CCE-5847-9 2009-07-30T19:30:09.577Z 2009-07-30T19:30:09.577Z /export/home should be configured on an appropriate filesystem logical volume CCE-5424-7 2009-07-30T19:30:09.687Z 2009-07-30T19:30:09.687Z /var should be configured on an appropriate filesystem logical volume CCE-5710-9 2009-07-30T19:30:09.703Z 2009-07-30T19:30:09.703Z /opt should be configured on an appropriate filesystem logical volume CCE-5662-2 2009-07-30T19:30:09.733Z 2009-07-30T19:30:09.733Z The shell for the root account should be located on the appropriate filesystem CCE-5317-3 2009-07-30T19:30:09.750Z 2009-07-30T19:30:09.750Z Core dump size limits should be set appropriately CCE-5384-3 2009-07-30T19:30:09.750Z 2009-07-30T19:30:09.750Z The read-only SNMP community string should be set appropriately. CCE-5723-2 2009-07-30T19:30:09.797Z 2009-07-30T19:30:09.797Z The read/write SNMP community string should be set appropriately. CCE-5634-1 2009-07-30T19:30:09.797Z 2009-07-30T19:30:09.797Z Password policy should ban or allow usernames or UIDs in passwords as appropriate CCE-5352-0 2009-07-30T19:30:09.797Z 2009-07-30T19:30:09.797Z Password policy should ban or allow words found in a dictionary as appropriate. CCE-5848-7 2009-07-30T19:30:09.827Z 2009-07-30T19:30:09.827Z Password policy should enforce the correct amount of special characters CCE-5443-7 2009-07-30T19:30:09.860Z 2009-07-30T19:30:09.860Z Password policy should enforce or not enforce the requirement to have mixed case passwords as appropriate. CCE-5664-8 2009-07-30T19:30:09.877Z 2009-07-30T19:30:09.877Z The minimum password age should be set as appropriate CCE-5804-0 2009-07-30T19:30:09.877Z 2009-07-30T19:30:09.877Z The minimum required password length should be set as appropriate CCE-4858-7 2009-07-30T19:30:09.907Z 2009-07-30T19:30:09.907Z Password history should be saved for an appropriate number of password changes CCE-5775-2 2009-07-30T19:30:09.907Z 2009-07-30T19:30:09.907Z The number of consecutive failed login attempts required to trigger a lockout should be set as appropriate CCE-5761-2 2009-07-30T19:30:09.920Z 2009-07-30T19:30:09.920Z Login access to accounts without passwords should be enabled or disabled as appropriate CCE-5841-2 2009-07-30T19:30:09.953Z 2009-07-30T19:30:09.953Z New users should be required or not required to change their password on first login as appropriate CCE-5858-6 2009-07-30T19:30:09.967Z 2009-07-30T19:30:09.967Z Access to single-user mode (maintainence mode) should require the root password or not as appropriate CCE-5078-1 2009-07-30T19:30:09.983Z 2009-07-30T19:30:09.983Z The delay between failed logins should be set as appropriate CCE-5715-8 2009-07-30T19:30:09.983Z 2009-07-30T19:30:09.983Z All files should be owned by an existing account or not as appropriate. CCE-5684-6 2009-07-30T19:30:10.017Z 2009-07-30T19:30:10.017Z All files should be owned by an existing group or not as appropriate. CCE-5244-9 2009-07-30T19:30:10.017Z 2009-07-30T19:30:10.017Z The console login banner should be set appropriately. CCE-5402-3 2009-07-30T19:30:10.017Z 2009-07-30T19:30:10.017Z The SSH login banner should be set appropriately. CCE-5622-6 2009-07-30T19:30:10.047Z 2009-07-30T19:30:10.047Z The telnet login banner should be set appropriately. CCE-5843-8 2009-07-30T19:30:10.077Z 2009-07-30T19:30:10.077Z The ftp login banner should be set appropriately. CCE-5842-0 2009-07-30T19:30:10.093Z 2009-07-30T19:30:10.093Z The graphical login banner should be set appropriately. CCE-5560-8 2009-07-30T19:30:10.093Z 2009-07-30T19:30:10.093Z Accounts other than root should be allowed to have the UID 0 or not as appropriate CCE-4873-6 2009-07-30T19:30:10.127Z 2009-07-30T19:30:10.127Z Accounts other than root and locked system accounts should be allowed to have a GID of 0 or not as appropriate CCE-5187-0 2009-07-30T19:30:10.140Z 2009-07-30T19:30:10.140Z Each account should be assigned a unique UID or not as appropriate CCE-5765-3 2009-07-30T19:30:10.140Z 2009-07-30T19:30:10.140Z The ftp account should exist or not as appropriate CCE-4884-3 2009-07-30T19:30:10.170Z 2009-07-30T19:30:10.170Z Login accounts should include an appropriate GECOS identifier or no GECOS identifier CCE-5381-9 2009-07-30T19:30:10.187Z 2009-07-30T19:30:10.187Z The screen lock should activate after an appropriate period of inactivity CCE-5645-7 2009-07-30T19:30:10.203Z 2009-07-30T19:30:10.203Z File permissions should be set appropriately for all shell executables. CCE-5597-0 2009-07-30T19:30:10.217Z 2009-07-30T19:30:10.217Z Remote (serial) consoles should be enabled or disabled as appropriate. CCE-5676-2 2009-07-30T19:30:10.250Z 2009-07-30T19:30:10.250Z Root logins should be restricted to the console or not as appropriate. CCE-5733-1 2009-07-30T19:30:10.250Z 2009-07-30T19:30:10.250Z .netrc files should exist or not as appropriate for all users. CCE-5702-6 2009-07-30T19:30:10.250Z 2009-07-30T19:30:10.250Z .rhosts files should exist or not as appropriate for all users. CCE-5076-5 2009-07-30T19:30:10.280Z 2009-07-30T19:30:10.280Z .shosts files should exist or not as appropriate for all users. CCE-5442-9 2009-07-30T19:30:10.313Z 2009-07-30T19:30:10.313Z The /etc/hosts.equiv file should exist or not as appropriate. CCE-5640-8 2009-07-30T19:30:10.313Z 2012-01-05T04:30:09.143Z The use of NIS special characters (+ or -) in the first field of the /etc/passwd file should be allowed or disallowed as appropriate. CCE-4893-4 2009-07-30T19:30:10.313Z 2012-01-05T04:30:09.237Z The use of NIS special characters (+ or -) in the first field of the /etc/shadow file should be allowed or disallowed as appropriate. CCE-5024-5 2009-07-30T19:30:10.343Z 2012-01-05T04:30:09.300Z The use of NIS special characters (+ or -) in the first field of the /etc/group file should be allowed or disallowed as appropriate. CCE-5742-2 2009-07-30T19:30:10.360Z 2009-07-30T19:30:10.360Z The /etc/shells file should exist or not as appropriate CCE-5777-8 2009-07-30T19:30:10.360Z 2009-07-30T19:30:10.360Z Shells referenced in /etc/passwd should be included in /etc/shells or not as appropriate CCE-5605-1 2009-07-30T19:30:10.390Z 2009-07-30T19:30:10.390Z Groups referenced in /etc/passwd should be included in /etc/group or not as appropriate. CCE-5750-5 2009-07-30T19:30:10.420Z 2009-07-30T19:30:10.420Z The home directory for the root account should be set appropriately. CCE-5199-5 2009-07-30T19:30:10.420Z 2009-07-30T19:30:10.420Z The home directory for each user account should be set appropriately. CCE-5310-8 2009-07-30T19:30:10.420Z 2009-07-30T19:30:10.420Z Home directories referenced in /etc/passwd should exist or not as appropriate CCE-5327-2 2009-07-30T19:30:10.453Z 2009-07-30T19:30:10.453Z All device files should be located inside an appropriate directory CCE-4900-7 2009-07-30T19:30:10.453Z 2009-07-30T19:30:10.453Z The ntpd service should be enabled or disabled as appropriate. CCE-5675-4 2009-07-30T19:30:10.467Z 2009-07-30T19:30:10.467Z The Network Time Protocol (ntp) synchronization server should be set appropriately. CCE-5147-4 2009-07-30T19:30:10.517Z 2009-07-30T19:30:10.517Z All logon attempts should be logged or not logged as appropriate CCE-5724-0 2009-07-30T19:30:10.547Z 2009-07-30T19:30:10.547Z All su (switch user) activity should be logged or not as appropriate CCE-5614-3 2009-07-30T19:30:10.547Z 2009-07-30T19:30:10.547Z Filesystem logging/journaling should be performed or not as appropriate CCE-5834-7 2009-07-30T19:30:10.577Z 2009-07-30T19:30:10.577Z Automount should be enabled or disabled as appropriate CCE-5745-5 2009-07-30T19:30:10.627Z 2009-07-30T19:30:10.627Z Source-routed packets should be accepted or rejected as appropriate. CCE-5587-1 2009-07-30T19:30:10.640Z 2009-07-30T19:30:10.640Z Response to ICMP timestamp requests should be enabled or disabled as appropriate CCE-5525-1 2009-07-30T19:30:10.670Z 2009-07-30T19:30:10.670Z Response to ICMP timestamp broadcast requests should be enabled or disabled as appropriate CCE-4930-4 2009-07-30T19:30:10.717Z 2009-07-30T19:30:10.717Z Response to ICMP echo (ping) requests should be enabled or disabled as appropriate CCE-4901-5 2009-07-30T19:30:10.717Z 2009-07-30T19:30:10.717Z Executable stack should be enabled or disabled as appropriate CCE-5017-9 2009-07-30T19:30:10.767Z 2009-07-30T19:30:10.767Z The default gateway should be set appropriately. CCE-5347-0 2009-07-30T19:30:10.767Z 2009-07-30T19:30:10.767Z The inetd service should be enabled or disabled as appropriate. CCE-5193-8 2009-07-30T19:30:10.780Z 2009-07-30T19:30:10.780Z echo service should be enabled or disabled as appropriate CCE-5725-7 2009-07-30T19:30:10.813Z 2009-07-30T19:30:10.813Z netstat service should be enabled or disabled as appropriate CCE-5801-6 2009-07-30T19:30:10.843Z 2009-07-30T19:30:10.843Z rcp service should be enabled or disabled as appropriate CCE-5506-1 2009-07-30T19:30:10.843Z 2009-07-30T19:30:10.843Z chargen service should be enabled or disabled as appropriate CCE-5791-9 2009-07-30T19:30:10.843Z 2009-07-30T19:30:10.843Z finger service should be enabled or disabled as appropriate CCE-5743-0 2009-07-30T19:30:10.877Z 2009-07-30T19:30:10.877Z tftpd service should be enabled or disabled as appropriate CCE-5773-7 2009-07-30T19:30:10.877Z 2009-07-30T19:30:10.877Z walld service should be enabled or disabled as appropriate CCE-5461-9 2009-07-30T19:30:10.890Z 2009-07-30T19:30:10.890Z rstatd service should be enabled or disabled as appropriate CCE-4905-6 2009-07-30T19:30:10.920Z 2009-07-30T19:30:10.920Z sprayd service should be enabled or disabled as appropriate CCE-5463-5 2009-07-30T19:30:10.953Z 2009-07-30T19:30:10.953Z rusersd service should be enabled or disabled as appropriate CCE-5542-6 2009-07-30T19:30:10.953Z 2009-07-30T19:30:10.953Z rlogin service should be enabled or disabled as appropriate CCE-5431-2 2009-07-30T19:30:10.953Z 2009-07-30T19:30:10.953Z rsh service should be enabled or disabled as appropriate CCE-5780-2 2009-07-30T19:30:11.000Z 2009-07-30T19:30:11.000Z ftp service should be enabled or disabled as appropriate CCE-5872-7 2009-07-30T19:30:11.000Z 2009-07-30T19:30:11.000Z telnet service should be enabled or disabled as appropriate CCE-4909-8 2009-07-30T19:30:11.017Z 2012-05-14T03:45:57.227Z DEPRECATED. CCE-5343-9 2009-07-30T19:30:11.030Z 2009-07-30T19:30:11.030Z inn service should be enabled or disabled as appropriate CCE-5611-9 2009-07-30T19:30:11.063Z 2009-07-30T19:30:11.063Z uucp service should be enabled or disabled as appropriate CCE-5598-8 2009-07-30T19:30:11.077Z 2009-07-30T19:30:11.077Z rexec service should be enabled or disabled as appropriate CCE-5550-9 2009-07-30T19:30:11.077Z 2009-07-30T19:30:11.077Z inetd logging should be enabled or disabled as appropriate CCE-4911-4 2009-07-30T19:30:11.110Z 2009-07-30T19:30:11.110Z font-service should be enabled or disabled as appropriate CCE-4926-2 2009-07-30T19:30:11.110Z 2009-07-30T19:30:11.110Z imap2 service should be enabled or disabled as appropriate CCE-4913-0 2009-07-30T19:30:11.110Z 2009-07-30T19:30:11.110Z pop3 service should be enabled or disabled as appropriate CCE-5681-2 2009-07-30T19:30:11.140Z 2009-07-30T19:30:11.140Z ident service should be enabled or disabled as appropriate CCE-5368-6 2009-07-30T19:30:11.170Z 2009-07-30T19:30:11.170Z rexd service should be enabled or disabled as appropriate CCE-5549-1 2009-07-30T19:30:11.170Z 2009-07-30T19:30:11.170Z daytime service should be enabled or disabled as appropriate CCE-5144-1 2009-07-30T19:30:11.187Z 2009-07-30T19:30:11.187Z dtspc (cde-spc) service should be enabled or disabled as appropriate CCE-5223-3 2009-07-30T19:30:11.217Z 2009-07-30T19:30:11.217Z rquotad service should be enabled or disabled as appropriate CCE-5738-0 2009-07-30T19:30:11.217Z 2009-07-30T19:30:11.217Z cmsd service should be enabled or disabled as appropriate CCE-5456-9 2009-07-30T19:30:11.217Z 2009-07-30T19:30:11.217Z tooltalk service should be enabled or disabled as appropriate CCE-4918-9 2009-07-30T19:30:11.250Z 2009-07-30T19:30:11.250Z xdmcp service should be enabled or disabled as appropriate CCE-5798-4 2009-07-30T19:30:11.280Z 2009-07-30T19:30:11.280Z discard service should be enabled or disabled as appropriate CCE-4923-9 2009-07-30T19:30:11.280Z 2012-05-14T03:45:58.087Z DEPRECATED. CCE-5917-0 2009-07-30T19:30:11.297Z 2009-07-30T19:30:11.297Z vino-server service should be enabled or disabled as appropriate CCE-4934-6 2009-07-30T19:30:11.327Z 2009-07-30T19:30:11.327Z The bind service should be enabled or disabled as appropriate. CCE-5535-0 2009-07-30T19:30:11.327Z 2009-07-30T19:30:11.327Z The version string reported by the bind service should be configured appropriately. CCE-5117-7 2009-07-30T19:30:11.327Z 2009-07-30T19:30:11.327Z SSH Protocol v1 should be enabled or disabled as appropriate CCE-5690-3 2009-07-30T19:30:11.360Z 2009-07-30T19:30:11.360Z TCP_WRAPPERS should be enabled or disabled as appropriate CCE-5852-9 2009-07-30T19:30:11.390Z 2009-07-30T19:30:11.390Z SNMP version 1 should be enabled or disabled as appropriate CCE-5068-2 2009-07-30T19:30:11.390Z 2009-07-30T19:30:11.390Z The nfsd service should be enabled or disabled as appropriate CCE-5569-9 2009-07-30T19:30:11.390Z 2009-07-30T19:30:11.390Z The mountd service should be enabled or disabled as appropriate CCE-5806-5 2009-07-30T19:30:11.420Z 2009-07-30T19:30:11.420Z The statd service should be enabled or disabled as appropriate CCE-5882-6 2009-07-30T19:30:11.437Z 2009-07-30T19:30:11.437Z The lockd service should be enabled or disabled as appropriate CCE-5414-8 2009-07-30T19:30:11.437Z 2009-07-30T19:30:11.437Z NFS should be configured to respond or not as appropriate to client requests that do not include a user id . CCE-5348-8 2009-07-30T19:30:11.467Z 2009-07-30T19:30:11.467Z NFS should be configured to respond or not as appropriate to client requests that do not originate from a privileged port. CCE-5511-1 2009-07-30T19:30:11.500Z 2009-07-30T19:30:11.500Z NFS server support for the AUTH_NONE authentication mechanism should be enabled or disabled as appropriate. CCE-5480-9 2009-07-30T19:30:11.500Z 2009-07-30T19:30:11.500Z NFS server support for the AUTH_UNIX authentication mechanism should be enabled or disabled as appropriate. CCE-4957-7 2009-07-30T19:30:11.500Z 2009-07-30T19:30:11.500Z NFS server support for the AUTH_DES authentication mechanism should be enabled or disabled as appropriate. CCE-4958-5 2009-07-30T19:30:11.530Z 2009-07-30T19:30:11.530Z NFS server support for the AUTH_KERB authentication mechanism should be enabled or disabled as appropriate. CCE-5922-0 2009-07-30T19:30:11.547Z 2009-07-30T19:30:11.547Z The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports. CCE-5790-1 2009-07-30T19:30:11.547Z 2009-07-30T19:30:11.547Z The nosuid option should be enabled or disabled for all NFS mounts as appropriate CCE-5189-6 2009-07-30T19:30:11.547Z 2009-07-30T19:30:11.547Z The nosgid option should be enabled or disabled for all NFS mounts as appropriate CCE-5876-8 2009-07-30T19:30:11.547Z 2009-07-30T19:30:11.547Z Sendmail should be enabled or disabled as appropriate CCE-4959-3 2009-07-30T19:30:11.563Z 2009-07-30T19:30:11.563Z The sendmail banner should be set appropriately. CCE-5115-1 2009-07-30T19:30:11.563Z 2009-07-30T19:30:11.563Z The decode sendmail alias should be enabled or disabled as appropriate. CCE-5445-2 2009-07-30T19:30:11.563Z 2009-07-30T19:30:11.563Z .forward files should be allowed or disallowed as appropriate for all users CCE-4960-1 2009-07-30T19:30:11.577Z 2009-07-30T19:30:11.577Z Programs executed through the aliases file should be owned by an appropriate user CCE-5802-4 2009-07-30T19:30:11.577Z 2009-07-30T19:30:11.577Z Programs executed through the aliases file should reside a directory with an appropriate user owner CCE-5212-6 2009-07-30T19:30:11.577Z 2009-07-30T19:30:11.577Z Sendmail vrfy command should be allowed or not as appropriate CCE-5291-0 2009-07-30T19:30:11.577Z 2009-07-30T19:30:11.577Z Sendmail expn command should be allowed or not as appropriate CCE-5741-4 2009-07-30T19:30:11.593Z 2009-07-30T19:30:11.593Z Sendmail should be configured with an appropriate logging level CCE-4967-6 2009-07-30T19:30:11.593Z 2009-07-30T19:30:11.593Z The sendmail help command should be allowed or not as appropriate CCE-5783-6 2009-07-30T19:30:11.593Z 2009-07-30T19:30:11.593Z NIS should be enabled or disabled as appropriate CCE-4975-9 2009-07-30T19:30:11.593Z 2009-07-30T19:30:11.593Z NIS+ server should operate at an appropriate security level CCE-5138-3 2009-07-30T19:30:11.610Z 2009-07-30T19:30:11.610Z X-Windows should be enabled or disabled as appropriate CCE-5711-7 2009-07-30T19:30:11.610Z 2009-07-30T19:30:11.610Z Authorized X-clients should be listed or not in the X*.hosts file as appropriate CCE-4984-1 2009-07-30T19:30:11.610Z 2009-07-30T19:30:11.610Z X-Windows should write .Xauthority files to users' home directories or not as appropriate CCE-5975-8 2009-07-30T19:30:11.627Z 2009-07-30T19:30:11.627Z X11 forwarding via SSH should be enabled or disabled as appropriate. CCE-5931-1 2009-07-30T19:30:11.627Z 2009-07-30T19:30:11.627Z Samba should be enabled or disabled as appropriate CCE-4994-0 2009-07-30T19:30:11.627Z 2009-07-30T19:30:11.627Z Samba 'hosts allow' option should be configured with an appropriate set of networks CCE-5923-8 2009-07-30T19:30:11.627Z 2009-07-30T19:30:11.627Z Samba 'security option' option should be set as appropriate CCE-5939-4 2009-07-30T19:30:11.640Z 2009-07-30T19:30:11.640Z Samba 'encrypt' passwords option should be set as appropriate CCE-5891-7 2009-07-30T19:30:11.640Z 2009-07-30T19:30:11.640Z Samba 'smb passwd file' option should be set to an appropriate password file or no password file CCE-5234-0 2009-07-30T19:30:11.640Z 2009-07-30T19:30:11.640Z IPv6 should be enabled or disabled as appropriate CCE-5767-9 2009-07-30T19:30:11.657Z 2009-07-30T19:30:11.657Z The "at" utility directory permissions should be set as appropriate CCE-5846-1 2009-07-30T19:30:11.657Z 2009-07-30T19:30:11.657Z at.allow file permissions should be set appropriately CCE-5991-5 2009-07-30T19:30:11.657Z 2009-07-30T19:30:11.657Z at.deny file permissions should be set appropriately CCE-5705-9 2009-07-30T19:30:11.670Z 2009-07-30T19:30:11.670Z Cron directory permissions should be set appropriately CCE-5678-8 2009-07-30T19:30:11.670Z 2009-07-30T19:30:11.670Z Crontab directory permissions should be set appropriately CCE-5942-8 2009-07-30T19:30:11.670Z 2009-07-30T19:30:11.670Z Cron log file permissions should be set appropriately CCE-5770-3 2009-07-30T19:30:11.670Z 2009-07-30T19:30:11.670Z cron.allow file permissions should be set appropriately CCE-5280-3 2009-07-30T19:30:11.687Z 2009-07-30T19:30:11.687Z cron.deny file permissions should be set appropriately CCE-5896-6 2009-07-30T19:30:11.687Z 2009-07-30T19:30:11.687Z Crontab file permissions should be set appropriately CCE-5474-2 2009-07-30T19:30:11.687Z 2009-07-30T19:30:11.687Z /dev/kmem file permissions should be set appropriately CCE-5363-7 2009-07-30T19:30:11.703Z 2009-07-30T19:30:11.703Z /dev/mem file permissions should be set appropriately CCE-5566-5 2009-07-30T19:30:11.703Z 2009-07-30T19:30:11.703Z /dev/null file permissions should be set appropriately CCE-5851-1 2009-07-30T19:30:11.703Z 2009-07-30T19:30:11.703Z resolv.conf file permissions should be set appropriately CCE-5821-4 2009-07-30T19:30:11.703Z 2009-07-30T19:30:11.703Z /etc/named.conf file permissions should be set appropriately CCE-5755-4 2009-07-30T19:30:11.717Z 2009-07-30T19:30:11.717Z File permissions should be set appropriately for all user home directories. CCE-5807-3 2009-07-30T19:30:11.717Z 2009-07-30T19:30:11.717Z /etc/exports file permissions should be set appropriately CCE-5759-6 2009-07-30T19:30:11.733Z 2009-07-30T19:30:11.733Z /usr/bin/at file permissions should be set appropriately CCE-5979-0 2009-07-30T19:30:11.733Z 2009-07-30T19:30:11.733Z /usr/bin/rdist file permissions should be set appropriately CCE-5228-2 2009-07-30T19:30:11.733Z 2009-07-30T19:30:11.733Z /usr/sbin/sync file permissions should be set appropriately CCE-5951-9 2009-07-30T19:30:11.750Z 2009-07-30T19:30:11.750Z Superuser account home directories' permissions should be set appropriately CCE-5981-6 2009-07-30T19:30:11.750Z 2009-07-30T19:30:11.750Z /etc/samba/smb.conf file permissions should be set appropriately CCE-5668-9 2009-07-30T19:30:11.750Z 2009-07-30T19:30:11.750Z smbpassword executable permissions should be set appropriately CCE-5010-4 2009-07-30T19:30:11.767Z 2009-07-30T19:30:11.767Z Aliases file permissions should be set appropriately CCE-5666-3 2009-07-30T19:30:11.767Z 2009-07-30T19:30:11.767Z File permissions should be set as appropriate for the log file configured to capture critical sendmail messages. CCE-5012-0 2009-07-30T19:30:11.767Z 2009-07-30T19:30:11.767Z All files executed through /etc/aliases file entries should have file permissions set appropriately CCE-5796-8 2009-07-30T19:30:11.767Z 2009-07-30T19:30:11.767Z /bin/csh file permissions should be set appropriately CCE-5747-1 2009-07-30T19:30:11.780Z 2009-07-30T19:30:11.780Z /bin/jsh file permissions should be set appropriately CCE-5849-5 2009-07-30T19:30:11.780Z 2009-07-30T19:30:11.780Z /bin/ksh file permissions should be set appropriately CCE-5893-3 2009-07-30T19:30:11.797Z 2009-07-30T19:30:11.797Z The /bin/rsh file should exist or not as appropriate CCE-5734-9 2009-07-30T19:30:11.797Z 2009-07-30T19:30:11.797Z /bin/sh file permissions should be set appropriately CCE-5862-8 2009-07-30T19:30:11.797Z 2009-07-30T19:30:11.797Z /bin/bash file permissions should be set appropriately CCE-5954-3 2009-07-30T19:30:11.797Z 2009-07-30T19:30:11.797Z /sbin/csh file permissions should be set appropriately CCE-5027-8 2009-07-30T19:30:11.813Z 2009-07-30T19:30:11.813Z /sbin/jsh file permissions should be set appropriately CCE-5206-8 2009-07-30T19:30:11.813Z 2009-07-30T19:30:11.813Z /sbin/ksh file permissions should be set appropriately CCE-5907-1 2009-07-30T19:30:11.813Z 2009-07-30T19:30:11.813Z The /sbin/rsh file should exist or not as appropriate CCE-5040-1 2009-07-30T19:30:11.827Z 2009-07-30T19:30:11.827Z /sbin/sh file permissions should be set appropriately CCE-5049-2 2009-07-30T19:30:11.827Z 2009-07-30T19:30:11.827Z /sbin/bash file permissions should be set appropriately CCE-5056-7 2009-07-30T19:30:11.827Z 2009-07-30T19:30:11.827Z /usr/bin/csh file permissions should be set appropriately CCE-6031-9 2009-07-30T19:30:11.843Z 2009-07-30T19:30:11.843Z /usr/bin/jsh file permissions should be set appropriately CCE-6004-6 2009-07-30T19:30:11.843Z 2009-07-30T19:30:11.843Z /usr/bin/ksh file permissions should be set appropriately CCE-5974-1 2009-07-30T19:30:11.843Z 2009-07-30T19:30:11.843Z The /usr/bin/rsh file should exist or not as appropriate CCE-5863-6 2009-07-30T19:30:11.860Z 2009-07-30T19:30:11.860Z /usr/bin/sh file permissions should be set appropriately CCE-5815-6 2009-07-30T19:30:11.860Z 2009-07-30T19:30:11.860Z /usr/bin/bash file permissions should be set appropriately CCE-5955-0 2009-07-30T19:30:11.860Z 2009-07-30T19:30:11.860Z snmpd.conf file permissions should be set appropriately CCE-6052-5 2009-07-30T19:30:11.877Z 2009-07-30T19:30:11.877Z /tmp file permissions should be set appropriately CCE-6021-0 2009-07-30T19:30:11.877Z 2009-07-30T19:30:11.877Z /usr/tmp file permissions should be set appropriately CCE-5272-0 2009-07-30T19:30:11.877Z 2009-07-30T19:30:11.877Z traceroute executable file permissions should be set appropriately CCE-5884-2 2009-07-30T19:30:11.877Z 2009-07-30T19:30:11.877Z .Xauthority file permissions should be set appropriately for all users. CCE-6023-6 2009-07-30T19:30:11.890Z 2009-07-30T19:30:11.890Z /etc/aliases file permissions should be set appropriately CCE-5349-6 2009-07-30T19:30:11.890Z 2009-07-30T19:30:11.890Z /etc/cron.d/at.allow file permissions should be set appropriately CCE-6050-9 2009-07-30T19:30:11.890Z 2009-07-30T19:30:11.890Z /etc/cron.d/cron.allow file permissions should be set appropriately CCE-5833-9 2009-07-30T19:30:11.907Z 2009-07-30T19:30:11.907Z /etc/csh file permissions should be set appropriately CCE-5803-2 2009-07-30T19:30:11.907Z 2009-07-30T19:30:11.907Z /etc/default/* file permissions should be set appropriately CCE-5820-6 2009-07-30T19:30:11.907Z 2009-07-30T19:30:11.907Z /etc/default/login file permissions should be set appropriately CCE-5397-5 2009-07-30T19:30:11.920Z 2009-07-30T19:30:11.920Z The /etc/ftpusers file should exist or not as appropriate CCE-5226-6 2009-07-30T19:30:11.920Z 2009-07-30T19:30:11.920Z /etc/host.lpd file permissions should be set appropriately CCE-5903-0 2009-07-30T19:30:11.920Z 2009-07-30T19:30:11.920Z /etc/hostname* file permissions should be set appropriately CCE-5970-9 2009-07-30T19:30:11.920Z 2009-07-30T19:30:11.920Z /etc/hosts file permissions should be set appropriately CCE-5930-3 2009-07-30T19:30:11.937Z 2009-07-30T19:30:11.937Z /etc/inetd.conf file permissions should be set appropriately CCE-5698-6 2009-07-30T19:30:11.937Z 2009-07-30T19:30:11.937Z /etc/issue file permissions should be set appropriately CCE-5641-6 2009-07-30T19:30:11.937Z 2009-07-30T19:30:11.937Z /etc/jsh file permissions should be set appropriately CCE-5909-7 2009-07-30T19:30:11.953Z 2009-07-30T19:30:11.953Z /etc/ksh file permissions should be set appropriately CCE-5985-7 2009-07-30T19:30:11.953Z 2009-07-30T19:30:11.953Z /etc/mail/aliases file permissions should be set appropriately CCE-5350-4 2009-07-30T19:30:11.953Z 2009-07-30T19:30:11.953Z /etc/motd file permissions should be set appropriately CCE-5988-1 2009-07-30T19:30:11.967Z 2009-07-30T19:30:11.967Z /etc/netconfig file permissions should be set appropriately CCE-5817-2 2009-07-30T19:30:11.967Z 2009-07-30T19:30:11.967Z /etc/notrouter file permissions should be set appropriately CCE-5231-6 2009-07-30T19:30:11.967Z 2009-07-30T19:30:11.967Z /etc/pam.conf file permissions should be set appropriately CCE-5323-1 2009-07-30T19:30:11.967Z 2009-07-30T19:30:11.967Z /etc/passwd file permissions should be set appropriately CCE-5526-9 2009-07-30T19:30:11.983Z 2009-07-30T19:30:11.983Z The /etc/rsh file should exist or not as appropriate CCE-5631-7 2009-07-30T19:30:11.983Z 2009-07-30T19:30:11.983Z /etc/security file permissions should be set appropriately CCE-5728-1 2009-07-30T19:30:11.983Z 2009-07-30T19:30:11.983Z /etc/services file permissions should be set appropriately CCE-5512-9 2009-07-30T19:30:12.000Z 2009-07-30T19:30:12.000Z /etc/sh file permissions should be set appropriately CCE-5074-0 2009-07-30T19:30:12.000Z 2009-07-30T19:30:12.000Z /etc/shadow file permissions should be set appropriately CCE-5808-1 2009-07-30T19:30:12.000Z 2009-07-30T19:30:12.000Z /etc/syslog.conf file permissions should be set appropriately CCE-5075-7 2009-07-30T19:30:12.017Z 2009-07-30T19:30:12.017Z DEPRECATED. CCE-5932-9 2009-07-30T19:30:12.017Z 2009-07-30T19:30:12.017Z /etc/fstab file permissions should be set appropriately CCE-5825-5 2009-07-30T19:30:12.017Z 2009-07-30T19:30:12.017Z DEPRECATED. CCE-5279-5 2009-07-30T19:30:12.017Z 2009-07-30T19:30:12.030Z /var/adm/loginlog file permissions should be set appropriately CCE-5984-0 2009-07-30T19:30:12.030Z 2009-07-30T19:30:12.030Z /var/adm/messages file permissions should be set appropriately CCE-5656-4 2009-07-30T19:30:12.030Z 2009-07-30T19:30:12.030Z /var/adm/sulog file permissions should be set appropriately CCE-5736-4 2009-07-30T19:30:12.030Z 2009-07-30T19:30:12.030Z /var/adm/utmp file permissions should be set appropriately CCE-6062-4 2009-07-30T19:30:12.047Z 2009-07-30T19:30:12.047Z /var/adm/wtmp file permissions should be set appropriately CCE-5453-6 2009-07-30T19:30:12.047Z 2009-07-30T19:30:12.047Z /var/adm/authlog file permissions should be set appropriately CCE-6048-3 2009-07-30T19:30:12.047Z 2009-07-30T19:30:12.047Z /var/adm/syslog file permissions should be set appropriately CCE-5832-1 2009-07-30T19:30:12.063Z 2009-07-30T19:30:12.063Z /var/mail file permissions should be set appropriately CCE-6017-8 2009-07-30T19:30:12.063Z 2009-07-30T19:30:12.063Z /var/tmp file permissions should be set appropriately CCE-5986-5 2009-07-30T19:30:12.063Z 2009-07-30T19:30:12.063Z /usr/lib/pt_chmod file permissions should be set appropriately CCE-5875-0 2009-07-30T19:30:12.077Z 2009-07-30T19:30:12.077Z /usr/lib/embedded_us file permissions should be set appropriately CCE-5977-4 2009-07-30T19:30:12.077Z 2009-07-30T19:30:12.077Z /usr/lib/sendmail file permissions should be set appropriately CCE-5627-5 2009-07-30T19:30:12.077Z 2009-07-30T19:30:12.077Z /usr/kerberos/bin/rsh file permissions should be set appropriately CCE-5455-1 2009-07-30T19:30:12.093Z 2009-07-30T19:30:12.093Z /var/spool/mail file permissions should be set appropriately CCE-5077-3 2009-07-30T19:30:12.093Z 2009-07-30T19:30:12.093Z smbpassword file permissions should be set appropriately CCE-5695-2 2009-07-30T19:30:12.093Z 2009-07-30T19:30:12.093Z At directory should be owned by an appropriate user CCE-5646-5 2009-07-30T19:30:12.093Z 2009-07-30T19:30:12.093Z At directory should be owned by an appropriate group CCE-5161-5 2009-07-30T19:30:12.110Z 2009-07-30T19:30:12.110Z at.allow file should be owned by an appropriate user CCE-5254-8 2009-07-30T19:30:12.110Z 2009-07-30T19:30:12.110Z at.allow file should be owned by an appropriate group CCE-5853-7 2009-07-30T19:30:12.110Z 2009-07-30T19:30:12.110Z at.deny file should be owned by an appropriate user CCE-5632-5 2009-07-30T19:30:12.127Z 2009-07-30T19:30:12.127Z at.deny file should be owned by an appropriate group CCE-5319-9 2009-07-30T19:30:12.127Z 2009-07-30T19:30:12.127Z Cron directories should be owned by an appropriate user CCE-5412-2 2009-07-30T19:30:12.127Z 2009-07-30T19:30:12.127Z Cron directories should be owned by an appropriate group CCE-5082-3 2009-07-30T19:30:12.140Z 2009-07-30T19:30:12.140Z Crontab directories should be owned by an appropriate user CCE-5754-7 2009-07-30T19:30:12.140Z 2009-07-30T19:30:12.140Z Crontab directories should be owned by an appropriate group CCE-6022-8 2009-07-30T19:30:12.140Z 2009-07-30T19:30:12.140Z cron.allow file should be owned by an appropriate user CCE-5868-5 2009-07-30T19:30:12.157Z 2009-07-30T19:30:12.157Z cron.allow file should be owned by an appropriate group CCE-5961-8 2009-07-30T19:30:12.157Z 2009-07-30T19:30:12.157Z cron.deny should be owned by an appropriate user CCE-5837-0 2009-07-30T19:30:12.157Z 2009-07-30T19:30:12.157Z cron.deny data should be owned by an appropriate group CCE-5929-5 2009-07-30T19:30:12.170Z 2009-07-30T19:30:12.170Z crontab files should be owned by an appropriate user CCE-5085-6 2009-07-30T19:30:12.170Z 2009-07-30T19:30:12.170Z crontab files should be owned by an appropriate group CCE-5919-6 2009-07-30T19:30:12.170Z 2009-07-30T19:30:12.170Z /etc/resolv.conf file should be owned by an appropriate user CCE-5888-3 2009-07-30T19:30:12.187Z 2009-07-30T19:30:12.187Z /etc/resolv.conf file should be owned by an appropriate group CCE-5941-0 2009-07-30T19:30:12.187Z 2009-07-30T19:30:12.187Z /etc/named.boot file should be owned by an appropriate user CCE-5910-5 2009-07-30T19:30:12.203Z 2009-07-30T19:30:12.203Z /etc/named.boot file should be owned by an appropriate group CCE-5822-2 2009-07-30T19:30:12.203Z 2009-07-30T19:30:12.203Z /etc/named.conf file should be owned by an appropriate user CCE-5663-0 2009-07-30T19:30:12.203Z 2009-07-30T19:30:12.203Z /etc/named.conf file should be owned by an appropriate group CCE-5086-4 2009-07-30T19:30:12.217Z 2009-07-30T19:30:12.217Z Each user home directory should be owned by an appropriate user. CCE-6007-9 2009-07-30T19:30:12.217Z 2009-07-30T19:30:12.217Z Each user home directory should be owned by an appropriate group. CCE-5088-0 2009-07-30T19:30:12.233Z 2009-07-30T19:30:12.233Z inetd.conf file should be owned by an appropriate user CCE-5732-3 2009-07-30T19:30:12.233Z 2009-07-30T19:30:12.233Z inetd.conf file should be owned by an appropriate group CCE-5326-4 2009-07-30T19:30:12.233Z 2009-07-30T19:30:12.233Z /etc/exports should be owned by an appropriate user CCE-5296-9 2009-07-30T19:30:12.250Z 2009-07-30T19:30:12.250Z /etc/exports should be owned by an appropriate group CCE-5283-7 2009-07-30T19:30:12.250Z 2009-07-30T19:30:12.250Z Exported files and directories should be owned by an appropriate user CCE-5428-8 2009-07-30T19:30:12.250Z 2009-07-30T19:30:12.250Z Exported files and directories should be owned by an appropriate group CCE-5626-7 2009-07-30T19:30:12.267Z 2009-07-30T19:30:12.267Z /etc/services file should be owned by an appropriate user CCE-5957-6 2009-07-30T19:30:12.267Z 2009-07-30T19:30:12.267Z /etc/services file should be owned by an appropriate group CCE-5740-6 2009-07-30T19:30:12.267Z 2009-07-30T19:30:12.267Z /etc/notrouter file should be owned by an appropriate user CCE-5090-6 2009-07-30T19:30:12.280Z 2009-07-30T19:30:12.280Z /etc/notrouter file should be owned by an appropriate group CCE-6086-3 2009-07-30T19:30:12.280Z 2009-07-30T19:30:12.280Z /etc/samba/smb.conf file should be owned by an appropriate user CCE-6055-8 2009-07-30T19:30:12.297Z 2009-07-30T19:30:12.297Z /etc/samba/smb.conf file should be owned by an appropriate group CCE-6024-4 2009-07-30T19:30:12.297Z 2009-07-30T19:30:12.297Z smbpasswd executable should be owned by an appropriate user CCE-5839-6 2009-07-30T19:30:12.297Z 2009-07-30T19:30:12.297Z smbpasswd executable should be owned by an appropriate group CCE-5091-4 2009-07-30T19:30:12.313Z 2009-07-30T19:30:12.313Z aliases file should be owned by an appropriate user CCE-5497-3 2009-07-30T19:30:12.313Z 2009-07-30T19:30:12.313Z aliases file should be owned by an appropriate group CCE-6029-3 2009-07-30T19:30:12.313Z 2009-07-30T19:30:12.313Z The log file configured to capture critical sendmail messages should be owned by the appropriate user. CCE-5116-9 2009-07-30T19:30:12.327Z 2009-07-30T19:30:12.327Z The log file configured to capture critical sendmail messages should be owned by the appropriate group. CCE-5154-0 2009-07-30T19:30:12.327Z 2009-07-30T19:30:12.327Z Programs executed through aliases file entries should be owned by an appropriate user CCE-6013-7 2009-07-30T19:30:12.327Z 2009-07-30T19:30:12.327Z Programs executed through aliases file entries should be owned by an appropriate group CCE-5999-8 2009-07-30T19:30:12.343Z 2009-07-30T19:30:12.343Z Shell files should be owned by an appropriate user CCE-6003-8 2009-07-30T19:30:12.343Z 2009-07-30T19:30:12.343Z Shell files should be owned by an appropriate group CCE-6096-2 2009-07-30T19:30:12.360Z 2009-07-30T19:30:12.360Z snmpd.conf file should be owned by an appropriate user CCE-6107-7 2009-07-30T19:30:12.360Z 2009-07-30T19:30:12.360Z snmpd.conf file should be owned by an appropriate group CCE-5171-4 2009-07-30T19:30:12.360Z 2009-07-30T19:30:12.360Z /etc/syslog.conf file should be owned by an appropriate user CCE-5688-7 2009-07-30T19:30:12.377Z 2009-07-30T19:30:12.377Z /etc/syslog.conf file should be owned by an appropriate group CCE-5185-4 2009-07-30T19:30:12.377Z 2009-07-30T19:30:12.377Z traceroute executable should be owned by an appropriate user CCE-5671-3 2009-07-30T19:30:12.377Z 2009-07-30T19:30:12.377Z traceroute executable should be owned by an appropriate group CCE-5706-7 2009-07-30T19:30:12.390Z 2009-07-30T19:30:12.390Z /usr/lib/sendmail file should be owned by an appropriate user CCE-6177-0 2009-07-30T19:30:12.390Z 2009-07-30T19:30:12.390Z /usr/lib/sendmail file should be owned by an appropriate group CCE-5860-2 2009-07-30T19:30:12.407Z 2009-07-30T19:30:12.407Z /etc/passwd file should be owned by an appropriate user CCE-6146-5 2009-07-30T19:30:12.407Z 2009-07-30T19:30:12.407Z /etc/passwd file should be owned by an appropriate group CCE-5992-3 2009-07-30T19:30:12.407Z 2009-07-30T19:30:12.407Z /etc/shadow file should be owned by an appropriate user CCE-5615-0 2009-07-30T19:30:12.420Z 2009-07-30T19:30:12.420Z /etc/shadow file should be owned by an appropriate group CCE-5580-6 2009-07-30T19:30:12.420Z 2009-07-30T19:30:12.420Z smbpasswd file should be owned by an appropriate user CCE-5191-2 2009-07-30T19:30:12.420Z 2009-07-30T19:30:12.420Z smbpasswd file should be owned by an appropriate group CCE-6088-9 2009-07-30T19:30:12.437Z 2009-07-30T19:30:12.437Z Environmental variable PATH for superuser accounts should or should not contain world-writable files as appropriate CCE-6044-2 2009-07-30T19:30:12.437Z 2009-07-30T19:30:12.437Z Environmental variable PATH for superuser accounts should not contain the current directory as the first or last entry CCE-5195-3 2009-07-30T19:30:12.453Z 2012-01-05T04:30:17.113Z The current working directory should or should not be added to the environmental variable PATH by global initialization files as appropriate CCE-6012-9 2009-07-30T19:30:12.453Z 2009-07-30T19:30:12.453Z The current working directory should or should not be added to the environmental variable PATH by local initialization files as appropriate CCE-5361-1 2009-07-30T19:30:12.453Z 2009-07-30T19:30:12.453Z DEPRECATED. CCE-5204-3 2009-07-30T19:30:12.467Z 2009-07-30T19:30:12.467Z The current working directory should or should not be added to the environmental variable PATH by run control scripts as appropriate CCE-6087-1 2009-07-30T19:30:12.467Z 2009-07-30T19:30:12.467Z The system umask should be set appropriately CCE-6056-6 2009-07-30T19:30:12.483Z 2009-07-30T19:30:12.483Z The user umask should be set appropriately CCE-5816-4 2009-07-30T19:30:12.483Z 2009-07-30T19:30:12.483Z The cron.allow file should be configured with the set of users permitted to use the cron facility as appropriate. CCE-5785-1 2009-07-30T19:30:12.483Z 2009-07-30T19:30:12.483Z The cron.deny file should be configured with the set of users not permitted to use the cron facility as appropriate. CCE-5661-4 2009-07-30T19:30:12.500Z 2009-07-30T19:30:12.500Z Cron logging should be enabled or disabled as appropriate CCE-5877-6 2009-07-30T19:30:12.500Z 2009-07-30T19:30:12.500Z The at.allow file should be configured with the set of users permitted to use the at facility as appropriate. CCE-5600-2 2009-07-30T19:30:12.500Z 2009-07-30T19:30:12.500Z The at.deny file should be configured with the set of users not permitted to use the at facility as appropriate. CCE-5489-0 2009-07-30T19:30:12.517Z 2009-07-30T19:30:12.517Z /etc/security/audit/config file permissions should be set appropriately CCE-6066-5 2009-07-30T19:30:12.517Z 2009-07-30T19:30:12.517Z /etc/security/audit/events file permissions should be set appropriately CCE-6084-8 2009-07-30T19:30:12.530Z 2009-07-30T19:30:12.530Z /etc/security/audit/objects file permissions should be set appropriately CCE-5819-8 2009-07-30T19:30:12.530Z 2009-07-30T19:30:12.530Z /usr/lib/trcload file permissions should be set appropriately CCE-5648-1 2009-07-30T19:30:12.530Z 2009-07-30T19:30:12.530Z /usr/lib/semutil file permissions should be set appropriately CCE-5205-0 2009-07-30T19:30:12.547Z 2009-07-30T19:30:12.547Z /etc/security/audit/config file should be owned by an appropriate user CCE-5548-3 2009-07-30T19:30:12.547Z 2009-07-30T19:30:12.547Z /etc/security/audit/events file should be owned by an appropriate user CCE-6085-5 2009-07-30T19:30:12.547Z 2009-07-30T19:30:12.547Z /etc/security/audit/objects file should be owned by an appropriate user CCE-5926-1 2009-07-30T19:30:12.563Z 2009-07-30T19:30:12.563Z /usr/lib/trcload file should be owned by an appropriate user CCE-5224-1 2009-07-30T19:30:12.563Z 2009-07-30T19:30:12.563Z /usr/lib/semutil file should be owned by an appropriate user CCE-6037-6 2009-07-30T19:30:12.577Z 2009-07-30T19:30:12.577Z /etc/security/audit/config file should be owned by an appropriate group CCE-6011-1 2009-07-30T19:30:12.577Z 2009-07-30T19:30:12.577Z /etc/security/audit/events file should be owned by an appropriate group CCE-5980-8 2009-07-30T19:30:12.577Z 2009-07-30T19:30:12.577Z /etc/security/audit/objects file should be owned by an appropriate group CCE-6103-6 2009-07-30T19:30:12.593Z 2009-07-30T19:30:12.593Z /usr/lib/trcload file should be owned by an appropriate group CCE-5945-1 2009-07-30T19:30:12.593Z 2009-07-30T19:30:12.593Z /usr/lib/semutil file should be owned by an appropriate group CCE-6079-8 2009-07-30T19:30:12.593Z 2009-07-30T19:30:12.593Z The authentication mechanism (SYSTEM attribute) should be set appropriately for each user CCE-6158-0 2009-07-30T19:30:12.610Z 2009-07-30T19:30:12.610Z Trusted Computing Base should be installed or not as appropriate CCE-5484-1 2009-07-30T19:30:12.610Z 2009-07-30T19:30:12.610Z Auditing should be enabled or disabled as appropriate in runcontrol scripts CCE-5378-5 2009-07-30T19:30:12.627Z 2009-07-30T19:30:12.627Z BIN mode auditing should be enabled or disabled as appropriate CCE-5235-7 2009-07-30T19:30:12.627Z 2009-07-30T19:30:12.627Z Accounts should be present or absent from the audit config file as appropriate CCE-5913-9 2009-07-30T19:30:12.627Z 2009-07-30T19:30:12.627Z System logons should be audited or not as appropriate CCE-5993-1 2009-07-30T19:30:12.640Z 2009-07-30T19:30:12.640Z System logoffs should be audited or not as appropriate CCE-5693-7 2009-07-30T19:30:12.640Z 2009-07-30T19:30:12.640Z Password changes should be audited or not as appropriate CCE-6230-7 2009-07-30T19:30:12.657Z 2009-07-30T19:30:12.657Z su usage should be audited or not as appropriate CCE-5697-8 2009-07-30T19:30:12.657Z 2009-07-30T19:30:12.657Z Creation/modification of superuser groups should be audited or not as appropriate CCE-6197-8 2009-07-30T19:30:12.657Z 2009-07-30T19:30:12.657Z Startup/shutdown of audit functions should be audited or not as appropriate CCE-5889-1 2009-07-30T19:30:12.670Z 2009-07-30T19:30:12.670Z Certificate revocation should be audited or not as appropriate CCE-6109-3 2009-07-30T19:30:12.670Z 2009-07-30T19:30:12.670Z Remote access from outside the corporate network should be audited or not as appropriate CCE-5242-3 2009-07-30T19:30:12.687Z 2009-07-30T19:30:12.687Z Use of chown command should be audited or not as appropriate CCE-6213-3 2009-07-30T19:30:12.703Z 2009-07-30T19:30:12.703Z File permissions of the rcp binary should be set correctly CCE-5680-4 2009-07-30T19:30:12.703Z 2009-07-30T19:30:12.703Z File permissions of the rlogin binary should be set correctly CCE-5591-3 2009-07-30T19:30:12.717Z 2009-07-30T19:30:12.717Z File permissions of the rlogind binary should be set correctly CCE-5543-4 2009-07-30T19:30:12.717Z 2009-07-30T19:30:12.717Z File permissions of the rsh binary should be set correctly CCE-5934-5 2009-07-30T19:30:12.717Z 2009-07-30T19:30:12.717Z File permissions of the rshd binary should be set correctly CCE-6009-5 2009-07-30T19:30:12.733Z 2009-07-30T19:30:12.733Z File permissions of the tftp binary should be set correctly CCE-5996-4 2009-07-30T19:30:12.733Z 2009-07-30T19:30:12.733Z File permissions of the tftpd binary should be set correctly CCE-6135-8 2009-07-30T19:30:12.750Z 2009-07-30T19:30:12.750Z Global initialization files should allow or deny write access to the terminal as appropriate CCE-5963-4 2009-07-30T19:30:12.750Z 2009-07-30T19:30:12.750Z Netrc should be configured with an appropriate set of services CCE-6104-4 2009-07-30T19:30:12.750Z 2009-07-30T19:30:12.750Z Change of file ownership should be audited or not as appropriate CCE-5324-9 2009-07-30T19:30:12.767Z 2009-07-30T19:30:12.767Z Use of chmod command should be audited or not as appropriate CCE-6170-5 2009-07-30T19:30:12.767Z 2009-07-30T19:30:12.767Z Certificate creation should be audited or not as appropriate CCE-5243-1 2009-07-30T19:30:12.767Z 2009-07-30T19:30:12.767Z Certificate deletion should be audited or not as appropriate CCE-6016-0 2009-07-30T19:30:12.780Z 2009-07-30T19:30:12.780Z Certificate retrieval should be audited or not as appropriate CCE-6174-7 2009-07-30T19:30:12.780Z 2009-07-30T19:30:12.780Z Startup or shutdown of the audit process should be audited or not as appropriate CCE-5245-6 2009-07-30T19:30:12.780Z 2009-07-30T19:30:12.780Z Use of chgrp should be audited or not as appropriate CCE-5253-0 2009-07-30T19:30:12.797Z 2009-07-30T19:30:12.797Z Use of mkgroup should be audited or not as appropriate CCE-6189-5 2009-07-30T19:30:12.797Z 2009-07-30T19:30:12.797Z Use of rmgroup should be audited or not as appropriate CCE-6035-0 2009-07-30T19:30:12.813Z 2009-07-30T19:30:12.813Z Use of change user functions should be audited or not as appropriate CCE-6100-2 2009-07-30T19:30:12.813Z 2009-07-30T19:30:12.813Z Terminal logoffs should be audited or not as appropriate CCE-6157-2 2009-07-30T19:30:12.827Z 2009-07-30T19:30:12.827Z Exit function usage should be audited or not as appropriate CCE-6156-4 2009-07-30T19:30:12.827Z 2009-07-30T19:30:12.827Z Hard core dump size limits should be set appropriately CCE-5751-3 2009-07-30T19:30:12.827Z 2009-07-30T19:30:12.827Z Remote root logins via SSH should be allowed or not as appropriate. CCE-5435-3 2009-07-30T19:30:12.843Z 2009-07-30T19:30:12.843Z /export/home should be configured on an appropriate filesystem logical volume AC-3 CM-6 CCE-6030-1 2009-07-30T19:30:12.843Z 2009-07-30T19:30:12.843Z /var should be configured on an appropriate filesystem logical volume SC-2 CCE-5936-0 2009-07-30T19:30:12.843Z 2009-07-30T19:30:12.843Z /opt should be configured on an appropriate filesystem logical volume SC-2 CCE-6122-6 2009-07-30T19:30:12.860Z 2009-07-30T19:30:12.860Z The shell for the root account should be located on the appropriate filesystem AC-6 CM-5 CM-6 CM-7 CCE-6091-3 2009-07-30T19:30:12.860Z 2009-07-30T19:30:12.860Z Core dump size limits should be set appropriately SC-5 CCE-6249-7 2009-07-30T19:30:12.860Z 2009-07-30T19:30:12.860Z The read-only SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-6095-4 2009-07-30T19:30:12.877Z 2009-07-30T19:30:12.877Z The read/write SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-6108-5 2009-07-30T19:30:12.877Z 2009-07-30T19:30:12.877Z Password policy should ban or allow usernames or UIDs in passwords as appropriate IA-5 CCE-5812-3 2009-07-30T19:30:12.890Z 2009-07-30T19:30:12.890Z Password policy should ban or allow words found in a dictionary as appropriate. IA-5 CCE-6161-4 2009-07-30T19:30:12.890Z 2009-07-30T19:30:12.890Z Password policy should enforce the correct amount of special characters IA-5 CCE-6172-1 2009-07-30T19:30:12.890Z 2009-07-30T19:30:12.890Z Password policy should enforce or not enforce the requirement to have mixed case passwords as appropriate. IA-5 CCE-5639-0 2009-07-30T19:30:12.907Z 2009-07-30T19:30:12.907Z The minimum password age should be set as appropriate AC-3 CM-6 CM-7 IA-5 CCE-6163-0 2009-07-30T19:30:12.907Z 2009-07-30T19:30:12.907Z The minimum required password length should be set as appropriate AC-3 CM-6 CM-7 IA-5 CCE-5982-4 2009-07-30T19:30:12.907Z 2009-07-30T19:30:12.907Z Password history should be saved for an appropriate number of password changes IA-5 CCE-5956-8 2009-07-30T19:30:12.920Z 2009-07-30T19:30:12.920Z The number of consecutive failed login attempts required to trigger a lockout should be set as appropriate AC-7 CCE-6219-0 2009-07-30T19:30:12.920Z 2009-07-30T19:30:12.920Z Login access to accounts without passwords should be enabled or disabled as appropriate AC-3 CM-6 IA-5 CCE-5925-3 2009-07-30T19:30:12.920Z 2009-07-30T19:30:12.920Z New users should be required or not required to change their password on first login as appropriate CM-6 IA-5 CCE-6140-8 2009-07-30T19:30:12.937Z 2009-07-30T19:30:12.937Z Access to single-user mode (maintainence mode) should require the root password or not as appropriate AC-3 AC-6 CCE-6180-4 2009-07-30T19:30:12.937Z 2009-07-30T19:30:12.937Z The delay between failed logins should be set as appropriate AC-3 CM-6 CM-7 CCE-6114-3 2009-07-30T19:30:12.953Z 2009-07-30T19:30:12.953Z All files should be owned by an existing account or not as appropriate. AC-3 CM-6 CCE-6120-0 2009-07-30T19:30:12.953Z 2009-07-30T19:30:12.953Z All files should be owned by an existing group or not as appropriate. AC-3 CM-6 CCE-6094-7 2009-07-30T19:30:12.953Z 2009-07-30T19:30:12.953Z The console login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-5561-6 2009-07-30T19:30:12.967Z 2009-07-30T19:30:12.967Z The SSH login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-5583-0 2009-07-30T19:30:12.967Z 2009-07-30T19:30:12.967Z The telnet login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-5552-5 2009-07-30T19:30:12.967Z 2009-07-30T19:30:12.967Z The ftp login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-5255-5 2009-07-30T19:30:12.983Z 2009-07-30T19:30:12.983Z The graphical login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6043-4 2009-07-30T19:30:12.983Z 2009-07-30T19:30:12.983Z Accounts other than root should be allowed to have the UID 0 or not as appropriate AC-2 CCE-6117-6 2009-07-30T19:30:13.000Z 2009-07-30T19:30:13.000Z Accounts other than root and locked system accounts should be allowed to have a GID of 0 or not as appropriate AC-2 CCE-5883-4 2009-07-30T19:30:13.000Z 2009-07-30T19:30:13.000Z Each account should be assigned a unique UID or not as appropriate AC-3 CM-6 CCE-5261-3 2009-07-30T19:30:13.000Z 2009-07-30T19:30:13.000Z The ftp account should exist or not as appropriate AC-3 CM-6 CCE-5495-7 2009-07-30T19:30:13.017Z 2009-07-30T19:30:13.017Z Login accounts should include an appropriate GECOS identifier or no GECOS identifier AC-3 CM-6 CCE-5949-3 2009-07-30T19:30:13.017Z 2009-07-30T19:30:13.017Z The screen lock should activate after an appropriate period of inactivity AC-1 AC-3 CM-6 CM-7 CCE-6147-3 2009-07-30T19:30:13.017Z 2009-07-30T19:30:13.017Z File permissions should be set appropriately for all shell executables. AC-3 CM-6 CCE-6182-0 2009-07-30T19:30:13.030Z 2009-07-30T19:30:13.030Z Remote (serial) consoles should be enabled or disabled as appropriate. AC-1 SC-7 CCE-5764-6 2009-07-30T19:30:13.030Z 2009-07-30T19:30:13.030Z Root logins should be restricted to the console or not as appropriate. AC-1 SC-7 CCE-6151-5 2009-07-30T19:30:13.047Z 2009-07-30T19:30:13.047Z .netrc files should exist or not as appropriate for all users. AC-3 CM-6 CCE-5516-0 2009-07-30T19:30:13.047Z 2009-07-30T19:30:13.047Z .rhosts files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6089-7 2009-07-30T19:30:13.047Z 2009-07-30T19:30:13.047Z .shosts files should exist or not as appropriate for all users. AC-3 CM-6 CCE-5873-5 2009-07-30T19:30:13.063Z 2009-07-30T19:30:13.063Z The /etc/hosts.equiv file should exist or not as appropriate. AC-3 CM-6 CM-7 CCE-6186-1 2009-07-30T19:30:13.063Z 2009-07-30T19:30:13.063Z The /etc/shells file should exist or not as appropriate CM-6 CCE-6191-1 2009-07-30T19:30:13.077Z 2009-07-30T19:30:13.077Z Shells referenced in /etc/passwd should be included in /etc/shells or not as appropriate CM-6 CCE-8640-5 2009-07-30T19:30:13.077Z 2012-01-05T04:30:20.267Z The use of NIS special characters (+ or -) in the first field of the /etc/passwd file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-8240-4 2009-07-30T19:30:13.077Z 2012-01-05T04:30:20.317Z The use of NIS special characters (+ or -) in the first field of the /etc/shadow file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-8631-4 2009-07-30T19:30:13.093Z 2012-01-05T04:30:20.377Z The use of NIS special characters (+ or -) in the first field of the /etc/group file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-6208-3 2009-07-30T19:30:13.093Z 2009-07-30T19:30:13.093Z Groups referenced in /etc/passwd should be included in /etc/group or not as appropriate. AC-2 CCE-5265-4 2009-07-30T19:30:13.093Z 2009-07-30T19:30:13.093Z The home directory for the root account should be set appropriately. AC-3 CM-6 CCE-6133-3 2009-07-30T19:30:13.110Z 2009-07-30T19:30:13.110Z The home directory for each user account should be set appropriately. AC-3 CM-6 CCE-5797-6 2009-07-30T19:30:13.110Z 2009-07-30T19:30:13.110Z Home directories referenced in /etc/passwd should exist or not as appropriate AC-3 CM-6 CCE-5886-7 2009-07-30T19:30:13.127Z 2009-07-30T19:30:13.127Z All device files should be located inside an appropriate path AC-6 CCE-5762-0 2009-07-30T19:30:13.127Z 2009-07-30T19:30:13.127Z The ntpd service should be enabled or disabled as appropriate. AU-8 CM-6 CM-7 CCE-5987-3 2009-07-30T19:30:13.127Z 2009-07-30T19:30:13.127Z The Network Time Protocol (ntp) synchronization server should be set appropriately. AU-8 CM-6 CCE-5828-9 2009-07-30T19:30:13.140Z 2009-07-30T19:30:13.140Z The default gateway should be set appropriately. CM-7 CCE-5927-9 2009-07-30T19:30:13.140Z 2009-07-30T19:30:13.140Z The inetd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6143-2 2009-07-30T19:30:13.157Z 2009-07-30T19:30:13.157Z echo service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6054-1 2009-07-30T19:30:13.157Z 2009-07-30T19:30:13.157Z netstat service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6010-3 2009-07-30T19:30:13.157Z 2009-07-30T19:30:13.157Z rcp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5460-1 2009-07-30T19:30:13.170Z 2009-07-30T19:30:13.170Z chargen service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5618-4 2009-07-30T19:30:13.170Z 2009-07-30T19:30:13.170Z finger service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5838-8 2009-07-30T19:30:13.187Z 2009-07-30T19:30:13.187Z tftpd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5878-4 2009-07-30T19:30:13.187Z 2009-07-30T19:30:13.187Z walld service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5266-2 2009-07-30T19:30:13.187Z 2009-07-30T19:30:13.187Z rstatd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6138-2 2009-07-30T19:30:13.203Z 2009-07-30T19:30:13.203Z sprayd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6057-4 2009-07-30T19:30:13.203Z 2009-07-30T19:30:13.203Z rusersd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5885-9 2009-07-30T19:30:13.203Z 2009-07-30T19:30:13.203Z rlogin service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5978-2 2009-07-30T19:30:13.217Z 2009-07-30T19:30:13.217Z rsh service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5607-7 2009-07-30T19:30:13.217Z 2009-07-30T19:30:13.217Z ftp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6075-6 2009-07-30T19:30:13.233Z 2009-07-30T19:30:13.233Z telnet service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6232-3 2009-07-30T19:30:13.233Z 2009-07-30T19:30:13.233Z DEPRECATED. CCE-6171-3 2009-07-30T19:30:13.250Z 2009-07-30T19:30:13.250Z inn service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5638-2 2009-07-30T19:30:13.250Z 2009-07-30T19:30:13.250Z uucp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6175-4 2009-07-30T19:30:13.267Z 2009-07-30T19:30:13.267Z rexec service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6144-0 2009-07-30T19:30:13.267Z 2009-07-30T19:30:13.267Z font-service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5763-8 2009-07-30T19:30:13.267Z 2009-07-30T19:30:13.267Z imap2 service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5856-0 2009-07-30T19:30:13.280Z 2009-07-30T19:30:13.280Z pop3 service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6081-4 2009-07-30T19:30:13.280Z 2009-07-30T19:30:13.280Z ident service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6093-9 2009-07-30T19:30:13.280Z 2009-07-30T19:30:13.280Z rexd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6173-9 2009-07-30T19:30:13.297Z 2009-07-30T19:30:13.297Z daytime service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5287-8 2009-07-30T19:30:13.297Z 2009-07-30T19:30:13.297Z dtspc (cde-spc) service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6070-7 2009-07-30T19:30:13.313Z 2009-07-30T19:30:13.313Z rquotad service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6026-9 2009-07-30T19:30:13.313Z 2009-07-30T19:30:13.313Z cmsd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6166-3 2009-07-30T19:30:13.313Z 2009-07-30T19:30:13.313Z tooltalk service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5867-7 2009-07-30T19:30:13.327Z 2009-07-30T19:30:13.327Z xdmcp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5810-7 2009-07-30T19:30:13.327Z 2009-07-30T19:30:13.327Z discard service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5898-2 2009-07-30T19:30:13.343Z 2009-07-30T19:30:13.343Z DEPRECATED. CCE-5713-3 2009-07-30T19:30:13.343Z 2009-07-30T19:30:13.343Z vino-server service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5994-9 2009-07-30T19:30:13.343Z 2009-07-30T19:30:13.343Z The bind service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6215-8 2009-07-30T19:30:13.360Z 2009-07-30T19:30:13.360Z The version string reported by the bind service should be configured appropriately. SC-7 CCE-5937-8 2009-07-30T19:30:13.360Z 2009-07-30T19:30:13.360Z The nfsd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5303-3 2009-07-30T19:30:13.377Z 2009-07-30T19:30:13.377Z The mountd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6223-2 2009-07-30T19:30:13.377Z 2009-07-30T19:30:13.377Z The statd service should be enabled or disabled as appropriate CM-6 CCE-6069-9 2009-07-30T19:30:13.377Z 2009-07-30T19:30:13.377Z The lockd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5320-7 2009-07-30T19:30:13.390Z 2009-07-30T19:30:13.390Z NFS should be configured with appropriate authentication methods AC-3 CM-6 CCE-5593-9 2009-07-30T19:30:13.390Z 2009-07-30T19:30:13.390Z The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports. CM-6 CM-7 CCE-6256-2 2009-07-30T19:30:13.407Z 2009-07-30T19:30:13.407Z The nosuid option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-5596-2 2009-07-30T19:30:13.407Z 2009-07-30T19:30:13.407Z The nosgid option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-6234-9 2009-07-30T19:30:13.407Z 2009-07-30T19:30:13.407Z Sendmail should be enabled or disabled as appropriate CM-6 CCE-6185-3 2009-07-30T19:30:13.420Z 2009-07-30T19:30:13.420Z The sendmail banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6000-4 2009-07-30T19:30:13.420Z 2009-07-30T19:30:13.420Z The decode sendmail alias should be enabled or disabled as appropriate. CM-7 CCE-5551-7 2009-07-30T19:30:13.437Z 2009-07-30T19:30:13.437Z .forward files should be allowed or disallowed as appropriate for all users AC-3 CM-6 CCE-6018-6 2009-07-30T19:30:13.437Z 2009-07-30T19:30:13.437Z Programs executed through the aliases file should be owned by an appropriate user AC-3 CM-6 CCE-6141-6 2009-07-30T19:30:13.437Z 2009-07-30T19:30:13.437Z Programs executed through the aliases file should reside a directory with an appropriate user owner AC-3 CM-6 CCE-6233-1 2009-07-30T19:30:13.453Z 2009-07-30T19:30:13.453Z Sendmail vrfy command should be allowed or not as appropriate CM-6 CCE-5288-6 2009-07-30T19:30:13.453Z 2009-07-30T19:30:13.453Z Sendmail expn command should be allowed or not as appropriate CM-6 CCE-6113-5 2009-07-30T19:30:13.467Z 2009-07-30T19:30:13.467Z Sendmail should be configured with an appropriate logging level CM-6 CCE-6047-5 2009-07-30T19:30:13.467Z 2009-07-30T19:30:13.467Z Sendmail help command should be allowed or not as appropriate CM-6 CCE-6214-1 2009-07-30T19:30:13.483Z 2009-07-30T19:30:13.483Z NIS+ server should operate at an appropriate security level CM-6 CM-7 CCE-6051-7 2009-07-30T19:30:13.483Z 2009-07-30T19:30:13.483Z X-Windows should be enabled or disabled as appropriate CM-6 CM-7 CCE-5756-2 2009-07-30T19:30:13.483Z 2009-07-30T19:30:13.483Z Authorized X-clients should be listed or not in the X*.hosts file as appropriate AC-3 CM-6 CCE-5769-5 2009-07-30T19:30:13.500Z 2009-07-30T19:30:13.500Z X-Windows should write .Xauthority files to users' home directories or not as appropriate CM-6 CM-7 CCE-5976-6 2009-07-30T19:30:13.500Z 2009-07-30T19:30:13.500Z X11 forwarding via SSH should be enabled or disabled as appropriate. CM-6 CM-7 CCE-5438-7 2009-07-30T19:30:13.517Z 2009-07-30T19:30:13.517Z Samba should be enabled or disabled as appropriate AC-3 CM-6 CCE-6227-3 2009-07-30T19:30:13.517Z 2009-07-30T19:30:13.517Z Samba 'hosts allow' option should be configured with an appropriate set of networks AC-3 CM-6 CM-7 SC-5 CCE-5290-2 2009-07-30T19:30:13.517Z 2009-07-30T19:30:13.517Z Samba 'security option' option should be set as appropriate AC-3 CM-6 CCE-6192-9 2009-07-30T19:30:13.530Z 2009-07-30T19:30:13.530Z Samba 'encrypt' passwords option should be set as appropriate AC-3 CM-6 CM-7 SC-5 CCE-6165-5 2009-07-30T19:30:13.530Z 2009-07-30T19:30:13.530Z Samba 'smb passwd file' option should be set to an appropriate password file or no password file AC-3 CM-6 CCE-6262-0 2009-07-30T19:30:13.547Z 2009-07-30T19:30:13.547Z IPv6 should be enabled or disabled as appropriate CM-6 CM-7 CCE-6134-1 2009-07-30T19:30:13.547Z 2009-07-30T19:30:13.547Z /dev/kmem file permissions should be set appropriately AC-3 CM-6 CCE-5315-7 2009-07-30T19:30:13.563Z 2009-07-30T19:30:13.563Z /dev/mem file permissions should be set appropriately AC-3 CM-6 CCE-5912-1 2009-07-30T19:30:13.563Z 2009-07-30T19:30:13.563Z /dev/null file permissions should be set appropriately AC-3 CM-6 CCE-6128-3 2009-07-30T19:30:13.563Z 2009-07-30T19:30:13.563Z resolv.conf file permissions should be set appropriately AC-3 CM-6 CCE-5322-3 2009-07-30T19:30:13.577Z 2009-07-30T19:30:13.577Z /etc/named.conf file permissions should be set appropriately AC-3 CM-6 CCE-6231-5 2009-07-30T19:30:13.577Z 2009-07-30T19:30:13.577Z /usr/bin/at file permissions should be set appropriately AC-3 CM-6 CCE-6082-2 2009-07-30T19:30:13.593Z 2009-07-30T19:30:13.593Z /usr/bin/rdist file permissions should be set appropriately AC-3 CM-6 CCE-6121-8 2009-07-30T19:30:13.593Z 2009-07-30T19:30:13.593Z /usr/sbin/sync file permissions should be set appropriately AC-3 CM-6 CCE-5452-8 2009-07-30T19:30:13.593Z 2009-07-30T19:30:13.593Z Superuser account home directories' permissions should be set appropriately AC-3 CM-6 CCE-6280-2 2009-07-30T19:30:13.610Z 2009-07-30T19:30:13.610Z /etc/samba/smb.conf file permissions should be set appropriately AC-3 CM-6 CCE-5332-2 2009-07-30T19:30:13.610Z 2009-07-30T19:30:13.610Z smbpassword executable permissions should be set appropriately AC-3 CM-6 CCE-5782-8 2009-07-30T19:30:13.627Z 2009-07-30T19:30:13.627Z Aliases file permissions should be set appropriately AC-3 CM-6 CCE-5861-0 2009-07-30T19:30:13.627Z 2009-07-30T19:30:13.627Z File permissions should be set as appropriate for the log file configured to capture critical sendmail messages. AC-3 CM-6 CCE-6248-9 2009-07-30T19:30:13.627Z 2009-07-30T19:30:13.627Z All files executed through /etc/aliases file entries should have file permissions set appropriately AC-3 CM-6 CCE-5592-1 2009-07-30T19:30:13.640Z 2009-07-30T19:30:13.640Z /bin/csh file permissions should be set appropriately AC-3 CM-6 CCE-5336-3 2009-07-30T19:30:13.640Z 2009-07-30T19:30:13.640Z /bin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6205-9 2009-07-30T19:30:13.657Z 2009-07-30T19:30:13.657Z /bin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-6298-4 2009-07-30T19:30:13.657Z 2009-07-30T19:30:13.657Z The /bin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6331-3 2009-07-30T19:30:13.670Z 2009-07-30T19:30:13.670Z /bin/sh file permissions should be set appropriately AC-3 CM-6 CCE-6300-8 2009-07-30T19:30:13.670Z 2009-07-30T19:30:13.670Z /bin/bash file permissions should be set appropriately AC-3 CM-6 CCE-5938-6 2009-07-30T19:30:13.670Z 2009-07-30T19:30:13.670Z /sbin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6027-7 2009-07-30T19:30:13.687Z 2009-07-30T19:30:13.687Z /sbin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-5864-4 2009-07-30T19:30:13.687Z 2009-07-30T19:30:13.687Z /sbin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-5757-0 2009-07-30T19:30:13.703Z 2009-07-30T19:30:13.703Z The /sbin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6207-5 2009-07-30T19:30:13.703Z 2009-07-30T19:30:13.703Z /sbin/sh file permissions should be set appropriately AC-3 CM-6 CCE-5973-3 2009-07-30T19:30:13.703Z 2009-07-30T19:30:13.703Z /sbin/bash file permissions should be set appropriately AC-3 CM-6 CCE-5341-3 2009-07-30T19:30:13.717Z 2009-07-30T19:30:13.717Z /usr/bin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6291-9 2009-07-30T19:30:13.717Z 2009-07-30T19:30:13.717Z /usr/bin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6306-5 2009-07-30T19:30:13.733Z 2009-07-30T19:30:13.733Z /usr/bin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-5358-7 2009-07-30T19:30:13.733Z 2009-07-30T19:30:13.733Z The /usr/bin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6310-7 2009-07-30T19:30:13.750Z 2009-07-30T19:30:13.750Z /usr/bin/sh file permissions should be set appropriately AC-3 CM-6 CCE-5904-8 2009-07-30T19:30:13.750Z 2009-07-30T19:30:13.750Z snmpd.conf file permissions should be set appropriately AC-3 CM-6 CCE-6217-4 2009-07-30T19:30:13.750Z 2009-07-30T19:30:13.750Z /tmp file permissions should be set appropriately AC-3 CM-6 CCE-5494-0 2009-07-30T19:30:13.767Z 2009-07-30T19:30:13.767Z /usr/tmp file permissions should be set appropriately AC-3 CM-6 CCE-6221-6 2009-07-30T19:30:13.767Z 2009-07-30T19:30:13.767Z .Xauthority file permissions should be set appropriately for all users. AC-3 CM-6 CCE-6314-9 2009-07-30T19:30:13.780Z 2009-07-30T19:30:13.780Z /etc/aliases file permissions should be set appropriately AC-3 CM-6 CCE-6327-1 2009-07-30T19:30:13.780Z 2009-07-30T19:30:13.780Z /etc/cron.d/at.allow file permissions should be set appropriately AC-3 CM-6 CCE-6032-7 2009-07-30T19:30:13.797Z 2009-07-30T19:30:13.797Z /etc/cron.d/cron.allow file permissions should be set appropriately AC-3 CM-6 CCE-5915-4 2009-07-30T19:30:13.797Z 2009-07-30T19:30:13.797Z /etc/csh file permissions should be set appropriately AC-3 CM-6 CCE-5990-7 2009-07-30T19:30:13.797Z 2009-07-30T19:30:13.797Z /etc/default/* file permissions should be set appropriately AC-3 CM-6 CCE-6320-6 2009-07-30T19:30:13.813Z 2009-07-30T19:30:13.813Z /etc/default/login file permissions should be set appropriately AC-3 CM-6 CCE-6236-4 2009-07-30T19:30:13.813Z 2009-07-30T19:30:13.813Z The /etc/ftpusers file should exist or not as appropriate AC-3 CM-6 CM-7 CCE-5950-1 2009-07-30T19:30:13.827Z 2009-07-30T19:30:13.827Z /etc/host.lpd file permissions should be set appropriately AC-3 CM-6 CCE-5362-9 2009-07-30T19:30:13.827Z 2009-07-30T19:30:13.827Z /etc/hostname* file permissions should be set appropriately AC-3 CM-6 CCE-6068-1 2009-07-30T19:30:13.843Z 2009-07-30T19:30:13.843Z /etc/hosts file permissions should be set appropriately AC-3 CM-6 CCE-6271-1 2009-07-30T19:30:13.843Z 2009-07-30T19:30:13.843Z /etc/inetd.conf file permissions should be set appropriately AC-3 CM-6 CCE-6301-6 2009-07-30T19:30:13.843Z 2009-07-30T19:30:13.843Z /etc/issue file permissions should be set appropriately AC-3 CM-6 CCE-6275-2 2009-07-30T19:30:13.860Z 2009-07-30T19:30:13.860Z /etc/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6319-8 2009-07-30T19:30:13.860Z 2009-07-30T19:30:13.860Z /etc/ksh file permissions should be set appropriately AC-3 CM-6 CCE-5649-9 2009-07-30T19:30:13.877Z 2009-07-30T19:30:13.877Z /etc/mail/aliases file permissions should be set appropriately AC-3 CM-6 CCE-5870-1 2009-07-30T19:30:13.877Z 2009-07-30T19:30:13.877Z /etc/motd file permissions should be set appropriately AC-3 CM-6 CCE-6274-5 2009-07-30T19:30:13.877Z 2009-07-30T19:30:13.877Z /etc/netconfig file permissions should be set appropriately AC-3 CM-6 CCE-5372-8 2009-07-30T19:30:13.890Z 2009-07-30T19:30:13.890Z /etc/notrouter file permissions should be set appropriately AC-3 CM-6 CCE-5439-5 2009-07-30T19:30:13.907Z 2009-07-30T19:30:13.907Z /etc/pam.conf file permissions should be set appropriately AC-3 CM-6 CCE-5601-0 2009-07-30T19:30:13.907Z 2009-07-30T19:30:13.907Z /etc/passwd file permissions should be set appropriately AC-3 CM-6 CCE-6302-4 2009-07-30T19:30:13.920Z 2009-07-30T19:30:13.920Z The /etc/rsh file should exist or not as appropriate CM-6 CM-7 CCE-5570-7 2009-07-30T19:30:13.920Z 2009-07-30T19:30:13.920Z /etc/security file permissions should be set appropriately AC-3 CM-6 CCE-6020-2 2009-07-30T19:30:13.937Z 2009-07-30T19:30:13.937Z /etc/services file permissions should be set appropriately AC-3 CM-6 CCE-5760-4 2009-07-30T19:30:13.937Z 2009-07-30T19:30:13.937Z /etc/sh file permissions should be set appropriately AC-3 CM-6 CCE-5899-0 2009-07-30T19:30:13.953Z 2009-07-30T19:30:13.953Z /etc/shadow file permissions should be set appropriately AC-3 CM-6 CCE-6225-7 2009-07-30T19:30:13.953Z 2009-07-30T19:30:13.953Z /etc/syslog.conf file permissions should be set appropriately AC-3 CM-6 CCE-6242-2 2009-07-30T19:30:13.953Z 2009-07-30T19:30:13.953Z DEPRECATED. CCE-6083-0 2009-07-30T19:30:13.967Z 2009-07-30T19:30:13.967Z /etc/fstab file permissions should be set appropriately AC-3 CM-6 CCE-5683-8 2009-07-30T19:30:13.967Z 2009-07-30T19:30:13.967Z DEPRECATED. CCE-5933-7 2009-07-30T19:30:13.983Z 2009-07-30T19:30:13.983Z /var/adm/loginlog file permissions should be set appropriately AC-3 CM-6 CCE-6149-9 2009-07-30T19:30:13.983Z 2009-07-30T19:30:13.983Z /var/adm/messages file permissions should be set appropriately AC-3 CM-6 CCE-6039-2 2009-07-30T19:30:14.000Z 2009-07-30T19:30:14.000Z /var/adm/sulog file permissions should be set appropriately AC-3 CM-6 CCE-5655-6 2009-07-30T19:30:14.000Z 2009-07-30T19:30:14.000Z /var/adm/utmp file permissions should be set appropriately AC-3 CM-6 CCE-5854-5 2009-07-30T19:30:14.017Z 2009-07-30T19:30:14.017Z /var/adm/wtmp file permissions should be set appropriately AC-3 CM-6 CCE-6349-5 2009-07-30T19:30:14.017Z 2009-07-30T19:30:14.017Z /var/adm/authlog file permissions should be set appropriately AC-3 CM-6 CCE-6067-3 2009-07-30T19:30:14.030Z 2009-07-30T19:30:14.030Z /var/adm/syslog file permissions should be set appropriately AC-3 CM-6 CCE-5388-4 2009-07-30T19:30:14.030Z 2009-07-30T19:30:14.030Z /var/mail file permissions should be set appropriately AC-3 CM-6 CCE-5691-1 2009-07-30T19:30:14.030Z 2009-07-30T19:30:14.030Z /var/tmp file permissions should be set appropriately AC-3 CM-6 CCE-5502-0 2009-07-30T19:30:14.047Z 2009-07-30T19:30:14.047Z /usr/lib/pt_chmod file permissions should be set appropriately AC-3 CM-6 CCE-5682-0 2009-07-30T19:30:14.047Z 2009-07-30T19:30:14.047Z /usr/lib/embedded_us file permissions should be set appropriately AC-3 CM-6 CCE-6259-6 2009-07-30T19:30:14.063Z 2009-07-30T19:30:14.063Z /usr/lib/sendmail file permissions should be set appropriately AC-3 CM-6 CCE-6210-9 2009-07-30T19:30:14.063Z 2009-07-30T19:30:14.063Z /usr/kerberos/bin/rsh file permissions should be set appropriately AC-3 CM-6 CCE-5871-9 2009-07-30T19:30:14.077Z 2009-07-30T19:30:14.077Z /var/spool/mail file permissions should be set appropriately AC-3 CM-6 CCE-5840-4 2009-07-30T19:30:14.077Z 2009-07-30T19:30:14.077Z smbpassword file permissions should be set appropriately AC-3 CM-6 CCE-6353-7 2009-07-30T19:30:14.093Z 2009-07-30T19:30:14.093Z System files should be owned by an appropriate user AC-3 CM-6 CCE-5393-4 2009-07-30T19:30:14.093Z 2009-07-30T19:30:14.093Z System files should be owned by an appropriate group AC-3 CM-6 CCE-5399-1 2009-07-30T19:30:14.110Z 2009-07-30T19:30:14.110Z Default/skeleton dot files should be owned by an appropriate user AC-3 CM-6 CCE-6179-6 2009-07-30T19:30:14.110Z 2009-07-30T19:30:14.110Z Default/skeleton dot files should be owned by an appropriate group AC-3 CM-6 CCE-6272-9 2009-07-30T19:30:14.110Z 2009-07-30T19:30:14.110Z Global initialization files should be owned by an appropriate user AC-3 CM-6 CCE-5403-1 2009-07-30T19:30:14.127Z 2009-07-30T19:30:14.127Z Global initialization files should be owned by an appropriate group AC-3 CM-6 CCE-5746-3 2009-07-30T19:30:14.127Z 2009-07-30T19:30:14.127Z Home directories should be owned by an appropriate user AC-3 CM-6 CCE-5465-0 2009-07-30T19:30:14.140Z 2009-07-30T19:30:14.140Z Home directories should be owned by an appropriate group AC-3 CM-6 CCE-5729-9 2009-07-30T19:30:14.140Z 2009-07-30T19:30:14.140Z inetd.conf file should be owned by an appropriate user AC-3 CM-6 CCE-5433-8 2009-07-30T19:30:14.157Z 2009-07-30T19:30:14.157Z inetd.conf file should be owned by an appropriate group AC-3 CM-6 CCE-5879-2 2009-07-30T19:30:14.157Z 2009-07-30T19:30:14.157Z /etc/services file should be owned by an appropriate user AC-3 CM-6 CCE-5447-8 2009-07-30T19:30:14.170Z 2009-07-30T19:30:14.170Z /etc/services file should be owned by an appropriate group AC-3 CM-6 CCE-6046-7 2009-07-30T19:30:14.170Z 2009-07-30T19:30:14.170Z /etc/notrouter file should be owned by an appropriate user AC-3 CM-6 CCE-5473-4 2009-07-30T19:30:14.187Z 2009-07-30T19:30:14.187Z /etc/notrouter file should be owned by an appropriate group AC-3 CM-6 CCE-5404-9 2009-07-30T19:30:14.187Z 2009-07-30T19:30:14.187Z DEPRECATED. CCE-6254-7 2009-07-30T19:30:14.203Z 2009-07-30T19:30:14.203Z DEPRECATED. CCE-5425-4 2009-07-30T19:30:14.203Z 2009-07-30T19:30:14.203Z /etc/passwd file should be owned by an appropriate user AC-3 CM-6 CCE-6372-7 2009-07-30T19:30:14.217Z 2009-07-30T19:30:14.217Z /etc/passwd file should be owned by an appropriate group AC-3 CM-6 CCE-6283-6 2009-07-30T19:30:14.217Z 2009-07-30T19:30:14.217Z /etc/shadow file should be owned by an appropriate user AC-3 CM-6 CCE-6001-2 2009-07-30T19:30:14.217Z 2009-07-30T19:30:14.217Z /etc/shadow file should be owned by an appropriate group AC-3 CM-6 CCE-5451-0 2009-07-30T19:30:14.233Z 2009-07-30T19:30:14.233Z Environmental variable PATH for superuser accounts should or should not contain world-writable files as appropriate AC-3 CM-6 CCE-5467-6 2009-07-30T19:30:14.233Z 2009-07-30T19:30:14.233Z Environmental variable PATH for superuser accounts should not contain the current directory as the first or last entry AC-3 CM-6 CCE-6455-0 2009-07-30T19:30:14.250Z 2009-07-30T19:30:14.250Z The current directory should or should not be added to the environmental variable PATH by global initialization files as appropriate AC-3 CM-6 CCE-5486-6 2009-07-30T19:30:14.250Z 2009-07-30T19:30:14.250Z The current directory should or should not be added to the environmental variable PATH by local initialization files as appropriate AC-3 CM-6 CCE-6337-0 2009-07-30T19:30:14.267Z 2009-07-30T19:30:14.267Z DEPRECATED. CCE-6289-3 2009-07-30T19:30:14.267Z 2009-07-30T19:30:14.267Z The system umask should be set appropriately CM-6 CM-7 CCE-6451-9 2009-07-30T19:30:14.280Z 2009-07-30T19:30:14.280Z The user umask should be set appropriately CM-6 CM-7 CCE-6042-6 2009-07-30T19:30:14.280Z 2009-07-30T19:30:14.280Z DEPRECATED. CCE-5556-6 2009-07-30T19:30:14.297Z 2009-07-30T19:30:14.297Z /etc/rc.config.d/auditing file should be owned by an appropriate user AC-3 CM-6 CCE-5887-5 2009-07-30T19:30:14.297Z 2009-07-30T19:30:14.297Z DEPRECATED. CCE-5962-6 2009-07-30T19:30:14.297Z 2009-07-30T19:30:14.297Z /etc/init.d file should be owned by an appropriate user AC-3 CM-6 CCE-6365-1 2009-07-30T19:30:14.313Z 2009-07-30T19:30:14.313Z /etc/hosts.lpd file should be owned by an appropriate user AC-3 CM-6 CCE-6211-7 2009-07-30T19:30:14.327Z 2009-07-30T19:30:14.327Z DEPRECATED. CCE-5491-6 2009-07-30T19:30:14.327Z 2009-07-30T19:30:14.327Z /etc/rc.config.d/auditing file should be owned by an appropriate group AC-3 CM-6 CCE-6313-1 2009-07-30T19:30:14.343Z 2009-07-30T19:30:14.343Z DEPRECATED. CCE-6159-8 2009-07-30T19:30:14.343Z 2009-07-30T19:30:14.343Z /etc/init.d file should be owned by an appropriate group AC-3 CM-6 CCE-6065-7 2009-07-30T19:30:14.360Z 2009-07-30T19:30:14.360Z /etc/hosts.lpd file should be owned by an appropriate group AC-3 CM-6 CCE-6251-3 2009-07-30T19:30:14.360Z 2009-07-30T19:30:14.360Z DEPRECATED. CCE-6290-1 2009-07-30T19:30:14.360Z 2009-07-30T19:30:14.360Z /etc/rc.config.d/auditing file permissions should be set appropriately AC-3 CM-6 CCE-6360-2 2009-07-30T19:30:14.377Z 2009-07-30T19:30:14.377Z DEPRECATED in favor of CCE-8638-9, CCE-8647-0, and CCE-8187-7. CCE-8638-9 2009-07-30T19:30:14.377Z 2009-07-30T19:30:14.377Z /etc/auto.master file should be owned by an appropriate user AC-3 CM-6 CCE-8647-0 2009-07-30T19:30:14.390Z 2009-07-30T19:30:14.390Z /etc/auto.misc file should be owned by an appropriate user AC-3 CM-6 CCE-8187-7 2009-07-30T19:30:14.390Z 2009-07-30T19:30:14.390Z /etc/auto.net file should be owned by an appropriate user AC-3 CM-6 CCE-5504-6 2009-07-30T19:30:14.407Z 2009-07-30T19:30:14.407Z /etc/init.d file permissions should be set appropriately AC-3 CM-6 CCE-5517-8 2009-07-30T19:30:14.407Z 2009-07-30T19:30:14.407Z /etc/hosts.lpd file permissions should be set appropriately AC-3 CM-6 CCE-6076-4 2009-07-30T19:30:14.407Z 2009-07-30T19:30:14.407Z DEPRECATED. CCE-6292-7 2009-07-30T19:30:14.420Z 2009-07-30T19:30:14.420Z Auditing should be enabled or disabled for user accounts as appropriate AU-2 CCE-6203-4 2009-07-30T19:30:14.420Z 2009-07-30T19:30:14.420Z Auditing should be enabled or disabled at boot time as appropriate AU-2 CCE-5794-3 2009-07-30T19:30:14.437Z 2009-07-30T19:30:14.437Z System logons should be audited or not as appropriate AU-2 CCE-6168-9 2009-07-30T19:30:14.437Z 2009-07-30T19:30:14.437Z System logoffs should be audited or not as appropriate AU-2 CCE-6014-5 2009-07-30T19:30:14.453Z 2009-07-30T19:30:14.453Z Password changes should be audited or not as appropriate AU-2 IA-5 CCE-5983-2 2009-07-30T19:30:14.453Z 2009-07-30T19:30:14.453Z su usage should be audited or not as appropriate AU-2 CCE-5859-4 2009-07-30T19:30:14.467Z 2009-07-30T19:30:14.467Z Creation/modification of superuser groups should be audited or not as appropriate AC-6 CM-6 CCE-6326-3 2009-07-30T19:30:14.467Z 2009-07-30T19:30:14.467Z Clearing of the audit log file should be audited or not as appropriate AU-2 AU-3 CCE-5894-1 2009-07-30T19:30:14.467Z 2009-07-30T19:30:14.467Z Startup/shutdown of audit functions should be audited or not as appropriate AU-2 CCE-6110-1 2009-07-30T19:30:14.483Z 2009-07-30T19:30:14.483Z Use of identification/authorization mechanisms should be audited or not as appropriate AC-3 AU-2 IA-5 CCE-6423-8 2009-07-30T19:30:14.483Z 2009-07-30T19:30:14.483Z Remote access from outside the corporate network should be audited or not as appropriate AC-1 AU-2 SC-7 CCE-6454-3 2009-07-30T19:30:14.500Z 2009-07-30T19:30:14.500Z Change of permissions/privileges should be audited or not as appropriate AC-3 CM-6 CCE-6282-8 2009-07-30T19:30:14.500Z 2009-07-30T19:30:14.500Z Global initialization files should allow or deny write access to the terminal as appropriate CM-7 CCE-6317-2 2009-07-30T19:30:14.517Z 2009-07-30T19:30:14.517Z PRI audit file should be specified appropriately CM-6 CM-7 CCE-5660-6 2009-07-30T19:30:14.517Z 2009-07-30T19:30:14.517Z SEC audit file should be specified appropriately AU-2 CCE-6348-7 2009-07-30T19:30:14.517Z 2009-07-30T19:30:14.517Z FileSpaceSwitch should be set to an appropriate value CM-7 CCE-5774-5 2009-07-30T19:30:14.530Z 2009-07-30T19:30:14.530Z Wakeup switchpoint frequency should be set to an appropriate time interval CM-6 CCE-5731-5 2009-07-30T19:30:14.530Z 2009-07-30T19:30:14.530Z Warning messages switchpoint distance should be set to an appropriate value CM-6 CCE-6444-4 2009-07-30T19:30:14.547Z 2009-07-30T19:30:14.547Z Hard core dump size limits should be set appropriately SC-5 CCE-5940-2 2009-07-30T19:30:14.547Z 2009-07-30T19:30:14.547Z Root logins should be allowed or not as appropriate from SSH consoles AC-1 SC-7 CCE-4017-0 2009-07-30T19:30:14.563Z 2012-01-05T04:30:27.017Z The "Security Zones: Use Only Machine Settings" setting should be configured correctly. CM-2 CM-6 CCE-3924-8 2009-07-30T19:30:14.563Z 2012-03-17T03:30:29.247Z Internet Explorer Processes (Restrict ActiveX Install) CM-6 CCE-3929-7 2009-07-30T19:30:14.577Z 2012-01-05T04:30:27.220Z The "Security Zones: Do Not Allow Users to Add/Delete Sites" setting should be configured correctly. AC-3 AC-6 CM-5 CCE-3576-6 2009-07-30T19:30:14.577Z 2012-01-05T04:30:27.317Z The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly. CM-6 SC-1 SI-2 CCE-4043-6 2009-07-30T19:30:14.593Z 2012-03-17T03:30:29.450Z Internet Explorer Processes (Zone Elevation Protection) CM-6 CCE-4047-7 2009-07-30T19:30:14.593Z 2012-03-17T03:30:29.560Z The "Internet Explorer Processes (Consistent MIME Handling)" setting should be configured correctly. CM-6 CCE-3941-2 2009-07-30T19:30:14.610Z 2012-03-17T03:30:29.653Z The "Allow Software to Run or Install Even if the Signature is Invalid" setting should be configured correctly. CM-5 SI-7 CCE-3338-1 2009-07-30T19:30:14.610Z 2012-03-17T03:30:29.763Z The "Internet Explorer Processes (MK Protocol)" setting should be configured correctly. CM-6 CCE-4118-6 2009-07-30T19:30:14.627Z 2012-01-05T04:30:27.767Z The "Disable Software Update Shell Notifications on Program Launch" setting should be configured correctly. CM-5 CM-6 CCE-4122-8 2009-07-30T19:30:14.627Z 2012-03-17T03:30:29.903Z The "Internet Explorer Processes (Restrict File Download)" setting should be configured correctly. CM-6 CCE-3518-8 2009-07-30T19:30:14.640Z 2012-01-05T04:30:27.957Z The "Disable Automatic Install of Internet Explorer Components" setting should be configured correctly. CM-5 SI-3 SI-7 SI-8 CCE-3201-1 2009-07-30T19:30:14.640Z 2012-01-05T04:30:28.033Z The "Make Proxy Settings Per-Machine (Rather Then Per-User)" setting should be configured correctly. CM-5 CCE-3744-0 2009-07-30T19:30:14.657Z 2012-01-05T04:30:28.127Z The "Do Not Allow Users to enable or Disable Add-Ons" setting should be configured correctly. CM-5 CM-7 CCE-3894-3 2009-07-30T19:30:14.670Z 2012-03-17T03:30:30.123Z The "Turn Off Crash Detection" setting should be configured correctly. CM-4 CCE-4162-4 2009-07-30T19:30:14.670Z 2012-03-17T03:30:30.247Z The "Internet Explorer Processes (Scripted Window Security Restrictions)" setting should be configured correctly. CM-6 CCE-3933-9 2009-07-30T19:30:14.687Z 2012-01-05T04:30:28.407Z The "Security Zones: Do Not Allow Users to Change Policies" setting should be configured correctly. AC-3 AC-6 CM-5 CCE-4149-1 2009-07-30T19:30:14.687Z 2012-03-17T03:30:30.387Z The "Internet Explorer Processes (MIME Sniffing)" setting should be configured correctly. CM-6 CCE-4026-1 2009-07-30T19:30:14.703Z 2012-01-05T04:30:28.613Z The "Check for Signature on Downloaded Programs" setting should be configured correctly. IA-5 SC-1 CCE-4171-5 2009-07-30T19:30:14.703Z 2012-01-05T04:30:28.720Z The "Do Not Allow Resetting Internet Explorer Settings" setting should be configured correctly. CM-5 CCE-4109-5 2009-07-30T19:30:14.717Z 2012-01-05T04:30:28.800Z The "Allow cut, copy, or paste operations from the clipboard via script" setting should be configured correctly for the Internet Zone. SI-3 CCE-3378-7 2009-07-30T19:30:14.717Z 2012-01-05T04:30:28.893Z The "Turn Off First- Run Opt-In" setting should be configured correctly for the Internet Zone. CM-6 CCE-4131-9 2009-07-30T19:30:14.733Z 2012-01-05T04:30:28.970Z The "Web Browser Applications" setting should be configured correctly for the Internet Zone. CM-6 CM-7 CCE-4013-9 2009-07-30T19:30:14.733Z 2012-01-05T04:30:29.050Z The "Allow cut, copy, or paste operations from the clipboard via script" setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-4153-3 2009-07-30T19:30:14.733Z 2012-01-05T04:30:29.157Z The "Turn Off First- Run Opt-In" setting should be configured correctly for the Restricted Sites Zone. CM-6 CCE-4052-7 2009-07-30T19:30:14.750Z 2012-01-05T04:30:29.237Z The "Web Browser Applications" setting should be configured correctly for the Restricted Sites Zone. CM-6 CM-7 CCE-4175-6 2009-07-30T19:30:14.767Z 2012-01-05T04:30:29.330Z The "Intranet Sites: Include all network paths (UNCs)" setting should be configured correctly. AC-4 CCE-3695-4 2009-07-30T19:30:14.767Z 2012-01-05T04:30:29.423Z The "Disable the Advanced Page" setting should be configured correctly. CM-5 CM-6 CCE-3777-0 2009-07-30T19:30:14.780Z 2012-01-05T04:30:29.487Z The "Disable the Privacy Page" setting should be configured correctly. CM-5 CM-6 CCE-3433-0 2009-07-30T19:30:14.780Z 2012-01-05T04:30:29.567Z The "Disable the Security Page" setting should be configured correctly. CM-5 CM-6 CCE-4199-6 2009-07-30T19:30:14.797Z 2012-01-05T04:30:29.657Z The "Prevent Ignoing Certificate Errors" setting should be configured correctly. SI-6 CCE-3204-5 2009-07-30T19:30:14.797Z 2012-01-05T04:30:29.753Z The "Turn Off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools" setting should be configured correctly. CM-6 CCE-4098-0 2009-07-30T19:30:14.813Z 2012-01-05T04:30:29.830Z The "Turn Off Configuring the Update Check Interval (In Days)" setting should be configured correctly. CM-6 SI-2 CCE-3741-6 2009-07-30T19:30:14.813Z 2012-01-05T04:30:29.907Z The "Add-on List" setting should be configured correctly. CM-6 CCE-3997-4 2009-07-30T19:30:14.827Z 2012-01-05T04:30:30.003Z The "Deny all add-ons unless specifically allowed in the Add-on List" setting should be configured correctly. CM-6 CM-7 SC-1 SI-3 CCE-4001-4 2009-07-30T19:30:14.843Z 2012-01-05T04:30:30.143Z The "Disable "Configuring History"" setting should be configured correctly. CM-6 CCE-4147-5 2009-07-30T19:30:14.843Z 2012-01-05T04:30:30.267Z The "Disable Changing Automatic Configuration Settings" setting should be configured correctly. CM-5 CCE-4059-2 2009-07-30T19:30:14.843Z 2012-01-05T04:30:30.347Z The "Disable Changing Connection Settings" setting should be configured correctly. CM-5 SC-7 CCE-3935-4 2009-07-30T19:30:14.860Z 2012-01-05T04:30:30.423Z The "Disable Changing Proxy Settings" setting should be configured correctly. CM-5 SC-7 CCE-3706-9 2009-07-30T19:30:14.860Z 2012-01-05T04:30:30.503Z The "Disable Showing the Splash Screen" setting should be configured correctly. CM-5 CM-6 CCE-3975-0 2009-07-30T19:30:14.877Z 2012-01-05T04:30:30.597Z The "Prevent "Fix settings" Functionality" setting should be configured correctly. CM-6 CM-7 CCE-3993-3 2009-07-30T19:30:14.877Z 2012-01-05T04:30:30.673Z The "Prevent participation in the Customer Experience Improvement Programs" setting should be configured correctly. AC-4 CCE-3207-8 2009-07-30T19:30:14.890Z 2012-01-05T04:30:30.767Z The "Prevent performance of First Run Customize settings" setting should be configured correctly. SI-3 CCE-4073-3 2009-07-30T19:30:14.890Z 2012-01-05T04:30:30.893Z The "Prevent the deletation of temporary internet files and cookies" setting should be configured correctly. AU-9 CM-6 CCE-3615-2 2009-07-30T19:30:14.907Z 2012-01-05T04:30:30.970Z The "Turn off "Delete Browsing History" functionality" setting should be configured correctly. AU-9 CM-6 CCE-3866-1 2009-07-30T19:30:14.907Z 2012-01-05T04:30:31.067Z The "Turn off Managing Phishing Filter" setting should be configured correctly. SC-1 SI-3 SI-8 CCE-3875-2 2009-07-30T19:30:14.920Z 2012-01-05T04:30:31.190Z The "Turn off the Security Settings Check feature" setting should be configured correctly. SI-6 CCE-4174-9 2009-07-30T19:30:14.920Z 2012-01-05T04:30:31.317Z The "Allow Active Content from CD's to Run on User Machine" setting should be configured correctly. CM-5 SI-7 CCE-4192-1 2009-07-30T19:30:14.937Z 2012-01-05T04:30:31.393Z The "Enable third-party browser extensions" setting should be configured correctly. CM-5 SI-3 CCE-3584-0 2009-07-30T19:30:14.937Z 2012-01-05T04:30:31.470Z The "Automatically Check for Internet Explorer Updates" setting should be configured correctly. CM-2 CM-6 CCE-3976-8 2009-07-30T19:30:14.953Z 2012-01-05T04:30:31.567Z The "Check for Server Certificate Revocation" setting should be configured correctly. IA-5 SC-1 CCE-3853-9 2009-07-30T19:30:14.953Z 2012-01-05T04:30:31.643Z The "Access data sources across domains" setting should be configured correctly for the Internet Zone. AC-4 CCE-3998-2 2009-07-30T19:30:14.953Z 2012-01-05T04:30:31.767Z The "Drag and drop or copy and paste files" setting should be configured correctly for the Internet Zone. SI-3 CCE-3888-5 2009-07-30T19:30:14.967Z 2012-01-05T04:30:31.847Z The "Font download" setting should be configured correctly for the Internet Zone. SI-3 CCE-3906-5 2009-07-30T19:30:14.967Z 2012-01-05T04:30:31.923Z The "Installation of desktop items" setting should be configured correctly for the Internet Zone. SI-3 CCE-4099-8 2009-07-30T19:30:14.983Z 2012-01-05T04:30:32.017Z The "Allow script-initiated windows without size or position constraints" setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-3601-2 2009-07-30T19:30:14.983Z 2012-01-05T04:30:32.097Z The "Allow Scriptlets" setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-3249-0 2009-07-30T19:30:15.000Z 2012-01-05T04:30:32.190Z The "Allow status bar updates via script" setting should be configured correctly for the Internet Zone. SC-8 SI-3 CCE-4139-2 2009-07-30T19:30:15.000Z 2012-01-05T04:30:32.267Z The "Automatic prompting for file downloads" setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-3927-1 2009-07-30T19:30:15.017Z 2012-01-05T04:30:32.363Z The "Download signed ActiveX controls" setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-3945-3 2009-07-30T19:30:15.017Z 2012-01-05T04:30:32.440Z The "Download unsigned ActiveX controls" setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-4068-3 2009-07-30T19:30:15.030Z 2012-01-05T04:30:32.533Z The "Initialize and script ActiveX controls not marked as safe for scripting" setting should be configured correctly for the Internet Zone. SC-1 CCE-3963-6 2009-07-30T19:30:15.030Z 2012-01-05T04:30:32.613Z The "Java permissions" setting should be configured correctly for the Internet Zone. SC-1 CCE-4104-6 2009-07-30T19:30:15.047Z 2012-01-05T04:30:32.707Z The "Launching programs and files in an IFRAME" setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-3623-6 2009-07-30T19:30:15.047Z 2012-01-05T04:30:32.783Z The "Logon" setting should be configured correctly for the Internet Zone. CM-6 IA-2 CCE-3751-5 2009-07-30T19:30:15.063Z 2012-01-05T04:30:32.877Z The "Loose XAML" setting should be configured correctly for the Internet Zone. CM-6 CCE-4143-4 2009-07-30T19:30:15.063Z 2012-01-05T04:30:33.003Z The "Navigate sub-frames across different domains" setting should be configured correctly for the Internet Zone. CM-6 CCE-4161-6 2009-07-30T19:30:15.077Z 2012-01-05T04:30:33.113Z The "Open files based on content, not file extension" setting should be configured correctly for the Internet Zone. CM-6 CCE-3553-5 2009-07-30T19:30:15.077Z 2012-01-05T04:30:33.190Z The "Software channel permissions" setting should be configured correctly for the Internet Zone. CM-5 CCE-3619-4 2009-07-30T19:30:15.093Z 2012-01-05T04:30:33.267Z The "Use Pop-up Blocker" setting should be configured correctly for the Internet Zone. SI-8 CCE-3914-9 2009-07-30T19:30:15.093Z 2012-01-05T04:30:33.363Z The "Userdata persistence" setting should be configured correctly for the Internet Zone. SC-4 CCE-3570-9 2009-07-30T19:30:15.110Z 2012-01-05T04:30:33.440Z The "Web sites in less privileged Web content zones can navigate into this zone" setting should be configured correctly for the Internet Zone. CM-6 CM-7 CCE-3843-0 2009-07-30T19:30:15.110Z 2012-01-05T04:30:33.503Z The "XPS documents" setting should be configured correctly for the Internet Zone. CM-6 CM-7 CCE-3984-2 2009-07-30T19:30:15.110Z 2012-01-05T04:30:33.597Z The "Display mixed content" setting should be configured correctly for the Internet Zone. AC-3 SC-1 CCE-3989-1 2009-07-30T19:30:15.127Z 2012-01-05T04:30:33.657Z The "Display mixed content" setting should be configured correctly for the Intranet Zone. AC-3 SC-1 CCE-4121-0 2009-07-30T19:30:15.127Z 2012-01-05T04:30:33.753Z The "Display mixed content" setting should be configured correctly for the Locked Down Intranet Zone. AC-3 SC-1 CCE-4138-4 2009-07-30T19:30:15.140Z 2012-01-05T04:30:33.830Z The "Display mixed content" setting should be configured correctly for the Local Machine Zone. AC-3 SC-1 CCE-4028-7 2009-07-30T19:30:15.140Z 2012-01-05T04:30:33.907Z The "Display mixed content" setting should be configured correctly for the Locked Down Local Machine Zone. AC-3 SC-1 CCE-3905-7 2009-07-30T19:30:15.157Z 2012-01-05T04:30:34.003Z The "Access data sources across domains" setting should be configured correctly for the Restricted Sites Zone. AC-4 CCE-4050-1 2009-07-30T19:30:15.157Z 2012-01-05T04:30:34.080Z The "Active scripting" setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-4196-2 2009-07-30T19:30:15.170Z 2012-01-05T04:30:34.173Z The "Binary and script behaviors" setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-3337-3 2009-07-30T19:30:15.170Z 2012-01-05T04:30:34.283Z The "Drag and drop or copy and paste files" setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-4150-9 2009-07-30T19:30:15.187Z 2012-01-05T04:30:34.377Z The "File download" setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-4062-6 2009-07-30T19:30:15.187Z 2012-01-05T04:30:34.457Z The "Font download" setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-4079-0 2009-07-30T19:30:15.203Z 2012-01-05T04:30:34.613Z The "Installation of desktop items" setting should be configured correctly for the Restricted Sites Zone. CM-6 CCE-4084-0 2009-07-30T19:30:15.203Z 2012-01-05T04:30:34.690Z The "Allow META REFRESH" setting should be configured correctly for the Restricted Sites Zone. CM-6 CCE-4119-4 2009-07-30T19:30:15.217Z 2012-01-05T04:30:34.800Z The "Allow script-initiated windows without size or position constraints" setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-3639-2 2009-07-30T19:30:15.217Z 2012-01-05T04:30:34.863Z The "Allow Scriptlets" setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-4031-1 2009-07-30T19:30:15.233Z 2012-01-05T04:30:34.940Z The "Allow status bar updates via script" setting should be configured correctly for the Restricted Sites Zone. SC-8 SI-3 CCE-4053-5 2009-07-30T19:30:15.233Z 2012-01-05T04:30:35.033Z The "Automatic prompting for file downloads" setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-4057-6 2009-07-30T19:30:15.250Z 2012-01-05T04:30:35.113Z The "Download signed ActiveX controls" setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-3564-2 2009-07-30T19:30:15.250Z 2012-01-05T04:30:35.207Z The "Download unsigned ActiveX controls" setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-4101-2 2009-07-30T19:30:15.267Z 2012-01-05T04:30:35.283Z The "Initialize and script ActiveX controls not marked as safe for scripting" setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-3996-6 2009-07-30T19:30:15.267Z 2012-01-05T04:30:35.377Z The "Java permissions" setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-4066-7 2009-07-30T19:30:15.280Z 2012-01-05T04:30:35.457Z The "Launching programs and files in an IFRAME" setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-3696-2 2009-07-30T19:30:15.280Z 2012-01-05T04:30:35.613Z The "Logon" setting should be configured correctly for the Restricted Sites Zone. CM-6 IA-2 CCE-3590-7 2009-07-30T19:30:15.297Z 2012-01-05T04:30:35.707Z The "Loose XAML" setting should be configured correctly for the Restricted Sites Zone. CM-6 CCE-4110-3 2009-07-30T19:30:15.297Z 2012-01-05T04:30:35.800Z The "Navigate sub-frames across different domains" setting should be configured correctly for the Restricted Sites Zone. CM-6 CCE-4132-7 2009-07-30T19:30:15.313Z 2012-01-05T04:30:35.877Z The "Open files based on content, not file extension" setting should be configured correctly for the Restricted Sites Zone. CM-6 CCE-3400-9 2009-07-30T19:30:15.327Z 2012-01-05T04:30:35.970Z The "Run components not signed with Authenticode" setting should be configured correctly for the Restricted Sites Zone. CM-5 CM-6 CCE-4158-2 2009-07-30T19:30:15.327Z 2012-01-05T04:30:36.050Z The "Run components signed with Authenticode" setting should be configured correctly for the Restricted Sites Zone. CM-5 CM-6 CCE-4163-2 2009-07-30T19:30:15.343Z 2012-01-05T04:30:36.127Z The "Run ActiveX controls and plugins" setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-4202-8 2009-07-30T19:30:15.343Z 2012-01-05T04:30:36.220Z The "Script ActiveX controls marked safe for scripting" setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-3216-9 2009-07-30T19:30:15.360Z 2012-01-05T04:30:36.300Z The "Scripting of Java applets" setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-3855-4 2009-07-30T19:30:15.360Z 2012-01-05T04:30:36.393Z The "Software channel permissions" setting should be configured correctly for the Restricted Sites Zone. CM-5 CCE-4018-8 2009-07-30T19:30:15.377Z 2012-01-05T04:30:36.470Z The "Use Pop-up Blocker" setting should be configured correctly for the Restricted Sites Zone. SI-8 CCE-4040-2 2009-07-30T19:30:15.377Z 2012-01-05T04:30:36.567Z The "Userdata persistence" setting should be configured correctly for the Restricted Sites Zone. SC-4 CCE-4215-0 2009-07-30T19:30:15.390Z 2012-01-05T04:30:36.643Z The "Web sites in less privileged Web content zones can navigate into this zone" setting should be configured correctly for the Restricted Sites Zone. CM-6 CM-7 CCE-3991-7 2009-07-30T19:30:15.390Z 2012-01-05T04:30:36.720Z The "XPS documents" setting should be configured correctly for the Restricted Sites Zone. CM-6 CM-7 CCE-3264-9 2009-07-30T19:30:15.407Z 2012-01-05T04:30:36.847Z The "Display mixed content" setting should be configured correctly for the Restricted Sites Zone. AC-3 SC-1 CCE-4087-3 2009-07-30T19:30:15.420Z 2012-01-05T04:30:36.923Z The "Display mixed content" setting should be configured correctly for the Trusted Sites Zone. AC-3 SC-1 CCE-4232-5 2009-07-30T19:30:15.420Z 2012-01-05T04:30:37.017Z The "Display mixed content" setting should be configured correctly for the Locked Down Trusted Sites Zone. AC-3 SC-1 CCE-4259-8 2009-07-30T19:30:15.437Z 2012-01-05T04:30:37.097Z The "Enable Native XMLHttp Support" setting should be configured correctly. SC-1 CCE-3647-5 2009-07-30T19:30:15.437Z 2012-03-17T03:30:35.013Z The "Turn on the auto-complete feature for user names and passwords on form" setting should be configured correctly. CM-6 IA-5 CCE-3677-2 2009-07-30T19:30:15.453Z 2012-03-17T03:30:35.093Z The "Allow Install On Demand (Internet Explorer)" setting should be configured correctly. CM-5 SI-7 CCE-4056-8 2009-07-30T19:30:15.453Z 2012-03-17T03:30:35.170Z The "Turn off page transitions" setting should be configured correctly. CM-6 CCE-4246-5 2009-07-30T19:30:15.467Z 2012-03-17T03:30:35.247Z The "Disable AutoComplete for forms" setting should be configured correctly. CM-5 CCE-4214-3 2009-07-30T19:30:15.467Z 2012-03-17T03:30:35.310Z The "Disable Save this program to disk option" setting should be configured correctly. CM-5 CM-6 CCE-3606-1 2009-07-30T19:30:15.483Z 2012-03-17T03:30:35.373Z The "Disable changing certificate settings" setting should be configured correctly. CM-5 CCE-4237-4 2009-07-30T19:30:15.500Z 2012-03-17T03:30:35.450Z The "Disable external branding of Internet Explorer" setting should be configured correctly. CM-6 CCE-3275-5 2009-07-30T19:30:15.500Z 2012-03-17T03:30:35.547Z The "Configure Outlook Express" setting should be configured correctly CM-6 CCE-4036-0 2009-07-30T19:30:15.517Z 2012-03-17T03:30:35.623Z The "Turn on the Internet Connection Wizard Auto Detect" setting should be configured correctly. CM-6 CCE-3825-7 2009-07-30T19:30:15.517Z 2012-03-17T03:30:35.700Z The "Disable Internet Connection wizard" setting should be configured correctly. CM-6 CCE-4226-7 2009-07-30T19:30:15.530Z 2012-03-17T03:30:35.780Z The "Disable the Reset Web Settings feature" should be configured correctly. CM-5 CM-6 CCE-4120-2 2009-07-30T19:30:15.530Z 2009-07-30T19:30:15.530Z The "Disable Downloading Of Site Subscription Content" setting should be configured correctly. CM-6 CM-7 SC-1 SI-3 CCE-4248-1 2009-07-30T19:30:15.547Z 2009-07-30T19:30:15.547Z The "Disable Adding Schedules For Offline Pages" setting should be configured correctly. CM-6 CCE-3389-4 2009-07-30T19:30:15.547Z 2009-07-30T19:30:15.547Z The "Disable Adding Channels" setting should be configured correctly. CM-6 CCE-3645-9 2009-07-30T19:30:15.563Z 2009-07-30T19:30:15.563Z The "Disable Editing And Creating Of Schedule Groups" setting should be configured correctly. CM-6 CM-7 CCE-3940-4 2009-07-30T19:30:15.563Z 2009-07-30T19:30:15.563Z The "Disable All Scheduled Offline Pages" setting should be configured correctly. CM-6 CCE-3821-6 2009-07-30T19:30:15.577Z 2009-07-30T19:30:15.577Z The "Disable Editing Schedules For Offline Pages" setting should be configured correctly. CM-6 CM-7 CCE-3742-4 2009-07-30T19:30:15.593Z 2009-07-30T19:30:15.593Z The "Disable Channel User Interface Completely" setting should be configured correctly. CM-5 SC-7 CCE-4261-4 2009-07-30T19:30:15.593Z 2009-07-30T19:30:15.593Z The "Disable Removing Channels" setting should be configured correctly. CM-5 CM-6 CCE-4190-5 2009-07-30T19:30:15.610Z 2009-07-30T19:30:15.610Z The "Disable Removing Schedules For Offline Pages" setting should be configured correctly. CM-5 CM-6 CCE-4208-5 2009-07-30T19:30:15.610Z 2009-07-30T19:30:15.610Z The "Disable Offline Page Hit Logging" setting should be configured correctly. CM-6 CCE-3754-9 2009-07-30T19:30:15.627Z 2012-01-05T04:30:38.190Z The "Java permissions" setting should be configured correctly for the Locked Down Intranet Zone. SC-1 CCE-3891-9 2009-07-30T19:30:15.627Z 2012-01-05T04:30:38.267Z The "Java permissions" setting should be configured correctly for the Local Machine Zone. SC-1 CCE-4160-8 2009-07-30T19:30:15.640Z 2012-01-05T04:30:38.363Z The "Java permissions" setting should be configured correctly for the Locked Down Local Machine Zone. SC-1 CCE-4763-9 2009-07-30T19:30:15.657Z 2009-07-30T19:30:15.657Z Computer-wide, rather than per-user, assignment of sites to zones for Internet Explorer should be enabled or disabled as appropriate. AC-4 CCE-4643-3 2009-07-30T19:30:15.657Z 2009-07-30T19:30:15.657Z The "Turn on Protected Mode" setting should be configured correctly for the Internet Zone. CM-6 CM-7 CCE-4652-4 2009-07-30T19:30:15.670Z 2012-01-05T04:30:38.517Z The "Java permissions" setting should be configured correctly for the Intranet Zone. SC-1 CCE-4793-6 2009-07-30T19:30:15.670Z 2009-07-30T19:30:15.670Z The "Download signed ActiveX controls" setting should be configured correctly for the Locked-Down Internet Zone. SC-1 SI-3 CCE-4692-0 2009-07-30T19:30:15.687Z 2012-01-05T04:30:38.643Z The "Java permissions" setting should be configured correctly for the Locked Down Internet Zone. SC-1 CCE-3902-4 2009-07-30T19:30:15.703Z 2012-01-05T04:30:38.720Z The "Java permissions" setting should be configured correctly for the Locked Down Restricted Sites Zone. SC-1 CCE-4546-8 2009-07-30T19:30:15.717Z 2009-07-30T19:30:15.717Z The "Allow status bar updates via script" setting should be configured correctly for the Locked-Down Trusted Sites Zone. SC-1 CCE-4564-1 2009-07-30T19:30:15.717Z 2012-01-05T04:30:38.830Z The "Java permissions" setting should be configured correctly for the Locked Down Trusted Sites Zone. SC-1 CCE-3909-9 2009-07-30T19:30:15.733Z 2012-01-05T04:30:38.893Z The "Turn on Protected Mode" setting should be configured correctly for the Restricted Sites Zone. CM-6 CM-7 CCE-4845-4 2009-07-30T19:30:15.733Z 2012-01-05T04:30:38.970Z The "Java permissions" setting should be configured correctly for the Trusted Sites Zone. SC-1 CCE-116-4 2009-07-30T19:30:15.750Z 2012-01-05T04:31:53.753Z The "Disable VBA for Office applications" setting should be configured correctly. CM-5 CM-6 CCE-908-4 2009-07-30T19:30:15.750Z 2012-01-05T04:31:53.830Z The "ActiveX Control Initialization:" setting should be configured correctly. CM-7 CCE-184-2 2009-07-30T19:30:15.767Z 2009-07-30T19:30:15.767Z The "Enable Customer Experience Improvement Program" setting should be configured correctly. CM-5 CM-6 CCE-276-6 2009-07-30T19:30:15.767Z 