Coverage - CIS, Windows

CIS CAT Assessor Scan Results

The following scans were performed on a default installation of Windows with the SIMP Enterprise profile enforced.

OS	EE Profile	Scan Type	Benchmark Version	Pass	Fail	Total %	Certification Status
Windows 2012R2	cis:level:1:domain:controller	Level 1 - Domain Controller	2.4.0	263	10	96%	Certified
Windows 2012R2	cis:level:2:domain:controller	Level 2 - Domain Controller	2.4.0	307	12	96%	Certified
Windows 2012R2	cis:level:1:member:server	Level 1 - Member Server	2.4.0	263	12	96%	Certified
Windows 2012R2	cis:level:2:member:server	Level 2 - Member Server	2.4.0	310	14	96%	Certified
Windows 2016	cis:level:1:domain:controller	Level 1 - Domain Controller	1.2.0	273	12	96%	Certified
Windows 2016	cis:level:2:domain:controller	Level 2 - Domain Controller	1.2.0	326	16	95%	Certified
Windows 2016	cis:level:1:member:server	Level 1 - Member Server	1.2.0	275	13	95%	Certified
Windows 2016	cis:level:2:member:server	Level 2 - Member Server	1.2.0	331	17	95%	Certified
Windows 2019	cis:level:1:domain:controller	Level 1 - Domain Controller	1.1.0	273	15	95%	Certified
Windows 2019	cis:level:2:domain:controller	Level 2 - Domain Controller	1.1.0	328	19	95%	Certified
Windows 2019	cis:level:1:member:server	Level 1 - Member Server	1.1.0	276	15	95%	Certified
Windows 2019	cis:level:2:member:server	Level 2 - Member Server	1.1.0	334	19	95%	Certified

CIS Control Coverage

The following report details the status of each CIS recommendation in the SIMP EE compliance data.

Mapped controls have enforcement and reporting support.
Unmapped controls are not supported at this time. A reason for the lack of support is provided for each unmapped control.
Paper policy controls refer to organizational policy requirements and cannot be reasonably enforced by SIMP at this time.

Summary

OS	Benchmark Version	Mapped	Total
Windows 2012 R2	2.4.0	348 (100%)	348
Windows 2016	1.2.0	379 (100%)	379
Windows 2019	1.1.0	384 (100%)	384

Detail

Mapped

The following controls are mapped:

Windows 2012 R2 (348/348 [100%])

