,,"Lastmodified:2007-11-01"

,,"CCEVersion:v5""Outline","v5CCEId","v4CCEId","CCEDefinition","CCEPlatform","CCEParameters","CCETechnicalMechanisms",,"NISTSCAPWindowsVistaXCCDF(SCAP-WinVista-XCCDF.
xmlrev2007-02-06)","NISTSCAPWindowsVistaOVAL(SCAP-WinVista-OVAL.
xmlrev2007-02-06)""AccountLockoutPolicy",,"CCE-733","The""resetaccountlockoutcounterafter""policyshouldmeetminimumrequirements.
","MicrosoftWindowsVista","(1)numberofminutes","(1)definedbyLocalorGroupPolicy",,"reset-account-lockout-counter","oval:com.
secure-elements.
oval:def:6009",,"CCE-980","The""accountlockoutduration""policyshouldmeetminimumrequirements.
","MicrosoftWindowsVista","(1)numberofminutes","(1)definedbyLocalorGroupPolicy",,"account-lockout-duration","oval:com.
secure-elements.
oval:def:6007",,"CCE-658","The""accountlockoutthreshold""policyshouldmeetminimumrequirements.
","MicrosoftWindowsVista","(1)numberofattempts","(1)definedbyLocalorGroupPolicy",,"account-lockout-threshold","oval:com.
secure-elements.
oval:def:6008""AuditPolicy",,"CCE-315","The""auditaccountlogonevents""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsauditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-account-logon-events","oval:com.
secure-elements.
oval:def:6010",,"CCE-596","The""auditaccountmanagement""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsaditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-account-management","oval:com.
secure-elements.
oval:def:6011",,"CCE-10","The""AuditDirectoryServiceAccess""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsaditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-directory-services-access","oval:com.
secure-elements.
oval:def:6012",,"CCE-429","The""Auditlogonevents""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsauditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-logon-events","oval:com.
secure-elements.
oval:def:6013",,"CCE-812","The""auditobjectaccess""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsauditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-object-access","oval:com.
secure-elements.
oval:def:6014",,"CCE-966","The""auditpolicychange""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsauditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-policy-change","oval:com.
secure-elements.
oval:def:6015",,"CCE-874","The""auditprivilegeuse""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsauditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-privilege-use","oval:com.
secure-elements.
oval:def:6016",,"CCE-169","The""AuditBackupandRestore""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsauditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,,"CCE-8","The""AuditProcesses""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsauditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-process-tracking","oval:com.
secure-elements.
oval:def:6017",,"CCE-396","The""AllowSystemtobeShutDownWithoutHavingtoLogOn""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,,"CCE-916","The""DecoyAdminAccountNotDisabled""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,,,,"CCE-475","The""Confirmopenafterdownload""optionshouldbeproperlysetforallfiletypes.
","MicrosoftWindowsVista","(1)filetype(2)enabled/disabled","(1)InWindowsExplorer:Tools->FolderOptions->FileTypes->[filetype]->Advanced",,,,,"CCE-141","TheMicrosoftScriptRuntimelibrary,scrrun.
dll,shouldberegisteredornotasappropriate.
","MicrosoftWindowsVista","(1)registered/unregistered","(1)`REGSVR32""C:\Windows\System\Scrrun.
dll""`(2)`UNREGSVR32""C:\Windows\System\Scrrun.
dll""`",,,"CCE-149","The""auditsystemevents""policyshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)successfulattemptsauditedy/n(2)failedattemptsauditedy/n","(1)definedbyLocalorGroupPolicy",,"audit-system-events","oval:com.
secure-elements.
oval:def:6018""EventLogSettings",,"CCE-299","The""restrictguestaccesstoapplicationlog""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\RestrictGuestAccess(2)definedbyGroupPolicy",,"Prevent-Guest-Application-Log-Access","oval:com.
secure-elements.
oval:def:6509",,"CCE-185","Theapplicationlogmaximumsizeshouldbeconfiguredcorrectly.
.
","MicrosoftWindowsVista","(1)sizeoffile","(1)definedbytheWindowsEventLog(2)definedbyGroupPolicy(3)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\MaxSize",,"Maximum-Application-Log-Size","oval:com.
secure-elements.
oval:def:6506",,"CCE-285","The""whenmaximumlogsizeisreached""propertyshouldbesetcorrectlyfortheApplicationlog.
","MicrosoftWindowsVista","typeofretention","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\Retention(2)definedbyGroupPolicy",,"Retention-Method-For-Application-Log","oval:com.
secure-elements.
oval:def:6512",,"CCE-951","IftheApplicationlog'sretentionmethodissetto""Overwriteeventsbydays,""anappropriatevalueshouldbesetforthenumberofdays'logstokeep.
","MicrosoftWindowsVista","(1)numberofdays",,,,,,"CCE-462","The""restrictguestaccesstosecuritylog""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security\RestrictGuestAccess(2)definedbyGroupPolicy",,"Prevent-Guest-Security-Log-Access","oval:com.
secure-elements.
oval:def:6511",,"CCE-757","Thesecuritylogmaximumsizeshouldbeconfiguredcorrectly.
.
","MicrosoftWindowsVista","(1)sizeoffile","(1)definedbytheWindowsEventLog(2)definedbyGroupPolicy(3)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security\MaxSize",,"Maximum-Security-Log-Size","oval:com.
secure-elements.
oval:def:6507",,"CCE-523","The""whenmaximumlogsizeisreached""propertyshouldbesetcorrectlyfortheSecuritylog.
","MicrosoftWindowsVista","typeofretention","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\Retention(2)definedbyGroupPolicy",,"Retention-Method-For-Security-Log","oval:com.
secure-elements.
oval:def:6513",,"CCE-682","IftheSecuritylog'sretentionmethodissetto""Overwriteeventsbydays,""anappropriatevalueshouldbesetforthenumberofdays'logstokeep.
","MicrosoftWindowsVista","(1)numberofdays",,,,,,"CCE-726","The""restrictguestaccesstosystemlog""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\RestrictGuestAccess(2)definedbyGroupPolicy",,"Prevent-Guest-System-Log-Access","oval:com.
secure-elements.
oval:def:6510",,"CCE-735","Thesystemlogmaximumsizeshouldbeconfiguredcorrectly.
.
","MicrosoftWindowsVista","(1)sizeoffile","(1)definedbytheWindowsEventLog(2)definedbyGroupPolicy(3)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\MaxSize",,"Maximum-System-Log-Size","oval:com.
secure-elements.
oval:def:6508",,"CCE-664","The""whenmaximumlogsizeisreached""propertyshouldbesetcorrectlyfortheSystemlog.
","MicrosoftWindowsVista","typeofretention","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\Retention(2)definedbyGroupPolicy",,"Retention-Method-For-System-Log","oval:com.
secure-elements.
oval:def:6514",,"CCE-210","IftheSystemlog'sretentionmethodissetto""Overwriteeventsbydays,""anappropriatevalueshouldbesetforthenumberofdays'logstokeep.
","MicrosoftWindowsVista","(1)numberofdays",,,,"PasswordPolicy",,"CCE-871","The""maximumpasswordage""policyshouldmeetminimumrequirements.
","MicrosoftWindowsVista","(1)numberofdays","(1)definedbyLocalorGroupPolicy",,"maximum-password-age","oval:com.
secure-elements.
oval:def:6002",,"CCE-324","The""minimumpasswordage""policyshouldmeetminimumrequirements.
","MicrosoftWindowsVista","(1)numberofdays","(1)definedbyLocalorGroupPolicy",,"minimum-password-age","oval:com.
secure-elements.
oval:def:6003",,"CCE-100","The""minimumpasswordlength""policyshouldmeetminimumrequirements.
","MicrosoftWindowsVista","(1)numberofdays","(1)definedbyLocalorGroupPolicy",,"minimum-password-length","oval:com.
secure-elements.
oval:def:6006",,"CCE-514","ThecorrectpasswordfilteringDLLshouldbeinstalled.
","MicrosoftWindowsVista","(1)filename(2)version(3)filesize(4)filehash","(1)determinedbythelocalfilesystem",,,,,"CCE-633","The""passwordmustmeetcomplexityrequirments""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,"password-complexity","oval:com.
secure-elements.
oval:def:6004",,"CCE-60","The""enforcepasswordhistory""policyshouldmeetminimumrequirements.
","MicrosoftWindowsVista","(1)numberofpasswordsremembered","(1)definedbyLocalorGroupPolicy",,"enforce-password-history","oval:com.
secure-elements.
oval:def:6001",,"CCE-479","The""storepasswordusingreversibleencryptionforallusersinthedomain""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,"reversible-password-encryption","oval:com.
secure-elements.
oval:def:6005""AvailableNetworkServices""ServicesRunning",,"CCE-487","ThestartuptypeoftheAlerterserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Alerter\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-496","ThestartuptypeoftheAutomaticUpdateserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-148","ThestartuptypeoftheBackgroundIntelligentTransferService(BITS)serviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"CCE-954","ThestartuptypeoftheClipBookserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ClipSrv\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-637","DEPRECATEDinfavorofCCE-232.
",,,,,,,,"CCE-294","ThestartuptypeoftheComputerBrowserserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"CCE-800","ThestartuptypeoftheFastUserSwitchingserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FastUserSwitchingCompatibility\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-78","ThestartuptypeoftheFaxserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fax\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy","s",,,,"CCE-712","ThestartuptypeoftheFTPPublishingserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSFTPSVC\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-311","ThestartuptypeoftheIISAdminserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IISADMIN\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"CCE-738","ThestartuptypeoftheIndexingserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-729","ThestartuptypeoftheMessengerserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,"Do-not-allow-Windows-Messenger-to-be-run","oval:com.
secure-elements.
oval:def:6601",,"CCE-650","Thestartuptypeofthe.
NETFrameworkserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)definedbytheServicesAdministrativeTool(2)definiedbyGroupPolicy",,,,,"CCE-408","ThestartuptypeoftheNetLogonserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"CCE-232","ThestartuptypeoftheNetMeetingRemoteDesktopSharingserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mnmsrvc\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,"Disable-remote-Desktop-Sharing","oval:com.
secure-elements.
oval:def:6595",,"CCE-857","ThestartuptypeofthePrintServicesforUnixserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)definedbytheServicesAdministrativeTool(2)definiedbyGroupPolicy",,,,,"CCE-267","ThestartuptypeoftheRemoteAccessAutoconnectionManagerserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)definedbytheServicesAdministrativeTool(2)definiedbyGroupPolicy",,,"CCE-663","ThestartuptypeoftheRemoteDesktopHelpSessionManagerserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDSessMgr\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-672","ThestartuptypeoftheInternetConnectionSharingserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-73","ThestartuptypeoftheRemoteRegistryserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-223","ThestartuptypeoftheRoutingandRemoteAccessserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"CCE-522","ThestartuptypeoftheRemoteShellserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RshSvc\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-531","ThestartuptypeoftheSimpleTCP/IPserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SIMPTCP\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-870","ThestartuptypeoftheSimpleMailTransportProtocol(SMTP)serviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPSVC\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-975","ThestartuptypeoftheSNMPServiceserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"",,"CCE-892","ThestartuptypeoftheSNMPTrapServiceserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMPTRAP\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"",,"CCE-940","ThestartuptypeoftheSSDPDiscoveryserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)definedbytheServicesAdministrativeTool(2)definiedbyGroupPolicy",,,,,"CCE-40","ThestartuptypeoftheTaskSchedulerserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"CCE-75","ThestartuptypeoftheTelnetserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-974","ThestartuptypeoftheTerminalServicesserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"CCE-608","ThestartuptypeoftheUniversalPlugandPlayDeviceHost(UPnP)serviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-758","ThestartuptypeoftheWorldWideWebPublishingserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-559","ThestartuptypeoftheAutomaticUpdateserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,,,"CCE-445","ThestartuptypeoftheBackgroundIntelligentTransferService(BITS)serviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Start(2)definedbytheServicesAdministrativeTool(3)definiedbyGroupPolicy",,,"CCE-115","ThestartuptypeofthePrintServicesforUnixserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)definedbytheServicesAdministrativeTool(2)definiedbyGroupPolicy","ServicePermissions",,"CCE-669","ThecorrectservicepermissionsfortheAlerterserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-889","ThecorrectservicepermissionsfortheAutomaticUpdatesserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-61","ThecorrectservicepermissionsfortheBackgroundIntelligentTransferserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-476","ThecorrectservicepermissionsfortheClipBookserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-643","ThecorrectservicepermissionsfortheComputerBrowserserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-87","ThecorrectservicepermissionsfortheFaxserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-968","ThecorrectservicepermissionsfortheFileSharesserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-4","ThecorrectservicepermissionsfortheFTPPublishingserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,"CCE-792","ThecorrectservicepermissionsfortheIISAdminserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-444","ThecorrectservicepermissionsfortheIndexingserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,"CCE-79","ThecorrectservicepermissionsfortheMessengerserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-497","ThecorrectservicepermissionsfortheNetLogonserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-21","ThecorrectservicepermissionsfortheNetMeetingserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,"CCE-109","ThecorrectservicepermissionsforthePrinterserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-157","ThestartuptypeoftheRemoteAccessAutoconnectionManagerserviceshouldbecorrect.
","MicrosoftWindowsVista","(1)disabled/manual/automatic","(1)definedbytheServicesAdministrativeTool(2)definiedbyGroupPolicy",,,"CCE-915","ThecorrectservicepermissionsfortheRemoteDesktopHelpSessionManagerserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-219","ThecorrectservicepermissionsfortheRemoteRegistryserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,"CCE-779","ThecorrectservicepermissionsfortheRoutingandRemoteAccessserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-426","ThecorrectservicepermissionsfortheSMTPserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,"CCE-56","ThecorrectservicepermissionsfortheSNMPserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,"",,"CCE-521","ThecorrectservicepermissionsfortheSNMPTrapserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-407","ThecorrectservicepermissionsfortheTaskSchedulerserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,"CCE-944","ThecorrectservicepermissionsfortheTelnetserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-605","ThecorrectservicepermissionsfortheTerminalServicesserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-869","ThecorrectservicepermissionsfortheUniversalPlugandPlayserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy",,,,,"CCE-143","ThecorrectservicepermissionsfortheWWWPublishingserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions","(1)setviaSecurityTemplates(2)definiedbyGroupPolicy","SecuritySettings""MajorSecuritySettings",,"CCE-310","The""Additionalrestrictionsforanonymousconnections""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,,,,"CCE-195","ThebehaviorsurroundingAnonymoususers'abiliitytodisplaylistsofSAMaccountsandsharesshouldbecorrect.
","MicrosoftWindowsVista","(1)restricted/unrestricted","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\RestrictAnonymous(2)definedbyLocalorGroupPolicy",,"do-not-allow-anonymous-enumeration-sam-accounts-shares","oval:com.
secure-elements.
oval:def:6071",,"CCE-318","ThebehaviorsurroundingAnonymoususers'abiliitytodisplaylistsofSAMaccountsshouldbecorrect.
