emily/atap
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
main
atap/Samples/Microsoft Windows Server 2022_20220905_052544.html
T
emily 404ee3fec4 a
2026-05-11 09:15:08 +02:00

19 lines
301 KiB
HTML
Raw Permalink Blame History

<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows Server 2022 Audit Report [09/05/2022 05:26:17]</title><style >body { font-family: Cambria, Georgia, serif; margin: 0; color: default; background-color: default;}.content { padding: 30px 40px;}a { color: default;}a:visited { color: default;}.header { background-color: #c6c9cc;}.header svg { margin-left: 3px; opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9) /*H*/{ fill: black;}.header h1 { margin: 0;}h1, h2, h3, h4, h5, h6 { font-family: 'Calibri', 'Segoe UI', sans-serif;}li a { display: block;}li a:hover { background-color: #f2f2f2;}.gauge { height: 25px; background: #a7a7a7; border-radius: 8px; overflow: hidden;}.gauge .gauge-meter { height: 100%; float: left;}.gauge-info { margin: 0; padding: 20px 0;}.gauge-info .gauge-info-item { display: table-cell; width: 1%; text-align: center; line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus { display: inline;}section.collapsed > :not(:first-child) { display: none;}table { border-collapse: collapse; font-family: Arial, sans-serif;}th, td { padding: 5px 10px; text-align: left; vertical-align: top;}/* audit-info table */table.audit-info { margin-left: 8%; margin-right: 8%;}table.audit-info th, table.audit-info td { border: 1px solid #d2d2d2;}table.audit-info th { border-bottom-width: 2px; background-color: lightgray;}table.audit-info tr:nth-child(even) { background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { text-align: left; white-space: nowrap; width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) { text-align: left; width: 50%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child { text-align: center; width: 70px;}.passed, .green, .failed, .red { color: #fff;}.warning, .orange { color: #000;}.passed, .green { background-color: #33cca6;}.failed, .red { background-color: #cc0000;}.warning, .orange { background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning { padding: 5px 10px; border-radius: 8px;}span.auditstatus { display: block; padding: 5px 10px; border-radius: 8px; font-weight: bold; margin: auto;}.sectionAction { display: inline-block; text-align: center; text-decoration: none; margin: 0 0 0 15px; padding: 0 8px; color: #161616; background-color: #dfdfdf; border-radius: 8px; font-weight: bold; cursor: pointer;}.sectionAction:hover { background-color: #dddddd;; color: blue;}#host-information { float: left;}/* Overall compliance donut chart */.card { float: right; margin: 0 100px 0 0; width: 250px;}.donut-chart { position: relative; border-radius: 50%; overflow: hidden;}.donut-chart.chart { width: 200px; height: 200px; background: #c6c9cc;}.donut-chart .slice { position: absolute; top: 0; left: 0; width: 100%; height: 100%;}.donut-chart .chart-center { position: absolute; border-radius: 50%; top: 25px; left: 25px; width: 150px; height: 150px; background: white;}.donut-chart .chart-center span { display: block; text-align: center; font-size: 40px; line-height: 150px; color: black;}#navigationButtons{ margin-top: 15px; display: grid; grid-template-rows: 50px; grid-template-columns: repeat(4,160px);}button{ margin-left: 10px; border-radius: 8px; font-weight: bold;}#riskScore{ font-family: Arial, sans-serif; text-align: center;}#riskMatrixContainer{ display: grid; position: relative; grid-template-columns: 100px repeat(5,60px); grid-template-rows: repeat(6,60px); left: 10%; float: left; margin-top: 50px; text-align: center;}#riskMatrixContainer div{ border: 1px solid black;}#severity{ grid-column-start: 1; grid-column-end: 2; grid-row-start: 1; grid-row-end: 6; position: relative;}#quantity{ grid-column-start: 2; grid-column-end: 7; grid-row-start: 6; grid-row-end: 7; position: relative;}#severityArea{ text-align: center; position: absolute; margin: 0; top:50%; left: 20%;}#quantityArea{ text-align: center; position: absolute; margin: 0; top: 35%; left: 40%;}#severityCritical{ grid-column-start: 2; grid-column-end: 3; grid-row-start: 1; grid-row-end: 2; padding-top: 20px;}#severityHigh{ grid-column-start: 2; grid-column-end: 3; grid-row-start: 2; grid-row-end: 3; padding-top: 20px;}#severityMedium{ grid-column-start: 2; grid-column-end: 3; grid-row-start: 3; grid-row-end: 4; padding-top: 20px;}#severityLow{ grid-column-start: 2; grid-column-end: 3; grid-row-start: 4; grid-row-end: 5; padding-top: 20px;}#quantityCritical{ grid-column-start: 6; grid-column-end: 7; grid-row-start: 5; grid-row-end: 6; text-align: center; padding-top: 20px;}#quantityHigh{ grid-column-start: 5; grid-column-end: 6; grid-row-start: 5; grid-row-end: 6; text-align: center; padding-top: 20px;}#quantityMedium{ grid-column-start: 4; grid-column-end: 5; grid-row-start: 5; grid-row-end: 6; text-align: center; padding-top: 20px;}#quantityLow{ grid-column-start: 3; grid-column-end: 4; grid-row-start: 5; grid-row-end: 6; text-align: center; padding-top: 20px;}#riskMatrixContainer:nth-child(10){ position: relative;}#riskMatrixSummary:nth-child(10){ position: relative;}/* Color for each Risk */#medium_medium, #medium_low, #low_medium{ background-color: #ffc000;}#high_low, #high_medium, #high_high, #medium_high, #low_high{ background-color: red;}#critical_low, #critical_medium, #critical_high, #critical_critical, #high_critical, #medium_critical, #low_critical{ background-color: purple;}/* Low Risk */#low_low{ background-color: #548dd6; grid-column-start: 3; grid-column-end: 4; grid-row-start: 4; grid-row-end: 5;}/* Medium Risk */#medium_low{ grid-column-start: 3; grid-column-end: 4; grid-row-start: 3; grid-row-end: 4;}#medium_medium{ grid-column-start: 4; grid-column-end: 5; grid-row-start: 3; grid-row-end: 4;}#low_medium{ grid-column-start: 4; grid-column-end: 5; grid-row-start: 4; grid-row-end: 5;}/* High Risk*/#high_low{ grid-column-start: 3; grid-column-end: 4; grid-row-start: 2; grid-row-end: 3;}#high_medium{ grid-column-start: 4; grid-column-end: 5; grid-row-start: 2; grid-row-end: 3;}#high_high{ grid-column-start: 5; grid-column-end: 6; grid-row-start: 2; grid-row-end: 3;}#medium_high{ grid-column-start: 5; grid-column-end: 6; grid-row-start: 3; grid-row-end: 4;}#low_high{ grid-column-start: 5; grid-column-end: 6; grid-row-start: 4; grid-row-end: 5;}/* Critical Risk */#critical_low{ grid-column-start: 3; grid-column-end: 4; grid-row-start: 1; grid-row-end: 2;}#critical_medium{ grid-column-start: 4; grid-column-end: 5; grid-row-start: 1; grid-row-end: 2;}#critical_high{ grid-column-start: 5; grid-column-end: 6; grid-row-start: 1; grid-row-end: 2;}#critical_critical{ grid-column-start: 6; grid-column-end: 7; grid-row-start: 1; grid-row-end: 2;}#high_critical{ grid-column-start: 6; grid-column-end: 7; grid-row-start: 2; grid-row-end: 3;}#medium_critical{ grid-column-start: 6; grid-column-end: 7; grid-row-start: 3; grid-row-end: 4;}#low_critical{ grid-column-start: 6; grid-column-end: 7; grid-row-start: 4; grid-row-end: 5;}#severityDetails{ margin-left: 8%; margin-top: 30px; border: 1px solid #d2d2d2; margin-right: 8%; float: right; margin-bottom: 40px;}#severityDetails td{ border: 1px solid #d2d2d2;}#calculationTables{ float: right; position: relative;}.calculationTablesText{ text-align: left; font-family: Arial, sans-serif;}#riskScore th{ background-color: lightgray;}#riskScore tr:nth-child(2n) td{ background-color: #efefef;}#summaryTable{ float: left;}#riskMatrixSummary{ font-family: Arial, sans-serif; display: grid; position: relative; grid-template-columns: 100px repeat(5,60px); grid-template-rows: repeat(6,60px); right: 10%; float:right;}#riskMatrixSummary div{ border: 1px solid black;}#riskMatrixSummaryArea{ float: right; text-align: center; margin-right: 10%;}#systemData{ float: left; text-align: left;}#dotRiskScoreTab { height: 15px; width: 15px; background-color: black; border-radius: 50%; border-style: dotted; display: inline-block; position: absolute; left: 22px; border-width: 2px; top: 22px;}#dotSummaryTab { height: 15px; width: 15px; background-color: black; border-radius: 50%; border-style: dotted; display: inline-block; position: absolute; left: 22px; border-width: 2px; top: 22px;}#quantityTable{ margin-top: 30px; border: 1px solid black; margin-right: auto;}#severityTable{ margin-top: 30px; border: 1px solid black; margin-right: auto;}.severityResultFalse{ display: block; padding: 5px 10px; border-radius: 8px; font-weight: bold; margin: auto; color: #fff; background-color: #cc0000; }.severityResultTrue{ display: block; padding: 5px 10px; border-radius: 8px; font-weight: bold; margin: auto; color: #fff; background-color: #33cca6;}.severityResultNone, .severityResultError{ display: block; padding: 5px 10px; border-radius: 8px; font-weight: bold; margin: auto;}.severityResultWarning{ display: block; padding: 5px 10px; border-radius: 8px; font-weight: bold; margin: auto; background-color: #ff9933; color: #000;}.tabContent#riskScore{ text-align: left;}#severityCompliance{ margin-top: 25%; clear: both;}#complianceStatusFalse{ padding: 5px 10px; border-radius: 8px; background-color: #cc0000; color: #fff; margin-left: 6%; font-weight: bold; display: inline;}#complianceStatusTrue{ padding: 5px 10px; border-radius: 8px; background-color: #33cca6; color: #fff; margin-left: 6%; font-weight: bold; display: inline;}#referencesContainer{ display: grid; grid-template-rows: 400px; grid-template-columns: repeat(2, 500px);}#referencesContainer div{ text-align: center; margin-left: auto; margin-right: auto;}#settingsOverview section{ margin-left: 5%; margin-right: 5%;}#invalidOS{ display: inline; padding: 5px 10px; border-radius: 8px; font-weight: bold; margin: auto; background-color: #777777;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(150.48deg); transform: rotate(150.48deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(0deg); transform: rotate(0deg);}.donut-chart.chart .chart-center span:after {content: "16.8 %";}</style><script >"use strict";let AmountOfNonCompliantRules;let AmountOfCompliantRules;let TotalAmountOfRules;let QuantityCompliance;let TotalAmountOfSeverityRules;let AmountOfFailedSeverityRules;let SeverityCompliance;function startConditions(){ /* Default-Value: Display summary always at the beginning */ document.getElementById("summary").style.display = "block"; /* Default-Value: Disable all other tabs at the beginning */ document.getElementById("riskScore").style.display = "none"; document.getElementById("references").style.display = "none"; document.getElementById("settingsOverview").style.display = "none"; document.getElementById("summaryBtn").style.backgroundColor= '#ff9933'; document.getElementById("riskScoreBtn").style.backgroundColor= 'transparent'; document.getElementById("referenceBtn").style.backgroundColor= 'transparent'; document.getElementById("settingsOverviewBtn").style.backgroundColor= 'transparent'; /* Initialize necessary variables */ AmountOfNonCompliantRules = document.getElementById("AmountOfNonCompliantRules").textContent; document.getElementById("AmountOfNonCompliantRules").hidden = true; AmountOfCompliantRules = document.getElementById("AmountOfCompliantRules").textContent; document.getElementById("AmountOfCompliantRules").hidden = true; TotalAmountOfRules = document.getElementById("TotalAmountOfRules").textContent; document.getElementById("TotalAmountOfRules").hidden = true; QuantityCompliance = document.getElementById("QuantityCompliance").textContent; document.getElementById("QuantityCompliance").hidden = true; TotalAmountOfSeverityRules = document.getElementById("TotalAmountOfSeverityRules").textContent; document.getElementById("TotalAmountOfSeverityRules").hidden = true; AmountOfFailedSeverityRules = document.getElementById("AmountOfFailedSeverityRules").textContent; document.getElementById("AmountOfFailedSeverityRules").hidden = true; calcDotPosition(); let severityComplianceCollapseBtn = document.getElementById("severityComplianceCollapse"); severityComplianceCollapseBtn.addEventListener("click", ()=>{ if(document.getElementById("severityDetails").style.display == "none"){ document.getElementById("severityDetails").style.display = "block"; } else{ document.getElementById("severityDetails").style.display = "none"; } })}function clickButton(value){ let buttonNumber = parseInt(value); /* Disable all content */ let tabContents = document.getElementsByClassName('tabContent'); for(let i = 0; i < tabContents.length; i++){ tabContents.item(i).style.display = "none"; } /* Disable all buttons */ let buttons = document.getElementsByClassName('navButton'); for(let i = 0; i < buttons.length; i++){ buttons.item(i).style.backgroundColor= 'transparent'; } /* Re-Enable fitting content / button */ switch(buttonNumber){ case 1: document.getElementById("summary").style.display = "block"; document.getElementById("summaryBtn").style.backgroundColor= '#ff9933'; break; case 2: document.getElementById("riskScore").style.display = "block"; document.getElementById("riskScoreBtn").style.backgroundColor= '#ff9933'; calcDotPosition(); break; case 3: document.getElementById("references").style.display = "block"; document.getElementById("referenceBtn").style.backgroundColor= '#ff9933'; break; case 4: document.getElementById("settingsOverview").style.display = "block"; document.getElementById("settingsOverviewBtn").style.backgroundColor= '#ff9933'; break; }}/* Calculate the position of the dot inside the risk matrix; Will be calleed, after the user has clicked on Risk Score Button*/function calcDotPosition(){ let dotRiskScoreTab = document.getElementById("dotRiskScoreTab"); let dotSummaryTab = document.getElementById("dotSummaryTab"); QuantityCompliance = parseFloat(QuantityCompliance); let complianceValueQuantity = 0; let complianceValueSeverity = 0; /*low quantity compliance*/ if(85 < QuantityCompliance){ dotRiskScoreTab.style.gridColumnStart = 3; dotSummaryTab.style.gridColumnStart = 3; complianceValueQuantity = 1; } /*medium quantity compliance*/ else if(70 < QuantityCompliance && QuantityCompliance < 85){ dotRiskScoreTab.style.gridColumnStart = 4; dotSummaryTab.style.gridColumnStart = 4; complianceValueQuantity = 2; } /*high quantity compliance*/ else if(55 < QuantityCompliance && QuantityCompliance < 70){ dotRiskScoreTab.style.gridColumnStart = 5; dotSummaryTab.style.gridColumnStart = 5; complianceValueQuantity = 3; } /*critical quantity compliance*/ else{ dotRiskScoreTab.style.gridColumnStart = 6; dotSummaryTab.style.gridColumnStart = 6; complianceValueQuantity = 4; } SeverityCompliance = parseInt(AmountOfFailedSeverityRules); /*low severity compliance*/ if(SeverityCompliance == 0){ dotRiskScoreTab.style.gridRowStart = 4; dotSummaryTab.style.gridRowStart = 4; complianceValueSeverity = 1; document.getElementById("complianceStatus").id = 'complianceStatusTrue'; } /*critical severity compliance*/ else{ dotRiskScoreTab.style.gridRowStart = 1; dotSummaryTab.style.gridRowStart = 1; complianceValueSeverity = 4; document.getElementById("complianceStatus").id = 'complianceStatusFalse'; } let totalComplianceValue = Math.max(complianceValueQuantity, complianceValueSeverity); let summary = "Current Risk Score on tested System: "; let riskResult = document.createElement("p"); riskResult.style.display = "contents"; if(totalComplianceValue == 1){ riskResult.innerText = "Low"; riskResult.style.backgroundColor = "#548dd6"; } else if(totalComplianceValue == 2){ riskResult.innerText = "Medium"; riskResult.style.backgroundColor = "#ffc000"; } else if(totalComplianceValue == 3){ riskResult.innerText = "High"; riskResult.style.color = "white"; riskResult.style.backgroundColor = "#cc0000"; } else{ riskResult.innerText = "Critical"; riskResult.style.color = "white"; riskResult.style.backgroundColor = "purple"; } riskResult.style.display = "inline"; riskResult.style.padding = "5px 10px"; riskResult.style.borderRadius = "8px"; riskResult.style.fontWeight = "bold"; riskResult.style.margin = "auto"; let copyRiskResult = riskResult.cloneNode(); copyRiskResult.innerText = riskResult.innerText; document.getElementById("CurrentRiskScore").textContent = summary; document.getElementById("CurrentRiskScore").appendChild(riskResult); document.getElementById("CurrentRiskScoreRS").textContent = summary; document.getElementById("CurrentRiskScoreRS").appendChild(copyRiskResult);}</script></head><body onload="startConditions()"><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows Server 2022 Audit Report</h1></div><div class="main content"><div class="host-information"><div id="AmountOfNonCompliantRules">711</div><div id="AmountOfCompliantRules">144</div><div id="TotalAmountOfRules">857</div><div id="QuantityCompliance">16.8</div><div id="TotalAmountOfSeverityRules">33</div><div id="AmountOfFailedSeverityRules">30</div><div id="navigationButtons"><button onclick="clickButton('1')" class="navButton" type="button" id="summaryBtn">Benchmark Compliance</button><button onclick="clickButton('2')" class="navButton" type="button" id="riskScoreBtn">Risk Score</button><button onclick="clickButton('4')" class="navButton" type="button" id="settingsOverviewBtn">Settings Overview</button><button onclick="clickButton('3')" class="navButton" type="button" id="referenceBtn">About Us</button></div><div class="tabContent" id="settingsOverview"><h1 id="toc">Settings Overview</h1><h2 >Table Of Content</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#General-Benchmarks">General Benchmarks</a><ul ><li ><a href="#General-BenchmarksSecurity-Base-Data">Security Base Data</a></li></ul></li><li ><a href="#Microsoft-Benchmarks">Microsoft Benchmarks</a><ul ><li ><a href="#Microsoft-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#Microsoft-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#Microsoft-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#Microsoft-Benchmarks-Advanced-Audit-Policy-Configuration"> Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#CIS-Benchmarks">CIS Benchmarks</a><ul ><li ><a href="#CIS-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#CIS-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#CIS-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#CIS-Benchmarks-Advanced-Audit-Policy-Configuration"> Advanced Audit Policy Configuration</a></li></ul></li></ul><section ><h1 id="General-Benchmarks"><span class="failed">General Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains general benchmarks</p><section ><h1 id="General-BenchmarksSecurity-Base-Data"><span class="failed">Security Base Data</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains basic recommendations for a secure Microsoft Windows configuration.</p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-001</td><td >Ensure the system is booting in 'UEFI' mode.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-002</td><td >Ensure the system is using SecureBoot.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-003</td><td >Ensure the TPM Chip is 'present'.</td><td >The TPM Chip is not 'present'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-004</td><td >Ensure the TPM Chip is 'ready'.</td><td >The TPM Chip is not 'ready'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-005</td><td >Ensure the TPM Chip is 'enabled'.</td><td >The TPM Chip is not 'enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-006</td><td >Ensure the TPM Chip is 'activated'.</td><td >The TPM Chip is not 'activated'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-007</td><td >Ensure the TPM Chip is 'owned'.</td><td >The TPM Chip is not 'owned'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-008</td><td >Ensure the TPM Chip is implementing specification version 2.0 or higher.</td><td >No TPM Chip detected.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >SBD-009</td><td >Get the count of local users on the system.</td><td >System has 3-5 local users.</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >SBD-010</td><td >Get the count of admin users on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-011</td><td >Ensure the status of the Bitlocker service is 'Running'.</td><td >Bitlocker feature is not installed.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-012</td><td >Ensure that Bitlocker is activated on all volumes.</td><td >Bitlocker feature is not installed.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-013</td><td >Ensure the status of the Windows Defender service is 'Running'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-014</td><td >Ensure the status of the Microsoft Defender for Endpoint service is 'Running'.</td><td >Service is not 'Running' (<a href="https://www.microsoft.com/en-us/security/business/threat-protection/endpoint-defender">More info</a>).</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-015</td><td >Ensure the Windows Firewall is enabled on all profiles.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-016</td><td >Check if the last successful search for updates was in the past 24 hours.</td><td >Last search for updates was more than 5 days ago.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-017</td><td >Check if the last successful installation of updates was in the past 5 days.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-018</td><td >Ensure Virtualization Based Security is enabled and running.</td><td >VBS is not activated.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-019</td><td >Ensure Hypervisor-protected Code Integrity (HVCI) is running.</td><td >HVCI is not running.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-020</td><td >Ensure Credential Guard is running.</td><td >Credential Guard is not running.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-021</td><td >Ensure the Attack Surface Reduction (ASR) rules are enabled.</td><td >ASR rules are not enabled.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-022</td><td >Ensure Windows Defender Application Guard is enabled.</td><td >Windows Defender Application Guard is not enabled.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section><section ><h1 id="Microsoft-Benchmarks"><span class="failed">Microsoft Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains all benchmarks from Microsoft</p><section ><h1 id="Microsoft-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >Registry-001</td><td >Ensure 'Remove "Run this time" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-002</td><td >Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-003</td><td >Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-004</td><td >Set registry value 'CheckExeSignatures' to yes.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-005</td><td >Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-006</td><td >Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-007</td><td >Set registry value 'Isolation' to PMEM.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-008</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-009</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-010</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-011</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-012</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-013</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-014</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-015</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-016</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-017</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-018</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-019</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-020</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-021</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-022</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-023</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-024</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-025</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-026</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-027</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-028</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-029</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-030</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-031</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-032</td><td >Set registry value 'PreventOverrideAppRepUnknown' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-033</td><td >Set registry value 'PreventOverride' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-034</td><td >Ensure 'Prevent managing SmartScreen Filter' is set to 'On'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-035</td><td >Set registry value 'NoCrashDetection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-036</td><td >Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-037</td><td >Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-038</td><td >Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-039</td><td >Set registry value 'Security_zones_map_edit' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-040</td><td >Set registry value 'Security_options_edit' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-041</td><td >Set registry value 'Security_HKLM_only' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-042</td><td >Ensure 'Check for server certificate revocation' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-043</td><td >Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-044</td><td >Set registry value 'WarnOnBadCertRecving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-045</td><td >Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-046</td><td >Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-047</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-048</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-049</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-050</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-051</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-052</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-053</td><td >Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-054</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-055</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-056</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-057</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-058</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-059</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-060</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-061</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-062</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-063</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-064</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-065</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-066</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-067</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-068</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-069</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-070</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-071</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-072</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-073</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-074</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-075</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-076</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-077</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-078</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-079</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-080</td><td >Ensure 'Logon options' is set to 'Prompt for user name and password'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-081</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-082</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-083</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-084</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-085</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-086</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-087</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-088</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-089</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-090</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-091</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-092</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-093</td><td >Set registry value '140C' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-094</td><td >Ensure 'Allow META REFRESH' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-095</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-096</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-097</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-098</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-099</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-100</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-101</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-102</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-103</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-104</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-105</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-106</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-107</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-108</td><td >Ensure 'Allow binary and script behaviors' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-109</td><td >Ensure 'Scripting of Java applets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-110</td><td >Ensure 'Allow file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-111</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-112</td><td >Ensure 'Allow active scripting' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-113</td><td >Ensure 'Logon options' is set to 'Anonymous logon'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-114</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-115</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-116</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-117</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-118</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-119</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-120</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-121</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-122</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-123</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-124</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-125</td><td >Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-126</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-127</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-128</td><td >Ensure 'Run ActiveX controls and plugins' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-129</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-130</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-131</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-132</td><td >Set registry value '140C' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-133</td><td >Ensure 'Turn off Autoplay' is set to 'All drives'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-134</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-135</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-136</td><td >Set registry value 'LocalAccountTokenFilterPolicy' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-137</td><td >Set registry value 'AllowEncryptionOracle' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-138</td><td >Set registry value 'EnhancedAntiSpoofing' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-139</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-140</td><td >Set registry value 'AllowProtectedCreds' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-141</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-142</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '196608'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-143</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-144</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-145</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-146</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-148</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-149</td><td >Set registry value 'DeviceEnumerationPolicy' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-150</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-151</td><td >Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-152</td><td >Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-153</td><td >Set registry value 'NoLockScreenCamera' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-154</td><td >Set registry value 'NoLockScreenSlideshow' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-155</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-156</td><td >Ensure 'Turn on PowerShell Script Block Logging' is not set.</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-157</td><td >Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-158</td><td >Ensure 'Configure Windows SmartScreen' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-159</td><td >Set registry value 'ShellSmartScreenLevel' to Block.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-160</td><td >Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-161</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-162</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-163</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-164</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-165</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-166</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-167</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-168</td><td >Set registry value 'RestrictDriverInstallationToAdministrators' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-169</td><td >Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-170</td><td >Set registry value 'DisablePasswordSaving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-171</td><td >Set registry value 'fDisableCdm' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-172</td><td >Set registry value 'fPromptForPassword' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-173</td><td >Set registry value 'fEncryptRPCTraffic' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-174</td><td >Set registry value 'MinEncryptionLevel' to 3.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-175</td><td >Set registry value 'PolicyVersion' to 538.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-176</td><td >Domain: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-177</td><td >Domain: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-178</td><td >Domain: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-179</td><td >Private: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-180</td><td >Private: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-181</td><td >Private: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-182</td><td >Public: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-183</td><td >Public: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-184</td><td >Public: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-185</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-186</td><td >Set registry value 'AdmPwdEnabled' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-187</td><td >Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-188</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-189</td><td >Set registry value 'DriverLoadPolicy' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-190</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-191</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-192</td><td >Set registry value 'NoNameReleaseOnDemand' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-193</td><td >Set registry value 'NodeType' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-194</td><td >Set registry value 'EnableICMPRedirect' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-195</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-196</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-197</td><td >Set registry value 'RestrictRemoteSAM' to O:BAG:BAD:(A;;RC;;;BA).</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-198</td><td >Set registry value 'EnablePlainTextPassword' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-199</td><td >Set registry value 'NoLMHash' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-200</td><td >Set registry value 'LimitBlankPasswordUse' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-201</td><td >Set registry value 'ProtectionMode' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-202</td><td >Set registry value 'RestrictAnonymous' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-203</td><td >Set registry value 'RestrictNullSessAccess' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-204</td><td >Set registry value 'RestrictAnonymousSAM' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-205</td><td >Set registry value 'requirestrongkey' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-206</td><td >Set registry value 'requiresecuritysignature' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-207</td><td >Set registry value 'RequireSecuritySignature' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-208</td><td >Set registry value 'signsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-209</td><td >Set registry value 'requiresignorseal' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-210</td><td >Set registry value 'NTLMMinServerSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-211</td><td >Set registry value 'sealsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-212</td><td >Set registry value 'NTLMMinClientSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-213</td><td >Set registry value 'LmCompatibilityLevel' to 5.