Accounts: Automatic logons must be disabled
5db60bfa-0318-430e-ab7e-c2ff3e749ae9
Accounts: Block Microsoft accounts
6e815a39-7aa8-42e4-88d3-1778dfe85333
Attack Surface: Disable LLMNR
3724e477-bdea-4a74-96b7-7ac79e157087
Attack Surface: Disable WinRM (Windows Remote Management)
1c1e3c39-98a3-41cb-8bf1-1a5f36a6c950
Autoplay: should be disabled for all drives
2cb75d59-8ef3-4fa3-90e1-8bec9e51c703
Directory Size: WinSxs\Temp\PendingDeletes
233b6308-be50-487f-ad61-dec44a3d4402
General: AntiVirus/Antimalware Status
6d48a68a-3e44-4a00-8d42-670e41c9942c
General: Windows firewall status
1f229f09-4c15-4bfe-b9f7-ed63d03cd70e
Internet Browser: Check digital signature of executables
f09f451c-2ec0-4a03-b578-637db9c8ffbf
Local volumes must be formatted with NTFS
b6493fb9-ad83-494c-93e3-3dbfaeb9b303
Logon: Enable Display Last Logon Info
a108b75a-f851-4e02-b377-1bc6a2698949
Logon: Require CTRL+ALT+DEL for interactive logons
d2d523f6-4e7a-46e3-b553-ab395a7563e4
Microsoft Edge: SmartScreen filter must be enabled
7a337b09-3a6f-4270-8611-005b2a71cba4
PowerShell: Script block logging must be enabled
ab3e18c8-5f9b-4a08-8474-ff10619965bd
Tracking: Windows Telemetry must not be set to Full
0001b667-c79a-4486-802c-32d860cae99e
Windows OS: Build Version Check (End Of Life)
07b6c273-cdb3-4a4d-889d-d1d54dc0eb5f
Windows OS: Build Version Check (OS Updated)
c7b058ab-6360-4b5d-9cd2-45eafef8c489
Windows OS: Windows Activation Status
de96957d-bcf1-4d41-be46-aa14b00135f3