Accounts: Administrator accounts must not be enumerated during elevation
f3afb7e7-d38a-42f2-8290-56da3b445913Accounts: Automatic logons must be disabled
5db60bfa-0318-430e-ab7e-c2ff3e749ae9Accounts: Built-in Administrator account must be renamed
b1981ae3-ba91-4758-a98c-a5937a0498f7Accounts: Built-in Guest account must be renamed
20dbd0a4-0373-4913-9f75-4ab7f6fcbdb0Accounts: Deny log on locally user right must be configured to prevent access from highly privileged domain accounts
fd44a45e-ef9e-4c54-bebf-22bba68a185cAccounts: Enable computer and user accounts delegation user right not be assigned to any groups or accounts
64f28abd-921c-4d04-b2c0-f047d20d673eAccounts: Must only allow adminis responsible for the member srv, standalone, nondomain system to have Admin rights on system
8498407d-ee8c-4467-834a-a81a5493ac76Auditing: generate security audits user right must only be assigned to Local Service and Network Service
7cd18828-f7cd-4bdc-b3fa-5aed1b4b90cfAuditing: Manage auditing and security log user right must only be assigned to the Administrators group
e929216f-d0f8-4d32-bece-d3eb404e724eAuditing: System must be configured to audit Account Logon - Credential Validation failures
20d10fd0-520a-4b7e-b915-5e2e6649cf99Auditing: System must be configured to audit Account Logon - Credential Validation successes
82478e12-7206-4b9c-8a68-2ccb6e3fe144Auditing: System must be configured to audit Account Management - Security Group Management successes
43fd3c2b-daf3-4408-8a5b-d04a79bd3bd4Auditing: System must be configured to audit Account Management - User Account Management failures
d3e3b256-80cd-4f3a-bd46-487cda3513f2Auditing: System must be configured to audit Account Management - User Account Management successes
b7a6152d-607d-424f-a0d1-78000be3512aAuditing: System must be configured to audit Detailed Tracking - Process Creation successes
952d2e45-3b08-4224-bc01-6e35aeb38557Auditing: System must be configured to audit Logon/Logoff - Group Membership successes
52b16e39-5909-4145-a76d-8fa0fc554dabAuditing: System must be configured to audit Logon/Logoff - Special Logon successes
0a6702c1-b417-4100-b6af-8ee48a5d2f23Auditing: System must be configured to audit Object Access - Other Object Access Events failures
8110968d-1cd4-430b-909e-52a487b78106Auditing: System must be configured to audit Object Access - Other Object Access Events successes
81abf498-85f9-4536-a8c4-f6d26fe5f26fAuditing: System must be configured to audit Object Access - Removable Storage failures
352b582c-c55c-4d71-9a19-4c9448d1c96dAuditing: System must be configured to audit Object Access - Removable Storage successes
af074caf-14a4-41f5-9ebd-e2214dc48240Auditing: System must be configured to audit Policy Change - Authentication Policy Change successes
48e1aa69-0cc4-44e2-8f00-8db93be2cdc1Auditing: System must be configured to audit Policy Change - Authorization Policy Change successes
7338cb96-3198-4665-8c6e-755e05005b58Auditing: System must be configured to audit System - System Integrity failures
0634f6e9-e443-4576-b0a2-e7013116b350Auditing: System must be configured to audit System - System Integrity successes
14903b11-6904-4913-a981-5f3422dafaa4Auditing: System must be configured to audit logoff successes
282bb2eb-115f-483f-85fb-637124552335Auditing: System must be configured to audit logon failures
b052b9fc-5f3e-45e6-94f6-e0823790f14cAuditing: System must be configured to audit logon successes
d46bf70a-28b8-489a-bb63-b549d576fc4fAuditing: Windows must be configured to audit Logon/Logoff - Account Lockout Failures
bdab6cee-183b-4d5c-a916-853606d1a192Compliance: System must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing
330f6517-5c88-4086-b456-d3026307c001Credentials: Access Credential Manager as a trusted caller user right must not be assigned to any groups or accounts
bacaba99-55cc-4c8d-a24e-580204d3862fDomain Controller: Must be configured to allow reset of machine account passwords
4d599278-5660-4513-abe4-715f546475bbDomain Member: Domain-joined systems must have a Trusted Platform Module (TPM) enabled and ready for use
