Domain Controller: Health - DCDiag - Warnings and Errors
076772fc-6412-430e-97ee-c4a7c0028bc1
Domain Controller: IPv6 Should be enabled
d07a9025-c87c-48ce-af0c-c3ced03c01e8
Domain Controller: Must be configured to allow reset of machine account passwords
4d599278-5660-4513-abe4-715f546475bb
Domain Controller: Must require LDAP access signing
9e1e28ee-d597-49db-b33d-cfee0ba15c69
Domain Controller: Permissions on the Active Directory data files must only allow System and Administrators access
1bb127e7-c293-41f4-a937-c9c76d35cb8a
Domain Controller: SYSVOL directory must have proper access control permissions
15074903-9e8a-4d2f-b6d4-4e5ab30e64d7
Domain Controller: The password for the krbtgt account on a domain must be reset at least every 180 days
18ef977d-1c89-4ea7-ac53-0438873cb1db
Domain Controllers: Deny log on locally user right on domain controllers must be configured to prevent unauthenticated access
8d9748ad-695f-489e-bf31-4d1e8e397a7b
Domain Member: Digitally encrypt or sign secure channel data (always) must be configured to Enabled
8d6589f4-20fe-4018-bc26-7891353eac40
Domain Member: Digitally encrypt secure channel data (when possible) must be configured to enabled
9a6ea78e-a170-4015-9193-666f003f74f4
Domain Member: Digitally sign secure channel data (when possible) must be configured to Enabled
5ef4fc08-d231-41c5-95c2-1bb8abc26209
File System: Local volumes must be formatted with NTFS
b6493fb9-ad83-494c-93e3-3dbfaeb9b303
Passwords: must be configured to expire
89d6a5d0-bc9a-4c29-9a58-3764c36677ab
Threat Intel: PetitPotam Certificate Enrollment Web Service on Domain Controller
e1e6e9f0-1825-4f22-ab9a-f1a238843c01
Threat Intel: PetitPotam NTLM Relay Attack: Disable NTLM Incoming Traffic on DCs
744b05b3-e1aa-47d0-b4ca-0d327bd6ab3d