","MicrosoftWindowsVista","(1)restricted/unrestricted","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM(2)definedbyLocalorGroupPolicy",,"do-not-allow-anonymous-enumeration-sam","oval:com.
secure-elements.
oval:def:6070",,"CCE-953","ThebehaviorsurroundingAnonymousSID/Nametranslationshouldbecorrect.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AnonymousNameLookup(2)definedbyLocalorGroup",,"Anonymous-SID-Name-Translation","MinorSecuritySettings""AdditionalRegistrySettings",,"CCE-983","The""Anonymousaccesstotheapplicationeventlog""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)exist/notexist(2)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application",,,,,"CCE-142","The""Anonymousaccesstothesystemeventlog""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)exist/notexist(2)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System",,,"CCE-653","The""Anonymousaccesstothesecurityeventlog""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)exist/notexist(2)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security",,,,,"CCE-464","The""Anonymousaccesstotheregistry""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg",,,,,"CCE-332","Useofthebuilt-inGuestaccountshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)LocalUsersandGroupsMMC",,"guest-account-status","oval:com.
secure-elements.
oval:def:6020",,"CCE-499","Useofthebuilt-inAdministratoraccountshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)LocalUsersandGroupsMMC",,"administrator-account-status","oval:com.
secure-elements.
oval:def:6019",,"CCE-23","The""Messagetitleforusersattemptingtologon""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)textcaption","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption(2)definedbyLocalorGroupPolicy",,"message-title-users-attempting-logon","oval:com.
secure-elements.
oval:def:6042",,"CCE-829","The""Messagetextforusersattemptingtologon""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)textstatement","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText(2)definedbyLocalorGroupPolicy",,"message-text-users-attempting-logon","oval:com.
secure-elements.
oval:def:6041",,"CCE-512","AdministrativeSharesshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)allowed/removed","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareWks",,,,,"CCE-243","AutomaticExecutionoftheSystemDebuggershouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\AEDebug\Auto",,,"CCE-283","AutomaticLogonshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\AutoAdminLogon",,"enable-automatic-logon","oval:com.
secure-elements.
oval:def:6054",,"CCE-137","AutomaticRebootAfterSystemCrashshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl\AutoReboot",,,"CCE-44","AutoplayonallDriveTypesshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun",,"Turn-off-Autoplay,no-drive-type-auto-run","oval:com.
secure-elements.
oval:def:6574,oval:com.
secure-elements.
oval:def:6060",,"CCE-36","AutoplayforCurrentUsershouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun",,,"CCE-820","AutoplayforDefaultUsershouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_USER\.
DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun",,,,,"CCE-344","CD-ROMAutorunshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDrom\Autorun",,,"CCE-282","ComputerBrowserResetBrowserFramesshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/ignored","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MrxSmb\Parameters\RefuseReset",,,"CCE-150","ICMPRedirectsshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/ignored","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ServicesTcpip\Parameters\EnableICMPRedirect",,"enable-icmp-redirect","oval:com.
secure-elements.
oval:def:6057",,"CCE-564","IPSourceRoutingshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DisableIPSourceRouting",,"disable-ip-source-routing","oval:com.
secure-elements.
oval:def:6055",,"CCE-952","IRDPshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PerformRouterDiscovery",,"perform-router-discovery","oval:com.
secure-elements.
oval:def:6063",,"CCE-501","KerberosandRSVPTrafficProtectedbyIPSecshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPSEC\NoDefaultExempt",,,,,"CCE-536","Dr.
WatsonCrashDumpsshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DrWatson\CreateCrashDump",,,,,"CCE-65","DisplayLastUserNameinLogonScreenshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\DontDisplayLastUserName",,"do-not-display-last-user-name","oval:com.
secure-elements.
oval:def:6039",,"CCE-544","FileSystemCheckerandPopupsshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\SFCDisable",,,,,"CCE-580","SystemFileCheckershouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\SFCScan",,,,,"CCE-236","SystemFileCheckerProgressMetershouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)visible/invisible","(1)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\SFCShowProgress",,,"CCE-139","SystemavailabilitytoMasterBrowsershouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)available/hidden","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanmanserver\Parameters\Hidden",,"hide-system-from-browse-list","oval:com.
secure-elements.
oval:def:6058",,"CCE-897","TCP/IPDeadGatewayDetectionshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnableDeadGWDetect",,"enable-dead-gw-detect","oval:com.
secure-elements.
oval:def:6056",,"CCE-188","TheTCP/IPKeepAliveTimeshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)numberofmilliseconds","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\KeepAliveTime",,"keep-alive-time","oval:com.
secure-elements.
oval:def:6059",,"CCE-333","ThepermittednumberofTCP/IPMaximumHalf-openSocketsshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)numberofsockets","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\TcpMaxHalfOpen",,,"CCE-751","ThepermittednumberofTCP/IPMaximumRetriedHalf-openSocketsshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)numberofsockets","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\TcpMaxHalfOpenRetried",,,,,"CCE-817","TCP/IPNetBIOSNameReleaseonRequestPreventedshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters\NoNameReleaseOnDemand",,"no-name-release-on-demand","oval:com.
secure-elements.
oval:def:6061",,"CCE-998","TCP/IPPMTUDiscoveryshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnablePMTUDiscovery",,,,,"CCE-284","TCP/IPSYNFloodAttackProtectionshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SynAttackProtect",,"syn-attack-protect","oval:com.
secure-elements.
oval:def:6066",,"CCE-112","ProtectKernelobjectattributesshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)securitylevel","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\EnhancedSecurityLevel",,,"CCE-125","SecurityAuditlogwarninglevelshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)warninglevel","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Security\WarningLevel",,"warning-level","oval:com.
secure-elements.
oval:def:6069",,"CCE-156","Disablesavingofdial-uppasswordsshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasman\Parameters\DisableSavePassword",,,,,"CCE-601","The""SecureChannel:DigitallyEncryptSecureChannelData(WhenPossible)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel(2)definedbyLocalorGroupPolicy",,,,,"CCE-614","The""SecureChannel:DigitallySignSecureChannelData(WhenPossible)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel(2)definedbyLocalorGroupPolicy",,,,,"CCE-130","DEPRECATEDinfavorofCCE-92.
","MicrosoftWindowsVista",,,,,,,"CCE-271","SafeDLLSearchModeshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\SessionManager\SafeDllSearchMode",,"safe-dll-search-mode","oval:com.
secure-elements.
oval:def:6064",,"CCE-707","AlwaysWaitfortheNetworkatComputerStartupandLogonshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsNT\CurrentVersion\Winlogon\SyncForegroundPolicy",,,,,"CCE-213","DeleteRoamingCachedProfilesshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\DeleteRoamingCache",,,,,"CCE-231","UseClassicLogonshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)logontype","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\system\LogonType",,,"CCE-50","BackgroundRefreshofGroupPolicyshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Policies\system\DisableBkGndGroupPolicy",,,,,"CCE-81","ShowSharedInternetConnectionAccessUIshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkConnections\NC_ShowSharedAccessUI",,,,,"CCE-896","InstallationandConfigurationofNetworkBridgeontheDNSDomainNetworkshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkConnections\NC_AllowNetBridge_NLA",,,,,"CCE-574","DisallowInstallationofPrintersUsingKernel-modeDriversshouldbeproperlyconfigured.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsNT\Printers\KMPrintersAreBlocked",,,,,"CCE-358","DEPRECATEDinfavorofCCE-156.
",,,,"SecurityOptions",,"CCE-257","The""AllowServerOperatorstoScheduleTasks""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,,"CCE-438","Thebuilt-inAdministratoraccountshouldbecorrectlynamed.
","MicrosoftWindowsVista","(1)validnames","(1)definedbyLocalorGroupPolicy",,"rename-administrator","oval:com.
secure-elements.
oval:def:6022",,"CCE-834","Thebuilt-inGuestaccountshouldbecorrectlynamed.
","MicrosoftWindowsVista","(1)validnames","(1)definedbyLocalorGroupPolicy",,"rename-guest","oval:com.
secure-elements.
oval:def:6023",,"CCE-222","Theamountofidletimerequiredbeforedisconnectingasessionshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)numberofminutes","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect(2)definedbyLocalorGroupPolicy",,"amount-of-idle-time-required-before-suspending-session","oval:com.
secure-elements.
oval:def:6050",,"CCE-2","The""Audittheaccessofglobalsystemobjects""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects(2)definedbyLocalorGroupPolicy",,"audit-access-global-system-objects","oval:com.
secure-elements.
oval:def:6024",,"CCE-905","The""Audittheuseofbackupandrestoreprivilege""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing(2)definedbyLocalorGroupPolicy",,"audit-use-backup-restore-privilege","oval:com.
secure-elements.
oval:def:6025",,"CCE-133","The""DisableCTRL+ALT+DeleteRequirementforLogon""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD(2)definedbyLocalorGroupPolicy",,"do-not-require-ctrlaltdel","oval:com.
secure-elements.
oval:def:6040",,"CCE-719","The""LANManagerAuthenticationLevel""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)authenticationlevel","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LMCompatibilityLevel(2)definedbyLocalorGroupPolicy",,,,,"CCE-275","The""SendLanMancompatiblepassword""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista",,"(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LMCompatibilityLevelParamenters:(1)level",,,"CCE-402","The""PreventUsersfromInstallingPrinterDrivers""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanManPrintServices\Servers\AddPrinterDrivers(2)definedbyLocalorGroupPolicy",,"prevent-users-installing-printers","oval:com.
secure-elements.
oval:def:6030",,"CCE-410","The""RecoveryConsole:AllowAutomaticAdministrativeLogon""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel(2)definedbyLocalorGroupPolicy",,,"CCE-76","The""RecoveryConsole:AllowFloppyCopyandAccesstoAllDrivesandAllFolders""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Setup\RecoveryConsole\SetCommand(2)definedbyLocalorGroupPolicy",,,,,"CCE-565","The""RestrictCD-ROMAccesstoLocallyLogged-OnUserOnly""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\AllocateCDRoms(2)definedbyLocalorGroupPolicy",,"restrict-cdrom-access-local-users-only","oval:com.
secure-elements.
oval:def:6031",,"CCE-463","The""RestrictFloppyAccesstoLocallyLogged-OnUserOnly""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\AllocateFloppies(2)definedbyLocalorGroupPolicy",,"restrict-floppy-access-local-users-only","oval:com.
secure-elements.
oval:def:6032",,"CCE-508","The""StrengthenDefaultPermissionsofGlobalSystemObjects""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\ProtectionMode(2)definedbyLocalorGroupPolicy",,,,,"CCE-417","The""SecureChannel:RequireStrong(Windows2000orlater)SessionKey""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKey(2)definedbyLocalorGroupPolicy",,"require-strong-session-key","oval:com.
secure-elements.
oval:def:6038",,"CCE-228","The""SendUnencryptedPasswordtoConnecttoThird-PartySMBServers""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword(2)definedbyLocalorGroupPolicy",,"send-unencrypted-password-to-third-party-smb-servers","oval:com.
secure-elements.
oval:def:6049",,"CCE-413","The""UnsignedDriverInstallationBehavior""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)behavior","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\DriverSigning\Policy(2)definedbyLocalorGroupPolicy",,,"CCE-307","The""UnsignedNon-DriverInstallationBehavior""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)behavior","(1)definedbyLocalorGroupPolicy",,,"CCE-814","The""UsersPromptedtoChangePasswordBeforeExpiration""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)numberofdayspriortoexpiration","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\PasswordExpiryWarning(2)definedbyLocalorGroupPolicy",,"prompt-user-to-change-password-before-expiration","oval:com.
secure-elements.
oval:def:6044",,"CCE-92","The""ShutDownsystemimmediatelyifunabletologsecurityaudits""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail(2)definedbyLocalorGroupPolicy",,"shutdown-system-unable-log-audits","oval:com.
secure-elements.
oval:def:6027",,"CCE-224","The""AllowSystemtobeShutDownWithoutHavingtoLogOn""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWithoutLogon(2)definedbyLocalorGroupPolicy",,,"CCE-360","The""AutomaticallyLogOffUsersWhenLogonTimeExpires(local)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,,,,"CCE-422","The""ClearVirtualMemoryPagefileatshutdown""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\MemoryManagement\ClearPageFileAtShutdown(2)definedbyLocalorGroupPolicy",,,"CCE-576","The""DigitallySignClientCommunication(Always)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature(2)definedbyLocalorGroupPolicy",,"digitally-sign-communications-client-always","oval:com.
secure-elements.
oval:def:6047",,"CCE-519","The""DigitallySignClientCommunication(WhenPossible)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnableSecuritySignature(2)definedbyLocalorGroupPolicy",,"digitally-sign-communications-client-server-agrees","oval:com.
secure-elements.
oval:def:6048",,"CCE-171","The""DigitallySignServerCommunication(Always)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature(2)definedbyLocalorGroupPolicy",,"digitally-sign-communications-server-always","oval:com.
secure-elements.
oval:def:6051",,"CCE-104","The""DigitallySignServerCommunication(WhenPossible)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature(2)definedbyLocalorGroupPolicy",,"digitally-sign-communications-server-client-agrees","oval:com.
secure-elements.
oval:def:6052",,"CCE-773","The""NumberofPreviousLogonstoCache""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)numberoflogons","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\CachedLogonsCount(2)definedbyLocalorGroupPolicy",,"number-of-previous-logons-to-cache","oval:com.
secure-elements.
oval:def:6043",,"CCE-919","The""AllowedtoFormatandEjectRemovableNTFSMedia""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)Group(s)","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\AllocateDASD(2)definedbyLocalorGroupPolicy",,"allow-format-eject-removable-media","oval:com.
secure-elements.
oval:def:6029",,"CCE-549","The""SecureChannel:DigitallyEncryptorSignSecureChannelData(Always)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal(2)definedbyLocalorGroupPolicy",,"digitally-encrypt-or-sign-secure-channel-data-always","oval:com.
secure-elements.
oval:def:6034",,"CCE-161","The""SecureChannel:DigitallyEncryptSecureChannelData(WhenPossible)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel(2)definedbyLocalorGroupPolicy",,"digitally-encrypt-secure-channel-data-when-possible","oval:com.
secure-elements.
oval:def:6033",,"CCE-918","The""SecureChannel:DigitallySignSecureChannelData(WhenPossible)""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel(2)definedbyLocalorGroupPolicy",,"digitally-sign-secure-channel-data-when-possible","oval:com.
secure-elements.
oval:def:6035",,"CCE-443","The""SmartCardRemovalBehavior""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)behavior","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\ScRemoveOption(2)definedbyLocalorGroupPolicy",,"smart-card-removal-behaviour","oval:com.
secure-elements.
oval:def:6046",,"CCE-831","The""PreventSystemMaintenanceofComputerAccountPassword""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswordChange(2)definedbyLocalorGroupPolicy",,"disable-machine-account-password-changes","oval:com.
secure-elements.
oval:def:6036",,"CCE-368","The""Systemboottimeout""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)numberofsecondstowait","(1)definedin%Systemroot%\boot.
ini",,,"CCE-55","The""UseFIPScompliantalgorithmsforencryption,hashing,andsigning""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy(2)definedbyLocalorGroupPolicy",,,,,"CCE-575","The""DefaultownerforobjectscreatedbymembersoftheAdministratorsgroup""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner(2)definedbyLocalorGroupPolicy",,,,,"CCE-300","The""RequireCaseInsensitivityforNon-WindowsSybsystems""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\Kernel\ObCaseInsensitive(2)definedbyLocalorGroupPolicy",,,"CCE-533","The""Limitlocalaccountuserofblankpasswordstoconsolelogononly""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse(2)definedbyLocalorGroupPolicy",,"limit-blank-password-use","oval:com.
secure-elements.
oval:def:6021",,"CCE-186","The""Allowundockwithouthavingtologon""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UndockWithoutLogon(2)definedbyLocalorGroupPolicy",,"allow-undock-no-logon","oval:com.
secure-elements.
oval:def:6028",,"CCE-710","The""LDAPserversigningrequirements""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,,,,"CCE-732","The""LDAPclientsigningrequirements""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity(2)definedbyLocalorGroupPolicy",,,,,"CCE-490","The""Refusemachineaccountpasswordchange""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,,,,"CCE-194","The""Maximummachineaccountpasswordage""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge(2)definedbyLocalorGroupPolicy",,"maximum-machine-account-password-age","oval:com.
secure-elements.
oval:def:6037",,"CCE-374","The""RequireDomainControllerauthenticationtounlockworkstation""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\ForceUnlockLogon(2)definedbyLocalorGroupPolicy",,"require-domain-controller-authentication-to-unlock","oval:com.
secure-elements.
oval:def:6045",,"CCE-278","The""Disconnectclientswhenlogonhoursexpire""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForcedLogoff(2)definedbyLocalorGroupPolicy",,"disconnect-client-when-logon-hours-expire","oval:com.
secure-elements.
oval:def:6053",,"CCE-542","The""Donotallowstorageofcredentialsor.
