Skip to content

Microsoft Windows 10 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Accounts must be configured to require password expiration.

    Passwords that do not expire increase exposure with a greater probability of being discovered or cracked.
    Rule Medium Severity
  • SRG-OS-000312-GPOS-00122

    Group
  • SRG-OS-000095-GPOS-00049

    Group
  • Internet Information System (IIS) or its subcomponents must not be installed on a workstation.

    Installation of Internet Information System (IIS) may allow unauthorized internet services to be hosted. Websites must only be hosted on servers that have been designed for that purpose and can be...
    Rule High Severity
  • SRG-OS-000096-GPOS-00050

    Group
  • SRG-OS-000095-GPOS-00049

    Group
  • SRG-OS-000096-GPOS-00050

    Group
  • SRG-OS-000096-GPOS-00050

    Group
  • SRG-OS-000480-GPOS-00227

    Group
  • Software certificate installation files must be removed from Windows 10.

    Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules