Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-205751 Medium Windows Server 2019 back up files and directories user right must only be assigned to the Adminis...
V-254440 Medium Windows Server 2022 Enable computer and user accounts to be trusted for delegation user right mus...
V-205748 Medium Windows Server 2019 "Enable computer and user accounts to be trusted for delegation" user right m...
V-220973 Medium The Enable computer and user accounts to be trusted for delegation user right must not be assigne...
V-253496 Medium The "Enable computer and user accounts to be trusted for delegation" user right must not be assig...
V-254426 Medium Windows Server 2022 Enable computer and user accounts to be trusted for delegation user right mus...
V-205745 Medium Windows Server 2019 Enable computer and user accounts to be trusted for delegation user right mus...
V-254494 Medium Windows Server 2022 back up files and directories user right must only be assigned to the Adminis...
V-253483 Medium The "Back up files and directories" user right must only be assigned to the Administrators group
V-220960 Medium The Back up files and directories user right must only be assigned to the Administrators group
V-254500 High Windows Server 2022 debug programs user right must only be assigned to the Administrators group
V-205757 High Windows Server 2019 Debug programs: user right must only be assigned to the Administrators group
V-253490 High The "Debug programs" user right must only be assigned to the Administrators group
V-220967 High The Debug programs user right must only be assigned to the Administrators group
V-254392 High Windows Server 2022 Active Directory SYSVOL directory must have the proper access control permiss...
V-205740 High Windows Server 2019 Active Directory SYSVOL directory must have the proper access control permiss...
V-254433 Medium Windows Server 2022 must restrict remote calls to the Security Account Manager (SAM) to Administr...
V-205747 Medium Windows Server 2019 must restrict remote calls to the Security Account Manager (SAM) to Administr...
V-253457 Medium Remote calls to the Security Account Manager (SAM) must be restricted to Administrators
V-220933 Medium Remote calls to the Security Account Manager (SAM) must be restricted to Administrators
V-224835 Medium Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained
V-224964 High Only administrators responsible for the domain controller must have Administrator rights on the s...
V-224970 High Permissions on the Active Directory data files must only allow System and Administrators access
V-224971 High The Active Directory SYSVOL directory must have the proper access control permissions
V-224972 High Active Directory Group Policy objects must have proper access control permissions
V-224973 High The Active Directory Domain Controllers Organizational Unit (OU) object must have the proper acce...
V-224974 High Domain-created Active Directory Organizational Unit (OU) objects must have proper access control ...
V-224998 Medium The Add workstations to domain user right must only be assigned to the Administrators group
V-225005 Medium The Enable computer and user accounts to be trusted for delegation user right must only be assign...
V-225007 High Only administrators responsible for the member server or standalone or nondomain-joined system mu...
V-225013 Medium Remote calls to the Security Account Manager (SAM) must be restricted to Administrators
V-225020 Medium The "Enable computer and user accounts to be trusted for delegation" user right must not be assig...
V-225093 Medium The Take ownership of files or other objects user right must only be assigned to the Administrato...
V-218814 Medium IIS 10.0 web server system files must conform to minimum file permission requirements
V-268514 High The macOS system must require an administrator password to modify systemwide preferences
V-225073 Medium The Back up files and directories user right must only be assigned to the Administrators group
V-254492 High Windows Server 2022 Act as part of the operating system user right must not be assigned to any gr...
V-205750 High Windows Server 2019 Act as part of the operating system user right must not be assigned to any gr...
V-253481 High The "Act as part of the operating system" user right must not be assigned to any groups or accounts
V-220958 High The Act as part of the operating system user right must not be assigned to any groups or accounts
V-225071 High The Act as part of the operating system user right must not be assigned to any groups or accounts
V-254496 High Windows Server 2022 create a token object user right must not be assigned to any groups or accounts
V-205753 High Windows Server 2019 Create a token object user right must not be assigned to any groups or accounts
V-253486 High The "Create a token object" user right must not be assigned to any groups or accounts
V-220963 High The Create a token object user right must not be assigned to any groups or accounts
V-225091 High The Create a token object user right must not be assigned to any groups or accounts
V-225070 Medium The Access Credential Manager as a trusted caller user right must not be assigned to any groups o...
V-225074 Medium The Create a pagefile user right must only be assigned to the Administrators group
V-225076 Medium The Create global objects user right must only be assigned to Administrators, Service, Local Serv...
V-225077 Medium The Create permanent shared objects user right must not be assigned to any groups or accounts
V-225078 Medium The Create symbolic links user right must only be assigned to the Administrators group
V-225079 High The Debug programs user right must only be assigned to the Administrators group
V-225080 Medium The Force shutdown from a remote system user right must only be assigned to the Administrators group
V-225081 Medium The Generate security audits user right must only be assigned to Local Service and Network Service
V-225082 Medium The Impersonate a client after authentication user right must only be assigned to Administrators,...
V-225083 Medium The Increase scheduling priority user right must only be assigned to the Administrators group
V-225084 Medium The Load and unload device drivers user right must only be assigned to the Administrators group
V-225085 Medium The Lock pages in memory user right must not be assigned to any groups or accounts
V-225087 Medium The Modify firmware environment values user right must only be assigned to the Administrators group
V-225088 Medium The Perform volume maintenance tasks user right must only be assigned to the Administrators group
V-225089 Medium The Profile single process user right must only be assigned to the Administrators group
V-225092 Medium The Restore files and directories user right must only be assigned to the Administrators group
V-278001 Medium Windows Server 2025 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained
V-278132 High Windows Server 2025 must only allow administrators responsible for the domain controller to have ...
V-278138 High Windows Server 2025 permissions on the Active Directory data files must only allow system adminis...
V-278139 High Windows Server 2025 Active Directory SYSVOL directory must have the proper access control permiss...
V-278140 High Windows Server 2025 Active Directory (AD) Group Policy Objects (GPOs) must have proper access con...
V-278141 High Windows Server 2025 Active Directory Domain Controllers Organizational Unit (OU) object must have...
V-278142 High Windows Server 2025 organization created Active Directory Organizational Unit (OU) objects must h...
V-278166 Medium The Windows Server 2025 "Add workstations to domain" user right must only be assigned to the Admi...
V-278175 Medium The Windows Server 2025 "Enable computer and user accounts to be trusted for delegation" user rig...
V-278177 High Windows Server 2025 must only allow administrators responsible for the member server or stand-alo...
V-278182 Medium Windows Server 2025 must restrict remote calls to the Security Account Manager (SAM) to Administr...
V-278189 Medium The Windows Server 2025 "Enable computer and user accounts to be trusted for delegation" user rig...
V-278241 Medium The Windows Server 2025 "Access Credential Manager as a trusted caller" user right must not be as...
V-278242 High The Windows Server 2025 "Act as part of the operating system" user right must not be assigned to ...
V-278244 Medium The Windows Server 2025 "Back up files and directories" user right must only be assigned to the A...
V-278245 Medium The Windows Server 2025 "Create a pagefile" user right must only be assigned to the Administrator...
V-278246 High The Windows Server 2025 "Create a token object" user right must not be assigned to any groups or ...
V-278247 Medium The Windows Server 2025 "Create global objects" user right must only be assigned to Administrator...
V-278248 Medium The Windows Server 2025 "Create permanent shared objects" user right must not be assigned to any ...
V-278249 Medium The Windows Server 2025 "Create symbolic links" user right must only be assigned to the Administr...
V-278250 High The Windows Server 2025 "Debug programs" user right must only be assigned to the Administrators g...
V-278251 Medium The Windows Server 2025 "Force shutdown from a remote system" user right must only be assigned to...
V-278252 Medium The Windows Server 2025 "Generate security audits" user right must only be assigned to Local Serv...
V-278253 Medium The Windows Server 2025 "Impersonate a client after authentication" user right must only be assig...
V-278254 Medium The Windows Server 2025 "Increase scheduling priority" user right must only be assigned to the Ad...
V-278255 Medium The Windows Server 2025 "Load and unload device drivers" user right must only be assigned to the ...
V-278256 Medium The Windows Server 2025 "Lock pages in memory" user right must not be assigned to any groups or a...
V-278258 Medium The Windows Server 2025 "Modify firmware environment values" user right must only be assigned to ...
V-278259 Medium The Windows Server 2025 "Perform volume maintenance tasks" user right must only be assigned to th...
V-278260 Medium The Windows Server 2025 "Profile single process" user right must only be assigned to the Administ...
V-278261 Medium The Windows Server 2025 "Restore files and directories" user right must only be assigned to the A...
V-278262 Medium The Windows Server 2025 "Take ownership of files or other objects" user right must only be assign...
V-254419 Medium Windows Server 2022 Add workstations to domain user right must only be assigned to the Administra...
V-205744 Medium Windows Server 2019 Add workstations to domain user right must only be assigned to the Administra...
V-254491 Medium Windows Server 2022 Access Credential Manager as a trusted caller user right must not be assigned...
V-205749 Medium Windows Server 2019 Access Credential Manager as a trusted caller user right must not be assigned...
V-253479 Medium The "Access Credential Manager as a trusted caller" user right must not be assigned to any groups...
V-220956 Medium The Access Credential Manager as a trusted caller user right must not be assigned to any groups o...
V-254495 Medium Windows Server 2022 create a pagefile user right must only be assigned to the Administrators group
V-205752 Medium Windows Server 2019 Create a pagefile user right must only be assigned to the Administrators group
V-253485 Medium The "Create a pagefile" user right must only be assigned to the Administrators group
V-220962 Medium The Create a pagefile user right must only be assigned to the Administrators group
V-254497 Medium Windows Server 2022 create global objects user right must only be assigned to Administrators, Ser...