oval:simp.cis.windows2012r2.2.4.0.1.1.1_L1_Ensure_Enforce_password_history_is_set_to_24_or_more_passwords:def:1
oval:simp.cis.windows2012r2.2.4.0.1.1.2_L1_Ensure_Maximum_password_age_is_set_to_60_or_fewer_days_but_not_0:def:1
oval:simp.cis.windows2012r2.2.4.0.1.1.3_L1_Ensure_Minimum_password_age_is_set_to_1_or_more_days:def:1
oval:simp.cis.windows2012r2.2.4.0.1.1.4_L1_Ensure_Minimum_password_length_is_set_to_14_or_more_characters:def:1
oval:simp.cis.windows2012r2.2.4.0.1.1.5_L1_Ensure_Password_must_meet_complexity_requirements_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.1.1.6_L1_Ensure_Store_passwords_using_reversible_encryption_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.1.2.1_L1_Ensure_Account_lockout_duration_is_set_to_15_or_more_minutes:def:1
oval:simp.cis.windows2012r2.2.4.0.1.2.2_L1_Ensure_Account_lockout_threshold_is_set_to_10_or_fewer_invalid_logon_attempts_but_not_0:def:1
oval:simp.cis.windows2012r2.2.4.0.1.2.3_L1_Ensure_Reset_account_lockout_counter_after_is_set_to_15_or_more_minutes:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.1_L1_Ensure_Access_Credential_Manager_as_a_trusted_caller_is_set_to_No_One:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.2_L1_Ensure_Access_this_computer_from_the_network_is_set_to_Administrators_Authenticated_Users_ENTERPRISE_DOMAIN_CONTROLLERS_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.3_L1_Ensure_Access_this_computer_from_the_network__is_set_to_Administrators_Authenticated_Users_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.4_L1_Ensure_Act_as_part_of_the_operating_system_is_set_to_No_One:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.5_L1_Ensure_Add_workstations_to_domain_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.6_L1_Ensure_Adjust_memory_quotas_for_a_process_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.7_L1_Ensure_Allow_log_on_locally_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.8_L1_Ensure_Allow_log_on_through_Remote_Desktop_Services_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.9_L1_Ensure_Allow_log_on_through_Remote_Desktop_Services_is_set_to_Administrators_Remote_Desktop_Users_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.10_L1_Ensure_Back_up_files_and_directories_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.11_L1_Ensure_Change_the_system_time_is_set_to_Administrators_LOCAL_SERVICE:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.12_L1_Ensure_Change_the_time_zone_is_set_to_Administrators_LOCAL_SERVICE:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.13_L1_Ensure_Create_a_pagefile_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.14_L1_Ensure_Create_a_token_object_is_set_to_No_One:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.15_L1_Ensure_Create_global_objects_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.16_L1_Ensure_Create_permanent_shared_objects_is_set_to_No_One:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.17_L1_Ensure_Create_symbolic_links_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.18_L1_Ensure_Create_symbolic_links_is_set_to_Administrators_NT_VIRTUAL_MACHINEVirtual_Machines_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.19_L1_Ensure_Debug_programs_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.20_L1_Ensure_Deny_access_to_this_computer_from_the_network_to_include_Guests_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.21_L1_Ensure_Deny_access_to_this_computer_from_the_network_to_include_Guests_Local_account_and_member_of_Administrators_group_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.22_L1_Ensure_Deny_log_on_as_a_batch_job_to_include_Guests:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.23_L1_Ensure_Deny_log_on_as_a_service_to_include_Guests:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.24_L1_Ensure_Deny_log_on_locally_to_include_Guests:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.25_L1_Ensure_Deny_log_on_through_Remote_Desktop_Services_to_include_Guests_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.26_L1_Ensure_Deny_log_on_through_Remote_Desktop_Services_is_set_to_Guests_Local_account_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.27_L1_Ensure_Enable_computer_and_user_accounts_to_be_trusted_for_delegation_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.28_L1_Ensure_Enable_computer_and_user_accounts_to_be_trusted_for_delegation_is_set_to_No_One_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.29_L1_Ensure_Force_shutdown_from_a_remote_system_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.30_L1_Ensure_Generate_security_audits_is_set_to_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.31_L1_Ensure_Impersonate_a_client_after_authentication_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.32_L1_Ensure_Impersonate_a_client_after_authentication_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE_and_when_the_Web_Server_IIS_Role_with_Web_Services_Role_Service_is_installed_IIS_IUSRS_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.33_L1_Ensure_Increase_scheduling_priority_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.34_L1_Ensure_Load_and_unload_device_drivers_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.35_L1_Ensure_Lock_pages_in_memory_is_set_to_No_One:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.36_L2_Ensure_Log_on_as_a_batch_job_is_set_to_Administrators_DC_Only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.37_L1_Ensure_Manage_auditing_and_security_log_is_set_to_Administrators_and_when_Exchange_is_running_in_the_environment_Exchange_Servers_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.38_L1_Ensure_Manage_auditing_and_security_log_is_set_to_Administrators_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.39_L1_Ensure_Modify_an_object_label_is_set_to_No_One:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.40_L1_Ensure_Modify_firmware_environment_values_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.41_L1_Ensure_Perform_volume_maintenance_tasks_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.42_L1_Ensure_Profile_single_process_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.43_L1_Ensure_Profile_system_performance_is_set_to_Administrators_NT_SERVICEWdiServiceHost:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.44_L1_Ensure_Replace_a_process_level_token_is_set_to_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.45_L1_Ensure_Restore_files_and_directories_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.46_L1_Ensure_Shut_down_the_system_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.47_L1_Ensure_Synchronize_directory_service_data_is_set_to_No_One_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.2.48_L1_Ensure_Take_ownership_of_files_or_other_objects_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.1.1_L1_Ensure_Accounts_Administrator_account_status_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.1.2_L1_Ensure_Accounts_Block_Microsoft_accounts_is_set_to_Users_cant_add_or_log_on_with_Microsoft_accounts:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.1.3_L1_Ensure_Accounts_Guest_account_status_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.1.4_L1_Ensure_Accounts_Limit_local_account_use_of_blank_passwords_to_console_logon_only_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.1.5_L1_Configure_Accounts_Rename_administrator_account:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.1.6_L1_Configure_Accounts_Rename_guest_account:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.2.1_L1_Ensure_Audit_Force_audit_policy_subcategory_settings_Windows_Vista_or_later_to_override_audit_policy_category_settings_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.2.2_L1_Ensure_Audit_Shut_down_system_immediately_if_unable_to_log_security_audits_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.4.1_L1_Ensure_Devices_Allowed_to_format_and_eject_removable_media_is_set_to_Administrators:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.4.2_L1_Ensure_Devices_Prevent_users_from_installing_printer_drivers_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.5.1_L1_Ensure_Domain_controller_Allow_server_operators_to_schedule_tasks_is_set_to_Disabled_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.5.2_L1_Ensure_Domain_controller_LDAP_server_signing_requirements_is_set_to_Require_signing_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.5.3_L1_Ensure_Domain_controller_Refuse_machine_account_password_changes_is_set_to_Disabled_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.6.1_L1_Ensure_Domain_member_Digitally_encrypt_or_sign_secure_channel_data_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.6.2_L1_Ensure_Domain_member_Digitally_encrypt_secure_channel_data_when_possible_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.6.3_L1_Ensure_Domain_member_Digitally_sign_secure_channel_data_when_possible_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.6.4_L1_Ensure_Domain_member_Disable_machine_account_password_changes_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.6.5_L1_Ensure_Domain_member_Maximum_machine_account_password_age_is_set_to_30_or_fewer_days_but_not_0:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.6.6_L1_Ensure_Domain_member_Require_strong_Windows_2000_or_later_session_key_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.1_L1_Ensure_Interactive_logon_Do_not_display_last_user_name_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.2_L1_Ensure_Interactive_logon_Do_not_require_CTRLALTDEL_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.3_L1_Ensure_Interactive_logon_Machine_inactivity_limit_is_set_to_900_or_fewer_seconds_but_not_0:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.4_L1_Configure_Interactive_logon_Message_text_for_users_attempting_to_log_on:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.5_L1_Configure_Interactive_logon_Message_title_for_users_attempting_to_log_on:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.6_L2_Ensure_Interactive_logon_Number_of_previous_logons_to_cache_in_case_domain_controller_is_not_available_is_set_to_4_or_fewer_logons_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.7_L1_Ensure_Interactive_logon_Prompt_user_to_change_password_before_expiration_is_set_to_between_5_and_14_days:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.8_L1_Ensure_Interactive_logon_Require_Domain_Controller_Authentication_to_unlock_workstation_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.7.9_L1_Ensure_Interactive_logon_Smart_card_removal_behavior_is_set_to_Lock_Workstation_or_higher:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.8.1_L1_Ensure_Microsoft_network_client_Digitally_sign_communications_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.8.2_L1_Ensure_Microsoft_network_client_Digitally_sign_communications_if_server_agrees_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.8.3_L1_Ensure_Microsoft_network_client_Send_unencrypted_password_to_third-party_SMB_servers_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.9.1_L1_Ensure_Microsoft_network_server_Amount_of_idle_time_required_before_suspending_session_is_set_to_15_or_fewer_minutes:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.9.2_L1_Ensure_Microsoft_network_server_Digitally_sign_communications_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.9.3_L1_Ensure_Microsoft_network_server_Digitally_sign_communications_if_client_agrees_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.9.4_L1_Ensure_Microsoft_network_server_Disconnect_clients_when_logon_hours_expire_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.9.5_L1_Ensure_Microsoft_network_server_Server_SPN_target_name_validation_level_is_set_to_Accept_if_provided_by_client_or_higher_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.1_L1_Ensure_Network_access_Allow_anonymous_SIDName_translation_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.2_L1_Ensure_Network_access_Do_not_allow_anonymous_enumeration_of_SAM_accounts_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.3_L1_Ensure_Network_access_Do_not_allow_anonymous_enumeration_of_SAM_accounts_and_shares_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.4_L2_Ensure_Network_access_Do_not_allow_storage_of_passwords_and_credentials_for_network_authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.5_L1_Ensure_Network_access_Let_Everyone_permissions_apply_to_anonymous_users_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.6_L1_Configure_Network_access_Named_Pipes_that_can_be_accessed_anonymously_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.7_L1_Configure_Network_access_Named_Pipes_that_can_be_accessed_anonymously_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.8_L1_Configure_Network_access_Remotely_accessible_registry_paths:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.9_L1_Configure_Network_access_Remotely_accessible_registry_paths_and_sub-paths:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.10_L1_Ensure_Network_access_Restrict_anonymous_access_to_Named_Pipes_and_Shares_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.11_L1_Ensure_Network_access_Shares_that_can_be_accessed_anonymously_is_set_to_None:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.10.12L1_Ensure_Network_access_Sharing_and_security_model_for_local_accounts_is_set_to_Classic-_local_users_authenticate_as_themselves:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.1_L1_Ensure_Network_security_Allow_Local_System_to_use_computer_identity_for_NTLM_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.2_L1_Ensure_Network_security_Allow_LocalSystem_NULL_session_fallback_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.3_L1_Ensure_Network_Security_Allow_PKU2U_authentication_requests_to_this_computer_to_use_online_identities_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.4_L1_Ensure_Network_security_Configure_encryption_types_allowed_for_Kerberos_is_set_to_AES128_HMAC_SHA1_AES256_HMAC_SHA1_Future_encryption_types:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.5_L1_Ensure_Network_security_Do_not_store_LAN_Manager_hash_value_on_next_password_change_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.6_L1_Ensure_Network_security_Force_logoff_when_logon_hours_expire_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.7_L1_Ensure_Network_security_LAN_Manager_authentication_level_is_set_to_Send_NTLMv2_response_only._Refuse_LM__NTLM:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.8_L1_Ensure_Network_security_LDAP_client_signing_requirements_is_set_to_Negotiate_signing_or_higher:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.9_L1_Ensure_Network_security_Minimum_session_security_for_NTLM_SSP_based_including_secure_RPC_clients_is_set_to_Require_NTLMv2_session_security_Require_128-bit_encryption:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.11.10_L1_Ensure_Network_security_Minimum_session_security_for_NTLM_SSP_based_including_secure_RPC_servers_is_set_to_Require_NTLMv2_session_security_Require_128-bit_encryption:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.13.1_L1_Ensure_Shutdown_Allow_system_to_be_shut_down_without_having_to_log_on_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.15.1_L1_Ensure_System_objects_Require_case_insensitivity_for_non-Windows_subsystems_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.15.2_L1_Ensure_System_objects_Strengthen_default_permissions_of_internal_system_objects_e.g._Symbolic_Links_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.17.1_L1_Ensure_User_Account_Control_Admin_Approval_Mode_for_the_Built-in_Administrator_account_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.17.2_L1_Ensure_User_Account_Control_Behavior_of_the_elevation_prompt_for_administrators_in_Admin_Approval_Mode_is_set_to_Prompt_for_consent_on_the_secure_desktop:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.17.3_L1_Ensure_User_Account_Control_Behavior_of_the_elevation_prompt_for_standard_users_is_set_to_Automatically_deny_elevation_requests:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.17.4_L1_Ensure_User_Account_Control_Detect_application_installations_and_prompt_for_elevation_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.17.5_L1_Ensure_User_Account_Control_Only_elevate_UIAccess_applications_that_are_installed_in_secure_locations_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.17.6_L1_Ensure_User_Account_Control_Run_all_administrators_in_Admin_Approval_Mode_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.17.7_L1_Ensure_User_Account_Control_Switch_to_the_secure_desktop_when_prompting_for_elevation_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.2.3.17.8_L1_Ensure_User_Account_Control_Virtualize_file_and_registry_write_failures_to_per-user_locations_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.9.1.1_L1_Ensure_Windows_Firewall_Domain_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2012r2.2.4.0.9.1.2_L1_Ensure_Windows_Firewall_Domain_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2012r2.2.4.0.9.1.3_L1_Ensure_Windows_Firewall_Domain_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2012r2.2.4.0.9.1.4_L1_Ensure_Windows_Firewall_Domain_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2012r2.2.4.0.9.1.5_L1_Ensure_Windows_Firewall_Domain_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewalldomainfw.log:def:1
oval:simp.cis.windows2012r2.2.4.0.9.1.6_L1_Ensure_Windows_Firewall_Domain_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2012r2.2.4.0.9.1.7_L1_Ensure_Windows_Firewall_Domain_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2012r2.2.4.0.9.1.8_L1_Ensure_Windows_Firewall_Domain_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2012r2.2.4.0.9.2.1_L1_Ensure_Windows_Firewall_Private_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2012r2.2.4.0.9.2.2_L1_Ensure_Windows_Firewall_Private_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2012r2.2.4.0.9.2.3_L1_Ensure_Windows_Firewall_Private_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2012r2.2.4.0.9.2.4_L1_Ensure_Windows_Firewall_Private_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2012r2.2.4.0.9.2.5_L1_Ensure_Windows_Firewall_Private_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewallprivatefw.log:def:1
oval:simp.cis.windows2012r2.2.4.0.9.2.6_L1_Ensure_Windows_Firewall_Private_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2012r2.2.4.0.9.2.7_L1_Ensure_Windows_Firewall_Private_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2012r2.2.4.0.9.2.8_L1_Ensure_Windows_Firewall_Private_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.1_L1_Ensure_Windows_Firewall_Public_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.2_L1_Ensure_Windows_Firewall_Public_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.3_L1_Ensure_Windows_Firewall_Public_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.4_L1_Ensure_Windows_Firewall_Public_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.5_L1_Ensure_Windows_Firewall_Public_Settings_Apply_local_firewall_rules_is_set_to_No:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.6_L1_Ensure_Windows_Firewall_Public_Settings_Apply_local_connection_security_rules_is_set_to_No:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.7_L1_Ensure_Windows_Firewall_Public_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewallpublicfw.log:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.8_L1_Ensure_Windows_Firewall_Public_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.9_L1_Ensure_Windows_Firewall_Public_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2012r2.2.4.0.9.3.10_L1_Ensure_Windows_Firewall_Public_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2012r2.2.4.0.17.1.1_L1_Ensure_Audit_Credential_Validation_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.1.2_L1_Ensure_Audit_Kerberos_Authentication_Service_is_set_to_Success_and_Failure_DC_Only:def:1
oval:simp.cis.windows2012r2.2.4.0.17.1.3_L1_Ensure_Audit_Kerberos_Service_Ticket_Operations_is_set_to_Success_and_Failure_DC_Only:def:1
oval:simp.cis.windows2012r2.2.4.0.17.2.1_L1_Ensure_Audit_Application_Group_Management_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.2.2_L1_Ensure_Audit_Computer_Account_Management_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.17.2.3_L1_Ensure_Audit_Distribution_Group_Management_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.17.2.4_L1_Ensure_Audit_Other_Account_Management_Events_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.17.2.5_L1_Ensure_Audit_Security_Group_Management_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.2.6_L1_Ensure_Audit_User_Account_Management_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.3.1_L1_Ensure_Audit_Process_Creation_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.4.1_L1_Ensure_Audit_Directory_Service_Access_is_set_to_include_Failure_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.17.4.2_L1_Ensure_Audit_Directory_Service_Changes_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2012r2.2.4.0.17.5.1_L1_Ensure_Audit_Account_Lockout_is_set_to_include_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.5.2_L1_Ensure_Audit_Logoff_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.5.3_L1_Ensure_Audit_Logon_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.5.4_L1_Ensure_Audit_Other_LogonLogoff_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.5.5_L1_Ensure_Audit_Special_Logon_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.6.1_L1_Ensure_Audit_Detailed_File_Share_is_set_to_include_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.6.2_L1_Ensure_Audit_File_Share_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.6.3_L1_Ensure_Audit_Other_Object_Access_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.6.4_L1_Ensure_Audit_Removable_Storage_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.7.1_L1_Ensure_Audit_Audit_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.7.2_L1_Ensure_Audit_Authentication_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.7.3_L1_Ensure_Audit_Authorization_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.7.4_L1_Ensure_Audit_MPSSVC_Rule-Level_Policy_Change_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.7.5_L1_Ensure_Audit_Other_Policy_Change_Events_is_set_to_include_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.8.1_L1_Ensure_Audit_Sensitive_Privilege_Use_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.9.1_L1_Ensure_Audit_IPsec_Driver_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.9.2_L1_Ensure_Audit_Other_System_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.17.9.3_L1_Ensure_Audit_Security_State_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.9.4_L1_Ensure_Audit_Security_System_Extension_is_set_to_include_Success:def:1
oval:simp.cis.windows2012r2.2.4.0.17.9.5_L1_Ensure_Audit_System_Integrity_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2012r2.2.4.0.18.1.1.1_L1_Ensure_Prevent_enabling_lock_screen_camera_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.1.1.2_L1_Ensure_Prevent_enabling_lock_screen_slide_show_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.2.1_L1_Ensure_LAPS_AdmPwd_GPO_Extension__CSE_is_installed_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.2.2_L1_Ensure_Do_not_allow_password_expiration_time_longer_than_required_by_policy_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.2.3_L1_Ensure_Enable_Local_Admin_Password_Management_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.2.4_L1_Ensure_Password_Settings_Password_Complexity_is_set_to_Enabled_Large_letters__small_letters__numbers__special_characters_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.2.5_L1_Ensure_Password_Settings_Password_Length_is_set_to_Enabled_15_or_more_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.2.6_L1_Ensure_Password_Settings_Password_Age_Days_is_set_to_Enabled_30_or_fewer_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.3.1_L1_Ensure_Apply_UAC_restrictions_to_local_accounts_on_network_logons_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.3.2_L1_Ensure_Configure_SMB_v1_client_driver_is_set_to_Enabled_Disable_driver_recommended:def:1
oval:simp.cis.windows2012r2.2.4.0.18.3.3_L1_Ensure_Configure_SMB_v1_server_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.3.4_L1_Ensure_Enable_Structured_Exception_Handling_Overwrite_Protection_SEHOP_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.3.5_L1_Ensure_Extended_Protection_for_LDAP_Authentication_Domain_Controllers_only_is_set_to_Enabled_Enabled_always_recommended_DC_Only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.3.6_L1_Ensure_NetBT_NodeType_configuration_is_set_to_Enabled_P-node_recommended:def:1
oval:simp.cis.windows2012r2.2.4.0.18.3.7_L1_Ensure_WDigest_Authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.1_L1_Ensure_MSS_AutoAdminLogon_Enable_Automatic_Logon_not_recommended_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.2_L1_Ensure_MSS_DisableIPSourceRouting_IPv6_IP_source_routing_protection_level_protects_against_packet_spoofing_is_set_to_Enabled_Highest_protection_source_routing_is_completely_disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.3_L1_Ensure_MSS_DisableIPSourceRouting_IP_source_routing_protection_level_protects_against_packet_spoofing_is_set_to_Enabled_Highest_protection_source_routing_is_completely_disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.4_L1_Ensure_MSS_EnableICMPRedirect_Allow_ICMP_redirects_to_override_OSPF_generated_routes_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.5_L2_Ensure_MSS_KeepAliveTime_How_often_keep-alive_packets_are_sent_in_milliseconds_is_set_to_Enabled_300000_or_5_minutes_recommended:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.6_L1_Ensure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.7_L2_Ensure_MSS_PerformRouterDiscovery_Allow_IRDP_to_detect_and_configure_Default_Gateway_addresses_could_lead_to_DoS_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.8_L1_Ensure_MSS_SafeDllSearchMode_Enable_Safe_DLL_search_mode_recommended_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.9_L1_Ensure_MSS_ScreenSaverGracePeriod_The_time_in_seconds_before_the_screen_saver_grace_period_expires_0_recommended_is_set_to_Enabled_5_or_fewer_seconds:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.10_L2_Ensure_MSS_TcpMaxDataRetransmissions_IPv6_How_many_times_unacknowledged_data_is_retransmitted_is_set_to_Enabled_3:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.11_L2_Ensure_MSS_TcpMaxDataRetransmissions_How_many_times_unacknowledged_data_is_retransmitted_is_set_to_Enabled_3:def:1
oval:simp.cis.windows2012r2.2.4.0.18.4.12_L1_Ensure_MSS_WarningLevel_Percentage_threshold_for_the_security_event_log_at_which_the_system_will_generate_a_warning_is_set_to_Enabled_90_or_less:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.4.1_L1_Ensure_Turn_off_multicast_name_resolution_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.9.1_L2_Ensure_Turn_on_Mapper_IO_LLTDIO_driver_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.9.2_L2_Ensure_Turn_on_Responder_RSPNDR_driver_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.10.2_L2_Ensure_Turn_off_Microsoft_Peer-to-Peer_Networking_Services_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.11.2_L1_Ensure_Prohibit_installation_and_configuration_of_Network_Bridge_on_your_DNS_domain_network_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.11.3_L1_Ensure_Require_domain_users_to_elevate_when_setting_a_networks_location_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.14.1_L1_Ensure_Hardened_UNC_Paths_is_set_to_Enabled_with_Require_Mutual_Authentication_and_Require_Integrity_set_for_all_NETLOGON_and_SYSVOL_shares:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.19.2.1_L2_Disable_IPv6_Ensure_TCPIP6_Parameter_DisabledComponents_is_set_to_0xff_255:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.20.1_L2_Ensure_Configuration_of_wireless_settings_using_Windows_Connect_Now_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.20.2_L2_Ensure_Prohibit_access_of_the_Windows_Connect_Now_wizards_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.21.1_L1_Ensure_Minimize_the_number_of_simultaneous_connections_to_the_Internet_or_a_Windows_Domain_is_set_to_Enabled_1__Minimize_simultaneous_connections:def:1
oval:simp.cis.windows2012r2.2.4.0.18.5.21.2_L2_Ensure_Prohibit_connection_to_non-domain_networks_when_connected_to_domain_authenticated_network_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.7.1.1_L2_Ensure_Turn_off_notifications_network_usage_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.3.1_L1_Ensure_Include_command_line_in_process_creation_events_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.4.1_L1_Ensure_Encryption_Oracle_Remediation_is_set_to_Enabled_Force_Updated_Clients:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.4.2_L1_Ensure_Remote_host_allows_delegation_of_non-exportable_credentials_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.14.1_L1_Ensure_Boot-Start_Driver_Initialization_Policy_is_set_to_Enabled_Good_unknown_and_bad_but_critical:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.21.2_L1_Ensure_Configure_registry_policy_processing_Do_not_apply_during_periodic_background_processing_is_set_to_Enabled_FALSE:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.21.3_L1_Ensure_Configure_registry_policy_processing_Process_even_if_the_Group_Policy_objects_have_not_changed_is_set_to_Enabled_TRUE:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.21.4_L1_Ensure_Turn_off_background_refresh_of_Group_Policy_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.1_L1_Ensure_Turn_off_downloading_of_print_drivers_over_HTTP_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.2_L2_Ensure_Turn_off_handwriting_personalization_data_sharing_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.3_L2_Ensure_Turn_off_handwriting_recognition_error_reporting_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.4_L2_Ensure_Turn_off_Internet_Connection_Wizard_if_URL_connection_is_referring_to_Microsoft.com_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.5_L1_Ensure_Turn_off_Internet_download_for_Web_publishing_and_online_ordering_wizards_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.6_L2_Ensure_Turn_off_printing_over_HTTP_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.7_L2_Ensure_Turn_off_Registration_if_URL_connection_is_referring_to_Microsoft.com_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.8_L2_Ensure_Turn_off_Search_Companion_content_file_updates_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.9_L2_Ensure_Turn_off_the_Order_Prints_picture_task_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.10_L2_Ensure_Turn_off_the_Publish_to_Web_task_for_files_and_folders_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.11_L2_Ensure_Turn_off_the_Windows_Messenger_Customer_Experience_Improvement_Program_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.12_L2_Ensure_Turn_off_Windows_Customer_Experience_Improvement_Program_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.22.1.13_L2_Ensure_Turn_off_Windows_Error_Reporting_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.27.1_L2_Ensure_Disallow_copying_of_user_input_methods_to_the_system_account_for_sign-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.28.1_L1_Ensure_Do_not_display_network_selection_UI_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.28.2_L1_Ensure_Do_not_enumerate_connected_users_on_domain-joined_computers_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.28.3_L1_Ensure_Enumerate_local_users_on_domain-joined_computers_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.28.4_L1_Ensure_Turn_off_app_notifications_on_the_lock_screen_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.28.5_L1_Ensure_Turn_off_picture_password_sign-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.28.6_L1_Ensure_Turn_on_convenience_PIN_sign-in_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.34.6.1_L1_Ensure_Require_a_password_when_a_computer_wakes_on_battery_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.34.6.2_L1_Ensure_Require_a_password_when_a_computer_wakes_plugged_in_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.36.1_L1_Ensure_Configure_Offer_Remote_Assistance_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.36.2_L1_Ensure_Configure_Solicited_Remote_Assistance_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.37.1_L1_Ensure_Enable_RPC_Endpoint_Mapper_Client_Authentication_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.37.2_L2_Ensure_Restrict_Unauthenticated_RPC_clients_is_set_to_Enabled_Authenticated_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.47.5.1_L2_Ensure_Microsoft_Support_Diagnostic_Tool_Turn_on_MSDT_interactive_communication_with_support_provider_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.47.11.1_L2_Ensure_EnableDisable_PerfTrack_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.49.1_L2_Ensure_Turn_off_the_advertising_ID_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.52.1.1_L2_Ensure_Enable_Windows_NTP_Client_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.8.52.1.2_L2_Ensure_Enable_Windows_NTP_Server_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.6.1_L1_Ensure_Allow_Microsoft_accounts_to_be_optional_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.8.1_L1_Ensure_Disallow_Autoplay_for_non-volume_devices_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.8.2_L1_Ensure_Set_the_default_behavior_for_AutoRun_is_set_to_Enabled_Do_not_execute_any_autorun_commands:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.8.3_L1_Ensure_Turn_off_Autoplay_is_set_to_Enabled_All_drives:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.15.1_L1_Ensure_Do_not_display_the_password_reveal_button_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.15.2_L1_Ensure_Enumerate_administrator_accounts_on_elevation_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.24.1_L1_Ensure_EMET_5.52_or_higher_is_installed:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.24.2_L1_Ensure_Default_Action_and_Mitigation_Settings_is_set_to_Enabled_plus_subsettings:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.24.3_L1_Ensure_Default_Protections_for_Internet_Explorer_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.24.4_L1_Ensure_Default_Protections_for_Popular_Software_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.24.5_L1_Ensure_Default_Protections_for_Recommended_Software_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.24.6_L1_Ensure_System_ASLR_is_set_to_Enabled_Application_Opt-In:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.24.7_L1_Ensure_System_DEP_is_set_to_Enabled_Application_Opt-Out:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.24.8_L1_Ensure_System_SEHOP_is_set_to_Enabled_Application_Opt-Out:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.26.1.1_L1_Ensure_Application_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.26.1.2_L1_Ensure_Application_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.26.2.1_L1_Ensure_Security_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.26.2.2_L1_Ensure_Security_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_196608_or_greater:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.26.3.1_L1_Ensure_Setup_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.26.3.2_L1_Ensure_Setup_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.26.4.1_L1_Ensure_System_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.26.4.2_L1_Ensure_System_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.30.2_L1_Ensure_Turn_off_Data_Execution_Prevention_for_Explorer_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.30.3_L1_Ensure_Turn_off_heap_termination_on_corruption_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.30.4_L1_Ensure_Turn_off_shell_protocol_protected_mode_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.39.1.1_L2_Ensure_Turn_off_Windows_Location_Provider_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.39.2_L2_Ensure_Turn_off_location_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.52.1_L1_Ensure_Prevent_the_usage_of_OneDrive_for_file_storage_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.52.2_L1_Ensure_Prevent_the_usage_of_OneDrive_for_file_storage_on_Windows_8.1_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.2.2_L1_Ensure_Do_not_allow_passwords_to_be_saved_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.2.1_L2_Ensure_Restrict_Remote_Desktop_Services_users_to_a_single_Remote_Desktop_Services_session_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.3.1_L2_Ensure_Do_not_allow_COM_port_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.3.2_L1_Ensure_Do_not_allow_drive_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.3.3_L2_Ensure_Do_not_allow_LPT_port_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.3.4_L2_Ensure_Do_not_allow_supported_Plug_and_Play_device_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.9.1_L1_Ensure_Always_prompt_for_password_upon_connection_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.9.2_L1_Ensure_Require_secure_RPC_communication_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.9.3_L1_Ensure_Require_use_of_specific_security_layer_for_remote_RDP_connections_is_set_to_Enabled_SSL:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.9.4_L1_Ensure_Require_user_authentication_for_remote_connections_by_using_Network_Level_Authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.9.5_L1_Ensure_Set_client_connection_encryption_level_is_set_to_Enabled_High_Level:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.10.1_L2_Ensure_Set_time_limit_for_active_but_idle_Remote_Desktop_Services_sessions_is_set_to_Enabled_15_minutes_or_less:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.10.2_L2_Ensure_Set_time_limit_for_disconnected_sessions_is_set_to_Enabled_1_minute:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.11.1_L1_Ensure_Do_not_delete_temp_folders_upon_exit_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.59.3.11.2_L1_Ensure_Do_not_use_temporary_folders_per_session_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.60.1_L1_Ensure_Prevent_downloading_of_enclosures_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.61.2_L1_Ensure_Allow_indexing_of_encrypted_files_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.61.3_L2_Ensure_Set_what_information_is_shared_in_Search_is_set_to_Enabled_Anonymous_info:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.66.1_L2_Ensure_Turn_off_KMS_Client_Online_AVS_Validation_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.77.3.1_L1_Ensure_Configure_local_setting_override_for_reporting_to_Microsoft_MAPS_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.77.3.2_L2_Ensure_Join_Microsoft_MAPS_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.77.7.1_L1_Ensure_Turn_on_behavior_monitoring_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.77.9.1_L2_Ensure_Configure_Watson_events_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.77.10.1_L1_Ensure_Scan_removable_drives_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.77.10.2_L1_Ensure_Turn_on_e-mail_scanning_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.77.14_L1_Ensure_Turn_off_Windows_Defender_AntiVirus_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.80.1.1_L1_Ensure_Configure_Windows_Defender_SmartScreen_is_set_to_Enabled_Warn_and_prevent_bypass:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.81.2.1_L1_Ensure_Configure_Default_consent_is_set_to_Enabled_Always_ask_before_sending_data:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.81.3_L1_Ensure_Automatically_send_memory_dumps_for_OS-generated_error_reports_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.85.1_L1_Ensure_Allow_user_control_over_installs_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.85.2_L1_Ensure_Always_install_with_elevated_privileges_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.85.3_L2_Ensure_Prevent_Internet_Explorer_security_prompt_for_Windows_Installer_scripts_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.86.1_L1_Ensure_Sign-in_and_lock_last_interactive_user_automatically_after_a_restart_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.95.1_L1_Ensure_Turn_on_PowerShell_Script_Block_Logging_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.95.2_L1_Ensure_Turn_on_PowerShell_Transcription_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.97.1.1_L1_Ensure_Allow_Basic_authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.97.1.2_L1_Ensure_Allow_unencrypted_traffic_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.97.1.3_L1_Ensure_Disallow_Digest_authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.97.2.1_L1_Ensure_Allow_Basic_authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.97.2.2_L2_Ensure_Allow_remote_server_management_through_WinRM_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.97.2.3_L1_Ensure_Allow_unencrypted_traffic_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.97.2.4_L1_Ensure_Disallow_WinRM_from_storing_RunAs_credentials_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.98.1_L2_Ensure_Allow_Remote_Shell_Access_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.102.2_L1_Ensure_Configure_Automatic_Updates_is_set_to_Enabled:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.102.3L1_Ensure_Configure_Automatic_Updates_Scheduled_install_day_is_set_to_0-_Every_day:def:1
oval:simp.cis.windows2012r2.2.4.0.18.9.102.4_L1_Ensure_No_auto-restart_with_logged_on_users_for_scheduled_automatic_updates_installations_is_set_to_Disabled:def:1
oval:simp.cis.windows2012r2.2.4.0.19.1.3.1_L1_Ensure_Enable_screen_saver_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.1.3.2_L1_Ensure_Force_specific_screen_saver_Screen_saver_executable_name_is_set_to_Enabled_scrnsave.scr:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.1.3.3_L1_Ensure_Password_protect_the_screen_saver_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.1.3.4_L1_Ensure_Screen_saver_timeout_is_set_to_Enabled_900_seconds_or_fewer_but_not_0:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.5.1.1_L1_Ensure_Turn_off_toast_notifications_on_the_lock_screen_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.6.6.1.1_L2_Ensure_Turn_off_Help_Experience_Improvement_Program_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.7.4.1_L1_Ensure_Do_not_preserve_zone_information_in_file_attachments_is_set_to_Disabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.7.4.2_L1_Ensure_Notify_antivirus_programs_when_opening_attachments_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.7.26.1_L1_Ensure_Prevent_users_from_sharing_files_within_their_profile._is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.7.41.1_L1_Ensure_Always_install_with_elevated_privileges_is_set_to_Disabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2012r2.2.4.0.19.7.45.2.1_L2_Ensure_Prevent_Codec_Download_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.