NETPassports""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds(2)definedbyLocalorGroupPolicy",,"do-not-allow-storage-credentials-net-passports-network-authn","oval:com.
secure-elements.
oval:def:6072",,"CCE-18","The""LetEveryonepermissionsapplytoanonymoususers""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous(2)definedbyLocalorGroupPolicy",,"let-everyone-permissions-apply-to-anonymous-users","oval:com.
secure-elements.
oval:def:6073",,"CCE-136","The""NamedPipesthatcanbeaccessedanonymously""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionPipes(2)definedbyLocalorGroupPolicy",,"named-pipes-accessed-anonymously","oval:com.
secure-elements.
oval:def:6074",,"CCE-189","The""Remotelyaccessibleregistrypaths""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)setofpaths","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPathsHKLM(2)definedbyLocalorGroupPolicy",,"Remotely-accessible-registry-paths,Remotely-accessible-registry-paths-and-sub-paths","oval:com.
secure-elements.
oval:def:6075oval:com.
secure-elements.
oval:def:6076",,"CCE-942","The""Sharesthatcanbeaccessedanonymously""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)setofshares","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares(2)definedbyLocalorGroupPolicy",,"Shares-that-can-be-accessed-anonymously--NOTE:COMMENTEDOUT",,,"CCE-343","The""Sharingandsecuritymodelforlocalaccounts""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)Classic/Guestonly","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ForceGuest(2)definedbyLocalorGroupPolicy",,"Sharing-and-security-model-for-local-accounts","oval:com.
secure-elements.
oval:def:6079",,"CCE-233","The""DonotstoreLANManagerhashvalueonnextpasswordchange""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash(2)definedbyLocalorGroupPolicy",,"Do-not-store-LAN-Manager-hash-value-on-next-password-change","oval:com.
secure-elements.
oval:def:6080",,"CCE-775","The""Forcelogoffwhenlogonhoursexpire""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)definedbyLocalorGroupPolicy",,"Force-logoff-when-logon-hours-expire","oval:com.
secure-elements.
oval:def:6081""Screensaver",,"CCE-830","The""Currentuserscreensavertimeout""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","(1)timeinseconds","(1)HKEY_CURRENT_USER\ControlPanel\Desktop\ScreenSaveTimeOut",,"screen-saver-grace-period","oval:com.
secure-elements.
oval:def:6065""TerminalServices",,"CCE-401","The""DoNotAllowNewClientConnections""policyshouldbesetcorrectlyforTerminalServices.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsNT\TerminalServices\fDenyTSConnections",,"Allow-users-to-connect-remotely-using-Terminal-Services","oval:com.
secure-elements.
oval:def:6597",,"CCE-855","The""AlwaysPromptClientforPassworduponConnection""policyshouldbesetcorrectlyforTerminalServices.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsNT\TerminalServices\fPromptForPassword",,"Always-prompt-client-for-password-upon-connection","oval:com.
secure-elements.
oval:def:6599",,"CCE-397","The""SetClientconnectionEncryptionLevel""policyshouldbesetcorrectlyforTerminalServices.
","MicrosoftWindowsVista","(1)encryptionlevel","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsNT\TerminalServices\MinEncryptionLevel",,"Set-client-connection-encryption-level","oval:com.
secure-elements.
oval:def:6600",,"CCE-859","The""AllowSolicitedRemoteAssistance""policyshouldbesetcorrectlyforTerminalServices.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsNT\TerminalServices\fAllowToGetHelp",,"Solicited-Remote-Assistance","oval:com.
secure-elements.
oval:def:6564",,"CCE-434","The""AllowUnsolicitedRemoteAssistance""policyshouldbesetcorrectlyforTerminalServices.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsNT\TerminalServices\fAllowUnsolicited",,"Offer-Remote-Assistance","oval:com.
secure-elements.
oval:def:6563",,"CCE-306","The""ConfigureAutomaticUpdates""shouldbesetcorrectly","MicrosoftWindowsVista",,,,"Configure-Automatic-Updates","oval:com.
secure-elements.
oval:def:6604",,"CCE-989","The""Donotadjustdefaultoptionto'InstallUpdatesandShutDown'inShutDownWindowsdialogbox""shouldbesetcorrectly","MicrosoftWindowsVista",,,,"Do-not-adjust-default-option-to-Install-Updates-and-Shut-Down","oval:com.
secure-elements.
oval:def:6603",,"CCE-1","The""Donotdisplay'InstallUpdatesandShutDown'optioninShutDownWindowsdialogbox""shouldbesetcorrectly","MicrosoftWindowsVista",,,,"Do-not-display-Install-Updates-and-Shut-Down","oval:com.
secure-elements.
oval:def:6602",,"CCE-641","The""Noauto-restartforscheduledAutomaticUpdatesinstallations","MicrosoftWindowsVista",,,,"No-auto-restart-for-scheduled-Automatic-Updates-installations","oval:com.
secure-elements.
oval:def:6605",,"CCE-804","The""RescheduleAutomaticUpdatesscheduledinstallations""shouldbesetcorrectly","MicrosoftWindowsVista",,,,"Reschedule-Automatic-Updates-scheduled-installations","oval:com.
secure-elements.
oval:def:6606""NewforNIST",,"CCE-458","The""DCOM:MachineaccessRestrictionsinSecurityDescriptorDefinitionLanguage(SDDL)syntax""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista",,,,"MachineAccessRestrictions",,"CCE-740","The""DCOM:MachineLaunchRestrictionsintheSecurityDescriptorDefinitionLanguage(SDDL)syntax""securityoptionshouldbesetcorrectly.
","MicrosoftWindowsVista",,,,"MachineLaunchRestrictions",,,"CCE-828","The""Interactivelogon:Requresmartcard""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista",,,,"Require-Smart-Card","oval:com.
secure-elements.
oval:def:6082",,"CCE-638","The""Networkaccess:Restrictanonymousaccesstonamedpipesandshares""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista",,,,"Restrict-anonymous-access-to-Named-Pipes-and-Shares","oval:com.
secure-elements.
oval:def:6077",,"CCE-577","MSS:(TCPMaxConnectResponseRetransmission)SYN-ACKretansmissionswhenaconnectionrequestisnotacknowledged","MicrosoftWindowsVista","(1)numberofseconds","HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\TcpMaxConnectResponseRetransmissions",,"tcp-max-connect-response-retransmissions","oval:com.
secure-elements.
oval:def:6067",,"CCE-872","MSS:(TCPMaxDataRetransmissions)Howmanytimesunacknowledgeddataisretransmitted","MicrosoftWindowsVista","(1)numberofseconds","HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\TcpMaxDataRetransmissions",,"tcp-max-data-retransmissions","oval:com.
secure-elements.
oval:def:6068",,"CCE-511","MSS:(NtfsDisable8dot3NameCreation)Enablethecomputertostopgenerating8.
3stylefilenames.
","MicrosoftWindowsVista","(1)reg_dword","HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\NtfsDisable8dot3NameCreation",,"ntfs-disable-8dot3-name-creation","oval:com.
secure-elements.
oval:def:6062""NewForCIS",,"CCE-145","RPCEndpiontMapperClientAuthentication(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsNT\RPC\EnableAuthEpResolution",,"RPC-Endpoint-Mapper-Client-Authentication","oval:com.
secure-elements.
oval:def:6566",,"CCE-423","RestrictionsforUnauthenticatedRPCclients(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsNT\RPC\RestrictRemoteClients",,"Restrictions-for-Unauthenticated-RPC-clients","oval:com.
secure-elements.
oval:def:6565""NewForCIS(SP2firewall)",,"CCE-806","DomainProfile:Protectallnetworkconnections(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\EnableFirewall",,"Domain-Profile-Firewall-Protect-All-Network-Connections,Domain-Profile-Firewall-State","oval:com.
secure-elements.
oval:def:6547,oval:com.
secure-elements.
oval:def:6515",,"CCE-969","DomainProfile:Donotallowexceptions(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\DoNotAllowExceptions",,"Domain-Profile-Firewall-Do-Not-Allow-Exceptions","oval:com.
secure-elements.
oval:def:6544",,"CCE-502","DomainProfile:Allowlocalprogramexceptions","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\AllowUserPrefMerge",,"Domain-Profile-Firewall-Allow-Local-Program-Exceptions","oval:com.
secure-elements.
oval:def:6541",,"CCE-771","DomainProfile:Allowremoteadministration","MicrosoftWindowsVista","(1)enabled/disabled(2)subnetsforinternalsupportonly","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Enabled",,"Domain-Profile-Firewall-Allow-Inbound-Remote-Administration-Exception","oval:com.
secure-elements.
oval:def:6537",,"CCE-555","DomainProfile:Allowfileandprintersharingexception(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Services\FileAndPrint\Enabled",,"Domain-Profile-Firewall-Allow-Inbound-File-And-Printer-Sharing-Exception","oval:com.
secure-elements.
oval:def:6536",,"CCE-277","DomainProfile:AllowICMPexceptions(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled",,"CCE-832","DomainProfile:AllowRemoteDesktopexception(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled(2)subnetsforinternalsupportonly","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Services\RemoteDesktop\Enabled",,"Domain-Profile-Firewall-Allow-Inbound-Remote-Desktop-Exceptions","oval:com.
secure-elements.
oval:def:6538",,"CCE-590","DomainProfile:AllowUPnPframeworkexception(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Services\UPnPFramework\Enabled",,"Domain-Profile-Firewall-Allow-Inbound-UPnP-Framework-Exceptions","oval:com.
secure-elements.
oval:def:6539",,"CCE-762","The""WindowsFirewall:Prohibitnotifications""settingshouldbeconfiguredcorrectlyfortheDomainProfile.
","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\DisableNotifications",,"Domain-Profile-Firewall-Prohibit-Notifications,Domain-Profile-Display-Notification","oval:com.
secure-elements.
oval:def:6545,oval:com.
secure-elements.
oval:def:6518",,"CCE-793","ThelogfilepathandnamefortheWindowsFirewallshouldbeconfiguredcorrectlyfortheDomainProfile.
","MicrosoftWindowsVista","(1)Filepath","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging\LogFilePath(2)ComputerConfiguration\AdministrativeTemplates\Network\NetworkConnections\WindowsFirewall\DomainProfile\WindowsFirewall:AllowLogging-Logfilepathandname(3)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\DomainProfileTab\Logging\Name",,,,,"CCE-696","UnicastresponsetomulticastorbroadcastrequestsshouldbeenabledordisabledasappropriatefortheDomainProfile.
","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\DisableUnicastResponsesToMulticastBroadcast",,"Domain-Profile-Firewall-Prohibit-Unicast-Response,Domain-Profile-Allow-Unicast-Response","oval:com.
secure-elements.
oval:def:6546,oval:com.
secure-elements.
oval:def:6519",,"CCE-114","DomainProfile:Defineportexceptions(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts",,"Domain-Profile-Firewall-Define-Inbound-Port-Exceptions","oval:com.
secure-elements.
oval:def:6542",,"CCE-370","DomainProfile:Allowlocalportexceptions(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\AllowUserPrefMerge",,"Domain-Profile-Firewall-Allow-Local-Port-Exceptions","oval:com.
secure-elements.
oval:def:6540",,"CCE-273","StandardProfile:Protectallnetworkconnections(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\EnableFirewall",,"Standard-Profile-Firewall-Protect-All-Network-Connections","oval:com.
secure-elements.
oval:def:6559",,"CCE-440","StandardProfile:Donotallowexceptions(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\DoNotAllowExceptions",,"Standard-Profile-Firewall-Do-Not-Allow-Exceptions","oval:com.
secure-elements.
oval:def:6556",,"CCE-352","StandardProfile:Allowlocalprogramexceptions(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\AllowUserPrefMerge",,"Standard-Profile-Firewall-Define-Inbound-Program-Exceptions","oval:com.
secure-elements.
oval:def:6555",,"CCE-467","StandardProfile:Allowremoteadministrationexception(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Services\RemoteDesktop",,"Standard-Profile-Firewall-Allow-Inbound-Remote-Administration-Exception","oval:com.
secure-elements.
oval:def:6549",,"CCE-626","StandardProfile:Allowfileandprintersharingexception(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Services\RemoteDesktop\Enabled",,"Standard-Profile-Firewall-Allow-Inbound-File-And-Printer-Sharing-Exception,Standard-Profile-Firewall-Allow-Inbound-File-And-Printer-Sharing-Exceptions","oval:com.
secure-elements.
oval:def:6548,oval:com.
secure-elements.
oval:def:6553",,"CCE-354","StandardProfile:AllowRemoteDesktopexception(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Services\RemoteDesktop\Enabled",,"Standard-Profile-Firewall-Allow-Inbound-Remote-Desktop-Exceptions","oval:com.
secure-elements.
oval:def:6550",,"CCE-266","StandardProfile:AllowUPnPframeworkexception(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Services\UPnPFramework\Enabled",,"Standard-Profile-Firewall-Allow-Inbound-UPnP-Framework-Exceptions","oval:com.
secure-elements.
oval:def:6551",,"CCE-901","The""WindowsFirewall:Prohibitnotifications""settingshouldbeconfiguredcorrectlyfortheStandardProfile.
","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\DisableNotifications",,"Standard-Profile-Firewall-Prohibit-Notifications","oval:com.
secure-elements.
oval:def:6557",,"CCE-632","UnicastresponsetomulticastorbroadcastrequestsshouldbeenabledordisabledasappropriatefortheStandardProfile.
","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\DisableUnicastResponsesToMulticastBroadcast",,"Standard-Profile-Firewall-Prohibit-Unicast-Response","oval:com.
secure-elements.
oval:def:6558",,"CCE-196","StandardProfile:Defineportexceptions(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts",,"Standard-Profile-Firewall-Define-Inbound-Port-Exceptions","oval:com.
secure-elements.
oval:def:6554",,"CCE-77","StandardProfile:Allowlocalportexceptions(SP2only)","MicrosoftWindowsVista","(1)enabled/disabled","HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\AllowUserPrefMerge",,"Standard-Profile-Firewall-Allow-Local-Port-Exceptions","oval:com.
secure-elements.
oval:def:6552""Vista",,"CCE-249","DomainProfile-InboundConnections","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\DomainProfile\InboundConnectionsTab\(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\DefaultInboundAction",,"Domain-Profile-Inbound-Connections","oval:com.
secure-elements.
oval:def:6516",,"CCE-485","DomainProfile-OutboundConnections","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\DomainProfile(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\DefaultOutboundAction",,"Domain-Profile-Outbound-Connections","oval:com.
secure-elements.
oval:def:6517",,"CCE-400","DomainProfile-ApplyLocalFirewallRules","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\DomainProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AllowLocalPolicyMerge",,"Domain-Profile-Apply-Local-Firewall-Rules","oval:com.
secure-elements.
oval:def:6520",,"CCE-584","DomainProfile-ApplyLocalConnectionSecurityRules","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\DomainProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AllowLocalIPsecPolicyMerge",,"Domain-Profile-Apply-Local-Connection-Security-Rules","oval:com.
secure-elements.
oval:def:6521",,"CCE-7","PrivateProfile-FirewallState","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfile(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\EnableFirewall",,"Private-Profile-Firewall-State","oval:com.
secure-elements.
oval:def:6522",,"CCE-29","PrivateProfile-InboundConnections","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfile(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\DefaultInboundAction",,"Private-Profile-Inbound-Connections","oval:com.
secure-elements.
oval:def:6523",,"CCE-32","PrivateProfile-OutboundConnections","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfile(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\DefaultOutboundAction",,"Private-Profile-Outbound-Connections","oval:com.
secure-elements.
oval:def:6524",,"CCE-38","UsernotificationswhenaprogramisblockedfromreceivinginboundconnectionsbyWindowsFirewallshouldbeenabledordisabledasappropriateforthePrivateProfile.
","MicrosoftWindowsVista","yes/no/notconfigured","(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\DisableNotifications",,"Private-Profile-Display-Notification","oval:com.
secure-elements.
oval:def:6525",,"CCE-70","UnicastresponsetomulticastorbroadcastrequestsshouldbeenabledordisabledasappropriateforthePrivateProfile.
","MicrosoftWindowsVista","enabled/disabled","(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\DisableUnicastResponsesToMulticastBroadcast",,"Private-Profile-Allow-Unicast-Response","oval:com.
secure-elements.
oval:def:6526",,"CCE-117","PrivateProfile-ApplyLocalFirewallRules","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\AllowLocalPolicyMerge",,"Private-Profile-Apply-Local-Firewall-Rules","oval:com.
secure-elements.
oval:def:6527",,"CCE-199","PrivateProfile-ApplyLocalConnectionSecurityRules","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\AllowLocalIPsecPolicyMerge",,"Private-Profile-Apply-Local-Connection-Security-Rules","oval:com.
secure-elements.
oval:def:6528",,"CCE-295","PublicProfile-FirewallState","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfile(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\EnableFirewall",,"Public-Profile-Firewall-State","oval:com.
secure-elements.
oval:def:6529",,"CCE-338","PublicProfile-InboundConnections","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfile(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\DefaultInboundAction",,"Public-Profile-Inbound-Connections","oval:com.
secure-elements.
oval:def:6530",,"CCE-342","PublicProfile-OutboundConnections","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\DefaultOutboundAction",,"Public-Profile-Outbound-Connections","oval:com.
secure-elements.
oval:def:6531",,"CCE-390","UsernotificationswhenaprogramisblockedfromreceivinginboundconnectionsbyWindowsFirewallshouldbeenabledordisabledasappropriateforthePublicProfile.
","MicrosoftWindowsVista","yes/no/notconfigured","(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\DisableNotifications",,"Public-Profile-Display-Notification","oval:com.
secure-elements.
oval:def:6532",,"CCE-414","UnicastresponsetomulticastorbroadcastrequestsshouldbeenabledordisabledasappropriateforthePublicProfile.
","MicrosoftWindowsVista","enabled/disabled","(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\DisableUnicastResponsesToMulticastBroadcast",,"Public-Profile-Allow-Unicast-Response","oval:com.
secure-elements.
oval:def:6533",,"CCE-421","PublicProfile-ApplyLocalFirewallRules","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\AllowLocalPolicyMerge",,"Public-Profile-Apply-Local-Firewall-Rules","oval:com.
secure-elements.
oval:def:6534",,"CCE-437","PublicProfile-ApplyLocalConnectionSecurityRules","MicrosoftWindowsVista",,"(1)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfile\CustomizedSettings(2)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\AllowLocalIPsecPolicyMerge",,"Public-Profile-Apply-Local-Connection-Security-Rules","oval:com.
secure-elements.
oval:def:6535",,"CCE-503","Logon-Donotprocessthelegacyrunlist","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\Logon(2)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableLocalMachineRun",,"Do-Not-Process-Legacy-Run-List","oval:com.
secure-elements.
oval:def:6560",,"CCE-583","Logon-Donotprocesstherunoncelist","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\Logon(2)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableLocalMachineRunOnce",,"Do-Not-Process-Run-Once-List","oval:com.
secure-elements.
oval:def:6561",,"CCE-584","GroupPolicy-Registrypolicyprocessing","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\GroupPolicy(2)HKLM\Software\Policies\Microsoft\Windows\GroupPolicy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!
NoBackgroundPolicy,HKLM\Software\Policies\Microsoft\Windows\GroupPolicy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!
NoGPOListChanges",,"Registry-Policy-Processing","oval:com.
secure-elements.
oval:def:6562",,"CCE-691","TurnoffInternetdownloadforWebpublishingandonlineorderingwizards","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\InternetCommunicationSettings(2)HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!
NoWebServices",,"Turn-off-Internet-download-for-Web-publishing-and-online-ordering-wizards","oval:com.
secure-elements.
oval:def:6568",,"CCE-722","TurnofftheWindowsMessengerCustomerExperienceImprovementProgram","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\InternetCommunicationSettings(2)HKLM\Software\Policies\Microsoft\Messenger\Client!
CEIP",,"Turn-off-the-Windows-Messenger-Customer-Experience-Improvement-Program","oval:com.
secure-elements.
oval:def:6569",,"CCE-818","TurnoffSearchCompanioncontentfileupdates","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\InternetCommunicationSettings(2)HKLM\Software\Policies\Microsoft\SearchCompanion!
DisableContentFileUpdates",,"Turn-off-Search-Companion-content-file-updates","oval:com.
secure-elements.
oval:def:6570",,"CCE-852","TurnoffprintingoverHTTP","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\InternetCommunicationSettings(2)HKLM\Software\Policies\Microsoft\WindowsNT\Printers!
DisableHTTPPrinting",,"Turn-off-printing-over-HTTP","oval:com.
secure-elements.
oval:def:6571",,"CCE-887","TurnoffdownloadingofprintdriversoverHTTP","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\InternetCommunicationSettings(2)HKLM\Software\Policies\Microsoft\WindowsNT\Printers!
DisableWebPnPDownload",,"Turn-off-downloading-of-print-drivers-over-HTTP","oval:com.
secure-elements.
oval:def:6572",,"CCE-927","TurnoffWindowsUpdatedevicedriversearching","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\InternetCommunicationSettings(2)HKLM\Software\Policies\Microsoft\Windows\DriverSearching!
DontSearchWindowsUpdate",,"Turn-off-Windows-Update-device-driver-searching","oval:com.
secure-elements.
oval:def:6573",,"CCE-935","Enumerateadministratoraccountsonelevation","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\CredentialUserInterface(2)HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI\EnumerateAdministrators",,"Enumerate-administrator-accounts-on-elevation","oval:com.
secure-elements.
oval:def:6575",,"CCE-255","Requiretrustedpathforcredentialentry","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\System\CredentialUserInterface(2)HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI\EnableSecureCredentialPrompting",,"Require-trusted-path-for-credential-entry","oval:com.
secure-elements.
oval:def:6576",,"CCE-466","Denyalladd-onsunlessspecificallyallowedintheAdd-onList","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\WindowsComponents\InternetExplorer\SecurityFeatures\Add-onManagement(2)HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!
RestrictToList",,"Deny-all-add-ons-unless-specifically-allowed-in-the-Add-on-List","oval:com.
secure-elements.
oval:def:6594",,"CCE-11","Add-onList","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\WindowsComponents\InternetExplorer\SecurityFeatures\Add-onManagement(2)HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!
ListBox_Support_CLSID",,,,,"CCE-976","The""Donotallowpasswordstobesaved""settingshouldbeconfiguredcorrectlyforTerminalServices.
","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\WindowsComponents\TerminalServices\RemoteDesktopConnection(2)HKLM\SOFTWARE\Policies\Microsoft\WindowsNT\DisablePasswordSaving",,"Do-not-allow-passwords-to-be-saved","oval:com.
secure-elements.
oval:def:6596",,"CCE-648","The""Donotallowdriveredirection""settingshouldbeconfiguredcorrectlyforTerminalServices.
","MicrosoftWindowsVista",,"(1)ComputerConfiguration\AdministrativeTemplates\WindowsComponents\TerminalServices\TerminalServer\DeviceandResourceRedirection(2)HKLM\SOFTWARE\Policies\Microsoft\WindowsNT\TerminalServices!
fDisableCdm",,"Do-not-allow-drive-redirection","oval:com.
secure-elements.
oval:def:6598",,"CCE-5","The""SecurityZones:UseOnlyMachineSettings""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Use_HKLM_onlyLocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_HKLM_only",,"Security-Zones-Use-only-machine-settings","oval:com.
secure-elements.
oval:def:6584",,"CCE-119","InternetExplorerProcesses(RestrictActiveXInstall)","MicrosoftWindowsVista","(1)enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!
explorer.
exe,HKLM\Software\Policies\LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/RestrictActiveXInstall,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\iexplore.
exe",,"Internet-Explorer-Processes-Restrict-ActiveX-Install","oval:com.
secure-elements.
oval:def:6592",,"CCE-146","The""SecurityZones:DoNotAllowUserstoAdd/DeleteSites""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_Zones_Map_EditLocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_zones_map_edit",,"Security-Zones-Do-not-allow-users-to-add-delete-sites","oval:com.
secure-elements.
oval:def:6582",,"CCE-212","The""DisablePeriodicCheckForInternetExplorerSoftwareUpdates""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\InternetExplorer\InfoDelivery\Restrictions\NoUpdateCheckLocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Infodelivery\Restrictions\NoUpdateCheck",,"Disable-Periodic-Check-for-Internet-Explorer-software-updates","oval:com.
secure-elements.
oval:def:6578",,"CCE-270","DEPRECATEDinfavorofCCE-684.
","MicrosoftWindowsVista",,,,,"CCE-347","InternetExplorerProcesses(ZoneElevationProtection)","MicrosoftWindowsVista","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!
explorer.
exe,HKLM\Software\Policies\Microsoft\Internet,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/ProtectionFromZoneElevation,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\iexplore.
exe",,"Internet-Explorer-Processes-Zone-Elevation-Protection","oval:com.
secure-elements.
oval:def:6591",,"CCE-382","The""InternetExplorerProcesses(ConsistentMIMEHandling)""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING!
explorer.
exe,HKLM\Software\Policies\Microsoft\InternetE,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/BinaryBehaviorSecurityRestriction,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING\iexplore.
exe",,"Internet-Explorer-Processes-Consistent-MIME-Handling","oval:com.
secure-elements.
oval:def:6588",,"CCE-449","The""AllowSoftwaretoRunorInstallEveniftheSignatureisInvalid""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Download!
RunInvalidSignatures,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Download\RunInvalidSignatures",,"Allow-software-to-run-or-install-even-if-the-signature-is-invalid","oval:com.
secure-elements.
oval:def:6586",,"CCE-498","DEPRECATEDinfavorofCCE-212.
",,,,,,,,"CCE-591","The""InternetExplorerProcesses(MKProtocol)""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!
explorer.
exe,HKLM\Software\Policies\Microsoft,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/MKProtocolSecurityRestriction,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\iexplore.
exe",,"Internet-Explorer-Processes-MK-Protocol","oval:com.
secure-elements.
oval:def:6587",,"CCE-622","The""DisableSoftwareUpdateShellNotificationsonProgramLaunch""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoMSAppLogo5ChannelNotify,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/RestrictFileDownload,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\iexplore.
exe",,"Disable-software-update-shell-notifications-on-program-launch","oval:com.
secure-elements.
oval:def:6579",,"CCE-668","The""InternetExplorerProcesses(RestrictFileDownload)""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!
explorer.
exe,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/RestrictFileDownload,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\iexplore.
exe",,"Internet-Explorer-Processes-Restrict-File-Download","oval:com.
secure-elements.
oval:def:6593",,"CCE-684","The""DisableAutomaticInstallofInternetExplorerComponents""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\InternetExplorer\InfoDelivery\Restrictions\NoJITSetup,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Infodelivery\Restrictions\NoJITSetup",,"Disable-Automatic-Install-of-Internet-Explorer-components","oval:com.
secure-elements.
oval:def:6577",,"CCE-693","The""MakeProxySettingsPer-Machine(RatherThenPer-User)""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)numberofproxysettings","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\ProxySettingsPerUser,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\ProxySettingsPerUser",,"Make-proxy-settings-per-machine","oval:com.
secure-elements.
oval:def:6581",,"CCE-708","The""DoNotAllowUserstoenableorDisableAdd-Ons""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Restrictions\NoExtensionManagement",,"Do-not-allow-users-to-enable-or-disable-add-ons","oval:com.
secure-elements.
oval:def:6580",,"CCE-753","The""TurnOffCrashDetection""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Restrictions!
NoCrashDetection,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Restrictions\NoCrashDetection",,"Turn-off-Crash-Detection","oval:com.
secure-elements.
oval:def:6585",,"CCE-827","The""InternetExplorerProcesses(ScriptedWindowSecurityRestrictions)""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!
explorer.
exe,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/ScriptedWindowSecurityRestrictions,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\iexplore.
exe",,"Internet-Explorer-Processes-Scripted-Window-Security-Restrictions","oval:com.
secure-elements.
oval:def:6590",,"CCE-833","The""SecurityZones:DoNotAllowUserstoChangePolicies""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_options_edit,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_options_edit",,"Security-Zones-Do-not-allow-users-to-change-policies","oval:com.
secure-elements.
oval:def:6583",,"CCE-985","The""InternetExplorerProcesses(MIMESniffing)""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!
explorer.
exe,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/MimeSniffingSafetyFeature,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\iexplore.
exe",,"Internet-Explorer-Processes-MIME-Sniffing","oval:com.
secure-elements.
oval:def:6589""NEWIN3.
5",,"CCE-113","The""RemoveCDBurningfeatures""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:UserConfiguration\AdministrativeTemplates\WindowsComponents\WindowsExplorer\RemoveCDBurningfeatures",,"Remove-CD-Burning-features","oval:com.
secure-elements.
oval:def:6716",,"CCE-1022","The""RemoveSecuritytab""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:UserConfiguration\AdministrativeTemplates\WindowsComponents\WindowsExplorer\RemoveSecuritytab",,"Remove-Security-tab","oval:com.
secure-elements.
oval:def:6717",,"CCE-365","The""InternetExplorerMaintenancePolicyProcessing-Allowprocessingacrossaslownetworkconnection""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\System\GroupPolicy\InternetExplorerMaintenancePolicyProcessing",,"Internet-Explorer-Maintenance-Policy-Processing-Enabled","oval:com.
secure-elements.
oval:def:6671",,"CCE-121","The""InternetExplorerMaintenancePolicyProcessing-Donotapplyduringperiodicbackgroundprocessing""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\System\GroupPolicy\InternetExplorerMaintenancePolicyProcessing",,"Internet-Explorer-Maintenance-Policy-Processing-Enabled","oval:com.
secure-elements.
oval:def:6671",,"CCE-1103","The""InternetExplorerMaintenancePolicyProcessing-ProcesseveniftheGroupPolicyobjectshavenotchanged""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\System\GroupPolicy\InternetExplorerMaintenancePolicyProcessing",,"Internet-Explorer-Maintenance-Policy-Processing-Enabled","oval:com.
secure-elements.
oval:def:6671",,"CCE-947","The""TurnonMapperI/O(LLTDIO)driver""settingshouldbeconfiguredcorrectlyforthedomainprofile.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\Link-LayerTopologyDiscovery\TurnonMapperI/O(LLTDIO)driver",,"Turn-on-Mapper-IO-LLTDIO-driver","oval:com.
secure-elements.
oval:def:6660",,"CCE-329","The""TurnonMapperI/O(LLTDIO)driver""settingshouldbeconfiguredcorrectlyforthepublicprofile.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\Link-LayerTopologyDiscovery\TurnonMapperI/O(LLTDIO)driver",,"Turn-on-Mapper-IO-LLTDIO-driver","oval:com.
secure-elements.
oval:def:6660",,"CCE-377","The""TurnonMapperI/O(LLTDIO)driver""settingshouldbeconfiguredcorrectlyfortheprivateprofile.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\Link-LayerTopologyDiscovery\TurnonMapperI/O(LLTDIO)driver",,"Turn-on-Mapper-IO-LLTDIO-driver","oval:com.
secure-elements.
oval:def:6660",,"CCE-1134","The""TurnonResponder(RSPNDR)driver""settingshouldbeconfiguredcorrectlyforthedomainprofile.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\Link-LayerTopologyDiscovery\TurnonResponder(RSPNDR)driver",,"Turn-on-Responder-RSPNDR-driver","oval:com.
secure-elements.
oval:def:6661",,"CCE-1092","The""TurnonResponder(RSPNDR)driver""settingshouldbeconfiguredcorrectlyforthepublicprofile.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\Link-LayerTopologyDiscovery\TurnonResponder(RSPNDR)driver",,"Turn-on-Responder-RSPNDR-driver","oval:com.
secure-elements.
oval:def:6661",,"CCE-1035","The""TurnonResponder(RSPNDR)driver""settingshouldbeconfiguredcorrectlyfortheprivateprofile.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\Link-LayerTopologyDiscovery\TurnonResponder(RSPNDR)driver",,"Turn-on-Responder-RSPNDR-driver","oval:com.
secure-elements.
oval:def:6661",,"CCE-734","The""ConfigurationofwirelesssettingsusingWindowsConnectNow""settingshouldbeconfiguredcorrectlyforWirelessConnectNowoverEthernet(UPnP).
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\WindowsConnectNow\ConfigurationofwirelesssettingsusingWindowsConnectNow",,"Configuration-of-Wireless-Settings-Using-Windows-Connect-Now","oval:com.
secure-elements.
oval:def:6666",,"CCE-469","The""ConfigurationofwirelesssettingsusingWindowsConnectNow""settingshouldbeconfiguredcorrectlyforUSBflashdrives.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\WindowsConnectNow\ConfigurationofwirelesssettingsusingWindowsConnectNow",,"Configuration-of-Wireless-Settings-Using-Windows-Connect-Now","oval:com.
secure-elements.
oval:def:6666",,"CCE-302","The""ConfigurationofwirelesssettingsusingWindowsConnectNow""settingshouldbeconfiguredcorrectlyfortheWindowsPortableDeviceAPI.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\WindowsConnectNow\ConfigurationofwirelesssettingsusingWindowsConnectNow",,"Configuration-of-Wireless-Settings-Using-Windows-Connect-Now","oval:com.
secure-elements.
oval:def:6666",,"CCE-836","The'ApprovedInstallationSitesforActiveXControls'securitymechanismshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\ActiveXInstallerService\ApprovedInstallationSitesforActiveXControls",,"Approved-Installation-Sites-for-ActiveX-Controls","oval:com.
secure-elements.
oval:def:6695",,"CCE-959","The""DisableLogging""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\WindowsErrorReporting\DisableLogging",,"Disable-Logging","oval:com.
secure-elements.
oval:def:6114",,"CCE-803","The""DisableWindowsErrorReporting""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\WindowsErrorReporting\DisableWindowsErrorReporting",,"Disable-Windows-Error-Reporting","oval:com.
secure-elements.
oval:def:6115",,"CCE-798","The""Donotsendadditionaldata""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\WindowsErrorReporting\Donotsendadditionaldata",,"Do-Not-Send-Additional-Data","oval:com.
secure-elements.
oval:def:6117",,"CCE-215","The""ConfigureCorporateWindowsErrorReporting""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\WindowsErrorReporting\AdvancedErrorReportingSettings\ConfigureCorporateWindowsErrorReporting",,"Configure-Corporate-Windows-Error-Reporting","oval:com.
secure-elements.
oval:def:6706",,"CCE-144","The""RemoveDefaultProgramslinkfromtheStartmenu""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:UserConfiguration\AdministrativeTemplates\StartMenuandTaskbar\RemoveDefaultProgramslinkfromtheStartmenu;RegistryKey:HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMConfigurePrograms",,"Remove-Default-Programs-Link-from-the-Start-Menu","oval:com.
secure-elements.
oval:def:6709",,"CCE-174","The""TurnoffHelpExperienceImprovementProgram""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:UserConfiguration\AdministrativeTemplates\System\InternetCommunicationManagement\InternetCommunicationsettings\TurnoffHelpExperienceImprovementProgram",,"Turn-off-Help-Experience-Improvement-Program","oval:com.
secure-elements.
oval:def:6710",,"CCE-1109","The""TurnoffHelpRatings""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:UserConfiguration\AdministrativeTemplates\System\InternetCommunicationManagement\InternetCommunicationsettings\TurnoffHelpRatings",,"Turn-off-Help-Ratings","oval:com.
secure-elements.
oval:def:6711",,"CCE-1122","The""TurnoffWindowsOnline""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:UserConfiguration\AdministrativeTemplates\System\InternetCommunicationManagement\InternetCommunicationsettings\TurnoffWindowsOnline",,"Turn-off-Windows-Online","oval:com.
secure-elements.
oval:def:6713",,"CCE-1144","The""Preventusersfromsharingfileswithintheirprofile""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:UserConfiguration\AdministrativeTemplates\WindowsComponents\NetworkSharing\Preventusersfromsharingfileswithintheirprofiles",,"Prevent-users-from-sharing-files-within-their-profile","oval:com.
secure-elements.
oval:def:6715",,"CCE-389","The""AccessCredentialManagerasatrustedcaller""userrightshouldbeassignedtotheappropriateaccounts.
","MicrosoftWindowsVista","listofaccounts","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\UserRightsAssignment\AccessCredentialManagerasatrustedcaller",,,,,"CCE-470","The""Changethetimezone""userrightshouldbeassignedtotheappropriateaccounts.
","MicrosoftWindowsVista","listofaccounts","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\UserRightsAssignment\Changethetimezone",,,,,"CCE-1176","The""CreateSymbolicLinks""userrightshouldbeassignedtotheappropriateaccounts.
","MicrosoftWindowsVista","listofaccounts","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\UserRightsAssignment\CreateSymbolicLinks",,,,,"CCE-1023","The""Modifyanobjectlabel""userrightshouldbeassignedtotheappropriateaccounts.
","MicrosoftWindowsVista","listofaccounts","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\UserRightsAssignment\Modifyanobjectlabel",,,,,"CCE-1185","The""Remotelyaccessibleregistrypathsandsubpaths""policyshouldbesetcorrectly.
","MicrosoftWindowsVista","setofpaths","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\SecurityOptions\Networkaccess:Remotelyaccessibleregistrypathsandsubpaths",,,,,"CCE-1078","The""UserAccountControl:AdminApprovalModefortheBuilt-inAdministratoraccount""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\SecurityOptions\UserAccountControl:AdminApprovalModefortheBuilt-inAdministratoraccount",,,,,"CCE-1128","The""UserAccountControl:Detectapplicationinstallationsandpromptforelevation""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\SecurityOptions\UserAccountControl:Detectapplicationinstallationsandpromptforelevation",,,,,"CCE-1104","The""UserAccountControl:Onlyelevateexecutablesthataresignedandvalidated""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\SecurityOptions\UserAccountControl:Onlyelevateexecutablesthataresignedandvalidated",,,,,"CCE-986","The""UserAccountControl:OnlyelevateUIAccessapplicationsthatareinstalledinsecurelocations""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\SecurityOptions\UserAccountControl:OnlyelevateUIAccessapplicationsthatareinstalledinsecurelocations",,,,,"CCE-1050","The""UserAccountControl:RunalladministratorsinAdminApprovalMode""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\SecurityOptions\UserAccountControl:RunalladministratorsinAdminApprovalMode",,,,,"CCE-230","The""UserAccountControl:Switchtothesecuredesktopwhenpromptingforelevation""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\SecurityOptions\UserAccountControl:Switchtothesecuredesktopwhenpromptingforelevation",,,,,"CCE-673","The""UserAccountControl:Virtualizefileandregistrywritefailurestoper-userlocations""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\LocalPolicies\SecurityOptions\UserAccountControl:Virtualizefileandregistrywritefailurestoper-userlocations",,,,,"CCE-1225","Therequiredpermissionsforthefile%SystemRoot%\System32\mshta.
exeshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions(3)applicability","(1)definedbytheobject'sDACL",,,,,"CCE-957","TherequiredpermissionsfortheWLANAutoConfigserviceshouldbeassigned.
","MicrosoftWindowsVista","(1)setofaccounts(2)listofpermissions(3)applicability","(1)definedbytheobject'sDACL(2)definedthroughgrouppolicy",,,,,"CCE-241","The""ProhibituseofInternetConnectionFirewallonyourDNSdomainnetwork""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\Network\NetworkConnections\ProhibituseofInternetConnectionFirewallonyourDNSdomainnetwork",,,,,"CCE-259","The""DisplayErrorNotification""settingshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSettings:ComputerConfiguration\AdministrativeTemplates\System\ErrorReporting\DisplayErrorNotification,ComputerConfiguration\AdministrativeTemplates\WindowsComponents\WindowsErrorReporting\DisplayErrorNotification",,,,,"CCE-262","Thesetuplogmaximumsizeshouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","(1)Sizelimit(KB)","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\EventLogService\Setup\MaximumLogSize(KB)",,,,,"CCE-1005","Computer-wide,ratherthanper-user,assignmentofsitestozonesforInternetExplorershouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled,disabled,ornotconfigured","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\InternetExplorer\InternetControlPanel\SecurityPage\SitetoZoneAssignmentList",,,,,"CCE-281","The""TurnonProtectedMode""settingshouldbeconfiguredcorrectlyfortheInternetZone.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\InternetExplorer\InternetControlPanel\SecurityPage\InternetZone\TurnonProtectedMode",,,,,"CCE-308","The""DownloadsignedActiveXcontrols""settingshouldbeconfiguredcorrectlyfortheLocked-DownInternetZone.
","MicrosoftWindowsVista","enabled/disabled/prompt","GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/Locked-DownInternetZone\DownloadsignedActiveXcontrols",,,,,"CCE-1147","The""Allowstatusbarupdatesviascript""settingshouldbeconfiguredcorrectlyfortheLocked-DownTrustedSitesZone.
","MicrosoftWindowsVista","enabled/disabled","GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/Locked-DownTrustedSitesZone\Allowstatusbarupdatesviascript",,,,,"CCE-1211","The""TurnonProtectedMode""settingshouldbeconfiguredcorrectlyfortheRestrictedSitesZone.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\InternetExplorer\InternetControlPanel\SecurityPage\RestrictedSitesZone\TurnonProtectedMode",,,,,"CCE-312","Computer-wide,ratherthanper-user,useofMicrosoftSpynetReportingforWindowsDefendershouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled,disabled,ornotconfigured","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\WindowsDefender\ConfigureMicrosoftSpynetReporting",,,,,"CCE-1140","The""DoNotShowFirstUseDialogBoxes""settingforWindowsMediaPlayershouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\WindowsMediaPlayer\DoNotShowFirstUseDialogBoxes",,,,,"CCE-313","The""PreventDesktopShortcutCreation""settingforWindowsMediaPlayershouldbeconfiguredcorrectly.
","MicrosoftWindowsVista","enabled/disabled","GPOSetting:ComputerConfiguration\AdministrativeTemplates\WindowsComponents\WindowsMediaPlayer\PreventDesktopShortcutCreation",,,,,"CCE-1047","UsernotificationswhenaprogramisblockedfromreceivinginboundconnectionsbyWindowsFirewallshouldbeenabledordisabledasappropriatefortheDomainProfile.
","MicrosoftWindowsVista","yes/no/notconfigured","GPOSetting:ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\DomainProfileTab\Settings\Firewallsettings\Displayanotification",,,,,"CCE-325","The""LogDroppedPackets""optionfortheWindowsFirewallshouldbeconfiguredcorrectlyforthePrivateProfile.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PrivateProfile\Logging\LogDroppedPackets(2)ComputerConfiguration\AdministrativeTemplates\Network\NetworkConnections\WindowsFirewall\PrivateProfile\WindowsFirewall:AllowLogging-LogDroppedPackets",,,,,"CCE-327","The""LogSuccessfulConnections""optionfortheWindowsFirewallshouldbeconfiguredcorrectlyforthePrivateProfile.
","MicrosoftWindowsVista","enable/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PrivateProfile\Logging\LogSuccessfulConnections(2)ComputerConfiguration\AdministrativeTemplates\Network\NetworkConnections\WindowsFirewall\PrivateProfile\WindowsFirewall:AllowLogging-Logsuccessfulconnections(3)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfileTab\Logging\Loggedsuccessfulconnections",,,,,"CCE-999","ThelogfilepathandnamefortheWindowsFirewallshouldbeconfiguredcorrectlyforthePrivateProfile.
","MicrosoftWindowsVista","(1)Filepath","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PrivateProfile\Logging\LogFilePath(2)ComputerConfiguration\AdministrativeTemplates\Network\NetworkConnections\WindowsFirewall\PrivateProfile\WindowsFirewall:AllowLogging-Logfilepathandname(3)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfileTab\Logging\Name",,,,,"CCE-1091","ThelogfilesizelimitfortheWindowsFirewallshouldbeconfiguredcorrectlyforthePrivateProfile.
","MicrosoftWindowsVista","(1)Sizelimit(KB)","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PrivateProfile\Logging\LogFileSize(2)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PrivateProfileTab\Logging\Sizelimit(KB)",,,,,"CCE-1165","The""LogDroppedPackets""optionfortheWindowsFirewallshouldbeconfiguredcorrectlyforthePublicProfile.
","MicrosoftWindowsVista","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging\LogDroppedPackets(2)ComputerConfiguration\AdministrativeTemplates\Network\NetworkConnections\WindowsFirewall\PublicProfile\WindowsFirewall:AllowLogging-LogDroppedPackets",,,,,"CCE-534","The""LogSuccessfulConnections""optionfortheWindowsFirewallshouldbeconfiguredcorrectlyforthePublicProfile.
","MicrosoftWindowsVista","enable/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging\LogSuccessfulConnections(2)ComputerConfiguration\AdministrativeTemplates\Network\NetworkConnections\WindowsFirewall\PublicProfile\WindowsFirewall:AllowLogging-Logsuccessfulconnections(3)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfileTab\Logging\Loggedsuccessfulconnections",,,,,"CCE-1263","ThelogfilepathandnamefortheWindowsFirewallshouldbeconfiguredcorrectlyforthePublicProfile.
","MicrosoftWindowsVista","(1)Filepath","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging\LogFilePath(2)ComputerConfiguration\AdministrativeTemplates\Network\NetworkConnections\WindowsFirewall\PublicProfile\WindowsFirewall:AllowLogging-Logfilepathandname(3)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfileTab\Logging\Name",,,,,"CCE-1313","ThelogfilesizelimitfortheWindowsFirewallshouldbeconfiguredcorrectlyforthePublicProfile.