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-214</td><td >Set registry value 'LDAPClientIntegrity' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-215</td><td >Set registry value 'EnableSecureUIAPaths' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-216</td><td >Set registry value 'ConsentPromptBehaviorUser' to 0.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-217</td><td >Set registry value 'ConsentPromptBehaviorAdmin' to 2.</td><td >Registry value is '5'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-218</td><td >Set registry value 'EnableInstallerDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-219</td><td >Set registry value 'EnableLUA' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-220</td><td >Set registry value 'FilterAdministratorToken' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-221</td><td >Set registry value 'EnableVirtualization' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-222</td><td >Set registry value 'SCENoApplyLegacyAuditPolicy' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-223</td><td >Set registry value 'ScRemoveOption' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-224</td><td >Set registry value 'InactivityTimeoutSecs' to 900.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-225</td><td >Set registry value 'allownullsessionfallback' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-273</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-274</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-275</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-276</td><td >Set registry value 'HVCIMATRequired' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-277</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-278</td><td >Set registry value 'ConfigureSystemGuardLaunch' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-279</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-280</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-281</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-282</td><td >Set registry value 'HVCIMATRequired' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-283</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-284</td><td >Set registry value 'ConfigureSystemGuardLaunch' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-285</td><td >Set registry value 'PUAProtection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-286</td><td >Set registry value 'MpCloudBlockLevel' to 2.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-287</td><td >Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-288</td><td >Ensure 'Turn off real-time protection' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-289</td><td >Set registry value 'DisableScriptScanning' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-290</td><td >Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-291</td><td >Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-292</td><td >Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-293</td><td >Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-294</td><td >Set registry value 'ExploitGuard_ASR_Rules' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-295</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from injecting code into other processes)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-296</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating executable content)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-297</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-298</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Win32 API calls from Office macro)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-299</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-300</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-301</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block executable content from email client and webmail)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-302</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-303</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-304</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application from creating child processes)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-305</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Adobe Reader from creating child processes)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-306</td><td >Ensure 'Configure Attack Surface Reduction rules' is configured (Use advanced protection against ransomware)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-307</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-308</td><td >Set registry value 'EnableNetworkProtection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-316</td><td >Set registry value 'FormSuggest Passwords' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-317</td><td >Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-318</td><td >Set registry value 'FormSuggest Passwords' to no.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-319</td><td >Ensure 'Turn off Autoplay' is set to 'All drives'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-320</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-321</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-322</td><td >Set registry value 'AllowEncryptionOracle' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-323</td><td >Set registry value 'EnhancedAntiSpoofing' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-324</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-325</td><td >Set registry value 'AllowProtectedCreds' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-326</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-327</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '196608'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-328</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-329</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-330</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-331</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-332</td><td >Set registry value 'AlwaysInstallElevated' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-333</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-334</td><td >Set registry value 'DeviceEnumerationPolicy' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-335</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-336</td><td >Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-337</td><td >Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-338</td><td >Set registry value 'NoLockScreenCamera' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-339</td><td >Set registry value 'NoLockScreenSlideshow' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-340</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-341</td><td >Ensure 'Turn on PowerShell Script Block Logging' is not set.</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-343</td><td >Set registry value 'EnforcementMode' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-358</td><td >Ensure 'Configure Windows SmartScreen' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-359</td><td >Set registry value 'ShellSmartScreenLevel' to Block.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-360</td><td >Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-361</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-362</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-363</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-364</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-365</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-366</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-367</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-368</td><td >Set registry value 'RestrictDriverInstallationToAdministrators' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-369</td><td >Set registry value 'DisablePasswordSaving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-370</td><td >Set registry value 'fDisableCdm' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-371</td><td >Set registry value 'fPromptForPassword' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-372</td><td >Set registry value 'fEncryptRPCTraffic' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-373</td><td >Set registry value 'MinEncryptionLevel' to 3.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-374</td><td >Set registry value 'PolicyVersion' to 538.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-375</td><td >Domain: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-376</td><td >Domain: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-377</td><td >Domain: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-378</td><td >Private: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-379</td><td >Private: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-380</td><td >Private: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-381</td><td >Public: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-382</td><td >Public: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-383</td><td >Public: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-384</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-385</td><td >Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-386</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-387</td><td >Set registry value 'DriverLoadPolicy' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-388</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-389</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-390</td><td >Set registry value 'NoNameReleaseOnDemand' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-391</td><td >Set registry value 'NodeType' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-392</td><td >Set registry value 'EnableICMPRedirect' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-393</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-394</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-395</td><td >Set registry value 'allownullsessionfallback' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-396</td><td >Set registry value 'InactivityTimeoutSecs' to 900.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-397</td><td >Set registry value 'ScRemoveOption' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-398</td><td >Set registry value 'SCENoApplyLegacyAuditPolicy' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-399</td><td >Set registry value 'EnableVirtualization' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-400</td><td >Set registry value 'FilterAdministratorToken' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-401</td><td >Set registry value 'EnableLUA' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-402</td><td >Set registry value 'EnableInstallerDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-403</td><td >Set registry value 'ConsentPromptBehaviorAdmin' to 2.</td><td >Registry value is '5'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-404</td><td >Set registry value 'ConsentPromptBehaviorUser' to 0.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-405</td><td >Set registry value 'EnableSecureUIAPaths' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-406</td><td >Set registry value 'LDAPClientIntegrity' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-407</td><td >Set registry value 'LmCompatibilityLevel' to 5.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-408</td><td >Set registry value 'NTLMMinClientSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-409</td><td >Set registry value 'sealsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-410</td><td >Set registry value 'NTLMMinServerSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-411</td><td >Set registry value 'requiresignorseal' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-423</td><td >Set registry value 'LDAPServerIntegrity' to 2.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-424</td><td >Ensure 'Extended Protection for LDAP Authentication (Domain Controllers only)' is set to 'Enabled, always (recommended)'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >UserRight-227</td><td >Ensure 'SeSecurityPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-228</td><td >Ensure 'SeCreateTokenPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-229</td><td >Ensure 'SeTrustedCredManAccessPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-230</td><td >Ensure 'SeCreatePagefilePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-231</td><td >Ensure 'SeRemoteShutdownPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-232</td><td >Ensure 'SeLoadDriverPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-233</td><td >Ensure 'SeRestorePrivilege' is set to 'S-1-5-32-544'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-234</td><td >Ensure 'SeCreateGlobalPrivilege' is set to 'S-1-5-20, S-1-5-19, S-1-5-6, S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-235</td><td >Ensure 'SeManageVolumePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-236</td><td >Ensure 'SeInteractiveLogonRight' is set to 'S-1-5-32-544'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-237</td><td >Ensure 'SeEnableDelegationPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-238</td><td >Ensure 'SeCreatePermanentPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-239</td><td >Ensure 'SeDebugPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-240</td><td >Ensure 'SeProfileSingleProcessPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-241</td><td >Ensure 'SeBackupPrivilege' is set to 'S-1-5-32-544'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-242</td><td >Ensure 'SeNetworkLogonRight' is set to 'S-1-5-11, S-1-5-32-544'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: Everyone, BUILTIN\Users, BUILTIN\Backup Operators