Windows 2016 (379/379 [100%])

oval:simp.cis.windows2016.1.2.0.1.1.1_L1_Ensure_Enforce_password_history_is_set_to_24_or_more_passwords:def:1
oval:simp.cis.windows2016.1.2.0.1.1.2_L1_Ensure_Maximum_password_age_is_set_to_60_or_fewer_days_but_not_0:def:1
oval:simp.cis.windows2016.1.2.0.1.1.3_L1_Ensure_Minimum_password_age_is_set_to_1_or_more_days:def:1
oval:simp.cis.windows2016.1.2.0.1.1.4_L1_Ensure_Minimum_password_length_is_set_to_14_or_more_characters:def:1
oval:simp.cis.windows2016.1.2.0.1.1.5_L1_Ensure_Password_must_meet_complexity_requirements_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.1.1.6_L1_Ensure_Store_passwords_using_reversible_encryption_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.1.2.1_L1_Ensure_Account_lockout_duration_is_set_to_15_or_more_minutes:def:1
oval:simp.cis.windows2016.1.2.0.1.2.2_L1_Ensure_Account_lockout_threshold_is_set_to_10_or_fewer_invalid_logon_attempts_but_not_0:def:1
oval:simp.cis.windows2016.1.2.0.1.2.3_L1_Ensure_Reset_account_lockout_counter_after_is_set_to_15_or_more_minutes:def:1
oval:simp.cis.windows2016.1.2.0.2.2.1_L1_Ensure_Access_Credential_Manager_as_a_trusted_caller_is_set_to_No_One:def:1
oval:simp.cis.windows2016.1.2.0.2.2.2_L1_Ensure_Access_this_computer_from_the_network_is_set_to_Administrators_Authenticated_Users_ENTERPRISE_DOMAIN_CONTROLLERS_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.3_L1_Ensure_Access_this_computer_from_the_network__is_set_to_Administrators_Authenticated_Users_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.4_L1_Ensure_Act_as_part_of_the_operating_system_is_set_to_No_One:def:1
oval:simp.cis.windows2016.1.2.0.2.2.5_L1_Ensure_Add_workstations_to_domain_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.6_L1_Ensure_Adjust_memory_quotas_for_a_process_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2016.1.2.0.2.2.7_L1_Ensure_Allow_log_on_locally_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.8_L1_Ensure_Allow_log_on_through_Remote_Desktop_Services_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.9_L1_Ensure_Allow_log_on_through_Remote_Desktop_Services_is_set_to_Administrators_Remote_Desktop_Users_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.10_L1_Ensure_Back_up_files_and_directories_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.11_L1_Ensure_Change_the_system_time_is_set_to_Administrators_LOCAL_SERVICE:def:1
oval:simp.cis.windows2016.1.2.0.2.2.12_L1_Ensure_Change_the_time_zone_is_set_to_Administrators_LOCAL_SERVICE:def:1
oval:simp.cis.windows2016.1.2.0.2.2.13_L1_Ensure_Create_a_pagefile_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.14_L1_Ensure_Create_a_token_object_is_set_to_No_One:def:1
oval:simp.cis.windows2016.1.2.0.2.2.15_L1_Ensure_Create_global_objects_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE:def:1
oval:simp.cis.windows2016.1.2.0.2.2.16_L1_Ensure_Create_permanent_shared_objects_is_set_to_No_One:def:1
oval:simp.cis.windows2016.1.2.0.2.2.17_L1_Ensure_Create_symbolic_links_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.18_L1_Ensure_Create_symbolic_links_is_set_to_Administrators_NT_VIRTUAL_MACHINEVirtual_Machines_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.19_L1_Ensure_Debug_programs_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.20_L1_Ensure_Deny_access_to_this_computer_from_the_network_to_include_Guests_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.21_L1_Ensure_Deny_access_to_this_computer_from_the_network_to_include_Guests_Local_account_and_member_of_Administrators_group_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.22_L1_Ensure_Deny_log_on_as_a_batch_job_to_include_Guests:def:1
oval:simp.cis.windows2016.1.2.0.2.2.23_L1_Ensure_Deny_log_on_as_a_service_to_include_Guests:def:1
oval:simp.cis.windows2016.1.2.0.2.2.24_L1_Ensure_Deny_log_on_locally_to_include_Guests:def:1
oval:simp.cis.windows2016.1.2.0.2.2.25_L1_Ensure_Deny_log_on_through_Remote_Desktop_Services_to_include_Guests_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.26_L1_Ensure_Deny_log_on_through_Remote_Desktop_Services_is_set_to_Guests_Local_account_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.27_L1_Ensure_Enable_computer_and_user_accounts_to_be_trusted_for_delegation_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.28_L1_Ensure_Enable_computer_and_user_accounts_to_be_trusted_for_delegation_is_set_to_No_One_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.29_L1_Ensure_Force_shutdown_from_a_remote_system_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.30_L1_Ensure_Generate_security_audits_is_set_to_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2016.1.2.0.2.2.31_L1_Ensure_Impersonate_a_client_after_authentication_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.32_L1_Ensure_Impersonate_a_client_after_authentication_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE_and_when_the_Web_Server_IIS_Role_with_Web_Services_Role_Service_is_installed_IIS_IUSRS_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.33_L1_Ensure_Increase_scheduling_priority_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.34_L1_Ensure_Load_and_unload_device_drivers_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.35_L1_Ensure_Lock_pages_in_memory_is_set_to_No_One:def:1
oval:simp.cis.windows2016.1.2.0.2.2.36_L2_Ensure_Log_on_as_a_batch_job_is_set_to_Administrators_DC_Only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.37_L1_Ensure_Manage_auditing_and_security_log_is_set_to_Administrators_and_when_Exchange_is_running_in_the_environment_Exchange_Servers_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.38_L1_Ensure_Manage_auditing_and_security_log_is_set_to_Administrators_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.39_L1_Ensure_Modify_an_object_label_is_set_to_No_One:def:1
oval:simp.cis.windows2016.1.2.0.2.2.40_L1_Ensure_Modify_firmware_environment_values_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.41_L1_Ensure_Perform_volume_maintenance_tasks_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.42_L1_Ensure_Profile_single_process_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.43_L1_Ensure_Profile_system_performance_is_set_to_Administrators_NT_SERVICEWdiServiceHost:def:1
oval:simp.cis.windows2016.1.2.0.2.2.44_L1_Ensure_Replace_a_process_level_token_is_set_to_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2016.1.2.0.2.2.45_L1_Ensure_Restore_files_and_directories_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.46_L1_Ensure_Shut_down_the_system_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.2.47_L1_Ensure_Synchronize_directory_service_data_is_set_to_No_One_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.2.48_L1_Ensure_Take_ownership_of_files_or_other_objects_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.3.1.1_L1_Ensure_Accounts_Administrator_account_status_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.1.2_L1_Ensure_Accounts_Block_Microsoft_accounts_is_set_to_Users_cant_add_or_log_on_with_Microsoft_accounts:def:1
oval:simp.cis.windows2016.1.2.0.2.3.1.3_L1_Ensure_Accounts_Guest_account_status_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.1.4_L1_Ensure_Accounts_Limit_local_account_use_of_blank_passwords_to_console_logon_only_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.1.5_L1_Configure_Accounts_Rename_administrator_account:def:1
oval:simp.cis.windows2016.1.2.0.2.3.1.6_L1_Configure_Accounts_Rename_guest_account:def:1
oval:simp.cis.windows2016.1.2.0.2.3.2.1_L1_Ensure_Audit_Force_audit_policy_subcategory_settings_Windows_Vista_or_later_to_override_audit_policy_category_settings_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.2.2_L1_Ensure_Audit_Shut_down_system_immediately_if_unable_to_log_security_audits_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.4.1_L1_Ensure_Devices_Allowed_to_format_and_eject_removable_media_is_set_to_Administrators:def:1
oval:simp.cis.windows2016.1.2.0.2.3.4.2_L1_Ensure_Devices_Prevent_users_from_installing_printer_drivers_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.5.1_L1_Ensure_Domain_controller_Allow_server_operators_to_schedule_tasks_is_set_to_Disabled_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.5.2_L1_Ensure_Domain_controller_LDAP_server_signing_requirements_is_set_to_Require_signing_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.5.3_L1_Ensure_Domain_controller_Refuse_machine_account_password_changes_is_set_to_Disabled_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.6.1_L1_Ensure_Domain_member_Digitally_encrypt_or_sign_secure_channel_data_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.6.2_L1_Ensure_Domain_member_Digitally_encrypt_secure_channel_data_when_possible_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.6.3_L1_Ensure_Domain_member_Digitally_sign_secure_channel_data_when_possible_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.6.4_L1_Ensure_Domain_member_Disable_machine_account_password_changes_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.6.5_L1_Ensure_Domain_member_Maximum_machine_account_password_age_is_set_to_30_or_fewer_days_but_not_0:def:1
oval:simp.cis.windows2016.1.2.0.2.3.6.6_L1_Ensure_Domain_member_Require_strong_Windows_2000_or_later_session_key_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.1_L1_Ensure_Interactive_logon_Do_not_display_last_user_name_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.2_L1_Ensure_Interactive_logon_Do_not_require_CTRLALTDEL_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.3_L1_Ensure_Interactive_logon_Machine_inactivity_limit_is_set_to_900_or_fewer_seconds_but_not_0:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.4_L1_Configure_Interactive_logon_Message_text_for_users_attempting_to_log_on:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.5_L1_Configure_Interactive_logon_Message_title_for_users_attempting_to_log_on:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.6_L2_Ensure_Interactive_logon_Number_of_previous_logons_to_cache_in_case_domain_controller_is_not_available_is_set_to_4_or_fewer_logons_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.7_L1_Ensure_Interactive_logon_Prompt_user_to_change_password_before_expiration_is_set_to_between_5_and_14_days:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.8_L1_Ensure_Interactive_logon_Require_Domain_Controller_Authentication_to_unlock_workstation_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.7.9_L1_Ensure_Interactive_logon_Smart_card_removal_behavior_is_set_to_Lock_Workstation_or_higher:def:1
oval:simp.cis.windows2016.1.2.0.2.3.8.1_L1_Ensure_Microsoft_network_client_Digitally_sign_communications_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.8.2_L1_Ensure_Microsoft_network_client_Digitally_sign_communications_if_server_agrees_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.8.3_L1_Ensure_Microsoft_network_client_Send_unencrypted_password_to_third-party_SMB_servers_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.9.1_L1_Ensure_Microsoft_network_server_Amount_of_idle_time_required_before_suspending_session_is_set_to_15_or_fewer_minutes:def:1
oval:simp.cis.windows2016.1.2.0.2.3.9.2_L1_Ensure_Microsoft_network_server_Digitally_sign_communications_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.9.3_L1_Ensure_Microsoft_network_server_Digitally_sign_communications_if_client_agrees_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.9.4_L1_Ensure_Microsoft_network_server_Disconnect_clients_when_logon_hours_expire_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.9.5_L1_Ensure_Microsoft_network_server_Server_SPN_target_name_validation_level_is_set_to_Accept_if_provided_by_client_or_higher_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.1_L1_Ensure_Network_access_Allow_anonymous_SIDName_translation_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.2_L1_Ensure_Network_access_Do_not_allow_anonymous_enumeration_of_SAM_accounts_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.3_L1_Ensure_Network_access_Do_not_allow_anonymous_enumeration_of_SAM_accounts_and_shares_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.4_L2_Ensure_Network_access_Do_not_allow_storage_of_passwords_and_credentials_for_network_authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.5_L1_Ensure_Network_access_Let_Everyone_permissions_apply_to_anonymous_users_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.6_L1_Configure_Network_access_Named_Pipes_that_can_be_accessed_anonymously_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.7_L1_Configure_Network_access_Named_Pipes_that_can_be_accessed_anonymously_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.8_L1_Configure_Network_access_Remotely_accessible_registry_paths:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.9_L1_Configure_Network_access_Remotely_accessible_registry_paths_and_sub-paths:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.10_L1_Ensure_Network_access_Restrict_anonymous_access_to_Named_Pipes_and_Shares_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.11_L1_Ensure_Network_access_Restrict_clients_allowed_to_make_remote_calls_to_SAM_is_set_to_Administrators_Remote_Access_Allow_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.12_L1_Ensure_Network_access_Shares_that_can_be_accessed_anonymously_is_set_to_None:def:1
oval:simp.cis.windows2016.1.2.0.2.3.10.13L1_Ensure_Network_access_Sharing_and_security_model_for_local_accounts_is_set_to_Classic-_local_users_authenticate_as_themselves:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.1_L1_Ensure_Network_security_Allow_Local_System_to_use_computer_identity_for_NTLM_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.2_L1_Ensure_Network_security_Allow_LocalSystem_NULL_session_fallback_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.3_L1_Ensure_Network_Security_Allow_PKU2U_authentication_requests_to_this_computer_to_use_online_identities_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.4_L1_Ensure_Network_security_Configure_encryption_types_allowed_for_Kerberos_is_set_to_AES128_HMAC_SHA1_AES256_HMAC_SHA1_Future_encryption_types:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.5_L1_Ensure_Network_security_Do_not_store_LAN_Manager_hash_value_on_next_password_change_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.6_L1_Ensure_Network_security_Force_logoff_when_logon_hours_expire_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.7_L1_Ensure_Network_security_LAN_Manager_authentication_level_is_set_to_Send_NTLMv2_response_only._Refuse_LM__NTLM:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.8_L1_Ensure_Network_security_LDAP_client_signing_requirements_is_set_to_Negotiate_signing_or_higher:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.9_L1_Ensure_Network_security_Minimum_session_security_for_NTLM_SSP_based_including_secure_RPC_clients_is_set_to_Require_NTLMv2_session_security_Require_128-bit_encryption:def:1
oval:simp.cis.windows2016.1.2.0.2.3.11.10_L1_Ensure_Network_security_Minimum_session_security_for_NTLM_SSP_based_including_secure_RPC_servers_is_set_to_Require_NTLMv2_session_security_Require_128-bit_encryption:def:1
oval:simp.cis.windows2016.1.2.0.2.3.13.1_L1_Ensure_Shutdown_Allow_system_to_be_shut_down_without_having_to_log_on_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.15.1_L1_Ensure_System_objects_Require_case_insensitivity_for_non-Windows_subsystems_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.15.2_L1_Ensure_System_objects_Strengthen_default_permissions_of_internal_system_objects_e.g._Symbolic_Links_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.17.1_L1_Ensure_User_Account_Control_Admin_Approval_Mode_for_the_Built-in_Administrator_account_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.17.2_L1_Ensure_User_Account_Control_Behavior_of_the_elevation_prompt_for_administrators_in_Admin_Approval_Mode_is_set_to_Prompt_for_consent_on_the_secure_desktop:def:1
oval:simp.cis.windows2016.1.2.0.2.3.17.3_L1_Ensure_User_Account_Control_Behavior_of_the_elevation_prompt_for_standard_users_is_set_to_Automatically_deny_elevation_requests:def:1
oval:simp.cis.windows2016.1.2.0.2.3.17.4_L1_Ensure_User_Account_Control_Detect_application_installations_and_prompt_for_elevation_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.17.5_L1_Ensure_User_Account_Control_Only_elevate_UIAccess_applications_that_are_installed_in_secure_locations_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.17.6_L1_Ensure_User_Account_Control_Run_all_administrators_in_Admin_Approval_Mode_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.17.7_L1_Ensure_User_Account_Control_Switch_to_the_secure_desktop_when_prompting_for_elevation_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.2.3.17.8_L1_Ensure_User_Account_Control_Virtualize_file_and_registry_write_failures_to_per-user_locations_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.9.1.1_L1_Ensure_Windows_Firewall_Domain_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2016.1.2.0.9.1.2_L1_Ensure_Windows_Firewall_Domain_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2016.1.2.0.9.1.3_L1_Ensure_Windows_Firewall_Domain_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2016.1.2.0.9.1.4_L1_Ensure_Windows_Firewall_Domain_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2016.1.2.0.9.1.5_L1_Ensure_Windows_Firewall_Domain_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewalldomainfw.log:def:1
oval:simp.cis.windows2016.1.2.0.9.1.6_L1_Ensure_Windows_Firewall_Domain_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2016.1.2.0.9.1.7_L1_Ensure_Windows_Firewall_Domain_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2016.1.2.0.9.1.8_L1_Ensure_Windows_Firewall_Domain_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2016.1.2.0.9.2.1_L1_Ensure_Windows_Firewall_Private_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2016.1.2.0.9.2.2_L1_Ensure_Windows_Firewall_Private_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2016.1.2.0.9.2.3_L1_Ensure_Windows_Firewall_Private_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2016.1.2.0.9.2.4_L1_Ensure_Windows_Firewall_Private_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2016.1.2.0.9.2.5_L1_Ensure_Windows_Firewall_Private_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewallprivatefw.log:def:1
oval:simp.cis.windows2016.1.2.0.9.2.6_L1_Ensure_Windows_Firewall_Private_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2016.1.2.0.9.2.7_L1_Ensure_Windows_Firewall_Private_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2016.1.2.0.9.2.8_L1_Ensure_Windows_Firewall_Private_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2016.1.2.0.9.3.1_L1_Ensure_Windows_Firewall_Public_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2016.1.2.0.9.3.2_L1_Ensure_Windows_Firewall_Public_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2016.1.2.0.9.3.3_L1_Ensure_Windows_Firewall_Public_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2016.1.2.0.9.3.4_L1_Ensure_Windows_Firewall_Public_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2016.1.2.0.9.3.5_L1_Ensure_Windows_Firewall_Public_Settings_Apply_local_firewall_rules_is_set_to_No:def:1
oval:simp.cis.windows2016.1.2.0.9.3.6_L1_Ensure_Windows_Firewall_Public_Settings_Apply_local_connection_security_rules_is_set_to_No:def:1
oval:simp.cis.windows2016.1.2.0.9.3.7_L1_Ensure_Windows_Firewall_Public_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewallpublicfw.log:def:1
oval:simp.cis.windows2016.1.2.0.9.3.8_L1_Ensure_Windows_Firewall_Public_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2016.1.2.0.9.3.9_L1_Ensure_Windows_Firewall_Public_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2016.1.2.0.9.3.10_L1_Ensure_Windows_Firewall_Public_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2016.1.2.0.17.1.1_L1_Ensure_Audit_Credential_Validation_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.1.2_L1_Ensure_Audit_Kerberos_Authentication_Service_is_set_to_Success_and_Failure_DC_Only:def:1
oval:simp.cis.windows2016.1.2.0.17.1.3_L1_Ensure_Audit_Kerberos_Service_Ticket_Operations_is_set_to_Success_and_Failure_DC_Only:def:1
oval:simp.cis.windows2016.1.2.0.17.2.1_L1_Ensure_Audit_Application_Group_Management_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.2.2_L1_Ensure_Audit_Computer_Account_Management_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.17.2.3_L1_Ensure_Audit_Distribution_Group_Management_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.17.2.4_L1_Ensure_Audit_Other_Account_Management_Events_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.17.2.5_L1_Ensure_Audit_Security_Group_Management_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.2.6_L1_Ensure_Audit_User_Account_Management_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.3.1_L1_Ensure_Audit_PNP_Activity_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.3.2_L1_Ensure_Audit_Process_Creation_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.4.1_L1_Ensure_Audit_Directory_Service_Access_is_set_to_include_Failure_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.17.4.2_L1_Ensure_Audit_Directory_Service_Changes_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2016.1.2.0.17.5.1_L1_Ensure_Audit_Account_Lockout_is_set_to_include_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.5.2_L1_Ensure_Audit_Group_Membership_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.5.3_L1_Ensure_Audit_Logoff_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.5.4_L1_Ensure_Audit_Logon_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.5.5_L1_Ensure_Audit_Other_LogonLogoff_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.5.6_L1_Ensure_Audit_Special_Logon_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.6.1_L1_Ensure_Audit_Detailed_File_Share_is_set_to_include_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.6.2_L1_Ensure_Audit_File_Share_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.6.3_L1_Ensure_Audit_Other_Object_Access_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.6.4_L1_Ensure_Audit_Removable_Storage_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.7.1_L1_Ensure_Audit_Audit_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.7.2_L1_Ensure_Audit_Authentication_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.7.3_L1_Ensure_Audit_Authorization_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.7.4_L1_Ensure_Audit_MPSSVC_Rule-Level_Policy_Change_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.7.5_L1_Ensure_Audit_Other_Policy_Change_Events_is_set_to_include_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.8.1_L1_Ensure_Audit_Sensitive_Privilege_Use_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.9.1_L1_Ensure_Audit_IPsec_Driver_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.9.2_L1_Ensure_Audit_Other_System_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.17.9.3_L1_Ensure_Audit_Security_State_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.9.4_L1_Ensure_Audit_Security_System_Extension_is_set_to_include_Success:def:1
oval:simp.cis.windows2016.1.2.0.17.9.5_L1_Ensure_Audit_System_Integrity_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2016.1.2.0.18.1.1.1_L1_Ensure_Prevent_enabling_lock_screen_camera_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.1.1.2_L1_Ensure_Prevent_enabling_lock_screen_slide_show_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.1.2.2_L1_Ensure_Allow_users_to_enable_online_speech_recognition_services_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.1.3_L2_Ensure_Allow_Online_Tips_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.2.1_L1_Ensure_LAPS_AdmPwd_GPO_Extension__CSE_is_installed_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.2.2_L1_Ensure_Do_not_allow_password_expiration_time_longer_than_required_by_policy_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.2.3_L1_Ensure_Enable_Local_Admin_Password_Management_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.2.4_L1_Ensure_Password_Settings_Password_Complexity_is_set_to_Enabled_Large_letters__small_letters__numbers__special_characters_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.2.5_L1_Ensure_Password_Settings_Password_Length_is_set_to_Enabled_15_or_more_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.2.6_L1_Ensure_Password_Settings_Password_Age_Days_is_set_to_Enabled_30_or_fewer_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.3.1_L1_Ensure_Apply_UAC_restrictions_to_local_accounts_on_network_logons_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.3.2_L1_Ensure_Configure_SMB_v1_client_driver_is_set_to_Enabled_Disable_driver_recommended:def:1
oval:simp.cis.windows2016.1.2.0.18.3.3_L1_Ensure_Configure_SMB_v1_server_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.3.4_L1_Ensure_Enable_Structured_Exception_Handling_Overwrite_Protection_SEHOP_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.3.5_L1_Ensure_Extended_Protection_for_LDAP_Authentication_Domain_Controllers_only_is_set_to_Enabled_Enabled_always_recommended_DC_Only:def:1
oval:simp.cis.windows2016.1.2.0.18.3.6_L1_Ensure_NetBT_NodeType_configuration_is_set_to_Enabled_P-node_recommended:def:1
oval:simp.cis.windows2016.1.2.0.18.3.7_L1_Ensure_WDigest_Authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.4.1_L1_Ensure_MSS_AutoAdminLogon_Enable_Automatic_Logon_not_recommended_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.4.2_L1_Ensure_MSS_DisableIPSourceRouting_IPv6_IP_source_routing_protection_level_protects_against_packet_spoofing_is_set_to_Enabled_Highest_protection_source_routing_is_completely_disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.4.3_L1_Ensure_MSS_DisableIPSourceRouting_IP_source_routing_protection_level_protects_against_packet_spoofing_is_set_to_Enabled_Highest_protection_source_routing_is_completely_disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.4.4_L1_Ensure_MSS_EnableICMPRedirect_Allow_ICMP_redirects_to_override_OSPF_generated_routes_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.4.5_L2_Ensure_MSS_KeepAliveTime_How_often_keep-alive_packets_are_sent_in_milliseconds_is_set_to_Enabled_300000_or_5_minutes_recommended:def:1
oval:simp.cis.windows2016.1.2.0.18.4.6_L1_Ensure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.4.7_L2_Ensure_MSS_PerformRouterDiscovery_Allow_IRDP_to_detect_and_configure_Default_Gateway_addresses_could_lead_to_DoS_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.4.8_L1_Ensure_MSS_SafeDllSearchMode_Enable_Safe_DLL_search_mode_recommended_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.4.9_L1_Ensure_MSS_ScreenSaverGracePeriod_The_time_in_seconds_before_the_screen_saver_grace_period_expires_0_recommended_is_set_to_Enabled_5_or_fewer_seconds:def:1
oval:simp.cis.windows2016.1.2.0.18.4.10_L2_Ensure_MSS_TcpMaxDataRetransmissions_IPv6_How_many_times_unacknowledged_data_is_retransmitted_is_set_to_Enabled_3:def:1
oval:simp.cis.windows2016.1.2.0.18.4.11_L2_Ensure_MSS_TcpMaxDataRetransmissions_How_many_times_unacknowledged_data_is_retransmitted_is_set_to_Enabled_3:def:1
oval:simp.cis.windows2016.1.2.0.18.4.12_L1_Ensure_MSS_WarningLevel_Percentage_threshold_for_the_security_event_log_at_which_the_system_will_generate_a_warning_is_set_to_Enabled_90_or_less:def:1
oval:simp.cis.windows2016.1.2.0.18.5.4.1_L1_Ensure_Turn_off_multicast_name_resolution_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.5.1_L2_Ensure_Enable_Font_Providers_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.8.1_L1_Ensure_Enable_insecure_guest_logons_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.9.1_L2_Ensure_Turn_on_Mapper_IO_LLTDIO_driver_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.9.2_L2_Ensure_Turn_on_Responder_RSPNDR_driver_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.10.2_L2_Ensure_Turn_off_Microsoft_Peer-to-Peer_Networking_Services_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.11.2_L1_Ensure_Prohibit_installation_and_configuration_of_Network_Bridge_on_your_DNS_domain_network_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.11.3_L1_Ensure_Prohibit_use_of_Internet_Connection_Sharing_on_your_DNS_domain_network_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.11.4_L1_Ensure_Require_domain_users_to_elevate_when_setting_a_networks_location_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.14.1_L1_Ensure_Hardened_UNC_Paths_is_set_to_Enabled_with_Require_Mutual_Authentication_and_Require_Integrity_set_for_all_NETLOGON_and_SYSVOL_shares:def:1
oval:simp.cis.windows2016.1.2.0.18.5.19.2.1_L2_Disable_IPv6_Ensure_TCPIP6_Parameter_DisabledComponents_is_set_to_0xff_255:def:1
oval:simp.cis.windows2016.1.2.0.18.5.20.1_L2_Ensure_Configuration_of_wireless_settings_using_Windows_Connect_Now_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.20.2_L2_Ensure_Prohibit_access_of_the_Windows_Connect_Now_wizards_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.5.21.1_L1_Ensure_Minimize_the_number_of_simultaneous_connections_to_the_Internet_or_a_Windows_Domain_is_set_to_Enabled_1__Minimize_simultaneous_connections:def:1
oval:simp.cis.windows2016.1.2.0.18.5.21.2_L2_Ensure_Prohibit_connection_to_non-domain_networks_when_connected_to_domain_authenticated_network_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.7.1.1_L2_Ensure_Turn_off_notifications_network_usage_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.3.1_L1_Ensure_Include_command_line_in_process_creation_events_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.4.1_L1_Ensure_Encryption_Oracle_Remediation_is_set_to_Enabled_Force_Updated_Clients:def:1
oval:simp.cis.windows2016.1.2.0.18.8.4.2_L1_Ensure_Remote_host_allows_delegation_of_non-exportable_credentials_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.5.1_NG_Ensure_Turn_On_Virtualization_Based_Security_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.5.2_NG_Ensure_Turn_On_Virtualization_Based_Security_Select_Platform_Security_Level_is_set_to_Secure_Boot_and_DMA_Protection:def:1
oval:simp.cis.windows2016.1.2.0.18.8.5.3_NG_Ensure_Turn_On_Virtualization_Based_Security_Virtualization_Based_Protection_of_Code_Integrity_is_set_to_Enabled_with_UEFI_lock:def:1
oval:simp.cis.windows2016.1.2.0.18.8.5.4_NG_Ensure_Turn_On_Virtualization_Based_Security_Require_UEFI_Memory_Attributes_Table_is_set_to_True_checked:def:1
oval:simp.cis.windows2016.1.2.0.18.8.5.5_NG_Ensure_Turn_On_Virtualization_Based_Security_Credential_Guard_Configuration_is_set_to_Enabled_with_UEFI_lock_MS_Only:def:1
oval:simp.cis.windows2016.1.2.0.18.8.5.6_NG_Ensure_Turn_On_Virtualization_Based_Security_Credential_Guard_Configuration_is_set_to_Disabled_DC_Only:def:1
oval:simp.cis.windows2016.1.2.0.18.8.5.7_NG_Ensure_Turn_On_Virtualization_Based_Security_Secure_Launch_Configuration_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.14.1_L1_Ensure_Boot-Start_Driver_Initialization_Policy_is_set_to_Enabled_Good_unknown_and_bad_but_critical:def:1
oval:simp.cis.windows2016.1.2.0.18.8.21.2_L1_Ensure_Configure_registry_policy_processing_Do_not_apply_during_periodic_background_processing_is_set_to_Enabled_FALSE:def:1
oval:simp.cis.windows2016.1.2.0.18.8.21.3_L1_Ensure_Configure_registry_policy_processing_Process_even_if_the_Group_Policy_objects_have_not_changed_is_set_to_Enabled_TRUE:def:1
oval:simp.cis.windows2016.1.2.0.18.8.21.4_L1_Ensure_Continue_experiences_on_this_device_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.21.5_L1_Ensure_Turn_off_background_refresh_of_Group_Policy_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.1_L1_Ensure_Turn_off_downloading_of_print_drivers_over_HTTP_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.2_L2_Ensure_Turn_off_handwriting_personalization_data_sharing_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.3_L2_Ensure_Turn_off_handwriting_recognition_error_reporting_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.4_L2_Ensure_Turn_off_Internet_Connection_Wizard_if_URL_connection_is_referring_to_Microsoft.com_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.5_L1_Ensure_Turn_off_Internet_download_for_Web_publishing_and_online_ordering_wizards_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.6_L2_Ensure_Turn_off_printing_over_HTTP_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.7_L2_Ensure_Turn_off_Registration_if_URL_connection_is_referring_to_Microsoft.com_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.8_L2_Ensure_Turn_off_Search_Companion_content_file_updates_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.9_L2_Ensure_Turn_off_the_Order_Prints_picture_task_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.10_L2_Ensure_Turn_off_the_Publish_to_Web_task_for_files_and_folders_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.11_L2_Ensure_Turn_off_the_Windows_Messenger_Customer_Experience_Improvement_Program_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.12_L2_Ensure_Turn_off_Windows_Customer_Experience_Improvement_Program_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.22.1.13_L2_Ensure_Turn_off_Windows_Error_Reporting_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.25.1_L2_Ensure_Support_device_authentication_using_certificate_is_set_to_Enabled_Automatic:def:1
oval:simp.cis.windows2016.1.2.0.18.8.27.1_L2_Ensure_Disallow_copying_of_user_input_methods_to_the_system_account_for_sign-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.28.1_L1_Ensure_Block_user_from_showing_account_details_on_sign-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.28.2_L1_Ensure_Do_not_display_network_selection_UI_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.28.3_L1_Ensure_Do_not_enumerate_connected_users_on_domain-joined_computers_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.28.4_L1_Ensure_Enumerate_local_users_on_domain-joined_computers_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.8.28.5_L1_Ensure_Turn_off_app_notifications_on_the_lock_screen_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.28.6_L1_Ensure_Turn_off_picture_password_sign-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.28.7_L1_Ensure_Turn_on_convenience_PIN_sign-in_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.34.6.1_L2_Ensure_Allow_network_connectivity_during_connected-standby_on_battery_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.34.6.2_L2_Ensure_Allow_network_connectivity_during_connected-standby_plugged_in_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.34.6.3_L1_Ensure_Require_a_password_when_a_computer_wakes_on_battery_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.34.6.4_L1_Ensure_Require_a_password_when_a_computer_wakes_plugged_in_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.36.1_L1_Ensure_Configure_Offer_Remote_Assistance_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.36.2_L1_Ensure_Configure_Solicited_Remote_Assistance_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.37.1_L1_Ensure_Enable_RPC_Endpoint_Mapper_Client_Authentication_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.8.37.2_L2_Ensure_Restrict_Unauthenticated_RPC_clients_is_set_to_Enabled_Authenticated_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.8.47.5.1_L2_Ensure_Microsoft_Support_Diagnostic_Tool_Turn_on_MSDT_interactive_communication_with_support_provider_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.47.11.1_L2_Ensure_EnableDisable_PerfTrack_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.49.1_L2_Ensure_Turn_off_the_advertising_ID_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.52.1.1_L2_Ensure_Enable_Windows_NTP_Client_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.8.52.1.2_L2_Ensure_Enable_Windows_NTP_Server_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2016.1.2.0.18.9.4.1_L2_Ensure_Allow_a_Windows_app_to_share_application_data_between_users_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.6.1_L1_Ensure_Allow_Microsoft_accounts_to_be_optional_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.8.1_L1_Ensure_Disallow_Autoplay_for_non-volume_devices_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.8.2_L1_Ensure_Set_the_default_behavior_for_AutoRun_is_set_to_Enabled_Do_not_execute_any_autorun_commands:def:1
oval:simp.cis.windows2016.1.2.0.18.9.8.3_L1_Ensure_Turn_off_Autoplay_is_set_to_Enabled_All_drives:def:1
oval:simp.cis.windows2016.1.2.0.18.9.10.1.1_L1_Ensure_Configure_enhanced_anti-spoofing_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.12.1_L2_Ensure_Allow_Use_of_Camera_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.13.1_L1_Ensure_Turn_off_Microsoft_consumer_experiences_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.14.1_L1_Ensure_Require_pin_for_pairing_is_set_to_Enabled_First_Time_OR_Enabled_Always:def:1
oval:simp.cis.windows2016.1.2.0.18.9.15.1_L1_Ensure_Do_not_display_the_password_reveal_button_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.15.2_L1_Ensure_Enumerate_administrator_accounts_on_elevation_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.16.1L1_Ensure_Allow_Telemetry_is_set_to_Enabled_0-Security_Enterprise_Only_or_Enabled_1-_Basic:def:1
oval:simp.cis.windows2016.1.2.0.18.9.16.2_L2_Ensure_Configure_Authenticated_Proxy_usage_for_the_Connected_User_Experience_and_Telemetry_service_is_set_to_Enabled_Disable_Authenticated_Proxy_usage:def:1
oval:simp.cis.windows2016.1.2.0.18.9.16.3_L1_Ensure_Do_not_show_feedback_notifications_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.16.4_L1_Ensure_Toggle_user_control_over_Insider_builds_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.26.1.1_L1_Ensure_Application_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.26.1.2_L1_Ensure_Application_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2016.1.2.0.18.9.26.2.1_L1_Ensure_Security_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.26.2.2_L1_Ensure_Security_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_196608_or_greater:def:1
oval:simp.cis.windows2016.1.2.0.18.9.26.3.1_L1_Ensure_Setup_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.26.3.2_L1_Ensure_Setup_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2016.1.2.0.18.9.26.4.1_L1_Ensure_System_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.26.4.2_L1_Ensure_System_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2016.1.2.0.18.9.30.2_L1_Ensure_Turn_off_Data_Execution_Prevention_for_Explorer_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.30.3_L1_Ensure_Turn_off_heap_termination_on_corruption_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.30.4_L1_Ensure_Turn_off_shell_protocol_protected_mode_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.39.1_L2_Ensure_Turn_off_location_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.43.1_L2_Ensure_Allow_Message_Service_Cloud_Sync_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.44.1_L1_Ensure_Block_all_consumer_Microsoft_account_user_authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.52.1_L1_Ensure_Prevent_the_usage_of_OneDrive_for_file_storage_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.2.2_L1_Ensure_Do_not_allow_passwords_to_be_saved_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.2.1_L2_Ensure_Restrict_Remote_Desktop_Services_users_to_a_single_Remote_Desktop_Services_session_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.3.1_L2_Ensure_Do_not_allow_COM_port_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.3.2_L1_Ensure_Do_not_allow_drive_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.3.3_L2_Ensure_Do_not_allow_LPT_port_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.3.4_L2_Ensure_Do_not_allow_supported_Plug_and_Play_device_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.9.1_L1_Ensure_Always_prompt_for_password_upon_connection_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.9.2_L1_Ensure_Require_secure_RPC_communication_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.9.3_L1_Ensure_Require_use_of_specific_security_layer_for_remote_RDP_connections_is_set_to_Enabled_SSL:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.9.4_L1_Ensure_Require_user_authentication_for_remote_connections_by_using_Network_Level_Authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.9.5_L1_Ensure_Set_client_connection_encryption_level_is_set_to_Enabled_High_Level:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.10.1_L2_Ensure_Set_time_limit_for_active_but_idle_Remote_Desktop_Services_sessions_is_set_to_Enabled_15_minutes_or_less:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.10.2_L2_Ensure_Set_time_limit_for_disconnected_sessions_is_set_to_Enabled_1_minute:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.11.1_L1_Ensure_Do_not_delete_temp_folders_upon_exit_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.59.3.11.2_L1_Ensure_Do_not_use_temporary_folders_per_session_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.60.1_L1_Ensure_Prevent_downloading_of_enclosures_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.61.2_L2_Ensure_Allow_Cloud_Search_is_set_to_Enabled_Disable_Cloud_Search:def:1
oval:simp.cis.windows2016.1.2.0.18.9.61.3_L1_Ensure_Allow_indexing_of_encrypted_files_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.66.1_L2_Ensure_Turn_off_KMS_Client_Online_AVS_Validation_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.3.1_L1_Ensure_Configure_local_setting_override_for_reporting_to_Microsoft_MAPS_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.3.2_L2_Ensure_Join_Microsoft_MAPS_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.7.1_L1_Ensure_Turn_on_behavior_monitoring_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.9.1_L2_Ensure_Configure_Watson_events_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.10.1_L1_Ensure_Scan_removable_drives_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.10.2_L1_Ensure_Turn_on_e-mail_scanning_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.13.3.1_L1_Ensure_Prevent_users_and_apps_from_accessing_dangerous_websites_is_set_to_Enabled_Block:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.14_L1_Ensure_Configure_detection_for_potentially_unwanted_applications_is_set_to_Enabled_Block:def:1
oval:simp.cis.windows2016.1.2.0.18.9.77.15_L1_Ensure_Turn_off_Windows_Defender_AntiVirus_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.80.1.1_L1_Ensure_Configure_Windows_Defender_SmartScreen_is_set_to_Enabled_Warn_and_prevent_bypass:def:1
oval:simp.cis.windows2016.1.2.0.18.9.84.1_L2_Ensure_Allow_suggested_apps_in_Windows_Ink_Workspace_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.84.2_L1_Ensure_Allow_Windows_Ink_Workspace_is_set_to_Enabled_On_but_disallow_access_above_lock_OR_Disabled_but_not_Enabled_On:def:1
oval:simp.cis.windows2016.1.2.0.18.9.85.1_L1_Ensure_Allow_user_control_over_installs_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.85.2_L1_Ensure_Always_install_with_elevated_privileges_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.85.3_L2_Ensure_Prevent_Internet_Explorer_security_prompt_for_Windows_Installer_scripts_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.86.1_L1_Ensure_Sign-in_and_lock_last_interactive_user_automatically_after_a_restart_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.95.1_L1_Ensure_Turn_on_PowerShell_Script_Block_Logging_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.95.2_L1_Ensure_Turn_on_PowerShell_Transcription_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.97.1.1_L1_Ensure_Allow_Basic_authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.97.1.2_L1_Ensure_Allow_unencrypted_traffic_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.97.1.3_L1_Ensure_Disallow_Digest_authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.97.2.1_L1_Ensure_Allow_Basic_authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.97.2.2_L2_Ensure_Allow_remote_server_management_through_WinRM_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.97.2.3_L1_Ensure_Allow_unencrypted_traffic_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.97.2.4_L1_Ensure_Disallow_WinRM_from_storing_RunAs_credentials_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.98.1_L2_Ensure_Allow_Remote_Shell_Access_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.99.2.1_L1_Ensure_Prevent_users_from_modifying_settings_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.102.1.1_L1_Ensure_Manage_preview_builds_is_set_to_Enabled_Disable_preview_builds:def:1
oval:simp.cis.windows2016.1.2.0.18.9.102.1.2_L1_Ensure_Select_when_Preview_Builds_and_Feature_Updates_are_received_is_set_to_Enabled_Semi-Annual_Channel_180_or_more_days:def:1
oval:simp.cis.windows2016.1.2.0.18.9.102.1.3_L1_Ensure_Select_when_Quality_Updates_are_received_is_set_to_Enabled_0_days:def:1
oval:simp.cis.windows2016.1.2.0.18.9.102.2_L1_Ensure_Configure_Automatic_Updates_is_set_to_Enabled:def:1
oval:simp.cis.windows2016.1.2.0.18.9.102.3L1_Ensure_Configure_Automatic_Updates_Scheduled_install_day_is_set_to_0-_Every_day:def:1
oval:simp.cis.windows2016.1.2.0.18.9.102.4_L1_Ensure_No_auto-restart_with_logged_on_users_for_scheduled_automatic_updates_installations_is_set_to_Disabled:def:1
oval:simp.cis.windows2016.1.2.0.19.1.3.1_L1_Ensure_Enable_screen_saver_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.1.3.2_L1_Ensure_Force_specific_screen_saver_Screen_saver_executable_name_is_set_to_Enabled_scrnsave.scr:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.1.3.3_L1_Ensure_Password_protect_the_screen_saver_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.1.3.4_L1_Ensure_Screen_saver_timeout_is_set_to_Enabled_900_seconds_or_fewer_but_not_0:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.5.1.1_L1_Ensure_Turn_off_toast_notifications_on_the_lock_screen_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.6.6.1.1_L2_Ensure_Turn_off_Help_Experience_Improvement_Program_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.4.1_L1_Ensure_Do_not_preserve_zone_information_in_file_attachments_is_set_to_Disabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.4.2_L1_Ensure_Notify_antivirus_programs_when_opening_attachments_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.7.1_L1_Ensure_Configure_Windows_spotlight_on_lock_screen_is_set_to_Disabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.7.2_L1_Ensure_Do_not_suggest_third-party_content_in_Windows_spotlight_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.7.3_L2_Ensure_Do_not_use_diagnostic_data_for_tailored_experiences_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.7.4_L2_Ensure_Turn_off_all_Windows_spotlight_features_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.26.1_L1_Ensure_Prevent_users_from_sharing_files_within_their_profile._is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.41.1_L1_Ensure_Always_install_with_elevated_privileges_is_set_to_Disabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2016.1.2.0.19.7.45.2.1_L2_Ensure_Prevent_Codec_Download_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.

Windows 2019 (384/384 [100%])

oval:simp.cis.windows2019.1.1.0.1.1.1_L1_Ensure_Enforce_password_history_is_set_to_24_or_more_passwords:def:1
oval:simp.cis.windows2019.1.1.0.1.1.2_L1_Ensure_Maximum_password_age_is_set_to_60_or_fewer_days_but_not_0:def:1
oval:simp.cis.windows2019.1.1.0.1.1.3_L1_Ensure_Minimum_password_age_is_set_to_1_or_more_days:def:1
oval:simp.cis.windows2019.1.1.0.1.1.4_L1_Ensure_Minimum_password_length_is_set_to_14_or_more_characters:def:1
oval:simp.cis.windows2019.1.1.0.1.1.5_L1_Ensure_Password_must_meet_complexity_requirements_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.1.1.6_L1_Ensure_Store_passwords_using_reversible_encryption_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.1.2.1_L1_Ensure_Account_lockout_duration_is_set_to_15_or_more_minutes:def:1
oval:simp.cis.windows2019.1.1.0.1.2.2_L1_Ensure_Account_lockout_threshold_is_set_to_10_or_fewer_invalid_logon_attempts_but_not_0:def:1
oval:simp.cis.windows2019.1.1.0.1.2.3_L1_Ensure_Reset_account_lockout_counter_after_is_set_to_15_or_more_minutes:def:1
oval:simp.cis.windows2019.1.1.0.2.2.1_L1_Ensure_Access_Credential_Manager_as_a_trusted_caller_is_set_to_No_One:def:1
oval:simp.cis.windows2019.1.1.0.2.2.2_L1_Ensure_Access_this_computer_from_the_network_is_set_to_Administrators_Authenticated_Users_ENTERPRISE_DOMAIN_CONTROLLERS_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.3_L1_Ensure_Access_this_computer_from_the_network__is_set_to_Administrators_Authenticated_Users_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.4_L1_Ensure_Act_as_part_of_the_operating_system_is_set_to_No_One:def:1
oval:simp.cis.windows2019.1.1.0.2.2.5_L1_Ensure_Add_workstations_to_domain_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.6_L1_Ensure_Adjust_memory_quotas_for_a_process_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2019.1.1.0.2.2.7_L1_Ensure_Allow_log_on_locally_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.8_L1_Ensure_Allow_log_on_through_Remote_Desktop_Services_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.9_L1_Ensure_Allow_log_on_through_Remote_Desktop_Services_is_set_to_Administrators_Remote_Desktop_Users_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.10_L1_Ensure_Back_up_files_and_directories_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.11_L1_Ensure_Change_the_system_time_is_set_to_Administrators_LOCAL_SERVICE:def:1
oval:simp.cis.windows2019.1.1.0.2.2.12_L1_Ensure_Change_the_time_zone_is_set_to_Administrators_LOCAL_SERVICE:def:1
oval:simp.cis.windows2019.1.1.0.2.2.13_L1_Ensure_Create_a_pagefile_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.14_L1_Ensure_Create_a_token_object_is_set_to_No_One:def:1
oval:simp.cis.windows2019.1.1.0.2.2.15_L1_Ensure_Create_global_objects_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE:def:1
oval:simp.cis.windows2019.1.1.0.2.2.16_L1_Ensure_Create_permanent_shared_objects_is_set_to_No_One:def:1
oval:simp.cis.windows2019.1.1.0.2.2.17_L1_Ensure_Create_symbolic_links_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.18_L1_Ensure_Create_symbolic_links_is_set_to_Administrators_NT_VIRTUAL_MACHINEVirtual_Machines_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.19_L1_Ensure_Debug_programs_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.20_L1_Ensure_Deny_access_to_this_computer_from_the_network_to_include_Guests_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.21_L1_Ensure_Deny_access_to_this_computer_from_the_network_to_include_Guests_Local_account_and_member_of_Administrators_group_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.22_L1_Ensure_Deny_log_on_as_a_batch_job_to_include_Guests:def:1
oval:simp.cis.windows2019.1.1.0.2.2.23_L1_Ensure_Deny_log_on_as_a_service_to_include_Guests:def:1
oval:simp.cis.windows2019.1.1.0.2.2.24_L1_Ensure_Deny_log_on_locally_to_include_Guests:def:1
oval:simp.cis.windows2019.1.1.0.2.2.25_L1_Ensure_Deny_log_on_through_Remote_Desktop_Services_to_include_Guests_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.26_L1_Ensure_Deny_log_on_through_Remote_Desktop_Services_is_set_to_Guests_Local_account_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.27_L1_Ensure_Enable_computer_and_user_accounts_to_be_trusted_for_delegation_is_set_to_Administrators_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.28_L1_Ensure_Enable_computer_and_user_accounts_to_be_trusted_for_delegation_is_set_to_No_One_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.29_L1_Ensure_Force_shutdown_from_a_remote_system_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.30_L1_Ensure_Generate_security_audits_is_set_to_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2019.1.1.0.2.2.31_L1_Ensure_Impersonate_a_client_after_authentication_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.32_L1_Ensure_Impersonate_a_client_after_authentication_is_set_to_Administrators_LOCAL_SERVICE_NETWORK_SERVICE_SERVICE_and_when_the_Web_Server_IIS_Role_with_Web_Services_Role_Service_is_installed_IIS_IUSRS_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.33_L1_Ensure_Increase_scheduling_priority_is_set_to_Administrators_Window_ManagerWindow_Manager_Group:def:1
oval:simp.cis.windows2019.1.1.0.2.2.34_L1_Ensure_Load_and_unload_device_drivers_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.35_L1_Ensure_Lock_pages_in_memory_is_set_to_No_One:def:1
oval:simp.cis.windows2019.1.1.0.2.2.36_L2_Ensure_Log_on_as_a_batch_job_is_set_to_Administrators_DC_Only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.37_L1_Ensure_Manage_auditing_and_security_log_is_set_to_Administrators_and_when_Exchange_is_running_in_the_environment_Exchange_Servers_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.38_L1_Ensure_Manage_auditing_and_security_log_is_set_to_Administrators_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.39_L1_Ensure_Modify_an_object_label_is_set_to_No_One:def:1
oval:simp.cis.windows2019.1.1.0.2.2.40_L1_Ensure_Modify_firmware_environment_values_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.41_L1_Ensure_Perform_volume_maintenance_tasks_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.42_L1_Ensure_Profile_single_process_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.43_L1_Ensure_Profile_system_performance_is_set_to_Administrators_NT_SERVICEWdiServiceHost:def:1
oval:simp.cis.windows2019.1.1.0.2.2.44_L1_Ensure_Replace_a_process_level_token_is_set_to_LOCAL_SERVICE_NETWORK_SERVICE:def:1
oval:simp.cis.windows2019.1.1.0.2.2.45_L1_Ensure_Restore_files_and_directories_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.46_L1_Ensure_Shut_down_the_system_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.2.47_L1_Ensure_Synchronize_directory_service_data_is_set_to_No_One_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.2.48_L1_Ensure_Take_ownership_of_files_or_other_objects_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.3.1.1_L1_Ensure_Accounts_Administrator_account_status_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.1.2_L1_Ensure_Accounts_Block_Microsoft_accounts_is_set_to_Users_cant_add_or_log_on_with_Microsoft_accounts:def:1
oval:simp.cis.windows2019.1.1.0.2.3.1.3_L1_Ensure_Accounts_Guest_account_status_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.1.4_L1_Ensure_Accounts_Limit_local_account_use_of_blank_passwords_to_console_logon_only_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.1.5_L1_Configure_Accounts_Rename_administrator_account:def:1
oval:simp.cis.windows2019.1.1.0.2.3.1.6_L1_Configure_Accounts_Rename_guest_account:def:1
oval:simp.cis.windows2019.1.1.0.2.3.2.1_L1_Ensure_Audit_Force_audit_policy_subcategory_settings_Windows_Vista_or_later_to_override_audit_policy_category_settings_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.2.2_L1_Ensure_Audit_Shut_down_system_immediately_if_unable_to_log_security_audits_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.4.1_L1_Ensure_Devices_Allowed_to_format_and_eject_removable_media_is_set_to_Administrators:def:1
oval:simp.cis.windows2019.1.1.0.2.3.4.2_L1_Ensure_Devices_Prevent_users_from_installing_printer_drivers_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.5.1_L1_Ensure_Domain_controller_Allow_server_operators_to_schedule_tasks_is_set_to_Disabled_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.5.2_L1_Ensure_Domain_controller_LDAP_server_signing_requirements_is_set_to_Require_signing_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.5.3_L1_Ensure_Domain_controller_Refuse_machine_account_password_changes_is_set_to_Disabled_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.6.1_L1_Ensure_Domain_member_Digitally_encrypt_or_sign_secure_channel_data_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.6.2_L1_Ensure_Domain_member_Digitally_encrypt_secure_channel_data_when_possible_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.6.3_L1_Ensure_Domain_member_Digitally_sign_secure_channel_data_when_possible_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.6.4_L1_Ensure_Domain_member_Disable_machine_account_password_changes_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.6.5_L1_Ensure_Domain_member_Maximum_machine_account_password_age_is_set_to_30_or_fewer_days_but_not_0:def:1
oval:simp.cis.windows2019.1.1.0.2.3.6.6_L1_Ensure_Domain_member_Require_strong_Windows_2000_or_later_session_key_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.1_L1_Ensure_Interactive_logon_Do_not_require_CTRLALTDEL_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.2_L1_Ensure_Interactive_logon_Dont_display_last_signed-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.3_L1_Ensure_Interactive_logon_Machine_inactivity_limit_is_set_to_900_or_fewer_seconds_but_not_0:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.4_L1_Configure_Interactive_logon_Message_text_for_users_attempting_to_log_on:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.5_L1_Configure_Interactive_logon_Message_title_for_users_attempting_to_log_on:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.6_L2_Ensure_Interactive_logon_Number_of_previous_logons_to_cache_in_case_domain_controller_is_not_available_is_set_to_4_or_fewer_logons_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.7_L1_Ensure_Interactive_logon_Prompt_user_to_change_password_before_expiration_is_set_to_between_5_and_14_days:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.8_L1_Ensure_Interactive_logon_Require_Domain_Controller_Authentication_to_unlock_workstation_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.7.9_L1_Ensure_Interactive_logon_Smart_card_removal_behavior_is_set_to_Lock_Workstation_or_higher:def:1
oval:simp.cis.windows2019.1.1.0.2.3.8.1_L1_Ensure_Microsoft_network_client_Digitally_sign_communications_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.8.2_L1_Ensure_Microsoft_network_client_Digitally_sign_communications_if_server_agrees_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.8.3_L1_Ensure_Microsoft_network_client_Send_unencrypted_password_to_third-party_SMB_servers_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.9.1_L1_Ensure_Microsoft_network_server_Amount_of_idle_time_required_before_suspending_session_is_set_to_15_or_fewer_minutes:def:1
oval:simp.cis.windows2019.1.1.0.2.3.9.2_L1_Ensure_Microsoft_network_server_Digitally_sign_communications_always_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.9.3_L1_Ensure_Microsoft_network_server_Digitally_sign_communications_if_client_agrees_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.9.4_L1_Ensure_Microsoft_network_server_Disconnect_clients_when_logon_hours_expire_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.9.5_L1_Ensure_Microsoft_network_server_Server_SPN_target_name_validation_level_is_set_to_Accept_if_provided_by_client_or_higher_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.1_L1_Ensure_Network_access_Allow_anonymous_SIDName_translation_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.2_L1_Ensure_Network_access_Do_not_allow_anonymous_enumeration_of_SAM_accounts_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.3_L1_Ensure_Network_access_Do_not_allow_anonymous_enumeration_of_SAM_accounts_and_shares_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.4_L2_Ensure_Network_access_Do_not_allow_storage_of_passwords_and_credentials_for_network_authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.5_L1_Ensure_Network_access_Let_Everyone_permissions_apply_to_anonymous_users_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.6_L1_Configure_Network_access_Named_Pipes_that_can_be_accessed_anonymously_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.7_L1_Configure_Network_access_Named_Pipes_that_can_be_accessed_anonymously_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.8_L1_Configure_Network_access_Remotely_accessible_registry_paths:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.9_L1_Configure_Network_access_Remotely_accessible_registry_paths_and_sub-paths:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.10_L1_Ensure_Network_access_Restrict_anonymous_access_to_Named_Pipes_and_Shares_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.11_L1_Ensure_Network_access_Restrict_clients_allowed_to_make_remote_calls_to_SAM_is_set_to_Administrators_Remote_Access_Allow_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.12_L1_Ensure_Network_access_Shares_that_can_be_accessed_anonymously_is_set_to_None:def:1
oval:simp.cis.windows2019.1.1.0.2.3.10.13L1_Ensure_Network_access_Sharing_and_security_model_for_local_accounts_is_set_to_Classic-_local_users_authenticate_as_themselves:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.1_L1_Ensure_Network_security_Allow_Local_System_to_use_computer_identity_for_NTLM_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.2_L1_Ensure_Network_security_Allow_LocalSystem_NULL_session_fallback_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.3_L1_Ensure_Network_Security_Allow_PKU2U_authentication_requests_to_this_computer_to_use_online_identities_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.4_L1_Ensure_Network_security_Configure_encryption_types_allowed_for_Kerberos_is_set_to_AES128_HMAC_SHA1_AES256_HMAC_SHA1_Future_encryption_types:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.5_L1_Ensure_Network_security_Do_not_store_LAN_Manager_hash_value_on_next_password_change_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.6_L1_Ensure_Network_security_Force_logoff_when_logon_hours_expire_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.7_L1_Ensure_Network_security_LAN_Manager_authentication_level_is_set_to_Send_NTLMv2_response_only._Refuse_LM__NTLM:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.8_L1_Ensure_Network_security_LDAP_client_signing_requirements_is_set_to_Negotiate_signing_or_higher:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.9_L1_Ensure_Network_security_Minimum_session_security_for_NTLM_SSP_based_including_secure_RPC_clients_is_set_to_Require_NTLMv2_session_security_Require_128-bit_encryption:def:1
oval:simp.cis.windows2019.1.1.0.2.3.11.10_L1_Ensure_Network_security_Minimum_session_security_for_NTLM_SSP_based_including_secure_RPC_servers_is_set_to_Require_NTLMv2_session_security_Require_128-bit_encryption:def:1
oval:simp.cis.windows2019.1.1.0.2.3.13.1_L1_Ensure_Shutdown_Allow_system_to_be_shut_down_without_having_to_log_on_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.15.1_L1_Ensure_System_objects_Require_case_insensitivity_for_non-Windows_subsystems_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.15.2_L1_Ensure_System_objects_Strengthen_default_permissions_of_internal_system_objects_e.g._Symbolic_Links_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.17.1_L1_Ensure_User_Account_Control_Admin_Approval_Mode_for_the_Built-in_Administrator_account_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.17.2_L1_Ensure_User_Account_Control_Behavior_of_the_elevation_prompt_for_administrators_in_Admin_Approval_Mode_is_set_to_Prompt_for_consent_on_the_secure_desktop:def:1
oval:simp.cis.windows2019.1.1.0.2.3.17.3_L1_Ensure_User_Account_Control_Behavior_of_the_elevation_prompt_for_standard_users_is_set_to_Automatically_deny_elevation_requests:def:1
oval:simp.cis.windows2019.1.1.0.2.3.17.4_L1_Ensure_User_Account_Control_Detect_application_installations_and_prompt_for_elevation_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.17.5_L1_Ensure_User_Account_Control_Only_elevate_UIAccess_applications_that_are_installed_in_secure_locations_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.17.6_L1_Ensure_User_Account_Control_Run_all_administrators_in_Admin_Approval_Mode_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.17.7_L1_Ensure_User_Account_Control_Switch_to_the_secure_desktop_when_prompting_for_elevation_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.2.3.17.8_L1_Ensure_User_Account_Control_Virtualize_file_and_registry_write_failures_to_per-user_locations_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.9.1.1_L1_Ensure_Windows_Firewall_Domain_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2019.1.1.0.9.1.2_L1_Ensure_Windows_Firewall_Domain_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2019.1.1.0.9.1.3_L1_Ensure_Windows_Firewall_Domain_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2019.1.1.0.9.1.4_L1_Ensure_Windows_Firewall_Domain_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2019.1.1.0.9.1.5_L1_Ensure_Windows_Firewall_Domain_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewalldomainfw.log:def:1
oval:simp.cis.windows2019.1.1.0.9.1.6_L1_Ensure_Windows_Firewall_Domain_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2019.1.1.0.9.1.7_L1_Ensure_Windows_Firewall_Domain_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2019.1.1.0.9.1.8_L1_Ensure_Windows_Firewall_Domain_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2019.1.1.0.9.2.1_L1_Ensure_Windows_Firewall_Private_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2019.1.1.0.9.2.2_L1_Ensure_Windows_Firewall_Private_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2019.1.1.0.9.2.3_L1_Ensure_Windows_Firewall_Private_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2019.1.1.0.9.2.4_L1_Ensure_Windows_Firewall_Private_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2019.1.1.0.9.2.5_L1_Ensure_Windows_Firewall_Private_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewallprivatefw.log:def:1
oval:simp.cis.windows2019.1.1.0.9.2.6_L1_Ensure_Windows_Firewall_Private_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2019.1.1.0.9.2.7_L1_Ensure_Windows_Firewall_Private_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2019.1.1.0.9.2.8_L1_Ensure_Windows_Firewall_Private_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2019.1.1.0.9.3.1_L1_Ensure_Windows_Firewall_Public_Firewall_state_is_set_to_On_recommended:def:1
oval:simp.cis.windows2019.1.1.0.9.3.2_L1_Ensure_Windows_Firewall_Public_Inbound_connections_is_set_to_Block_default:def:1
oval:simp.cis.windows2019.1.1.0.9.3.3_L1_Ensure_Windows_Firewall_Public_Outbound_connections_is_set_to_Allow_default:def:1
oval:simp.cis.windows2019.1.1.0.9.3.4_L1_Ensure_Windows_Firewall_Public_Settings_Display_a_notification_is_set_to_No:def:1
oval:simp.cis.windows2019.1.1.0.9.3.5_L1_Ensure_Windows_Firewall_Public_Settings_Apply_local_firewall_rules_is_set_to_No:def:1
oval:simp.cis.windows2019.1.1.0.9.3.6_L1_Ensure_Windows_Firewall_Public_Settings_Apply_local_connection_security_rules_is_set_to_No:def:1
oval:simp.cis.windows2019.1.1.0.9.3.7_L1_Ensure_Windows_Firewall_Public_Logging_Name_is_set_to_SystemRootSystem32logfilesfirewallpublicfw.log:def:1
oval:simp.cis.windows2019.1.1.0.9.3.8_L1_Ensure_Windows_Firewall_Public_Logging_Size_limit_KB_is_set_to_16384_KB_or_greater:def:1
oval:simp.cis.windows2019.1.1.0.9.3.9_L1_Ensure_Windows_Firewall_Public_Logging_Log_dropped_packets_is_set_to_Yes:def:1
oval:simp.cis.windows2019.1.1.0.9.3.10_L1_Ensure_Windows_Firewall_Public_Logging_Log_successful_connections_is_set_to_Yes:def:1
oval:simp.cis.windows2019.1.1.0.17.1.1_L1_Ensure_Audit_Credential_Validation_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.1.2_L1_Ensure_Audit_Kerberos_Authentication_Service_is_set_to_Success_and_Failure_DC_Only:def:1
oval:simp.cis.windows2019.1.1.0.17.1.3_L1_Ensure_Audit_Kerberos_Service_Ticket_Operations_is_set_to_Success_and_Failure_DC_Only:def:1
oval:simp.cis.windows2019.1.1.0.17.2.1_L1_Ensure_Audit_Application_Group_Management_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.2.2_L1_Ensure_Audit_Computer_Account_Management_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.17.2.3_L1_Ensure_Audit_Distribution_Group_Management_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.17.2.4_L1_Ensure_Audit_Other_Account_Management_Events_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.17.2.5_L1_Ensure_Audit_Security_Group_Management_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.2.6_L1_Ensure_Audit_User_Account_Management_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.3.1_L1_Ensure_Audit_PNP_Activity_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.3.2_L1_Ensure_Audit_Process_Creation_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.4.1_L1_Ensure_Audit_Directory_Service_Access_is_set_to_include_Failure_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.17.4.2_L1_Ensure_Audit_Directory_Service_Changes_is_set_to_include_Success_DC_only:def:1
oval:simp.cis.windows2019.1.1.0.17.5.1_L1_Ensure_Audit_Account_Lockout_is_set_to_include_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.5.2_L1_Ensure_Audit_Group_Membership_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.5.3_L1_Ensure_Audit_Logoff_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.5.4_L1_Ensure_Audit_Logon_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.5.5_L1_Ensure_Audit_Other_LogonLogoff_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.5.6_L1_Ensure_Audit_Special_Logon_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.6.1_L1_Ensure_Audit_Detailed_File_Share_is_set_to_include_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.6.2_L1_Ensure_Audit_File_Share_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.6.3_L1_Ensure_Audit_Other_Object_Access_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.6.4_L1_Ensure_Audit_Removable_Storage_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.7.1_L1_Ensure_Audit_Audit_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.7.2_L1_Ensure_Audit_Authentication_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.7.3_L1_Ensure_Audit_Authorization_Policy_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.7.4_L1_Ensure_Audit_MPSSVC_Rule-Level_Policy_Change_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.7.5_L1_Ensure_Audit_Other_Policy_Change_Events_is_set_to_include_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.8.1_L1_Ensure_Audit_Sensitive_Privilege_Use_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.9.1_L1_Ensure_Audit_IPsec_Driver_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.9.2_L1_Ensure_Audit_Other_System_Events_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.17.9.3_L1_Ensure_Audit_Security_State_Change_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.9.4_L1_Ensure_Audit_Security_System_Extension_is_set_to_include_Success:def:1
oval:simp.cis.windows2019.1.1.0.17.9.5_L1_Ensure_Audit_System_Integrity_is_set_to_Success_and_Failure:def:1
oval:simp.cis.windows2019.1.1.0.18.1.1.1_L1_Ensure_Prevent_enabling_lock_screen_camera_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.1.1.2_L1_Ensure_Prevent_enabling_lock_screen_slide_show_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.1.2.2_L1_Ensure_Allow_users_to_enable_online_speech_recognition_services_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.1.3_L2_Ensure_Allow_Online_Tips_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.2.1_L1_Ensure_LAPS_AdmPwd_GPO_Extension__CSE_is_installed_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.2.2_L1_Ensure_Do_not_allow_password_expiration_time_longer_than_required_by_policy_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.2.3_L1_Ensure_Enable_Local_Admin_Password_Management_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.2.4_L1_Ensure_Password_Settings_Password_Complexity_is_set_to_Enabled_Large_letters__small_letters__numbers__special_characters_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.2.5_L1_Ensure_Password_Settings_Password_Length_is_set_to_Enabled_15_or_more_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.2.6_L1_Ensure_Password_Settings_Password_Age_Days_is_set_to_Enabled_30_or_fewer_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.3.1_L1_Ensure_Apply_UAC_restrictions_to_local_accounts_on_network_logons_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.3.2_L1_Ensure_Configure_SMB_v1_client_driver_is_set_to_Enabled_Disable_driver_recommended:def:1
oval:simp.cis.windows2019.1.1.0.18.3.3_L1_Ensure_Configure_SMB_v1_server_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.3.4_L1_Ensure_Enable_Structured_Exception_Handling_Overwrite_Protection_SEHOP_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.3.5_L1_Ensure_Extended_Protection_for_LDAP_Authentication_Domain_Controllers_only_is_set_to_Enabled_Enabled_always_recommended_DC_Only:def:1
oval:simp.cis.windows2019.1.1.0.18.3.6_L1_Ensure_NetBT_NodeType_configuration_is_set_to_Enabled_P-node_recommended:def:1
oval:simp.cis.windows2019.1.1.0.18.3.7_L1_Ensure_WDigest_Authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.4.1_L1_Ensure_MSS_AutoAdminLogon_Enable_Automatic_Logon_not_recommended_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.4.2_L1_Ensure_MSS_DisableIPSourceRouting_IPv6_IP_source_routing_protection_level_protects_against_packet_spoofing_is_set_to_Enabled_Highest_protection_source_routing_is_completely_disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.4.3_L1_Ensure_MSS_DisableIPSourceRouting_IP_source_routing_protection_level_protects_against_packet_spoofing_is_set_to_Enabled_Highest_protection_source_routing_is_completely_disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.4.4_L1_Ensure_MSS_EnableICMPRedirect_Allow_ICMP_redirects_to_override_OSPF_generated_routes_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.4.5_L2_Ensure_MSS_KeepAliveTime_How_often_keep-alive_packets_are_sent_in_milliseconds_is_set_to_Enabled_300000_or_5_minutes_recommended:def:1
oval:simp.cis.windows2019.1.1.0.18.4.6_L1_Ensure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.4.7_L2_Ensure_MSS_PerformRouterDiscovery_Allow_IRDP_to_detect_and_configure_Default_Gateway_addresses_could_lead_to_DoS_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.4.8_L1_Ensure_MSS_SafeDllSearchMode_Enable_Safe_DLL_search_mode_recommended_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.4.9_L1_Ensure_MSS_ScreenSaverGracePeriod_The_time_in_seconds_before_the_screen_saver_grace_period_expires_0_recommended_is_set_to_Enabled_5_or_fewer_seconds:def:1
oval:simp.cis.windows2019.1.1.0.18.4.10_L2_Ensure_MSS_TcpMaxDataRetransmissions_IPv6_How_many_times_unacknowledged_data_is_retransmitted_is_set_to_Enabled_3:def:1
oval:simp.cis.windows2019.1.1.0.18.4.11_L2_Ensure_MSS_TcpMaxDataRetransmissions_How_many_times_unacknowledged_data_is_retransmitted_is_set_to_Enabled_3:def:1
oval:simp.cis.windows2019.1.1.0.18.4.12_L1_Ensure_MSS_WarningLevel_Percentage_threshold_for_the_security_event_log_at_which_the_system_will_generate_a_warning_is_set_to_Enabled_90_or_less:def:1
oval:simp.cis.windows2019.1.1.0.18.5.4.1_L1_Ensure_Turn_off_multicast_name_resolution_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.5.1_L2_Ensure_Enable_Font_Providers_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.8.1_L1_Ensure_Enable_insecure_guest_logons_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.9.1_L2_Ensure_Turn_on_Mapper_IO_LLTDIO_driver_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.9.2_L2_Ensure_Turn_on_Responder_RSPNDR_driver_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.10.2_L2_Ensure_Turn_off_Microsoft_Peer-to-Peer_Networking_Services_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.11.2_L1_Ensure_Prohibit_installation_and_configuration_of_Network_Bridge_on_your_DNS_domain_network_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.11.3_L1_Ensure_Prohibit_use_of_Internet_Connection_Sharing_on_your_DNS_domain_network_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.11.4_L1_Ensure_Require_domain_users_to_elevate_when_setting_a_networks_location_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.14.1_L1_Ensure_Hardened_UNC_Paths_is_set_to_Enabled_with_Require_Mutual_Authentication_and_Require_Integrity_set_for_all_NETLOGON_and_SYSVOL_shares:def:1
oval:simp.cis.windows2019.1.1.0.18.5.19.2.1_L2_Disable_IPv6_Ensure_TCPIP6_Parameter_DisabledComponents_is_set_to_0xff_255:def:1
oval:simp.cis.windows2019.1.1.0.18.5.20.1_L2_Ensure_Configuration_of_wireless_settings_using_Windows_Connect_Now_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.20.2_L2_Ensure_Prohibit_access_of_the_Windows_Connect_Now_wizards_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.5.21.1_L1_Ensure_Minimize_the_number_of_simultaneous_connections_to_the_Internet_or_a_Windows_Domain_is_set_to_Enabled_3__Prevent_Wi-Fi_when_on_Ethernet:def:1
oval:simp.cis.windows2019.1.1.0.18.5.21.2_L2_Ensure_Prohibit_connection_to_non-domain_networks_when_connected_to_domain_authenticated_network_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.7.1.1_L2_Ensure_Turn_off_notifications_network_usage_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.3.1_L1_Ensure_Include_command_line_in_process_creation_events_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.4.1_L1_Ensure_Encryption_Oracle_Remediation_is_set_to_Enabled_Force_Updated_Clients:def:1
oval:simp.cis.windows2019.1.1.0.18.8.4.2_L1_Ensure_Remote_host_allows_delegation_of_non-exportable_credentials_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.5.1_NG_Ensure_Turn_On_Virtualization_Based_Security_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.5.2_NG_Ensure_Turn_On_Virtualization_Based_Security_Select_Platform_Security_Level_is_set_to_Secure_Boot_and_DMA_Protection:def:1
oval:simp.cis.windows2019.1.1.0.18.8.5.3_NG_Ensure_Turn_On_Virtualization_Based_Security_Virtualization_Based_Protection_of_Code_Integrity_is_set_to_Enabled_with_UEFI_lock:def:1
oval:simp.cis.windows2019.1.1.0.18.8.5.4_NG_Ensure_Turn_On_Virtualization_Based_Security_Require_UEFI_Memory_Attributes_Table_is_set_to_True_checked:def:1
oval:simp.cis.windows2019.1.1.0.18.8.5.5_NG_Ensure_Turn_On_Virtualization_Based_Security_Credential_Guard_Configuration_is_set_to_Enabled_with_UEFI_lock_MS_Only:def:1
oval:simp.cis.windows2019.1.1.0.18.8.5.6_NG_Ensure_Turn_On_Virtualization_Based_Security_Credential_Guard_Configuration_is_set_to_Disabled_DC_Only:def:1
oval:simp.cis.windows2019.1.1.0.18.8.5.7_NG_Ensure_Turn_On_Virtualization_Based_Security_Secure_Launch_Configuration_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.14.1_L1_Ensure_Boot-Start_Driver_Initialization_Policy_is_set_to_Enabled_Good_unknown_and_bad_but_critical:def:1
oval:simp.cis.windows2019.1.1.0.18.8.21.2_L1_Ensure_Configure_registry_policy_processing_Do_not_apply_during_periodic_background_processing_is_set_to_Enabled_FALSE:def:1
oval:simp.cis.windows2019.1.1.0.18.8.21.3_L1_Ensure_Configure_registry_policy_processing_Process_even_if_the_Group_Policy_objects_have_not_changed_is_set_to_Enabled_TRUE:def:1