","MicrosoftWindowsVista","(1)Sizelimit(KB)","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging\LogFileSize(2)ComputerConfiguration\WindowsSettings\SecuritySettings\WindowsFirewallwithAdvancedSecurity\WindowsFirewallwithAdvancedSecurity\WindowsFirewallProperties\PublicProfileTab\Logging\Sizelimit(KB)",,,,,"CCE-1227","TheISATAPtunnelingprotocolforIPv6shouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tcpip6\Parameters\DisableComponents",,,,,"CCE-1036","The6to4tunnelingprotocolforIPv6shouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tcpip6\Parameters\DisableComponents",,,,,"CCE-1148","TheTeredotunnelingprotocolforIPv6shouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tcpip6\Parameters\DisableComponents",,,,,"CCE-1270","Auditingof""System:SecuritySystemExtension""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1102","Auditingof""System:SecuritySystemExtension""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-856","Auditingof""System:SystemIntegrity""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-336","Auditingof""System:SystemIntegrity""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1177","Auditingof""System:IpsecDriver""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1314","Auditingof""System:IpsecDriver""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1332","Auditingof""System:OtherSystemEvents""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-337","Auditingof""System:OtherSystemEvents""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1121","Auditingof""System:SecurityStateChange""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1139","Auditingof""System:SecurityStateChange""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1284","Auditingof""Logon/Logoff:Logon""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1097","Auditingof""Logon/Logoff:Logon""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-493","Auditingof""Logon/Logoff:Logoff""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-996","Auditingof""Logon/Logoff:Logoff""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1264","Auditingof""Logon/Logoff:AccountLockout""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1282","Auditingof""Logon/Logoff:AccountLockout""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1207","Auditingof""Logon/Logoff:IPsecMainMode""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-351","Auditingof""Logon/Logoff:IPsecMainMode""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1257","Auditingof""Logon/Logoff:IPsecQuickMode""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1274","Auditingof""Logon/Logoff:IPsecQuickMode""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1028","Auditingof""Logon/Logoff:IPsecExtendedMode""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-362","Auditingof""Logon/Logoff:IPsecExtendedMode""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-371","Auditingof""Logon/Logoff:SpecialLogon""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1038","Auditingof""Logon/Logoff:SpecialLogon""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-378","Auditingof""Logon/Logoff:OtherLogon/LogoffEvents""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1208","Auditingof""Logon/Logoff:OtherLogon/LogoffEvents""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1085","Auditingof""ObjectAccess:FileSystem""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1340","Auditingof""ObjectAccess:FileSystem""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1138","Auditingof""ObjectAccess:Registry""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1283","Auditingof""ObjectAccess:Registry""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1288","Auditingof""ObjectAccess:KernelObject""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1305","Auditingof""ObjectAccess:KernelObject""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-446","Auditingof""ObjectAccess:SAM""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-451","Auditingof""ObjectAccess:SAM""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1345","Auditingof""ObjectAccess:CertificationServices""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1261","Auditingof""ObjectAccess:CertificationServices""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1322","Auditingof""ObjectAccess:ApplicationGenerated""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-379","Auditingof""ObjectAccess:ApplicationGenerated""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1363","Auditingof""ObjectAccess:HandleManipulation""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1244","Auditingof""ObjectAccess:HandleManipulation""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1372","Auditingof""ObjectAccess:FileShare""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1033","Auditingof""ObjectAccess:FileShare""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-385","Auditingof""ObjectAccess:FilteringPlatformPacketDrop""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-589","Auditingof""ObjectAccess:FilteringPlatformPacketDrop""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-717","Auditingof""ObjectAccess:FilteringPlatformConnection""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-744","Auditingof""ObjectAccess:FilteringPlatformConnection""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-642","Auditingof""ObjectAccess:OtherObjectAccessEvents""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1026","Auditingof""ObjectAccess:OtherObjectAccessEvents""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-488","Auditingof""PrivilegeUse:SensitivePrivilegeUse""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1258","Auditingof""PrivilegeUse:SensitivePrivilegeUse""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-391","Auditingof""PrivilegeUse:NonSensitivePrivilegeUse""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-404","Auditingof""PrivilegeUse:NonSensitivePrivilegeUse""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1203","Auditingof""PrivilegeUse:OtherPrivilegeUseEvents""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-406","Auditingof""PrivilegeUse:PrivilegeUse:OtherPrivilegeUseEvents""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-416","Auditingof""DetailedTracking:ProcessTermination""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1250","Auditingof""DetailedTracking:ProcessTermination""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1413","Auditingof""DetailedTracking:DPAPIActivity""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-699","Auditingof""DetailedTracking:DPAPIActivity""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1219","Auditingof""DetailedTracking:RPCEvents""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1365","Auditingof""DetailedTracking:RPCEvents""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-913","Auditingof""DetailedTracking:ProcessCreation""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1079","Auditingof""DetailedTracking:ProcessCreation""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1110","Auditingof""PolicyChange:AuditPolicyChange""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-991","Auditingof""PolicyChange:AuditPolicyChange""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-388","Auditingof""PolicyChange:AuthenticationPolicyChange""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-180","Auditingof""PolicyChange:AuthenticationPolicyChange""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-187","Auditingof""PolicyChange:AuthorizationPolicyChange""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-448","Auditingof""PolicyChange:AuthorizationPolicyChange""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-203","Auditingof""PolicyChange:MPSSVCRule-LevelPolicyChange""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-879","Auditingof""PolicyChange:MPSSVCRule-LevelPolicyChange""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1042","Auditingof""PolicyChange:FilteringPlatformPolicyChange""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1112","Auditingof""PolicyChange:FilteringPlatformPolicyChange""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-205","Auditingof""PolicyChange:OtherPolicyChangeEvents""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-787","Auditingof""PolicyChange:OtherPolicyChangeEvents""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1043","Auditingof""AccountManagement:UserAccountManagement""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-924","Auditingof""AccountManagement:UserAccountManagement""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1070","Auditingof""AccountManagement:ComputerAccountManagement""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-840","Auditingof""AccountManagement:ComputerAccountManagement""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1118","Auditingof""AccountManagement:SecurityGroupManagement""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-369","Auditingof""AccountManagement:SecurityGroupManagement""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-515","Auditingof""AccountManagement:DistributionGroupManagement""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1048","Auditingof""AccountManagement:DistributionGroupManagement""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-801","Auditingof""AccountManagement:ApplicationGroupManagement""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1016","Auditingof""AccountManagement:ApplicationGroupManagement""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-206","Auditingof""AccountManagement:OtherAccountManagementEvents""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1202","Auditingof""AccountManagement:OtherAccountManagementEvents""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-317","Auditingof""DSAccess:DirectoryServiceChanges""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-982","Auditingof""DSAccess:DirectoryServiceChanges""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-881","Auditingof""DSAccess:DirectoryServiceReplication""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-247","Auditingof""DSAccess:DirectoryServiceReplication""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-207","Auditingof""DSAccess:DetailedDirectoryServiceReplication""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1186","Auditingof""DSAccess:DetailedDirectoryServiceReplication""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-1199","Auditingof""DSAccess:DirectoryServiceAccess""eventsonsuccessshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,"CCE-459","Auditingof""DSAccess:DirectoryServiceAccess""eventsonfailureshouldbeenabledordisabledasappropriate.
","MicrosoftWindowsVista","enabled/disabled","(1)viaauditpol",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"Outline","CCEId","OldCCEID","CCEDefinition","CCEParameters","CCETechnicalMechanisms",,"PedestalSecureExpressionsforNISTWin2K","ConfiguresoftECMforNISTW2KDomainController","BindViewComplianceCenterforCISW2KProLevel2","CISW2KServerLevel2Benchmarkv2.
2.
1","DISAGoldDiskCheckNameforW2K(golddisk.
win2k.
ecve.
txt)","DISAGoldDiskforWXP","NSASecurityGuideforWXP(NSA-XP-C44-026-02.
pdf)","BindViewComplianceCenterforCISWXPProv1.
3","PedestalSecureExpressionsforNISTWinXP","CISWXPProBenchmarkv1.
3","CISWXPProBenchmarkv2.
01(CIS_WindowsXP_Benchmark_v2.
01.
pdf)","CISWXPProBenchmarkv2.
01OVAL(cis-winxp-oval.
xml)","NIST800-68WindowsXPPDF(SP800-68-20051102.
pdf)","NIST800-68WindowsXPXCCDF(NIST-800-68-53-WinXPPro_XCCDF_10102006.
xml)","NIST800-68WindowsXPOVAL(NIST-800-68-53-WinXPPro_OVAL_10102006.
xml)","MicrosoftSecurityGuideforWindowsServer2003","CenterforInternetSecurityWindowsServer2003","DISAStigforWindows2003","NISTSCAPWindowsVistaXCCDF(SCAP-WinVista-XCCDF.
xmlrev2007-02-06)","NISTSCAPWindowsVistaOVAL(SCAP-WinVista-OVAL.
xmlrev2007-02-06)","NISTSCAPMicrosoftOffice2007OVAL(SCAP-Office2007-OVAL-Beta-v1.
xml)","NISTSCAPMicrosoftOffice2007XCCDF(SCAP-Office2007-XCCDF-Beta-v1.
xml)","NISTSCAPMicrosoftInternetExporer7OVAL(SCAP-IE7-OVAL-Beta-v3.
xml)","NISTSCAPMicrosoftInternetExporer7XCCDF(SCAP-IE7-XCCDF-Beta-v3.
xml""InternetExplorer","CCE-5","CCE-Winv2.
0-474","The""SecurityZones:UseOnlyMachineSettings""settingshouldbesetcorrectly.
","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Use_HKLM_onlyLocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_HKLM_only",,,"5.
4.
7.
2.
1IE-SecurityZones:UseOnlyMachineSettings",,,"SecurityZones:UseOnlyMachineSettings"8.
3.
1.
1SecurityZones:UseOnlyMachineSettings:(5.
028:CATII)Enabled","Security-Zones-Use-only-machine-settings","oval:com.
secure-elements.
oval:def:6584",,,"oval:org.
mitre.
oval:def:1277","UseOnlyMachineSettings-LocalComputer","CCE-119",,"InternetExplorerProcesses(RestrictActiveXInstall)","(1)enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!
explorer.
exe,HKLM\Software\Policies\LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/RestrictActiveXInstall,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\iexplore.
exe"Internet-Explorer-Processes-Restrict-ActiveX-Install","oval:com.
secure-elements.
oval:def:6592",,,"oval:org.
mitre.
oval:def:658","IEProcesses-RestrictActiveXInstall-LocalComputer","CCE-146","CCE-Winv2.
0-475","The""SecurityZones:DoNotAllowUserstoAdd/DeleteSites""settingshouldbesetcorrectly.
","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_Zones_Map_EditLocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_zones_map_edit",,,"5.
4.
7.
2.
3IE-SecurityZones:DoNotAllowUserstoAdd/DeleteSites",,,"SecurityZones:DoNotAllowUserstoAdd/DeleteSites"8.
3.
1.
3SecurityZones:DoNotAllowUserstoAdd/DeleteSites:(5.
030:CATII)Enabled","Security-Zones-Do-not-allow-users-to-add-delete-sites","oval:com.
secure-elements.
oval:def:6582",,,"oval:org.
mitre.
oval:def:1400","DoNotAllowUsersAddDeleteSites-LocalComputer","CCE-212","CCE-Winv2.
0-478","The""DisablePeriodicCheckForInternetExplorerSoftwareUpdates""settingshouldbesetcorrectly.
","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\InternetExplorer\InfoDelivery\Restrictions\NoUpdateCheckLocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Infodelivery\Restrictions\NoUpdateCheck",,,"5.
4.
7.
2.
6IE-DisablePeriodicCheckforInternetExplorerSoftwareUpdates",,,"DisablePeriodicCheckforInternetExplorerSoftwareUpdates"8.
3.
1.
6DisablePeridoicCheckforInternetExplorerSoftwareUpdates:(5.
033:CATII)Enabled","Disable-Periodic-Check-for-Internet-Explorer-software-updates","oval:com.
secure-elements.
oval:def:6578",,,"oval:org.
mitre.
oval:def:1357","DisablePeriodicCheckForIESoftwareUpdates-LocalComputer","CCE-270","CCE-Winv2.
0-480","The""DisableAutomaticInstallofInternetExplorerComponents""policyshouldbesetcorrectly.
","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\InternetExplorer\InfoDelivery\Restrictions\NoJITSetup"DisableAutomaticInstallofInternetExplorerComponents(CID:831)8.
3.
1.
5DisableAutomaticInstallofInternetExplorerComponents:(5.
032:CATII)Enabled","Disable-Automatic-Install-of-Internet-Explorer-components",,"CCE-347",,"InternetExplorerProcesses(ZoneElevationProtection)","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!
explorer.
exe,HKLM\Software\Policies\Microsoft\Internet,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/ProtectionFromZoneElevation,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\iexplore.
exe"Internet-Explorer-Processes-Zone-Elevation-Protection","oval:com.
secure-elements.
oval:def:6591",,,"oval:org.
mitre.
oval:def:620","CCE-382",,"The""InternetExplorerProcesses(ConsistentMIMEHandling)""settingshouldbesetcorrectly.
","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING!
explorer.
exe,HKLM\Software\Policies\Microsoft\InternetE,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/BinaryBehaviorSecurityRestriction,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_HANDLING\iexplore.
exe"Internet-Explorer-Processes-Consistent-MIME-Handling","oval:com.
secure-elements.
oval:def:6588",,,"oval:org.
mitre.
oval:def:884","IEProcesses-ConsistentMimeHandling-LocalComputer","CCE-449",,"The""AllowSoftwaretoRunorInstallEveniftheSignatureisInvalid""settingshouldbesetcorrectly.
","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Download!
RunInvalidSignatures,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Download\RunInvalidSignatures"Allow-software-to-run-or-install-even-if-the-signature-is-invalid","oval:com.
secure-elements.
oval:def:6586",,,"oval:org.
mitre.
oval:def:680,oval:org.
mitre.
oval:def:1392","AllowSoftwareRunInstallSignatureInvalid-LocalComputer,AllowSoftwareToRununOrInstallEvenIfSignatureInvalid-LocalUser","CCE-498","CCE-Winv2.
0-481","The""DisablePeriodicCheckforInternetExplorerSoftwareUpdates""policyshouldbesetcorrectly.
","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\InternetExplorer\InfoDelivery\Restrictions\NoUpdateCheck"DisablePeriodicCheckforInternetExplorerSoftwareUpdates(CID:834)8.
3.
1.
6DisablePeridoicCheckforInternetExplorerSoftwareUpdates:(5.
033:CATII)Enabled","Disable-Periodic-Check-for-Internet-Explorer-software-updates",,"CCE-591",,"The""InternetExplorerProcesses(MKProtocol)""settingshouldbesetcorrectly.
","(1)enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!
explorer.
exe,HKLM\Software\Policies\Microsoft,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/MKProtocolSecurityRestriction,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\iexplore.
exe"Internet-Explorer-Processes-MK-Protocol","oval:com.
secure-elements.
oval:def:6587",,,"oval:org.
mitre.
oval:def:617","IEProcesses-MKProtocolSecurityRestriction-LocalComputer","CCE-622","CCE-Winv2.
0-479","The""DisableSoftwareUpdateShellNotificationsonProgramLaunch""settingshouldbesetcorrectly.
","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoMSAppLogo5ChannelNotify,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/RestrictFileDownload,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\iexplore.
exe",,,"5.
4.
7.
2.
7IE-DisableSoftwareUpdateShellNotificationsonProgramLaunch",,,"DisableSoftwareUpdateShellNotificationsonProgramLaunch"8.
3.
1.
7DisableSoftwareUpdateShellNotificiationsonProgramLaunch:(5.
034:CATII)Disabled","Disable-software-update-shell-notifications-on-program-launch","oval:com.
secure-elements.
oval:def:6579",,,"oval:org.
mitre.
oval:def:1188","DisableSoftwareUpdateShellNotifications-LocalComputer","CCE-668",,"The""InternetExplorerProcesses(RestrictFileDownload)""settingshouldbesetcorrectly.
","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!
explorer.
exe,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/RestrictFileDownload,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\iexplore.
exe"Internet-Explorer-Processes-Restrict-File-Download","oval:com.
secure-elements.
oval:def:6593",,,"oval:org.
mitre.
oval:def:320","IEProcesses-RestrictFileDownload-LocalComputer","CCE-684","CCE-Winv2.
0-477","The""DisableAutomaticInstallofInternetExplorerComponents""settingshouldbesetcorrectly.
","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\InternetExplorer\InfoDelivery\Restrictions\NoJITSetup,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Infodelivery\Restrictions\NoJITSetup",,,"5.
4.
7.
2.
5IE-DisableAutomaticInstallofInternetExplorerComponents",,,"DisableAutomaticInstallofInternetExplorerComponents"8.
3.
1.
5DisableAutomaticInstallofInternetExplorerComponents:(5.
032:CATII)Enabled","Disable-Automatic-Install-of-Internet-Explorer-components","oval:com.
secure-elements.
oval:def:6577",,,"oval:org.
mitre.
oval:def:1198","DisableAutomaticInstallOfIEComponents-LocalComputer","CCE-693","CCE-Winv2.
