Microsoft Windows 10 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Alternate operating systems must not be permitted on the same system.
Allowing other operating systems to run on a secure system may allow security to be circumvented.Rule Medium Severity -
SRG-OS-000138-GPOS-00069
Group -
SRG-OS-000118-GPOS-00060
Group -
SRG-OS-000324-GPOS-00125
Group -
SRG-OS-000480-GPOS-00227
Group -
SRG-OS-000095-GPOS-00049
Group -
Only authorized user accounts must be allowed to create or run virtual machines on Windows 10 systems.
Allowing other operating systems to run on a secure system may allow users to circumvent security. For Hyper-V, preventing unauthorized users from being assigned to the Hyper-V Administrators group...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
Group -
Standard local user accounts must not exist on a system in a domain.
To minimize potential points of attack, local user accounts, other than built-in accounts and local administrator accounts, must not exist on a workstation in a domain. Users must log on to worksta...Rule Low Severity -
SRG-OS-000076-GPOS-00044
Group -
Accounts must be configured to require password expiration.
Passwords that do not expire increase exposure with a greater probability of being discovered or cracked.Rule Medium Severity -
SRG-OS-000312-GPOS-00122
Group -
SRG-OS-000095-GPOS-00049
Group -
Internet Information System (IIS) or its subcomponents must not be installed on a workstation.
Installation of Internet Information System (IIS) may allow unauthorized internet services to be hosted. Websites must only be hosted on servers that have been designed for that purpose and can be...Rule High Severity -
SRG-OS-000096-GPOS-00050
Group -
SRG-OS-000095-GPOS-00049
Group -
SRG-OS-000096-GPOS-00050
Group -
SRG-OS-000096-GPOS-00050
Group -
SRG-OS-000480-GPOS-00227
Group -
Software certificate installation files must be removed from Windows 10.
Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.