privilege Use successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000310 - Windows Server 2025 must be configured to audit Privilege Use - Sensitive Privilege Use failures. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-CC-000080 - Windows Server 2025 hardened Universal Naming Convention (UNC) paths must be defined to require mutual authentication and integrity for at least the \\*\SYSVOL and \\*\NETLOGON shares. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000110 - Windows Server 2025 virtualization-based security must be enabled with the platform security level configured to Secure Boot or Secure Boot with DMA Protection. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000470 - Windows Server 2025 Windows Remote Management (WinRM) client must not use Basic authentication. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | MAINTENANCE |
| WN25-CC-000480 - Windows Server 2025 Windows Remote Management (WinRM) client must not allow unencrypted traffic. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | MAINTENANCE |
| WN25-CC-000490 - Windows Server 2025 Windows Remote Management (WinRM) client must not use Digest authentication. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | MAINTENANCE |
| WN25-DC-000080 - Windows Server 2025 Active Directory SYSVOL directory must have the proper access control permissions. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-DC-000100 - Windows Server 2025 Active Directory Domain Controllers Organizational Unit (OU) object must have the proper access control permissions. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-DC-000130 - Windows Server 2025 domain controllers must run on a machine dedicated to that function. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-DC-000170 - Windows Server 2025 Active Directory Group Policy Objects (GPOs) must be configured with proper audit settings. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-DC-000260 - Windows Server 2025 must be configured to audit DS Access - Directory Service Changes successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-DC-000270 - Windows Server 2025 must be configured to audit DS Access - Directory Service Changes failures. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-DC-000320 - Windows Server 2025 domain controllers must require LDAP access signing. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-DC-000340 - The Windows Server 2025 'Access this computer from the network' user right must only be assigned to the Administrators, Authenticated Users, and Enterprise Domain Controllers groups on domain controllers. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-DC-000350 - The Windows Server 2025 'Add workstations to domain' user right must only be assigned to the Administrators group on domain controllers. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-PK-000010 - Windows Server 2025 must have the DoW Root Certificate Authority (CA) certificates installed in the Trusted Root Store. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SH-000010 - Windows Server 2025 networked systems must have and implement OpenSSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SH-000070 - Windows Server 2025 OpenSSH must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SH-000080 - The Windows Server 2025 OpenSSH configuration file must conform to minimum requirements. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SH-000090 - Windows Server 2025 OpenSSH private host key files must conform to minimum requirements. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000020 - Windows Server 2025 must prevent local accounts with blank passwords from being used from the network. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000050 - Windows Server 2025 must force audit policy subcategory settings to override audit policy category settings. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-SO-000120 - Windows Server 2025 machine inactivity limit must be set to 15 minutes or less, locking the system with the screen saver. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-SO-000220 - Windows Server 2025 must not allow anonymous enumeration of Security Account Manager (SAM) accounts. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000270 - Windows Server 2025 must prevent NTLM from falling back to a Null session. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000280 - Windows Server 2025 must prevent PKU2U authentication using online identities. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000310 - Windows Server 2025 LAN Manager authentication level must be configured to send NTLMv2 response only and to refuse LM and NTLM. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000420 - Windows Server 2025 User Account Control (UAC) must be configured to detect application installations and prompt for elevation. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-UC-000010 - Windows Server 2025 must preserve zone information when saving attachments. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-UR-000090 - The Windows Server 2025 'Create symbolic links' user right must only be assigned to the Administrators group. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-UR-000130 - The Windows Server 2025 'Impersonate a client after authentication' user right must only be assigned to Administrators, Service, Local Service, and Network Service. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-UR-000140 - The Windows Server 2025 'Increase scheduling priority' user right must only be assigned to the Administrators group. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-UR-000200 - The Windows Server 2025 'Profile single process' user right must only be assigned to the Administrators group. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-UR-000210 - The Windows Server 2025 'Restore files and directories' user right must only be assigned to the Administrators group. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