0-476","The""MakeProxySettingsPer-Machine(RatherThenPer-User)""settingshouldbesetcorrectly.
","(1)numberofproxysettings","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\ProxySettingsPerUser,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\ProxySettingsPerUser",,,"5.
4.
7.
2.
4IE-MakeProxySettingsPerMachine",,,"MakeProxySettingsPerMachine"8.
3.
1.
4MakeProxySettingsPerMachine:(5.
031:CATII)Enabled","Make-proxy-settings-per-machine","oval:com.
secure-elements.
oval:def:6581",,,"oval:org.
mitre.
oval:def:1181","MakeProxySettingsPerMachine-LocalComputer","CCE-708",,"The""DoNotAllowUserstoenableorDisableAdd-Ons""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Restrictions\NoExtensionManagement"Do-not-allow-users-to-enable-or-disable-add-ons","oval:com.
secure-elements.
oval:def:6580",,,"oval:org.
mitre.
oval:def:1380,oval:org.
mitre.
oval:def:1358","DoNotAllowUsersEnableDisableAddOns-LocalComputer,DoNotAllowUsersEnableDisableAddOns-LocalUser","CCE-753",,"The""TurnOffCrashDetection""settingshouldbesetcorrectly.
","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Restrictions!
NoCrashDetection,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Restrictions\NoCrashDetection"Turn-off-Crash-Detection","oval:com.
secure-elements.
oval:def:6585",,,"oval:org.
mitre.
oval:def:487","TurnOffCrashDetection-LocalComputer","CCE-827",,"The""InternetExplorerProcesses(ScriptedWindowSecurityRestrictions)""settingshouldbesetcorrectly.
","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!
explorer.
exe,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/ScriptedWindowSecurityRestrictions,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\iexplore.
exe"Internet-Explorer-Processes-Scripted-Window-Security-Restrictions","oval:com.
secure-elements.
oval:def:6590",,,"oval:org.
mitre.
oval:def:465","IEProcesses-ScriptedWindowSecurityRestrictions-LocalComputer","CCE-833","CCE-Winv2.
0-473","The""SecurityZones:DoNotAllowUserstoChangePolicies""settingshouldbesetcorrectly.
","(1)enabled/disabled","(1)HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_options_edit,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Security_options_edit",,,"5.
4.
7.
2.
2IE-SecurityZones:DoNotAllowUserstoChangePolicies",,,"SecurityZones:DoNotAllowUserstoChangePolicies"8.
3.
1.
2SecurityZones:DoNotAllowUserstoChangePolicies:(5.
029:CATII)Enabled","Security-Zones-Do-not-allow-users-to-change-policies","oval:com.
secure-elements.
oval:def:6583",,,"oval:org.
mitre.
oval:def:1404","DoNotAllowUsersChangePolicies-LocalComputer","CCE-985",,"The""InternetExplorerProcesses(MIMESniffing)""settingshouldbesetcorrectly.
","enabled/disabled","HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!
(Reserved),HKLM\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!
explorer.
exe,LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/MimeSniffingSafetyFeature,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\(Reserved),[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\explorer.
exe,[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\iexplore.
exe"Internet-Explorer-Processes-MIME-Sniffing","oval:com.
secure-elements.
oval:def:6589",,,"oval:org.
mitre.
oval:def:317","IEProcesses-MimeSniffingSafetyFeature-LocalComputer","CCE-1025",,"The""CheckforSignatureonDownloadedPrograms""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Download\CheckExeSignatures"oval:org.
mitre.
oval:def:395","CheckSignatureDownloadedPrograms-LocalComputer","CCE-42",,"The""DoNotAllowResettingInternetExplorerSettings""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\DisableRIED"oval:org.
mitre.
oval:def:583","DoNotAllowResettingIESettings-LocalComputer","CCE-49",,"The""Allowcut,copy,orpasteoperationsfromtheclipboardviascript""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:506,oval:org.
mitre.
oval:def:533","AllowCutCopyPasteOperationsFromClipboardViaScript-InternetZone-LocalComputer,AllowCutCopyPasteOperationsFromClipboardViaScript-InternetZone-LocalUser","CCE-863",,"The""TurnOffFirst-RunOpt-In""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1119","TurnOffFirst-RunOpt-In-InternetZone-LocalComputer","CCE-286",,"The""WebBrowserApplications""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:242","WebBrowserApplications-InternetZone-LocalComputer","CCE-1031",,"The""Allowcut,copy,orpasteoperationsfromtheclipboardviascript""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:249,oval:org.
mitre.
oval:def:1393","AllowCutCopyPasteOperationsFromClipboardViaScript-RestrictedSitesZone-LocalComputer,AllowCutCopyPasteOperationsFromClipboardViaScript-RestrictedSitesZone-LocalUser","CCE-200",,"The""TurnOffFirst-RunOpt-In""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:621","TurnOffFirst-RunOpt-In-RestrictedSitesZone-LocalComputer","CCE-51",,"The""WebBrowserApplications""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:580","WebBrowserApplications-RestrictedSitesZone-LocalComputer","CCE-876",,"The""IntranetSites:Includeallnetworkpaths(UNCs)""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\UNC"oval:org.
mitre.
oval:def:559,oval:org.
mitre.
oval:def:1370","IncludeAllNetworkPaths-LocalComputer,IncludeAllNetworkPaths-LocalUser","CCE-810",,"The""DisabletheAdvancedPage""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\AdvancedTab"oval:org.
mitre.
oval:def:934,oval:org.
mitre.
oval:def:660","DisableTheAdvancedPage-LocalComputer,DisableTheAdvancedPage-LocalUser","CCE-811",,"The""DisablethePrivacyPage""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\PrivacyTab"oval:org.
mitre.
oval:def:1111","DisableThePrivacyPage-LocalComputer","CCE-595",,"The""DisabletheSecurityPage""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\SecurityTab"oval:org.
mitre.
oval:def:672,oval:org.
mitre.
oval:def:601","DisableTheSecurityPage-LocalComputer,DisableTheSecurityPage-LocalUser","CCE-938",,"The""PreventIgnoingCertificateErrors""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\PreventIgnoreCertErrors"oval:org.
mitre.
oval:def:655,oval:org.
mitre.
oval:def:1129","PreventIgnoingCertificateErrors-LocalComputer,PreventIgnoingCertificateErrors-LocalUser","CCE-946",,"The""TurnOffchangingtheURLtobedisplayedforcheckingupdatestoInternetExplorerandInternetTools""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/InternetSettings/ComponentUpdates/PeriodicCheckforUpdatestoInternetExplorerandInternetTools,RegistryKeys:[HKLM"oval:org.
mitre.
oval:def:715","TurnOffChangingURLDisplay-LocalComputer","CCE-237",,"The""TurnOffConfiguringtheUpdateCheckInterval(InDays)""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/InternetSettings/ComponentUpdates/PeriodicCheckforUpdatestoInternetExplorerandInternetTools,RegistryKeys:[HKLM"oval:org.
mitre.
oval:def:1187","TurnOffConfiguringUpdateCheckInterval-LocalComputer","CCE-541",,"The""Add-onList""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/Add-onManagement,RegistryKeys:[HKLM|HKCU]\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Lis"oval:org.
mitre.
oval:def:626","AddOnList-LocalComputer","CCE-911",,"The""Denyalladd-onsunlessspecificallyallowedintheAdd-onList""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures/Add-onManagement,RegistryKeys:[HKLM|HKCU]\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Res"oval:org.
mitre.
oval:def:1278","DenyAllAddOns-LocalComputer","CCE-66",,"The""Disable""ConfiguringHistory""""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\History,[HKLM|HKCU]\Software\Policies\Microsoft\Window"oval:org.
mitre.
oval:def:757,oval:org.
mitre.
oval:def:1365","DisableConfiguringHistory-LocalComputer,DisableConfiguringHistory-LocalUser","CCE-471",,"The""DisableChangingAutomaticConfigurationSettings""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\Autoconfig"oval:org.
mitre.
oval:def:1285,oval:org.
mitre.
oval:def:613","DisableChangingAutomaticConfigurationSettings-LocalComputer,DisableChangingAutomaticConfigurationSettings-LocalUser","CCE-611",,"The""DisableChangingConnectionSettings""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\ConnectionSettings,[HKLM|HKCU]\Software\Policies\Micr"oval:org.
mitre.
oval:def:355,oval:org.
mitre.
oval:def:1128","DisableChangingConnectionSettings-LocalComputer,DisableChangingConnectionSettings-LocalUser","CCE-62",,"The""DisableChangingProxySettings""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\Proxy"oval:org.
mitre.
oval:def:398,oval:org.
mitre.
oval:def:635","DisableChangingProxySettings-LocalComputer,DisableChangingProxySettings-LocalUser","CCE-556",,"The""DisableShowingtheSplashScreen""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Infodelivery\Restrictions\NoSplash"oval:org.
mitre.
oval:def:1164","DisableShowingSplashScreen-LocalComputer","CCE-948",,"The""Prevent""Fixsettings""Functionality""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Security\DisableFixSecuritySettings"oval:org.
mitre.
oval:def:448,oval:org.
mitre.
oval:def:640","PreventFixSettingsFunctionality-LocalComputer,PreventFixSettingsFunctionality-LocalUser","CCE-495",,"The""PreventparticipationintheCustomerExperienceImprovementPrograms""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\SQM\DisableCustomerImprovementProgram"oval:org.
mitre.
oval:def:1171,oval:org.
mitre.
oval:def:1391","PreventParticipationInCustomerExperienceImprovementPrograms-LocalComputer,PreventParticipationInCustomerExperienceImprovementPrograms-LocalUser","CCE-1006",,"The""PreventperformanceofFirstRunCustomizesettings""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\DisableFirstRunCustomize"oval:org.
mitre.
oval:def:1322","PreventPerformanceOfFirstRunCustomizeSettings-LocalComputer","CCE-909",,"The""Perventthedeletationoftemporaryinternetfilesandcookies""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\Settings"oval:org.
mitre.
oval:def:1382,oval:org.
mitre.
oval:def:703","PerventDeletationOfTempInternetFiles-LocalComputer,PerventDeletationOfTempInternetFiles-LocalUser","CCE-1010",,"The""Turnoff""DeleteBrowsingHistory""functionality""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\ControlPanel\DisableDeleteBrowsingHistory"oval:org.
mitre.
oval:def:458,oval:org.
mitre.
oval:def:1474","TurnOffDeleteBrowsingHistoryFunctionality-LocalComputer,TurnOffDeleteBrowsingHistoryFunctionality-LocalUser","CCE-1032",,"The""TurnoffManagingPhishingFilter""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\PhishingFilter\Enabled"oval:org.
mitre.
oval:def:501","TurnOffManagingPhishingFilter-LocalComputer","CCE-1054",,"The""TurnofftheSecuritySettingsCheckfeature""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Security\DisableSecuritySettingsCheck"oval:org.
mitre.
oval:def:916,oval:org.
mitre.
oval:def:1034","TurnOffSecuritySettingsCheckFeature-LocalComputer,TurnOffSecuritySettingsCheckFeature-LocalUser","CCE-964",,"The""AllowActiveContentfromCD'stoRunonUserMachine""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_LOCAL"oval:org.
mitre.
oval:def:400","AllowActiveContentFromCD-LocalComputer","CCE-449",,"The""AllowSoftwaretoRunorInstallEveniftheSignatureisInvalid""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Download\RunInvalidSignatures"oval:org.
mitre.
oval:def:680,oval:org.
mitre.
oval:def:1392","AllowSoftwareRunInstallSignatureInvalid-LocalComputer,AllowSoftwareToRununOrInstallEvenIfSignatureInvalid-LocalUser","CCE-598",,"The""Enablethird-partybrowserextensions""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\EnableBrowserExtensions"oval:org.
mitre.
oval:def:110","AllowThird-PartyBrowserExtensions-LocalComputer","CCE-1008",,"The""AutomaticallyCheckforInternetExplorerUpdates""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\NoUpdateCheck"oval:org.
mitre.
oval:def:656,oval:org.
mitre.
oval:def:1360","AutomaticallyCheckIEUpdates-LocalComputer,AutomaticallyCheckForIEUpdates-LocalUser","CCE-690",,"The""CheckforServerCertificateRevocation""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/AdvancedPage,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Certificat"oval:org.
mitre.
oval:def:172,oval:org.
mitre.
oval:def:1502","CheckServerCertificateRevocation-LocalComputer,CheckForServerCertificateRevocation-LocalUser","CCE-47",,"The""Accessdatasourcesacrossdomains""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:674,oval:org.
mitre.
oval:def:650","AccessDataSourcesAcrossDomains-InternetZone-LocalComputer,AccessDataSourcesAcrossDomains-InternetZone-LocalUser","CCE-685",,"The""Draganddroporcopyandpastefiles""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1083,oval:org.
mitre.
oval:def:547","AllowDragDropOrCopyPasteFiles-InternetZone-LocalComputer,AllowDragDropOrCopyPasteFiles-InternetZone-LocalUser","CCE-491",,"The""Fontdownload""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:524,oval:org.
mitre.
oval:def:659","AllowFontDownloads-InternetZone-LocalComputer,AllowFontDownloads-InternetZone-LocalUser","CCE-355",,"The""Installationofdesktopitems""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:223,oval:org.
mitre.
oval:def:541","AllowInstallationOfDesktopItems-InternetZone-LocalComputer,AllowInstallationOfDesktopItems-InternetZone-LocalUser","CCE-280",,"The""Allowscript-initiatedwindowswithoutsizeorpositionconstraints""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:589,oval:org.
mitre.
oval:def:1476","AllowScriptInitiatedWindowsWithoutSizeOrPositionConstraints-InternetZone-LocalComputer,AllowScriptInitiatedWindowsWithoutSizeOrPositionConstraints-InternetZone-LocalUser","CCE-439",,"The""AllowScriptlets""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1043","AllowScriptlets-InternetZone-LocalComputer","CCE-914",,"The""Allowstatusbarupdatesviascript""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:226,oval:org.
mitre.
oval:def:1208","AllowStatusBarUpdatesViaScript-InternetZone-LocalComputer,AllowStatusBarUpdatesViaScript-InternetZone-LocalUser","CCE-16",,"The""Automaticpromptingforfiledownloads""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1113,oval:org.
mitre.
oval:def:562","AutomaticPromptingFileDownloads-InternetZone-LocalComputer,AutomaticPromptingFileDownloads-InternetZone-LocalUser","CCE-1013",,"The""DownloadsignedActiveXcontrols""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1199,oval:org.
mitre.
oval:def:546","DownloadSignedActiveXControls-InternetZone-LocalComputer,DownloadSignedActiveXControls-InternetZone-LocalUser","CCE-176",,"The""DownloadunsignedActiveXcontrols""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:391,oval:org.
mitre.
oval:def:1200","DownloadUnsignedActiveXControls-InternetZone-LocalComputer,DownloadUnsignedActiveXControls-InternetZone-LocalUser","CCE-586",,"The""InitializeandscriptActiveXcontrolsnotmarkedassafeforscripting""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1040,oval:org.
mitre.
oval:def:739","InitializeScriptActiveXControlsNotMarkedAsSafe-InternetZone-LocalComputer,JavaPermissions-InternetZone-LocalComputer,InitializeScriptActiveXControlsNotMarkedAsSafe-InternetZone-LocalUser","CCE-132",,"The""Javapermissions""settingshouldbesetcorrectly.
","Custom/DisableJava/Highsafety/Lowsafety/Mediumsafety","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1174,oval:org.
mitre.
oval:def:725","JavaPermissions-InternetZone-LocalUser","CCE-689",,"The""LaunchingprogramsandfilesinanIFRAME""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:611,oval:org.
mitre.
oval:def:1487","LaunchingApplicationsAndFilesInIFRAME-InternetZone-LocalComputer,LaunchingApplicationsAndFilesInIFRAME-InternetZone-LocalUser","CCE-720",,"The""Logon""settingshouldbesetcorrectly.