b7074672-cbee-4409-a64a-9b03894fcf2fFIPS 140: Security Requirements for Cryptographic Modules
b6109218-a32b-479a-8465-055340a1759cFile System: Turning off File Explorer heap termination on corruption must be disabled
c7d4943e-c832-42d8-9b4b-423fb7c7dd37Internet Browser: Basic authentication for RSS feeds over HTTP must not be used
a140d78e-249b-4c39-9d82-f54aeef02be0Logon: Allow log on locally user right must only be assigned to the Administrators group
80d4527c-16b5-4d34-aec6-9a5f4cc687fcLogon: Smart Card removal option must be configured to Force Logoff or Lock Workstation
1cf17a56-a4f1-419e-9a3a-295b06486df5Logon: Title for legal banner dialog box must be configured with the appropriate text
dbb83450-8da5-4977-9e2c-d87307f92015Network Access: System must not allow anonymous SID/Name translation
d31fa8ca-fc90-4361-9438-6a070d064974Network Access: System must prevent PKU2U authentication using online identities
62385837-ef10-43ae-b1db-590f32a082c8Network: System be configured to prevent ICMP redirects from overriding Open Shortest Path First (OSPF)-generated
20d9022d-7c47-4bd5-9748-c910f27509d0Network: System must be configured to ignore NetBIOS name release requests except from WINS servers
26cbf73b-1296-4dfa-bad1-8d0d4c9a2954Privacy: Windows Telemetry must not be set to Full
0001b667-c79a-4486-802c-32d860cae99eRemote Desktop: Access this computer from the network user right must only be assigned to the Admins and RD Users groups
81b2dce5-a703-4bc0-a9e8-a8f59959c1e1Remote Desktop: Deny log RDP user on domain-joined servers be configured to prevent access highly privileged domain accountsn
9dd66556-0271-451c-bdae-d9e7d9ff8d2eSecurity: Act as part of the operating system user right must not be assigned to any groups or accounts
5d1e7771-206b-47d5-b12c-287ccd360164Security: Create a pagefile user right must only be assigned to the Administrators group
c2bd9f41-d64e-453b-ab4e-16fe0f83fe06Security: Create a token object user right must not be assigned to any groups or accounts
95b6abcc-8651-42e0-83e8-1397a9df5442Security: Create permanent shared objects user right must not be assigned to any groups or accounts
2f3a0dc6-81cf-422b-a9b2-5bea55916fb8Security: Create symbolic links user right must only be assigned to the Administrators group
f0f5d080-6277-4c94-bd8e-1984e17fd492Security: Deny access to this computer from the network must include required accounts
1deed0fc-85c5-45a5-b148-994e6d888eaaSecurity: Deny log on as a batch job user right on Domain Joined members must be configured to prevent unauthenticated access
2d81fe43-511f-4266-b631-18a5ed060fb5Security: Impersonate client after authentication user right only be assigned to Adminis,Service,Local Service,Network Service
f2601ffb-34f6-40b5-9ef1-62be072a750bSecurity: Load and unload device drivers user right must only be assigned to the Administrators group
667fbb54-263f-4f75-9e98-4e84985c8836Security: Modify firmware environment values user right must only be assigned to the Administrators group
c12bae5e-271a-4263-9225-1141ff87563dSecurity: Perform volume maintenance tasks user right must only be assigned to the Administrators group
5613a14d-01b4-4051-94f3-c6f7e752c7fdSecurity: Profile single process user right must only be assigned to the Administrators group
b359a875-cbc9-43a2-83a3-0b06a0af5792Security: Restore files and directories user right must only be assigned to the Administrators group
6da4b4aa-26b1-4330-94b0-07d83b00fb7cSecurity: System default permissions of global system objects must be strengthened
5e582017-d8f1-44dd-8d33-24a7d8ef496eSecurity: System must have orphaned security identifiers (SIDs) removed from user rights
2b73adc9-8ed0-41c7-8ffe-30e59930865fSecurity: Take ownership of files or other objects user right must only be assigned to the Administrators group
1c1f7740-6b87-4791-ad84-f7ec6d25c3f0Security: The Force shutdown from a remote system user right must only be assigned to the Administrators group
c2f9fe24-d1bc-4980-9e5c-f9ff3c952bf9