The user 'SeNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Authenticated Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-243</td><td >Ensure 'SeDenyNetworkLogonRight' is set to 'S-1-5-114'</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Local account and member of Administrators group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-244</td><td >Ensure 'SeImpersonatePrivilege' is set to 'S-1-5-20, S-1-5-19, S-1-5-6, S-1-5-32-544'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-245</td><td >Ensure 'SeSystemEnvironmentPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-246</td><td >Ensure 'SeLockMemoryPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-247</td><td >Ensure 'SeTcbPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-248</td><td >Ensure 'SeTakeOwnershipPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-249</td><td >Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'S-1-5-113'</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-428</td><td >Ensure 'SeTrustedCredManAccessPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-429</td><td >Ensure 'SeRemoteInteractiveLogonRight' is set to 'S-1-5-32-544'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AccountPolicy-309</td><td >Ensure 'MinimumPasswordLength' is set to '14'.</td><td >'MinimumPasswordLength' currently set to: 0. Expected: 14</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-310</td><td >Ensure 'PasswordComplexity' is set to '1'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-311</td><td >Ensure 'PasswordHistorySize' is set to '24'.</td><td >'PasswordHistorySize' currently set to: 0. Expected: 24</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-312</td><td >Ensure 'LockoutBadCount' is set to '10'.</td><td >'LockoutBadCount' currently set to: 0. Expected: 10</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-313</td><td >Ensure 'ResetLockoutCount' is set to '15'.</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-314</td><td >Ensure 'LockoutDuration' is set to '15'.</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-315</td><td >Ensure 'ClearTextPassword' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-Benchmarks-Advanced-Audit-Policy-Configuration"><span class="failed"> Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AuditPolicy-250</td><td >Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-251</td><td >Ensure 'Security Group Management' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-252</td><td >Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-253</td><td >Ensure 'Plug and Play Events' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-254</td><td >Ensure 'Process Creation' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-255</td><td >Ensure 'Account Lockout' is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-256</td><td >Ensure 'Group Membership' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-257</td><td >Ensure 'Logon' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-258</td><td >Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-259</td><td >Ensure 'Special Logon' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-260</td><td >Ensure 'Detailed File Share' is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-261</td><td >Ensure 'File Share' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-262</td><td >Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-263</td><td >Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-264</td><td >Ensure 'Audit Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-265</td><td >Ensure 'Authentication Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-266</td><td >Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-267</td><td >Ensure 'Other Policy Change Events' is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-268</td><td >Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-269</td><td >Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-270</td><td >Ensure 'Security State Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-271</td><td >Ensure 'Security System Extension' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-272</td><td >Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-449</td><td >Ensure 'Kerberos Authentication Service' is set to 'Success' and is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-450</td><td >Ensure 'Kerberos Service Ticket Operations' is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-451</td><td >Ensure 'Computer Account Management' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-452</td><td >Ensure 'Other Account Management Events' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-457</td><td >Ensure 'Directory Service Access' is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-458</td><td >Ensure 'Directory Service Changes' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section><section ><h1 id="CIS-Benchmarks"><span class="failed">CIS Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains all benchmarks from CIS</p><section ><h1 id="CIS-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.6</td><td >(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.1.2</td><td >(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.1.4</td><td >(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.2.1</td><td >(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.2.2</td><td >(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.4.1</td><td >(L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.4.2</td><td >(L1) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.5.1</td><td >(L1) Ensure 'Domain controller: Allow server operators to schedule tasks' is set to 'Disabled' (DC only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: Allow vulnerable Netlogon secure channel connections' is set to 'Not Configured' (DC Only)</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.5.3</td><td >(L1) Ensure 'Domain controller: LDAP server channel binding token requirements' is set to 'Always' (DC Only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.5.4</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.5.5</td><td >(L1) Ensure 'Domain controller: Refuse machine account password changes' is set to 'Disabled' (DC only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.6.1</td><td >(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.2</td><td >(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.3</td><td >(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.4</td><td >(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.5</td><td >(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.6</td><td >(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.1</td><td >(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.2</td><td >(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.3</td><td >(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.4</td><td >(L1) Configure 'Interactive logon: Message text for users attempting to log on'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.5</td><td >(L1) Configure 'Interactive logon: Message title for users attempting to log on'</td><td >Registry value is ''. Expected: Matching expression '.+'</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.6</td><td >(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)' (MS only)</td><td >Registry value is '10'. Expected: Matching expression '^[43210]$'</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.7</td><td >(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.8</td><td >(L1) Ensure 'Interactive logon: Require Domain Controller Authentication to unlock workstation' is set to 'Enabled' (MS only)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.9</td><td >(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher</td><td >Registry value is '0'. Expected: Matching expression '^(1|2|3)$'</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.8.1</td><td >(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.8.2</td><td >(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.8.3</td><td >(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.1</td><td >(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.2</td><td >(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.9.3</td><td >(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.9.4</td><td >(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.5</td><td >(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.1</td><td >(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.2</td><td >(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.3</td><td >(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled' (MS only)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.4</td><td >(L2) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.5</td><td >(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.6</td><td >(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (DC only)</td><td >Registry value is ''. Expected: LSARPC NETLOGON SAMR</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.7</td><td >(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.8</td><td >(L1) Configure 'Network access: Remotely accessible registry paths' is configured</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.9</td><td >(L1) Configure 'Network access: Remotely accessible registry paths and sub-paths' is configured</td><td >Registry value is 'System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\CertSvc System\CurrentControlSet\Services\WINS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.10</td><td >(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.11</td><td >(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow' (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.12</td><td >(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.13</td><td >(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.1</td><td >(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.2</td><td >(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.3</td><td >(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.7</td><td >(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.8</td><td >(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.9</td><td >(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.10</td><td >(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.13.1</td><td >(L1) Ensure 'Shutdown: Allow system to be shut down without having to log on' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.15.1</td><td >(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.15.2</td><td >(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.1</td><td >(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.17.2</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'</td><td >Registry value is '5'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.17.3</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.17.4</td><td >(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.5</td><td >(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.6</td><td >(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.7</td><td >(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.8</td><td >(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1</td><td >(L1) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (DC only) </td><td >Registry value is '2'. Expected: x == 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.2</td><td >(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (MS only)</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.1</td><td >(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.2</td><td >(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.3</td><td >(L1) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.4</td><td >(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.5</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.6</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.1</td><td >(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.2</td><td >(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.3</td><td >(L1) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.4</td><td >(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.5</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.6</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.7</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.8</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.1</td><td >(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.2</td><td >(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.3</td><td >(L1) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.4</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.5</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.6</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.7</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.8</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.9</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.10</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.1.1.1</td><td >(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.1.1.2</td><td >(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.1.2.2</td><td >(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.1.3</td><td >(L2) Ensure 'Allow Online Tips' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.2</td><td >(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.3</td><td >(L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.4</td><td >(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.5</td><td >(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.6</td><td >(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.1</td><td >(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled' (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.2</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.4</td><td >(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.5</td><td >(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled' (Automated)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.6</td><td >(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.7</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.1</td><td >(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.2</td><td >(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.3</td><td >(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.4</td><td >(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.5</td><td >(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.6</td><td >(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.7</td><td >(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.8</td><td >(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.9</td><td >(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.10</td><td >(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.11</td><td >(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.12</td><td >(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.4.1</td><td >(L1) Ensure 'Configure DNS over HTTPS (DoH) name resolution' is set to 'Enabled: Allow DoH' or higher</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.4.2</td><td >(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.5.1</td><td >(L2) Ensure 'Enable Font Providers' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.8.1</td><td >(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.1 A</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (AllowLLTDIOOnDomain)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.1 B</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (AllowLLTDIOOnPublicNet)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.1 C</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.1 D</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (ProhibitLLTDIOOnPrivateNet)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.2 A</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (AllowRspndrOnDomain)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.2 B</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (AllowRspndrOnPublicNet)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.2 C</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.2 D</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (ProhibitRspndrOnPrivateNet)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.10.2</td><td >(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.11.2</td><td >(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.11.3</td><td >(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.11.4</td><td >(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.14.1 A</td><td >(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1, RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.14.1 B</td><td >(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1, RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.19.2.1</td><td >(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 A</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 B</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 C</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 D</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 E</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.2</td><td >(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.21.1</td><td >(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.21.2</td><td >(L2) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.6.1</td><td >(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled' </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt' </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.7.1.1</td><td >(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.3.1</td><td >(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.4.1</td><td >(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.4.2</td><td >(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.1</td><td >(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.2</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot and DMA Protection'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.3</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.4</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.5</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock' (MS Only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.6</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.7</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.7.2</td><td >(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled' (Automated)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.14.1</td><td >(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.21.2</td><td >(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.21.3</td><td >(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.21.4</td><td >(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.21.5</td><td >(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.1</td><td >(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.2</td><td >(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.3</td><td >(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.4</td><td >(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.5</td><td >(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.6</td><td >(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.7</td><td >(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.8</td><td >(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.9</td><td >(L2) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.10</td><td >(L2) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.11</td><td >(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.12</td><td >(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.13 A</td><td >(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.13 B</td><td >(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.25.1 A</td><td >(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.25.1 B</td><td >(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.26.1</td><td >(L1) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.27.1</td><td >(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.1</td><td >(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.2</td><td >(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.3</td><td >(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.4</td><td >(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.5</td><td >(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.6</td><td >(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.7</td><td >(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.31.1</td><td >(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.31.2</td><td >(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.34.6.1</td><td >(L2) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.34.6.2</td><td >(L2) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.34.6.3</td><td >(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.34.6.4</td><td >(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.36.1</td><td >(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.36.2</td><td >(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.37.1</td><td >(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.37.2</td><td >(L2) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.40.1</td><td >(L1) Ensure 'Configure validation of ROCA-vulnerable WHfB keys during authentication' is set to 'Enabled: Audit' or higher (DC only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.48.5.1</td><td >(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.48.11.1</td><td >(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.50.1</td><td >(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.53.1.1</td><td >(L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.53.1.2</td><td >(L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.4.1</td><td >(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.6.1</td><td >(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.8.1</td><td >(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.8.2</td><td >(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.8.3</td><td >(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.10.1.1</td><td >(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.12.1</td><td >(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.14.1</td><td >(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled' </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.14.2</td><td >(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.15.1</td><td >(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.16.1</td><td >(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.16.2</td><td >(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.1</td><td >(L1) Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only]' or 'Enabled: 1 - Basic'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.2</td><td >(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.3</td><td >(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.4</td><td >(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.5</td><td >(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.6</td><td >(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled' </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.7</td><td >(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.8</td><td >(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.1.1</td><td >(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.1.2</td><td >(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.2.1</td><td >(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.2.2</td><td >(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.3.1</td><td >(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.3.2</td><td >(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.4.1</td><td >(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.4.2</td><td >(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.31.2</td><td >(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.31.3</td><td >(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.31.4</td><td >(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.41.1</td><td >(L2) Ensure 'Turn off location' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.45.1</td><td >(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.46.1</td><td >(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.4.1</td><td >(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.4.2</td><td >(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.1</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe))' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.3.1</td><td >(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.6.1</td><td >(L2) Ensure 'Enable file hash computation feature' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.9.1</td><td >(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.9.3</td><td >(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.9.4</td><td >(L1) Ensure 'Turn on script scanning' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.11.1</td><td >(L2) Ensure 'Configure Watson events' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.12.1</td><td >(L1) Ensure 'Scan removable drives' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.12.2</td><td >(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.15</td><td >(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.16</td><td >(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.58.1</td><td >(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.64.1</td><td >(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.2.2</td><td >(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.2.1</td><td >(L2) Ensure 'Restrict Remote Desktop Services users to a single Remote Desktop Services session' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.1</td><td >(L2) Ensure 'Allow UI Automation redirection' is set to 'Disabled' </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.2</td><td >(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.3</td><td >(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.4</td><td >(L2) Ensure 'Do not allow location redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.5</td><td >(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.6</td><td >(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.1</td><td >(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.2</td><td >(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.3</td><td >(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.4</td><td >(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.5</td><td >(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.11.1</td><td >(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.11.2</td><td >(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.66.1</td><td >(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.67.2</td><td >(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.3</td><td >(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.72.1</td><td >(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.85.1.1 A</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.85.1.1 B</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.89.1</td><td >(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.89.2</td><td >(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled' but not 'Enabled: On'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.90.1</td><td >(L1) Ensure 'Allow user control over installs' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.90.2</td><td >(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (LocalMachine)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.90.3</td><td >(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.91.1</td><td >(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.100.1</td><td >(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.100.2</td><td >(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.1.1</td><td >(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.1.2</td><td >(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.1.3</td><td >(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.1</td><td >(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.2</td><td >(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.3</td><td >(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.4</td><td >(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.103.1</td><td >(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.105.2.1</td><td >(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.1.1</td><td >(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.2 A</td><td >(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.2.2</td><td >(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.1</td><td >(L1) Ensure 'Manage preview builds' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.2 A</td><td >(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days' (DeferFeatureUpdates)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.2 B</td><td >(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days' (DeferFeatureUpdatesPeriodInDays)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.3 A</td><td >(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.3 B</td><td >(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.1.3.1</td><td >(L1) Ensure 'Enable screen saver' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.1.3.2</td><td >(L1) Ensure 'Password protect the screen saver' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.1.3.3</td><td >(L1) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.5.1.1</td><td >(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.6.6.1.1</td><td >(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.4.1</td><td >(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.4.2</td><td >(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.1</td><td >(L1) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.2</td><td >(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.3</td><td >(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.4</td><td >(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.5</td><td >(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.28.1</td><td >(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.43.1</td><td >(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.47.2.1</td><td >(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >2.2.1</td><td >(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.2</td><td >(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS' (DC only)</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: Everyone, BUILTIN\Users, BUILTIN\Backup Operators
The user 'SeNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Authenticated Users, NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.3</td><td >(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users' (MS only)</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: Everyone, BUILTIN\Users, BUILTIN\Backup Operators
The user 'SeNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Authenticated Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.4</td><td >(L1) Ensure 'Act as part of the operating system' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.5</td><td >(L1) Ensure 'Add workstations to domain' is set to 'Administrators' (DC only)</td><td >The user 'SeMachineAccountPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.6</td><td >(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.7</td><td >(L1) Ensure 'Allow log on locally' is set to 'Administrators'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.8</td><td >(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators' (DC only)</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.9</td><td >(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.10</td><td >(L1) Ensure 'Back up files and directories' is set to 'Administrators'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.11</td><td >(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.12</td><td >(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.13</td><td >(L1) Ensure 'Create a pagefile' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.14</td><td >(L1) Ensure 'Create a token object' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.15</td><td >(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.16</td><td >(L1) Ensure 'Create permanent shared objects' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.17</td><td >(L1) Ensure 'Create symbolic links' is set to 'Administrators' (DC only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.18 A</td><td >(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' (MS only)[Hyper-V-Feature NOT installed]</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.18 B</td><td >(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' (MS only)[Hyper-V-Feature installed]</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.19</td><td >(L1) Ensure 'Debug programs' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.20</td><td >(L1) Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.21</td><td >(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: BUILTIN\Guests, NT AUTHORITY\Local account and member of Administrators group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.22</td><td >(L1) Ensure 'Deny log on as a batch job' to include 'Guests'</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.23</td><td >(L1) Ensure 'Deny log on as a service' to include 'Guests'</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.24</td><td >(L1) Ensure 'Deny log on locally' to include 'Guests'</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.25</td><td >(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only)</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.26</td><td >(L1) Ensure 'Deny log on through Remote Desktop Services' is set to 'Guests, Local account' (MS only)</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: BUILTIN\Guests, NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.27</td><td >(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)</td><td >The user 'SeEnableDelegationPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.28</td><td >(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.29</td><td >(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.30 A</td><td >(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' (ADFS-ROLE NOT installed)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.30 B</td><td >(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' (ADFS-ROLE installed)</td><td >The user 'SeAuditPrivilege' setting does not contain the following users: Orphaned Account, Orphaned Account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.31</td><td >(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (DC only)</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.32 A</td><td >(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (IIS Role NOT installed) (MS only)</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.32 B</td><td >(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE, IIS_IUSRS' (IIS Role installed) (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.33</td><td >(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.34</td><td >(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.35</td><td >(L1) Ensure 'Lock pages in memory' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.36</td><td >(L2) Ensure 'Log on as a batch job' is set to 'Administrators' (DC Only)</td><td >The user right 'SeBatchLogonRight' contains following unexpected users: BUILTIN\Backup Operators, BUILTIN\Performance Log Users, BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.37</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' and (when Exchange is running in the environment) 'Exchange Servers' (DC only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.39</td><td >(L1) Ensure 'Modify an object label' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.40</td><td >(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.41</td><td >(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.42</td><td >(L1) Ensure 'Profile single process' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.43</td><td >(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.44</td><td >(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.45</td><td >(L1) Ensure 'Restore files and directories' is set to 'Administrators'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.46</td><td >(L1) Ensure 'Shut down the system' is set to 'Administrators'</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.47</td><td >(L1) Ensure 'Synchronize directory service data' is set to 'No One' (DC only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.48</td><td >(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.1</td><td >(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'</td><td >'PasswordHistorySize' currently set to: 0. Expected: x >= 24</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.1.2</td><td >(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.3</td><td >(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'</td><td >'MinimumPasswordAge' currently set to: 0. Expected: x >= 1 days</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.1.4</td><td >(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'</td><td >'MinimumPasswordLength' currently set to: 0. Expected: x >= 14</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.1.5</td><td >(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2.1</td><td >(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.2.2</td><td >(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'</td><td >'LockoutBadCount' currently set to: 0. Expected: x <= 5 and x > 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.2.3</td><td >(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="CIS-Benchmarks-Advanced-Audit-Policy-Configuration"><span class="failed"> Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >17.1.1</td><td >(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.1.2</td><td >(L1) Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.1.3</td><td >(L1) Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.2.1</td><td >(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.2.2</td><td >(L1) Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.3</td><td >(L1) Ensure 'Audit Distribution Group Management' is set to include 'Success' (DC only)</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.2.4</td><td >(L1) Ensure 'Audit Other Account Management Events' is set to include 'Success' (DC only)</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.2.5</td><td >(L1) Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.6</td><td >(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.3.1</td><td >(L1) Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.3.2</td><td >(L1) Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.4.1</td><td >(L1) Ensure 'Audit Directory Service Access' is set to include 'Failure' (DC only)</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.4.2</td><td >(L1) Ensure 'Audit Directory Service Changes' is set to include 'Success' (DC only)</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.5.1</td><td >(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.5.2</td><td >(L1) Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.5.3</td><td >(L1) Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.4</td><td >(L1) Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.5</td><td >(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.5.6</td><td >(L1) Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.1</td><td >(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.6.2</td><td >(L1) Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.6.3</td><td >(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.6.4</td><td >(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.7.1</td><td >(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.2</td><td >(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.3</td><td >(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.7.4</td><td >(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.7.5</td><td >(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.8.1</td><td >(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.9.1</td><td >(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.9.2</td><td >(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.3</td><td >(L1) Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.4</td><td >(L1) Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.9.5</td><td >(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="summary"><h1 >Benchmark Compliance</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>5.2</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Does your system show low benchmark compliance? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >Security baseline for Microsoft Windows Server 2022, Version: FINAL, Date 2021-09-27</li><li >CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14</li></ul><p >This report was generated on 09/05/2022 05:26:18 on WIN-T74AI7HCI62 with ATAPHtmlReport version 1.8.</p></p><div id="systemData"><h2 >System information</h2><table id="summaryTable"><tbody ><tr ><th scope="row">Hostname</th><td >WIN-T74AI7HCI62</td></tr><tr ><th scope="row">Domain role</th><td >Standalone Server</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows Server 2022 Standard Evaluation</td></tr><tr ><th scope="row">Build Number</th><td >20348</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr><tr ><th scope="row">Free disk space (GB)</th><td >7.9</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >20.3% (0.8 GB / 4.1 GB)</td></tr></tbody></table></div><div id="riskMatrixSummaryArea"><h2 id="CurrentRiskScore">Current Risk Score on tested System: </h2><h3 >For further information, please head to the tab "Risk Score".</h3><div id="riskMatrixSummary"><div id="dotSummaryTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div></div><h1 style="clear:both;"></h1><p >A total of 857 tests have been executed.</p><div class="gauge"><div title="True 144 test(s), 16.80%" style="width: 16.80%" class="gauge-meter passed"></div><div title="False 711 test(s), 82.96%" style="width: 82.96%" class="gauge-meter failed"></div><div title="Warning 1 test(s), 0.12%" style="width: 0.12%" class="gauge-meter warning"></div><div title="None 1 test(s), 0.12%" style="width: 0.12%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 144 test(s) &#x2259; 16.80%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 711 test(s) &#x2259; 82.96%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 1 test(s) &#x2259; 0.12%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 0.12%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">General Benchmarks</h2><p >A total of 22 tests have been executed in section General Benchmarks.</p><div class="gauge"><div title="True 6 test(s), 27.27%" style="width: 27.27%" class="gauge-meter passed"></div><div title="False 14 test(s), 63.64%" style="width: 63.64%" class="gauge-meter failed"></div><div title="Warning 1 test(s), 4.55%" style="width: 4.55%" class="gauge-meter warning"></div><div title="None 1 test(s), 4.55%" style="width: 4.55%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 6 test(s) &#x2259; 27.27%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 14 test(s) &#x2259; 63.64%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 1 test(s) &#x2259; 4.55%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 4.55%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">Microsoft Benchmarks</h2><p >A total of 404 tests have been executed in section Microsoft Benchmarks.</p><div class="gauge"><div title="True 56 test(s), 13.86%" style="width: 13.86%" class="gauge-meter passed"></div><div title="False 348 test(s), 86.14%" style="width: 86.14%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 56 test(s) &#x2259; 13.86%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 348 test(s) &#x2259; 86.14%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">CIS Benchmarks</h2><p >A total of 431 tests have been executed in section CIS Benchmarks.</p><div class="gauge"><div title="True 82 test(s), 19.03%" style="width: 19.03%" class="gauge-meter passed"></div><div title="False 349 test(s), 80.97%" style="width: 80.97%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 82 test(s) &#x2259; 19.03%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 349 test(s) &#x2259; 80.97%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol></div><div class="tabContent" id="riskScore"><h1 >Risk Score</h1><p >To get a quick overview of how risky the tested system is, the Risk Score is used. This is made up of the areas "Severity" and "Quantity". The higher risk is used as the overall risk.</p><h2 id="CurrentRiskScoreRS">Current Risk Score on tested System: </h2><div id="riskMatrixContainer"><div id="dotRiskScoreTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div><div id="calculationTables"><h3 class="calculationTablesText">Risk Score Calculation</h3><p class="calculationTablesText">The calculation of the Risk Score is based on the set of compliant rules at the quantity level and also at the severity level.</p><table id="quantityTable"><tr ><th >Compliance to Benchmarks (Quantity)</th><th >Risk Assessment</th></tr><tr ><td >More than 85%</td><td >Low</td></tr><tr ><td >Between 70% and 85%</td><td >Medium</td></tr><tr ><td >Between 55% and 70%</td><td >High</td></tr><tr ><td >Less than 55%</td><td >Critical</td></tr></table><table id="severityTable"><tr ><th >Compliance to Benchmarks (Severity)</th><th >Risk Assessment</th></tr><tr ><td >All critical settings compliant</td><td >Low</td></tr><tr ><td >1 or more incompliant setting(s)</td><td >Critical</td></tr></table></div><div id="severityCompliance"><p id="complianceStatus">Severity Compliance</p><span class="sectionAction collapseButton" id="severityComplianceCollapse">-</span><table id="severityDetails"><tr ><th >Id</th><th >Task</th><th >Status</th></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultNone">None</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultNone">None</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 A</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 40/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 B</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 56/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 C</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 64/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 D</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 128/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.6</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating executable content)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from injecting code into other processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Adobe Reader from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Win32 API calls from Office macro)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block executable content from email client and webmail)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.48.11</td><td >Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.58.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.58.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td ><span class="severityResultFalse">False</span></td></tr></table></div></div><div class="tabContent" id="references"><h1 >About us</h1><h2 >What makes FB Pro GmbH different</h2><h3 >What do we want?</h3><p >Protect our customers' data and information - and thus implicitly contribute to the safe use of the Internet.</p><h3 >How we achieve this? </h3><p >We implement in-depth IT security for our customers. And we always do so in a state-of-the-art, efficient and automated manner.</p><div id="referencesContainer"><div ><h2 >Check out our hardening solution</h2><a href="https://www.fb-pro.com/enforce-administrator-product/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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"></img></a></div><div ><h2 >Check out our Audit Report Tool here</h2><a href="https://www.fb-pro.com/audit-tap-product-information/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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"></img></a></div></div></div></div></div><script type="text/javascript"> function collapseHandler(e) {
var targetSection = e.target.parentElement.parentElement;
if (targetSection.classList.toggle('collapsed')) {
e.target.innerText = '+';
} else {
e.target.innerText = '-';
}
}
var collapseButtons = document.getElementsByClassName("collapseButton");
for (var i = 0; i < collapseButtons.length; i++) {
collapseButtons[i].addEventListener('click', collapseHandler);
}</script></body></body></html>
Reference in New Issue View Git Blame Copy Permalink