","Anonymouslogon/AutomaticlogononlyinIntranetzone/Automaticlogonwithcurrentusernameandpassword/Promptforusernameandpassword","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:691,oval:org.
mitre.
oval:def:1123","LogonOptions-InternetZone-LocalComputer,LogonOptions-InternetZone-LocalUser","CCE-126",,"The""LooseXAML""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:240","LooseXAMLFiles-InternetZone-LocalComputer","CCE-245",,"The""Navigatesub-framesacrossdifferentdomains""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:612,oval:org.
mitre.
oval:def:1394","NavigateSub-framesAcrossDifferentDomains-InternetZone-LocalComputer,NavigateSub-framesAcrossDifferentDomains-InternetZone-LocalUser","CCE-910",,"The""Openfilesbasedoncontent,notfileextension""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:953,oval:org.
mitre.
oval:def:1300","OpenFilesBasedOnContent-InternetZone-LocalComputer,OpenFilesBasedOnContent-InternetZone-LocalUser","CCE-359",,"The""Softwarechannelpermissions""settingshouldbesetcorrectly.
","Highsafety/lowsafety/mediumsafety","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:302,oval:org.
mitre.
oval:def:1398","SoftwareChannelPermissions-InternetZone-LocalComputer,SoftwareChannelPermissions-InternetZone-LocalUser","CCE-1002",,"The""UsePop-upBlocker""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1179,oval:org.
mitre.
oval:def:558","UsePop-upBlocker-InternetZone-LocalComputer,UsePop-upBlocker-InternetZone-LocalUser","CCE-425",,"The""Userdatapersistence""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1108","UserdataPersistence-InternetZone-LocalComputer","CCE-724",,"The""WebsitesinlessprivilegedWebcontentzonescannavigateintothiszone""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:265,oval:org.
mitre.
oval:def:1432","WebSitesInLessPrivilegedWebContentZonesCanNavigateIntoThisZone-InternetZone-LocalComputer,WebSitesInLessPrivilegedWebContentZonesCanNavigateIntoThisZone-InternetZone-LocalUser","CCE-1015",,"The""XPSdocuments""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/InternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:628","XPSFiles-InternetZone-LocalComputer","CCE-878",,"The""Displaymixedcontent""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/Locked-DownInternetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Int"oval:org.
mitre.
oval:def:245","DisplayMixedContent-LockedDownInternetZone-LocalComputer","CCE-288",,"The""Displaymixedcontent""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/IntranetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettin"oval:org.
mitre.
oval:def:1166","DisplayMixedContent-IntranetZone-LocalComputer","CCE-552",,"The""Displaymixedcontent""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/Locked-DownIntranetZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Int"oval:org.
mitre.
oval:def:247","DisplayMixedContent-LockedDownIntranetZone-LocalComputer","CCE-473",,"The""Displaymixedcontent""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/LocalMachineZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetS"oval:org.
mitre.
oval:def:383","DisplayMixedContent-LocalMachineZone-LocalComputer","CCE-239",,"The""Displaymixedcontent""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/Locked-DownLocalMachineZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersio"oval:org.
mitre.
oval:def:418","DisplayMixedContent-LockedDownLocalMachineZone-LocalComputer","CCE-636",,"The""Accessdatasourcesacrossdomains""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:652,oval:org.
mitre.
oval:def:750","AccessDataSourcesAcrossDomains-RestrictedSitesZone-LocalComputer,AccessDataSourcesAcrossDomains-RestrictedSitesZone-LocalUser","CCE-292",,"The""Activescripting""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:293,oval:org.
mitre.
oval:def:561","AllowActiveScripting-RestrictedSitesZone-LocalComputer,AllowActiveScripting-RestrictedSitesZone-LocalUser","CCE-178",,"The""Binaryandscriptbehaviors""settingshouldbesetcorrectly.
","Administratorapproved/enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:365,oval:org.
mitre.
oval:def:1314","AllowBinaryAndScriptBehaviors-RestrictedSitesZone-LocalComputer,AllowBinaryAndScriptBehaviors-RestrictedSitesZone-LocalUser","CCE-41",,"The""Draganddroporcopyandpastefiles""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:498,oval:org.
mitre.
oval:def:1465","AllowDragDropOrCopyPasteFiles-RestrictedSitesZone-LocalComputer,AllowDragDropOrCopyPasteFiles-RestrictedSitesZone-LocalUser","CCE-970",,"The""Filedownload""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1184,oval:org.
mitre.
oval:def:1318","AllowFileDownloads-RestrictedSitesZone-LocalComputer,AllowFileDownloads-RestrictedSitesZone-LocalUser","CCE-882",,"The""Fontdownload""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1109,oval:org.
mitre.
oval:def:1410","AllowFontDownloads-RestrictedSitesZone-LocalComputer,AllowFontDownloads-RestrictedSitesZone-LocalUser","CCE-763",,"The""Installationofdesktopitems""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:251,oval:org.
mitre.
oval:def:1257","AllowInstallationOfDesktopItems-RestrictedSitesZone-LocalComputer,AllowInstallationOfDesktopItems-RestrictedSitesZone-LocalUser","CCE-680",,"The""AllowMETAREFRESH""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1218,oval:org.
mitre.
oval:def:1270","AllowMETAREFRESH-RestrictedSitesZone-LocalComputer,AllowMETAREFRESH-RestrictedSitesZone-LocalUser","CCE-208",,"The""Allowscript-initiatedwindowswithoutsizeorpositionconstraints""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1234,oval:org.
mitre.
oval:def:574","AllowScriptInitiatedWindowsWithoutSizeOrPositionConstraints-RestrictedSitesZone-LocalComputer,AllowScriptInitiatedWindowsWithoutSizeOrPositionConstraints-RestrictedSitesZone-LocalUser","CCE-838",,"The""AllowScriptlets""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1217","AllowScriptlets-RestrictedSitesZone-LocalComputer","CCE-129",,"The""Allowstatusbarupdatesviascript""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:378","AllowStatusBarUpdatesViaScript-RestrictedSitesZone-LocalComputer","CCE-175",,"The""Automaticpromptingforfiledownloads""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:252,oval:org.
mitre.
oval:def:1312","AutomaticPromptingFileDownloads-RestrictedSitesZone-LocalComputer,AutomaticPromptingFileDownloads-RestrictedSitesZone-LocalUser","CCE-52",,"The""DownloadsignedActiveXcontrols""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1019,oval:org.
mitre.
oval:def:1389","DownloadSignedActiveXControls-RestrictedSitesZone-LocalComputer,DownloadSignedActiveXControls-RestrictedSitesZone-LocalUser","CCE-1012",,"The""DownloadunsignedActiveXcontrols""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:949,oval:org.
mitre.
oval:def:579","DownloadUnsignedActiveXControls-RestrictedSitesZone-LocalComputer,DownloadUnsignedActiveXControls-RestrictedSitesZone-LocalUser","CCE-26",,"The""InitializeandscriptActiveXcontrolsnotmarkedassafeforscripting""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:273,oval:org.
mitre.
oval:def:1342","InitializeScriptActiveXControlsNotMarkedAsSafe-RestrictedSitesZone-LocalComputer,InitializeScriptActiveXControlsNotMarkedAsSafe-RestrictedSitesZone-LocalUser","CCE-925",,"The""Javapermissions""settingshouldbesetcorrectly.
","Custom/DisableJava/Highsafety/Lowsafety/Mediumsafety","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:824,oval:org.
mitre.
oval:def:732","JavaPermissions-RestrictedSitesZone-LocalComputer,JavaPermissions-RestrictedSitesZone-LocalUser","CCE-339",,"The""LaunchingprogramsandfilesinanIFRAME""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:274,oval:org.
mitre.
oval:def:1223","LaunchingApplicationsAndFilesInIFRAME-RestrictedSitesZone-LocalComputer,LaunchingApplicationsAndFilesInIFRAME-RestrictedSitesZone-LocalUser","CCE-128",,"The""Logon""settingshouldbesetcorrectly.
","Anonymouslogon/AutomaticlogononlyinIntranetzone/Automaticlogonwithcurrentusernameandpassword/Promptforusernameandpassword","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:326,oval:org.
mitre.
oval:def:1378","LogonOptions-RestrictedSitesZone-LocalComputer,LogonOptions-RestrictedSitesZone-LocalUser","CCE-639",,"The""LooseXAML""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:275","LooseXAMLFiles-RestrictedSitesZone-LocalComputer","CCE-995",,"The""Navigatesub-framesacrossdifferentdomains""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1229,oval:org.
mitre.
oval:def:1292","NavigateSub-framesAcrossDifferentDomains-RestrictedSitesZone-LocalComputer,NavigateSub-framesAcrossDifferentDomains-RestrictedSitesZone-LocalUser","CCE-409",,"The""Openfilesbasedoncontent,notfileextension""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:706,oval:org.
mitre.
oval:def:1421","OpenFilesBasedOnContent-RestrictedSitesZone-LocalComputer,OpenFilesBasedOnContent-RestrictedSitesZone-LocalUser","CCE-678",,"The""RuncomponentsnotsignedwithAuthenticode""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:329,oval:org.
mitre.
oval:def:599","RunNETFrameworkReliantComponentsNotSignedWithAuthenticode-RestrictedSitesZone-LocalComputer,RunNETFrameworkReliantComponentsNotSignedWithAuthenticode-RestrictedSitesZone-LocalUser","CCE-563",,"The""RuncomponentssignedwithAuthenticode""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:276,oval:org.
mitre.
oval:def:1428","RunNETFrameworkReliantComponentsSignedWithAuthenticode-RestrictedSitesZone-LocalComputer,RunNETFrameworkReliantComponentsSignedWithAuthenticode-RestrictedSitesZone-LocalUser","CCE-841",,"The""RunActiveXcontrolsandplugins""settingshouldbesetcorrectly.
","Administratorapproved/enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:571,oval:org.
mitre.
oval:def:1594","RunActiveXControlsAndPlugins-RestrictedSitesZone-LocalComputer,RunActiveXControlsAndPlugins-RestrictedSitesZone-LocalUser","CCE-973",,"The""ScriptActiveXcontrolsmarkedsafeforscripting""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:602,oval:org.
mitre.
oval:def:1274","ScriptActiveXControlsMarkedSafeForScripting-RestrictedSitesZone-LocalComputer,ScriptActiveXControlsMarkedSafeForScripting-RestrictedSitesZone-LocalUser","CCE-1000",,"The""ScriptingofJavaapplets""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:280,oval:org.
mitre.
oval:def:641","ScriptingOfJavaApplets-RestrictedSitesZone-LocalComputer,ScriptingOfJavaApplets-RestrictedSitesZone-LocalUser","CCE-520",,"The""Softwarechannelpermissions""settingshouldbesetcorrectly.
","Highsafety/lowsafety/mediumsafety","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:290,oval:org.
mitre.
oval:def:1214","SoftwareChannelPermissions-RestrictedSitesZone-LocalComputer,SoftwareChannelPermissions-RestrictedSitesZone-LocalUser","CCE-660",,"The""UsePop-upBlocker""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1100,oval:org.
mitre.
oval:def:1286","UsePop-upBlocker-RestrictedSitesZone-LocalComputer,UsePop-upBlocker-RestrictedSitesZone-LocalUser","CCE-28",,"The""Userdatapersistence""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:300","UserdataPersistence-RestrictedSitesZone-LocalComputer","CCE-698",,"The""WebsitesinlessprivilegedWebcontentzonescannavigateintothiszone""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1219,oval:org.
mitre.
oval:def:1243","WebSitesInLessPrivilegedWebContentZonesCanNavigateIntoThisZone-RestrictedSitesZone-LocalComputer,WebSitesInLessPrivilegedWebContentZonesCanNavigateIntoThisZone-RestrictedSitesZone-LocalUser","CCE-460",,"The""XPSdocuments""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/RestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\Interne"oval:org.
mitre.
oval:def:1176","XPSFiles-RestrictedSitesZone-LocalComputer","CCE-30",,"The""Displaymixedcontent""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/Locked-DownRestrictedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVer"oval:org.
mitre.
oval:def:314","DisplayMixedContent-LockedDownRestrictedSitesZone-LocalComputer","CCE-31",,"The""Displaymixedcontent""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/TrustedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersion\InternetS"oval:org.
mitre.
oval:def:1153","DisplayMixedContent-TrustedSitesZone-LocalComputer","CCE-666",,"The""Displaymixedcontent""settingshouldbesetcorrectly.
","enabled/disabled/prompt","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityPage/Locked-DownTrustedSitesZone,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\Windows\CurrentVersio"oval:org.
mitre.
oval:def:1183","DisplayMixedContent-LockedDownTrustedSitesZone-LocalComputer","CCE-528",,"The""EnableNativeXMLHttpSupport""settingshouldbesetcorrectly.
","enabled/disabled","LocalInternetOptions:GPOSettings:[ComputerConfiguration|UserConfiguration]/Network/InternetExplorer/InternetControlPanel/SecurityFeatures,RegistryKeys:[HKLM|HKCU]\Software\Policies\Microsoft\InternetExplorer\Main\XMLHTTP"oval:org.
mitre.
oval:def:338","EnableNativeXMLHttpSupport-LocalComputer","CCE-721",,"The""Turnontheauto-completefeatureforusernamesandpasswordsonform""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\Main!
FormSuggestPasswords,HKCU\Software\Policies\Microsoft\InternetExplorer\ControlPanel!
FormSuggestPasswords"oval:org.
mitre.
oval:def:645","DisableSaveThisProgramToDiskOption-LocalUser","CCE-69",,"The""AllowInstallOnDemand(InternetExplorer)""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\Main!
NoJITSetup"oval:org.
mitre.
oval:def:523","AllowInstallOnDemandIE-LocalUser","CCE-71",,"The""Turnoffpagetransitions""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\Main!
Page_Transitions"oval:org.
mitre.
oval:def:1206","TurnOffPageTransitions-LocalUser","CCE-478",,"The""DisableAutoCompleteforforms""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\Main!
UseFormSuggest,HKCU\Software\Policies\Microsoft\InternetExplorer\ControlPanel!
FormSuggest"oval:org.
mitre.
oval:def:1516","DisableAutoCompleteForForms-LocalUser","CCE-412",,"The""DisableSavethisprogramtodiskoption""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\Restrictions!
NoSelectDownloadDir"oval:org.
mitre.
oval:def:505","AllowInstallOnDemandIE-LocalUser","CCE-1037",,"The""Disablechangingcertificatesettings""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\ControlPanel!
Certificates"oval:org.
mitre.
oval:def:1362","DisableChangingCertificateSettings-LocalUser","CCE-1051",,"The""DisableexternalbrandingofInternetExplorer""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\Restrictions!
NoExternalBranding"oval:org.
mitre.
oval:def:1384","DisableExternalBrandingOfIE-LocalUser","CCE-963",,"The""ConfigureOutlookExpress""settingshouldbesetcorrectly","enabled/disabled","HKCU\Software\Microsoft\OutlookExpress!
BlockExeAttachments"oval:org.
mitre.
oval:def:1238","ConfigureOutlookExpress-LocalUser","CCE-258",,"The""TurnontheInternetConnectionWizardAutoDetect""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetConnectionWizard!
DisableICW"oval:org.
mitre.
oval:def:604","InternetConnectionWizardSettings-LocalUser","CCE-769",,"The""DisableInternetConnectionwizard""settingshouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\ControlPanel!
ConnwizAdminLock"oval:org.
mitre.
oval:def:1355","DisableInternetConnectionWizard-LocalUser","CCE-625",,"The""DisabletheResetWebSettingsfeature""shouldbesetcorrectly.
","enabled/disabled","HKCU\Software\Policies\Microsoft\InternetExplorer\ControlPanel!
ResetWebSettings"oval:org.
mitre.
oval:def:1437","DisableResetWebSettingsFeature-LocalUser",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,