Skip to content

III - Administrative Public

Rules and Groups employed by this XCCDF Profile

  • Windows Server 2022 nonsystem-created file shares must limit access to groups that require it.

    Shares on a system provide network access. To prevent exposing sensitive information, where shares are necessary, permissions must be reconfigured to give the minimum access to accounts that requir...
    Rule Medium Severity
  • SRG-OS-000480-GPOS-00227

    Group
  • Windows Server 2022 must have software certificate installation files removed.

    Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.
    Rule Medium Severity
  • SRG-OS-000185-GPOS-00079

    Group
  • Windows Server 2022 systems requiring data at rest protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.

    This requirement addresses protection of user-generated data as well as operating system-specific configuration data. Organizations may choose to employ different mechanisms to achieve confidential...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules