Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-254424 Medium Windows Server 2022 Deny log on locally user right on domain controllers must be configured to pr...
V-254438 Medium Windows Server 2022 Deny log on locally user right on domain-joined member servers must be config...
V-205670 Medium Windows Server 2019 Deny log on locally user right on domain controllers must be configured to pr...
V-205675 Medium Windows Server 2019 Deny log on locally user right on domain-joined member servers must be config...
V-220971 Medium The Deny log on locally user right on workstations must be configured to prevent access from high...
V-253494 Medium The "Deny log on locally" user right on workstations must be configured to prevent access from hi...
V-254250 High Windows Server 2022 local volumes must use a format that supports NTFS attributes
V-205663 High Windows Server 2019 local volumes must use a format that supports NTFS attributes
V-253265 High Local volumes must be formatted using NTFS
V-220708 High Local volumes must be formatted using NTFS
V-260470 High Ubuntu 22.04 LTS, when booted, must require authentication upon booting into single-user and main...
V-224831 High Local volumes must use a format that supports NTFS attributes
V-224836 Low Non-administrative accounts or groups must only have print permissions on printer shares
V-224997 Medium The Access this computer from the network user right must only be assigned to the Administrators,...
V-224999 Medium The Allow log on through Remote Desktop Services user right must only be assigned to the Administ...
V-225000 Medium The Deny access to this computer from the network user right on domain controllers must be config...
V-225001 Medium The Deny log on as a batch job user right on domain controllers must be configured to prevent una...
V-225002 Medium The Deny log on as a service user right must be configured to include no accounts or groups (blan...
V-225003 Medium The Deny log on locally user right on domain controllers must be configured to prevent unauthenti...
V-271430 High Windows Server 2016 must be configured for name-based strong mappings for certificates
V-225014 Medium The "Access this computer from the network" user right must only be assigned to the Administrator...
V-225015 Medium The "Deny access to this computer from the network" user right on member servers must be configur...
V-225016 Medium The "Deny log on as a batch job" user right on member servers must be configured to prevent acces...
V-225017 Medium The "Deny log on as a service" user right on member servers must be configured to prevent access ...
V-225018 Medium The "Deny log on locally" user right on member servers must be configured to prevent access from ...
V-268434 Medium The macOS system must disable FileVault automatic login
V-268478 Medium The macOS system must disable Server Message Block (SMB) sharing
V-268479 Medium The macOS system must disable Network File System (NFS) service
V-268482 Medium The macOS system must disable Unix-to-Unix Copy Protocol (UUCP) service
V-268484 Medium The macOS system must disable the built-in web server
V-268485 Medium The macOS system must disable AirDrop
V-268495 Medium The macOS system must disable Remote Apple Events
V-268505 Medium The macOS system must disable Screen Sharing and Apple Remote Desktop
V-268517 Medium The macOS system must disable Media Sharing
V-268518 Medium The macOS system must disable Bluetooth Sharing
V-272477 Medium The macOS system must disable iPhone Mirroring
V-268562 Medium The macOS system must disable Handoff
V-268565 Medium The macOS system must enable Authenticated Root
V-271426 Medium Windows Server 2022 must be configured for certificate-based authentication for domain controllers
V-271428 Medium Windows Server 2019 must be configured for certificate-based authentication for domain controllers
V-254418 Medium Windows Server 2022 Access this computer from the network user right must only be assigned to the...
V-205665 Medium Windows Server 2019 Access this computer from the network user right must only be assigned to the...
V-225072 Medium The Allow log on locally user right must only be assigned to the Administrators group
V-254420 Medium Windows Server 2022 Allow log on through Remote Desktop Services user right must only be assigned...
V-205666 Medium Windows Server 2019 Allow log on through Remote Desktop Services user right must only be assigned...
V-277997 High Windows Server 2025 local volumes must use a format that supports New Technology File System (NTF...
V-278002 Low Windows Server 2025 nonadministrative accounts or groups must only have print permissions on prin...
V-278165 Medium The Windows Server 2025 "Access this computer from the network" user right must only be assigned ...
V-278167 Medium The Windows Server 2025 "Allow log on through Remote Desktop Services" user right must only be as...
V-278168 Medium The Windows Server 2025 "Deny access to this computer from the network" user right on domain cont...
V-278169 Medium The Windows Server 2025 "Deny log on as a batch job" user right on domain controllers must be con...
V-278170 Medium The Windows Server 2025 "Deny log on as a service" user right must be configured to include no ac...
V-278171 Medium The Windows Server 2025 "Deny log on locally" user right on domain controllers must be configured...
V-278172 Medium Windows Server 2025 must be configured for certificate-based authentication for domain controllers
V-278173 Medium Windows Server 2025 must be configured for name-based strong mappings for certificates
V-278183 Medium Windows Server 2025 "Access this computer from the network" user right must only be assigned to t...
V-278184 Medium The Windows Server 2025 "Deny access to this computer from the network" user right on domain-join...
V-278185 Medium Windows Server 2025 Deny log on as a batch job user right on domain-joined member servers must be...
V-278186 Medium The Windows Server 2025 "Deny log on as a service" user right on domain-joined member servers mus...
V-278187 Medium The Windows Server 2025 "Deny log on locally" user right on domain-joined member servers must be ...
V-278243 Medium The Windows Server 2025 "Allow log on locally" user right must only be assigned to the Administra...
V-254421 Medium Windows Server 2022 Deny access to this computer from the network user right on domain controller...
V-205667 Medium Windows Server 2019 Deny access to this computer from the network user right on domain controller...
V-254434 Medium Windows Server 2022 Access this computer from the network user right must only be assigned to the...
V-205671 Medium Windows Server 2019 "Access this computer from the network" user right must only be assigned to t...
V-253480 Medium The "Access this computer from the network" user right must only be assigned to the Administrator...
V-220957 Medium The Access this computer from the network user right must only be assigned to the Administrators ...
V-254422 Medium Windows Server 2022 Deny log on as a batch job user right on domain controllers must be configure...
V-205668 Medium Windows Server 2019 Deny log on as a batch job user right on domain controllers must be configure...
V-254423 Medium Windows Server 2022 Deny log on as a service user right must be configured to include no accounts...
V-205669 Medium Windows Server 2019 Deny log on as a service user right must be configured to include no accounts...
V-254435 Medium Windows Server 2022 Deny access to this computer from the network user right on domain-joined mem...
V-205672 Medium Windows Server 2019 "Deny access to this computer from the network" user right on domain-joined m...
V-253491 Medium The "Deny access to this computer from the network" user right on workstations must be configured...
V-220968 Medium The Deny access to this computer from the network user right on workstations must be configured t...
V-254436 Medium Windows Server 2022 Deny log on as a batch job user right on domain-joined member servers must be...
V-205673 Medium Windows Server 2019 "Deny log on as a batch job" user right on domain-joined member servers must ...
V-253492 Medium The "Deny log on as a batch job" user right on domain-joined workstations must be configured to p...
V-220969 Medium The "Deny log on as a batch job" user right on domain-joined workstations must be configured to p...
V-205674 Medium Windows Server 2019 "Deny log on as a service" user right on domain-joined member servers must be...
V-254437 Medium Windows Server 2022 Deny log on as a service user right on domain-joined member servers must be c...
V-253495 Medium The "Deny log on through Remote Desktop Services" user right on Windows 11 workstations must be c...
V-220972 Medium The Deny log on through Remote Desktop Services user right on Windows 10 workstations must at a m...
V-254493 Medium Windows Server 2022 Allow log on locally user right must only be assigned to the Administrators g...
V-205676 Medium Windows Server 2019 Allow log on locally user right must only be assigned to the Administrators g...
V-253482 Medium The "Allow log on locally" user right must only be assigned to the Administrators and Users groups
V-220959 Medium The Allow log on locally user right must only be assigned to the Administrators and Users groups
V-271427 Medium Windows Server 2022 must be configured for name-based strong mappings for certificates
V-271429 Medium Windows Server 2019 must be configured for named-based strong mappings for certificates
V-277042 Medium The macOS system must disable FileVault automatic login
V-277085 Medium The macOS system must disable Server Message Block (SMB) sharing
V-277086 Medium The macOS system must disable Network File System (NFS) service
V-277089 Medium The macOS system must disable Unix-to-Unix Copy Protocol (UUCP) service
V-277091 Medium The macOS system must disable the built-in web server
V-277092 Medium The macOS system must disable AirDrop
V-277102 Medium The macOS system must disable Remote Apple Events
V-277114 Medium The macOS system must disable Screen Sharing and Apple Remote Desktop
V-277126 Medium The macOS system must disable Media Sharing
V-277127 Medium The macOS system must disable Bluetooth Sharing
V-277142 Medium The macOS system must disable iPhone Mirroring
V-277172 Medium The macOS system must disable Handoff
V-277175 Medium The macOS system must enable Authenticated Root