Accounts: Block Microsoft accounts
6e815a39-7aa8-42e4-88d3-1778dfe85333
Domain Controller: Health - DCDiag - Errors
c49cb20e-5e85-4fda-8e40-fd8e4c048f50
Domain Controller: Health - DCDiag - Warnings and Errors
076772fc-6412-430e-97ee-c4a7c0028bc1
Domain Controller: IPv6 Should be enabled
d07a9025-c87c-48ce-af0c-c3ced03c01e8
Domain Controller: Must be configured to allow reset of machine account passwords
4d599278-5660-4513-abe4-715f546475bb
Domain Controller: Must require LDAP access signing
9e1e28ee-d597-49db-b33d-cfee0ba15c69
Domain Controller: Permissions on the Active Directory data files must only allow System and Administrators access
1bb127e7-c293-41f4-a937-c9c76d35cb8a
Domain Controller: SYSVOL directory must have proper access control permissions
15074903-9e8a-4d2f-b6d4-4e5ab30e64d7
Domain Controller: The password for the krbtgt account on a domain must be reset at least every 180 days
18ef977d-1c89-4ea7-ac53-0438873cb1db
Domain Controllers: Accounts: Deny log on locally user right must be configured to prevent access from highly privileged domain accounts
8d9748ad-695f-489e-bf31-4d1e8e397a7b
Domain Member: Digitally encrypt or sign secure channel data (always) must be configured to Enabled
8d6589f4-20fe-4018-bc26-7891353eac40
Domain Member: Digitally encrypt secure channel data (when possible) must be configured to enabled
9a6ea78e-a170-4015-9193-666f003f74f4
Domain Member: Digitally sign secure channel data (when possible) must be configured to Enabled
5ef4fc08-d231-41c5-95c2-1bb8abc26209
Threat Intel: PetitPotam Certificate Enrollment Web Service on Domain Controller
e1e6e9f0-1825-4f22-ab9a-f1a238843c01