oval:simp.cis.windows2019.1.1.0.18.8.21.4_L1_Ensure_Continue_experiences_on_this_device_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.21.5_L1_Ensure_Turn_off_background_refresh_of_Group_Policy_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.1_L1_Ensure_Turn_off_downloading_of_print_drivers_over_HTTP_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.2_L2_Ensure_Turn_off_handwriting_personalization_data_sharing_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.3_L2_Ensure_Turn_off_handwriting_recognition_error_reporting_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.4_L2_Ensure_Turn_off_Internet_Connection_Wizard_if_URL_connection_is_referring_to_Microsoft.com_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.5_L1_Ensure_Turn_off_Internet_download_for_Web_publishing_and_online_ordering_wizards_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.6_L2_Ensure_Turn_off_printing_over_HTTP_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.7_L2_Ensure_Turn_off_Registration_if_URL_connection_is_referring_to_Microsoft.com_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.8_L2_Ensure_Turn_off_Search_Companion_content_file_updates_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.9_L2_Ensure_Turn_off_the_Order_Prints_picture_task_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.10_L2_Ensure_Turn_off_the_Publish_to_Web_task_for_files_and_folders_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.11_L2_Ensure_Turn_off_the_Windows_Messenger_Customer_Experience_Improvement_Program_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.12_L2_Ensure_Turn_off_Windows_Customer_Experience_Improvement_Program_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.22.1.13_L2_Ensure_Turn_off_Windows_Error_Reporting_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.25.1_L2_Ensure_Support_device_authentication_using_certificate_is_set_to_Enabled_Automatic:def:1
oval:simp.cis.windows2019.1.1.0.18.8.26.1_L1_Ensure_Enumeration_policy_for_external_devices_incompatible_with_Kernel_DMA_Protection_is_set_to_Enabled_Block_All:def:1
oval:simp.cis.windows2019.1.1.0.18.8.27.1_L2_Ensure_Disallow_copying_of_user_input_methods_to_the_system_account_for_sign-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.28.1_L1_Ensure_Block_user_from_showing_account_details_on_sign-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.28.2_L1_Ensure_Do_not_display_network_selection_UI_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.28.3_L1_Ensure_Do_not_enumerate_connected_users_on_domain-joined_computers_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.28.4_L1_Ensure_Enumerate_local_users_on_domain-joined_computers_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.8.28.5_L1_Ensure_Turn_off_app_notifications_on_the_lock_screen_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.28.6_L1_Ensure_Turn_off_picture_password_sign-in_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.28.7_L1_Ensure_Turn_on_convenience_PIN_sign-in_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.31.1_L2_Ensure_Allow_Clipboard_synchronization_across_devices_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.31.2_L2_Ensure_Allow_upload_of_User_Activities_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.34.6.1_L2_Ensure_Allow_network_connectivity_during_connected-standby_on_battery_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.34.6.2_L2_Ensure_Allow_network_connectivity_during_connected-standby_plugged_in_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.34.6.3_L1_Ensure_Require_a_password_when_a_computer_wakes_on_battery_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.34.6.4_L1_Ensure_Require_a_password_when_a_computer_wakes_plugged_in_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.36.1_L1_Ensure_Configure_Offer_Remote_Assistance_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.36.2_L1_Ensure_Configure_Solicited_Remote_Assistance_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.37.1_L1_Ensure_Enable_RPC_Endpoint_Mapper_Client_Authentication_is_set_to_Enabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.8.37.2_L2_Ensure_Restrict_Unauthenticated_RPC_clients_is_set_to_Enabled_Authenticated_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.8.47.5.1_L2_Ensure_Microsoft_Support_Diagnostic_Tool_Turn_on_MSDT_interactive_communication_with_support_provider_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.47.11.1_L2_Ensure_EnableDisable_PerfTrack_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.49.1_L2_Ensure_Turn_off_the_advertising_ID_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.52.1.1_L2_Ensure_Enable_Windows_NTP_Client_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.8.52.1.2_L2_Ensure_Enable_Windows_NTP_Server_is_set_to_Disabled_MS_only:def:1
oval:simp.cis.windows2019.1.1.0.18.9.4.1_L2_Ensure_Allow_a_Windows_app_to_share_application_data_between_users_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.6.1_L1_Ensure_Allow_Microsoft_accounts_to_be_optional_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.8.1_L1_Ensure_Disallow_Autoplay_for_non-volume_devices_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.8.2_L1_Ensure_Set_the_default_behavior_for_AutoRun_is_set_to_Enabled_Do_not_execute_any_autorun_commands:def:1
oval:simp.cis.windows2019.1.1.0.18.9.8.3_L1_Ensure_Turn_off_Autoplay_is_set_to_Enabled_All_drives:def:1
oval:simp.cis.windows2019.1.1.0.18.9.10.1.1_L1_Ensure_Configure_enhanced_anti-spoofing_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.12.1_L2_Ensure_Allow_Use_of_Camera_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.13.1_L1_Ensure_Turn_off_Microsoft_consumer_experiences_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.14.1_L1_Ensure_Require_pin_for_pairing_is_set_to_Enabled_First_Time_OR_Enabled_Always:def:1
oval:simp.cis.windows2019.1.1.0.18.9.15.1_L1_Ensure_Do_not_display_the_password_reveal_button_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.15.2_L1_Ensure_Enumerate_administrator_accounts_on_elevation_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.16.1L1_Ensure_Allow_Telemetry_is_set_to_Enabled_0-Security_Enterprise_Only_or_Enabled_1-_Basic:def:1
oval:simp.cis.windows2019.1.1.0.18.9.16.2_L2_Ensure_Configure_Authenticated_Proxy_usage_for_the_Connected_User_Experience_and_Telemetry_service_is_set_to_Enabled_Disable_Authenticated_Proxy_usage:def:1
oval:simp.cis.windows2019.1.1.0.18.9.16.3_L1_Ensure_Do_not_show_feedback_notifications_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.16.4_L1_Ensure_Toggle_user_control_over_Insider_builds_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.26.1.1_L1_Ensure_Application_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.26.1.2_L1_Ensure_Application_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2019.1.1.0.18.9.26.2.1_L1_Ensure_Security_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.26.2.2_L1_Ensure_Security_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_196608_or_greater:def:1
oval:simp.cis.windows2019.1.1.0.18.9.26.3.1_L1_Ensure_Setup_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.26.3.2_L1_Ensure_Setup_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2019.1.1.0.18.9.26.4.1_L1_Ensure_System_Control_Event_Log_behavior_when_the_log_file_reaches_its_maximum_size_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.26.4.2_L1_Ensure_System_Specify_the_maximum_log_file_size_KB_is_set_to_Enabled_32768_or_greater:def:1
oval:simp.cis.windows2019.1.1.0.18.9.30.2_L1_Ensure_Turn_off_Data_Execution_Prevention_for_Explorer_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.30.3_L1_Ensure_Turn_off_heap_termination_on_corruption_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.30.4_L1_Ensure_Turn_off_shell_protocol_protected_mode_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.39.2_L2_Ensure_Turn_off_location_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.43.1_L2_Ensure_Allow_Message_Service_Cloud_Sync_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.44.1_L1_Ensure_Block_all_consumer_Microsoft_account_user_authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.52.1_L1_Ensure_Prevent_the_usage_of_OneDrive_for_file_storage_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.2.2_L1_Ensure_Do_not_allow_passwords_to_be_saved_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.2.1_L2_Ensure_Restrict_Remote_Desktop_Services_users_to_a_single_Remote_Desktop_Services_session_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.3.1_L2_Ensure_Do_not_allow_COM_port_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.3.2_L1_Ensure_Do_not_allow_drive_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.3.3_L2_Ensure_Do_not_allow_LPT_port_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.3.4_L2_Ensure_Do_not_allow_supported_Plug_and_Play_device_redirection_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.9.1_L1_Ensure_Always_prompt_for_password_upon_connection_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.9.2_L1_Ensure_Require_secure_RPC_communication_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.9.3_L1_Ensure_Require_use_of_specific_security_layer_for_remote_RDP_connections_is_set_to_Enabled_SSL:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.9.4_L1_Ensure_Require_user_authentication_for_remote_connections_by_using_Network_Level_Authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.9.5_L1_Ensure_Set_client_connection_encryption_level_is_set_to_Enabled_High_Level:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.10.1_L2_Ensure_Set_time_limit_for_active_but_idle_Remote_Desktop_Services_sessions_is_set_to_Enabled_15_minutes_or_less:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.10.2_L2_Ensure_Set_time_limit_for_disconnected_sessions_is_set_to_Enabled_1_minute:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.11.1_L1_Ensure_Do_not_delete_temp_folders_upon_exit_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.59.3.11.2_L1_Ensure_Do_not_use_temporary_folders_per_session_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.60.1_L1_Ensure_Prevent_downloading_of_enclosures_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.61.2_L2_Ensure_Allow_Cloud_Search_is_set_to_Enabled_Disable_Cloud_Search:def:1
oval:simp.cis.windows2019.1.1.0.18.9.61.3_L1_Ensure_Allow_indexing_of_encrypted_files_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.66.1_L2_Ensure_Turn_off_KMS_Client_Online_AVS_Validation_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.3.1_L1_Ensure_Configure_local_setting_override_for_reporting_to_Microsoft_MAPS_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.3.2_L2_Ensure_Join_Microsoft_MAPS_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.7.1_L1_Ensure_Turn_on_behavior_monitoring_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.9.1_L2_Ensure_Configure_Watson_events_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.10.1_L1_Ensure_Scan_removable_drives_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.10.2_L1_Ensure_Turn_on_e-mail_scanning_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.13.1.1_L1_Ensure_Configure_Attack_Surface_Reduction_rules_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.13.1.2_L1_Ensure_Configure_Attack_Surface_Reduction_rules_Set_the_state_for_each_ASR_rule_is_configured:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.13.3.1_L1_Ensure_Prevent_users_and_apps_from_accessing_dangerous_websites_is_set_to_Enabled_Block:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.14_L1_Ensure_Configure_detection_for_potentially_unwanted_applications_is_set_to_Enabled_Block:def:1
oval:simp.cis.windows2019.1.1.0.18.9.77.15_L1_Ensure_Turn_off_Windows_Defender_AntiVirus_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.80.1.1_L1_Ensure_Configure_Windows_Defender_SmartScreen_is_set_to_Enabled_Warn_and_prevent_bypass:def:1
oval:simp.cis.windows2019.1.1.0.18.9.84.1_L2_Ensure_Allow_suggested_apps_in_Windows_Ink_Workspace_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.84.2_L1_Ensure_Allow_Windows_Ink_Workspace_is_set_to_Enabled_On_but_disallow_access_above_lock_OR_Disabled_but_not_Enabled_On:def:1
oval:simp.cis.windows2019.1.1.0.18.9.85.1_L1_Ensure_Allow_user_control_over_installs_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.85.2_L1_Ensure_Always_install_with_elevated_privileges_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.85.3_L2_Ensure_Prevent_Internet_Explorer_security_prompt_for_Windows_Installer_scripts_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.86.1_L1_Ensure_Sign-in_and_lock_last_interactive_user_automatically_after_a_restart_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.95.1_L1_Ensure_Turn_on_PowerShell_Script_Block_Logging_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.95.2_L1_Ensure_Turn_on_PowerShell_Transcription_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.97.1.1_L1_Ensure_Allow_Basic_authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.97.1.2_L1_Ensure_Allow_unencrypted_traffic_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.97.1.3_L1_Ensure_Disallow_Digest_authentication_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.97.2.1_L1_Ensure_Allow_Basic_authentication_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.97.2.2_L2_Ensure_Allow_remote_server_management_through_WinRM_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.97.2.3_L1_Ensure_Allow_unencrypted_traffic_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.97.2.4_L1_Ensure_Disallow_WinRM_from_storing_RunAs_credentials_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.98.1_L2_Ensure_Allow_Remote_Shell_Access_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.99.2.1_L1_Ensure_Prevent_users_from_modifying_settings_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.102.1.1_L1_Ensure_Manage_preview_builds_is_set_to_Enabled_Disable_preview_builds:def:1
oval:simp.cis.windows2019.1.1.0.18.9.102.1.2_L1_Ensure_Select_when_Preview_Builds_and_Feature_Updates_are_received_is_set_to_Enabled_Semi-Annual_Channel_180_or_more_days:def:1
oval:simp.cis.windows2019.1.1.0.18.9.102.1.3_L1_Ensure_Select_when_Quality_Updates_are_received_is_set_to_Enabled_0_days:def:1
oval:simp.cis.windows2019.1.1.0.18.9.102.2_L1_Ensure_Configure_Automatic_Updates_is_set_to_Enabled:def:1
oval:simp.cis.windows2019.1.1.0.18.9.102.3L1_Ensure_Configure_Automatic_Updates_Scheduled_install_day_is_set_to_0-_Every_day:def:1
oval:simp.cis.windows2019.1.1.0.18.9.102.4_L1_Ensure_No_auto-restart_with_logged_on_users_for_scheduled_automatic_updates_installations_is_set_to_Disabled:def:1
oval:simp.cis.windows2019.1.1.0.19.1.3.1_L1_Ensure_Enable_screen_saver_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.1.3.2_L1_Ensure_Force_specific_screen_saver_Screen_saver_executable_name_is_set_to_Enabled_scrnsave.scr:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.1.3.3_L1_Ensure_Password_protect_the_screen_saver_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.1.3.4_L1_Ensure_Screen_saver_timeout_is_set_to_Enabled_900_seconds_or_fewer_but_not_0:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.5.1.1_L1_Ensure_Turn_off_toast_notifications_on_the_lock_screen_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.6.6.1.1_L2_Ensure_Turn_off_Help_Experience_Improvement_Program_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.4.1_L1_Ensure_Do_not_preserve_zone_information_in_file_attachments_is_set_to_Disabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.4.2_L1_Ensure_Notify_antivirus_programs_when_opening_attachments_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.7.1_L1_Ensure_Configure_Windows_spotlight_on_lock_screen_is_set_to_Disabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.7.2_L1_Ensure_Do_not_suggest_third-party_content_in_Windows_spotlight_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.7.3_L2_Ensure_Do_not_use_diagnostic_data_for_tailored_experiences_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.7.4_L2_Ensure_Turn_off_all_Windows_spotlight_features_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.26.1_L1_Ensure_Prevent_users_from_sharing_files_within_their_profile._is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.41.1_L1_Ensure_Always_install_with_elevated_privileges_is_set_to_Disabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.
oval:simp.cis.windows2019.1.1.0.19.7.45.2.1_L2_Ensure_Prevent_Codec_Download_is_set_to_Enabled:def:1
- This is a per-user setting that SIMP cannot directly enforce at this time. Group Policy templates that can be imported to Active Directory are provided on the Domain Controllers.