Accounts: The computer account password must not be prevented from being reset
e0059e71-73e6-4c05-9f59-b224041025eaDomain Member: Caching of logon credentials must be limited - Desktop
a256ebbf-e5b2-4b73-a375-6587c8d1b0baDomain Member: Maximum age for machine account passwords must be configured to 30 days or less
ad52728e-be9b-4ab7-b329-5b11001e42deDomain Member: must be configured to at least negotiate signing for LDAP client signing
5c9b1fb7-3d92-4d13-be5f-13d7894e50d0Logon: Title for legal banner dialog box must be configured with the appropriate text
dbb83450-8da5-4977-9e2c-d87307f92015Privacy: Application Compatibility Program Inventory must not collect and send data to Microsoft
554ca683-aaaa-43da-9a97-e093af29457eWindows OS: Secure Boot must be enabled
e8bb4b60-e081-427e-924e-e99a1aacf387