V-205754 Medium Windows Server 2019 Create global objects user right must only be assigned to Administrators, Ser...
V-253487 Medium The "Create global objects" user right must only be assigned to Administrators, Service, Local Se...
V-220964 Medium The Create global objects user right must only be assigned to Administrators, Service, Local Serv...
V-254498 Medium Windows Server 2022 create permanent shared objects user right must not be assigned to any groups...
V-205755 Medium Windows Server 2019 Create permanent shared objects user right must not be assigned to any groups...
V-253488 Medium The "Create permanent shared objects" user right must not be assigned to any groups or accounts
V-220965 Medium The Create permanent shared objects user right must not be assigned to any groups or accounts
V-254499 Medium Windows Server 2022 create symbolic links user right must only be assigned to the Administrators ...
V-205756 Medium Windows Server 2019 Create symbolic links user right must only be assigned to the Administrators ...
V-253489 Medium The "Create symbolic links" user right must only be assigned to the Administrators group
V-220966 Medium The Create symbolic links user right must only be assigned to the Administrators group
V-254501 Medium Windows Server 2022 force shutdown from a remote system user right must only be assigned to the A...
V-205758 Medium Windows Server 2019 Force shutdown from a remote system user right must only be assigned to the A...
V-205758 Medium Windows Server 2019 Force shutdown from a remote system user right must only be assigned to the A...
V-220974 Medium The Force shutdown from a remote system user right must only be assigned to the Administrators group
V-254502 Medium Windows Server 2022 generate security audits user right must only be assigned to Local Service an...
V-205759 Medium Windows Server 2019 Generate security audits user right must only be assigned to Local Service an...
V-254503 Medium Windows Server 2022 impersonate a client after authentication user right must only be assigned to...
V-254503 Medium Windows Server 2022 impersonate a client after authentication user right must only be assigned to...
V-254503 Medium Windows Server 2022 impersonate a client after authentication user right must only be assigned to...
V-220975 Medium The "Impersonate a client after authentication" user right must only be assigned to Administrator...
V-254504 Medium Windows Server 2022 increase scheduling priority: user right must only be assigned to the Adminis...
V-205761 Medium Windows Server 2019 Increase scheduling priority: user right must only be assigned to the Adminis...
V-254505 Medium Windows Server 2022 load and unload device drivers user right must only be assigned to the Admini...
V-205762 Medium Windows Server 2019 Load and unload device drivers user right must only be assigned to the Admini...
V-253499 Medium The "Load and unload device drivers" user right must only be assigned to the Administrators group
V-220976 Medium The Load and unload device drivers user right must only be assigned to the Administrators group
V-254508 Medium Windows Server 2022 modify firmware environment values user right must only be assigned to the Ad...
V-205764 Medium Windows Server 2019 Modify firmware environment values user right must only be assigned to the Ad...
V-253502 Medium The "Modify firmware environment values" user right must only be assigned to the Administrators g...
V-220979 Medium The Modify firmware environment values user right must only be assigned to the Administrators group
V-254509 Medium Windows Server 2022 perform volume maintenance tasks user right must only be assigned to the Admi...
V-205765 Medium Windows Server 2019 Perform volume maintenance tasks user right must only be assigned to the Admi...
V-253503 Medium The "Perform volume maintenance tasks" user right must only be assigned to the Administrators group
V-220980 Medium The Perform volume maintenance tasks user right must only be assigned to the Administrators group
V-254510 Medium Windows Server 2022 profile single process user right must only be assigned to the Administrators...
V-205766 Medium Windows Server 2019 Profile single process user right must only be assigned to the Administrators...
V-253504 Medium The "Profile single process" user right must only be assigned to the Administrators group
V-220981 Medium The Profile single process user right must only be assigned to the Administrators group
V-254511 Medium Windows Server 2022 restore files and directories user right must only be assigned to the Adminis...
V-205767 Medium Windows Server 2019 Restore files and directories user right must only be assigned to the Adminis...
V-253505 Medium The "Restore files and directories" user right must only be assigned to the Administrators group
V-220982 Medium The Restore files and directories user right must only be assigned to the Administrators group
V-254512 Medium Windows Server 2022 take ownership of files or other objects user right must only be assigned to ...
V-205768 Medium Windows Server 2019 Take ownership of files or other objects user right must only be assigned to ...
V-253506 Medium The "Take ownership of files or other objects" user right must only be assigned to the Administra...
V-220983 Medium The Take ownership of files or other objects user right must only be assigned to the Administrato...
V-277123 High The macOS system must require an administrator password to modify systemwide preferences