2012-01-05T04:31:53.987Z The "Enable Customer Experience Improvement Program" setting should be configured correctly. CM-5 CM-6 CCE-967-0 2009-07-30T19:30:15.780Z 2012-01-05T04:31:54.050Z The "Online content options" setting should be configured correctly. CM-6 CCE-427-5 2009-07-30T19:30:15.780Z 2012-01-05T04:31:54.127Z The "VBA Macro Warning Settings" setting should be configured correctly for Access 2007. CM-6 CM-7 CCE-649-4 2009-07-30T19:30:15.797Z 2012-01-05T04:31:54.207Z The "VBA Macro Warning Settings" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-862-3 2009-07-30T19:30:15.813Z 2012-01-05T04:31:54.283Z The "Trust access to Visual Basic Project" setting should be configured correctly for Excel 2007 and 2003. CM-6 CM-7 CCE-567-8 2009-07-30T19:30:15.813Z 2012-01-05T04:31:54.363Z The "VBA Macro Warning Settings" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-68-7 2009-07-30T19:30:15.827Z 2012-01-05T04:31:54.440Z The "Trust access to Visual Basic Project" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-537-1 2009-07-30T19:30:15.843Z 2010-04-28T04:00:00.000Z The "Disable Remember Passwords" setting should be configured correctly for Outlook 2007. AC-3 CM-6 CM-7 CCE-786-4 2009-07-30T19:30:15.843Z 2012-01-05T04:31:54.627Z The "Configure Add-In Trust Level" setting should be configured correctly for Outlook 2007. CM-6 CCE-937-3 2009-07-30T19:30:15.860Z 2010-04-28T04:00:00.000Z DEPRECATED in favor of CCE-537-1. CCE-13-3 2009-07-30T19:30:15.860Z 2012-01-05T04:31:54.737Z The "Minimum encryption settings" setting should be configured correctly. CM-7 SC-2 CCE-316-0 2009-07-30T19:30:15.877Z 2012-01-05T04:31:54.817Z The "Do not check e-mail address against address of certificates being using" setting should be configured correctly. CM-6 IA-5 CCE-14-1 2009-07-30T19:30:15.877Z 2012-01-05T04:31:54.907Z The "Send all signed messages as clear signed messages" setting should be configured correctly. CM-6 SC-9 CCE-153-7 2009-07-30T19:30:15.890Z 2012-01-05T04:31:54.987Z The "Request an S/MIME receipt for all S/MIME signed messages" setting should be configured correctly. CM-6 CM-7 CCE-345-9 2009-07-30T19:30:15.907Z 2012-01-05T04:31:55.080Z The "Do not display 'Publish to GAL' button" setting should be configured correctly. CM-6 CCE-700-5 2009-07-30T19:30:15.907Z 2012-01-05T04:31:55.157Z The "Signature Warning" setting should be configured correctly. CM-6 CM-7 CCE-695-7 2009-07-30T19:30:15.920Z 2012-01-05T04:31:55.253Z The "Enable Cryptography Icons" setting should be configured correctly. CM-6 CCE-395-4 2009-07-30T19:30:15.920Z 2012-01-05T04:31:55.330Z The "Retrieving CRLs (Certificate Revocation Lists)" setting should be configured correctly. CM-5 CM-6 IA-5 CCE-659-3 2009-07-30T19:30:15.937Z 2012-01-05T04:31:55.407Z The "VBA Macro Warning Settings" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-703-9 2009-07-30T19:30:15.937Z 2012-01-05T04:31:55.503Z The "Trust access to Visual Basic Project" setting should be configured correctly for Word 2007 and 2003. CM-6 CM-7 CCE-173-5 2009-07-30T19:30:15.953Z 2012-01-05T04:31:55.580Z The "Warn before printing, saving or sending a file that contains tracked changes or comments" setting should be configured correctly. CM-6 CM-7 CCE-784-9 2009-07-30T19:30:15.953Z 2012-01-05T04:31:55.657Z The "Block updates from the Office Update Site from applying" setting should be configured correctly. CM-7 SI-2 SI-3 CCE-1395-3 2009-07-30T19:30:15.967Z 2012-01-05T04:31:55.737Z The "Underline hyperlinks" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-1137-9 2009-07-30T19:30:15.967Z 2012-01-05T04:31:55.783Z The "Number of documents in the Recent Documents list (0-9)" setting should be configured correctly for Access 2007. AC-6 CM-6 CCE-1423-3 2009-07-30T19:30:15.983Z 2012-01-05T04:31:55.863Z The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for Access 2007. CM-5 CM-6 CCE-1238-5 2009-07-30T19:30:15.983Z 2012-01-05T04:31:55.923Z The "Disable all application add-ins" setting should be configured correctly for Access 2007. CM-6 SC-1 CCE-1476-1 2009-07-30T19:30:16.000Z 2012-01-05T04:31:55.987Z The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for Access 2007. CM-5 CM-6 CCE-1520-6 2009-07-30T19:30:16.017Z 2012-01-05T04:31:56.050Z The "Disable all trusted locations" setting should be configured correctly for Access 2007. CM-6 CCE-780-7 2009-07-30T19:30:16.017Z 2012-01-05T04:31:56.113Z The "Allow Trusted Locations not on the computer" setting should be configured correctly for Access 2007. CM-6 CCE-1214-6 2009-07-30T19:30:16.030Z 2012-01-05T04:31:56.173Z The "Modal Trust Decision Only" setting should be configured correctly for Access 2007. AC-3 CM-6 CCE-1370-6 2009-07-30T19:30:16.030Z 2012-01-05T04:31:56.237Z The "Disable commands" setting should be configured correctly for Access 2007. CM-6 CM-7 CCE-1268-2 2009-07-30T19:30:16.047Z 2012-01-05T04:31:56.300Z The "Disable commands - Office Button | E-Mail" setting should be configured correctly for Access 2007. CM-6 CM-7 CCE-1400-1 2009-07-30T19:30:16.047Z 2012-01-05T04:31:56.377Z The "Disable commands - Office Button | Access Options | Customize | All Commands | Insert Hyperlink" setting should be configured correctly for Access 2007. CM-6 CM-7 CCE-1440-7 2009-07-30T19:30:16.063Z 2012-01-05T04:31:56.440Z The "Disable commands - Database Tools | Database Tools | Encrypt with Password" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-581-9 2009-07-30T19:30:16.063Z 2012-01-05T04:31:56.503Z The "Disable commands - Database Tools | Administer | Users and Permission | User and Group Permissions" setting should be configured correctly for Access 2007. AC-6 CCE-1480-3 2009-07-30T19:30:16.077Z 2012-01-05T04:31:56.567Z The "Disable commands - Database Tools | Administer | Users and Permissions | User and Group Accounts" setting should be configured correctly for Access 2007. AC-6 CCE-1489-4 2009-07-30T19:30:16.077Z 2012-01-05T04:31:56.627Z The "Disable commands - Database Tools | Administer | Users and Permission | User-Level Security Wizard..." setting should be configured correctly for Access 2007. AC-6 CCE-1392-0 2009-07-30T19:30:16.093Z 2012-01-05T04:31:56.707Z The "Disable commands - Database Tools | Database Tools | Encode/Decode Database" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-1414-2 2009-07-30T19:30:16.093Z 2012-01-05T04:31:56.767Z The "Disable commands - Database Tools | Macro | Visual Basic" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-1418-3 2009-07-30T19:30:16.110Z 2012-01-05T04:31:56.830Z The "Disable commands - Database Tools | Macro | Run Macro" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-1405-0 2009-07-30T19:30:16.110Z 2012-01-05T04:31:56.893Z The "Database Tools | Macro | Convert Macros to Visual Basic" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-1550-3 2009-07-30T19:30:16.127Z 2012-01-05T04:31:56.940Z The "Database Tools | Macro | Create Shortcut Menu from Macro" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-1075-1 2009-07-30T19:30:16.127Z 2012-01-05T04:31:57.017Z The "Disable shortcut keys" setting should be configured correctly for Access 2007. CM-5 CM-6 CCE-709-6 2009-07-30T19:30:16.140Z 2012-01-05T04:31:57.080Z The "Disable commands - Ctrl+K (Office Button | Access Options | Customize | All Commands | Insert Hyperlinks)" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-1502-4 2009-07-30T19:30:16.140Z 2012-01-05T04:31:57.143Z The "Disable commands - Alt+F11 (Database Tools | Macro | Visual Basic)" setting should be configured correctly for Access 2007. CM-6 CM-7 SC-1 SI-3 CCE-1260-9 2009-07-30T19:30:16.157Z 2012-01-05T04:31:57.207Z The "Default file format (Access 2007 | Access 2002-2003)" setting should be configured correctly for Access 2007. CM-6 CM-7 CCE-1510-7 2009-07-30T19:30:16.157Z 2012-01-05T04:31:57.267Z The "Do not prompt to convert older databases" setting should be configured correctly for Access 2007. CM-6 CCE-1532-1 2009-07-30T19:30:16.170Z 2012-01-05T04:31:57.347Z The "Internet and network paths as hyperlinks" setting should be configured correctly for Excel 2007. CM-6 CCE-1039-7 2009-07-30T19:30:16.187Z 2012-01-05T04:31:57.440Z The "Save Excel files as (Excel Workbook (*.xlsx) | Excel Macro-Enabled Workbook (*.xlsm) | Excel Binary Workbook (*.xlsb) | Web Page (*.htm; *.html) | Excel 97-2003 Workbook (*.xls) | Excel 5.0/95 Workbook (*.xls))" setting should be configured correctly for Excel 2007. CM-6 CCE-1295-5 2009-07-30T19:30:16.187Z 2012-01-05T04:31:57.517Z The "Disable AutoRepublish" setting should be configured correctly for Excel 2007. CM-6 CCE-1334-2 2009-07-30T19:30:16.203Z 2012-01-05T04:31:57.580Z The "AutoRepublish Warning Alert (Always show the alert before publishing | Never show the alert before publishing)" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1308-6 2009-07-30T19:30:16.203Z 2012-01-05T04:31:57.673Z The "Determine whether to force encrypted macros to be scanned in Microsoft Excel Open XML workbooks" setting should be configured correctly CM-6 CM-7 SC-1 SI-3 CCE-616-3 2009-07-30T19:30:16.217Z 2012-01-05T04:31:57.737Z The "Force file extension to match file type (Allow different | Allow different, but warn | Always match file type)" setting should be configured correctly for Excel 2007. CM-6 CCE-1246-8 2009-07-30T19:30:16.217Z 2012-01-05T04:31:57.800Z The "Store macro in Personal Macro Workbook by default" setting should be configured correctly CM-6 CCE-1251-8 2009-07-30T19:30:16.233Z 2012-01-05T04:31:57.863Z The "Disable all application add-ins" setting should be configured correctly for Excel 2007. CM-6 SC-1 CCE-1524-8 2009-07-30T19:30:16.233Z 2012-01-05T04:31:57.940Z The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for Excel 2007. CM-5 CM-6 CCE-1422-5 2009-07-30T19:30:16.250Z 2012-01-05T04:31:58.003Z The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for Excel 2007. CM-5 CM-6 CCE-1444-9 2009-07-30T19:30:16.250Z 2012-01-05T04:31:58.067Z The "Allow Trusted Locations not on the computer" setting should be configured correctly for Excel 2007. CM-6 CCE-1449-8 2009-07-30T19:30:16.267Z 2012-01-05T04:31:58.127Z The "Disable all trusted locations" setting should be configured correctly for Excel 2007. CM-6 CCE-1471-2 2009-07-30T19:30:16.267Z 2012-01-05T04:31:58.190Z The "Ignore other applications " setting should be configured correctly for Excel 2007. CM-6 CCE-1119-7 2009-07-30T19:30:16.280Z 2012-01-05T04:31:58.253Z The "Ask to update automatic links" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1378-9 2009-07-30T19:30:16.280Z 2012-01-05T04:31:58.317Z The "Number of documents in the Recent Documents list (0-17)" setting should be configured correctly for Excel 2007. AC-6 CM-6 CCE-1277-3 2009-07-30T19:30:16.297Z 2012-01-05T04:31:58.377Z The "Save any additional data necessary to maintain formulas" setting should be configured correctly for Excel 2007. CM-6 CCE-1464-7 2009-07-30T19:30:16.297Z 2012-01-05T04:31:58.440Z The "Load pictures from Web pages not created in Excel" setting should be configured correctly for Excel 2007. CM-6 CCE-1094-2 2009-07-30T19:30:16.313Z 2012-01-05T04:31:58.517Z The "Do not show data extraction options when opening corrupt workbooks" setting should be configured correctly for Excel 2007. CM-6 CCE-1129-6 2009-07-30T19:30:16.327Z 2012-01-05T04:31:58.567Z The "Assume structured storage format of workbook is intact when recovering data" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1389-6 2009-07-30T19:30:16.327Z 2012-01-05T04:31:58.627Z The "Corrupt formula conversion (Convert unrecoverable references to: values | #REF or #NAME)" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1433-2 2009-07-30T19:30:16.343Z 2012-01-05T04:31:58.690Z The "Connection File Locations" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1323-5 2009-07-30T19:30:16.343Z 2012-01-05T04:31:58.753Z The "Automatic Query Refresh (Prompt for all workbooks | Do not prompt; do not allow auto refresh | Do not prompt; allow auto refresh)" setting should be configured correctly for Excel 2007. CM-6 CCE-1469-6 2009-07-30T19:30:16.360Z 2012-01-05T04:31:58.817Z The "Disable commands" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1473-8 2009-07-30T19:30:16.360Z 2012-01-05T04:31:58.877Z The "Disable commands - Office Button | Excel Options | Customize | All Commands | Save as Web Page" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1499-3 2009-07-30T19:30:16.377Z 2012-01-05T04:31:58.923Z The "Disable commands - Office Button | Excel Options | Customize | All Commands | Web Page Preview" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1024-9 2009-07-30T19:30:16.377Z 2012-01-05T04:31:58.987Z The "Disable commands - Office Button | Send | Email" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1530-5 2009-07-30T19:30:16.390Z 2012-01-05T04:31:59.067Z The "Disable commands - Insert | Links | Hyperlink" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1120-5 2009-07-30T19:30:16.390Z 2012-01-05T04:31:59.113Z The "Disable commands - Review | Changes | Protect Sheet" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1252-6 2009-07-30T19:30:16.407Z 2012-01-05T04:31:59.173Z The "Disable commands - Review | Changes | Protect Workbook" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1151-0 2009-07-30T19:30:16.407Z 2012-01-05T04:31:59.237Z The "Disable commands - Review | Changes | Protect and Share Workbook" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1301-1 2009-07-30T19:30:16.420Z 2012-01-05T04:31:59.300Z The "Disable commands - View | Macros | Macros" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1310-2 2009-07-30T19:30:16.420Z 2012-01-05T04:31:59.347Z The "Disable commands - Developer | Code | Macros" setting should be configured correctly for Excel 2007. CM-6 CM-7 SC-1 SI-3 CCE-1213-8 2009-07-30T19:30:16.437Z 2012-01-05T04:31:59.407Z The "Disable commands - Developer | Code | Record Macro" setting should be configured correctly for Excel 2007. CM-6 CM-7 SC-1 SI-3 CCE-1362-3 2009-07-30T19:30:16.453Z 2012-01-05T04:31:59.457Z The "Disable commands - Developer | Code | Macro Security" setting should be configured correctly for Excel 2007. CM-6 CM-7 SC-1 SI-3 CCE-1156-9 2009-07-30T19:30:16.453Z 2012-01-05T04:31:59.517Z The "Disable commands - Developer | Code | Visual Basic" setting should be configured correctly for Excel 2007. CM-6 CM-7 SC-1 SI-3 CCE-1429-0 2009-07-30T19:30:16.467Z 2012-01-05T04:31:59.567Z The "Disable commands - Office Button | Excel Options | Customize | All Commands | Document Location" setting should be configured correctly for Excel 2007. CM-6 CM-7 CCE-1182-5 2009-07-30T19:30:16.467Z 2012-01-05T04:31:59.627Z The "Disable shortcut keys" setting should be configured correctly for Excel 2007. CM-5 CM-6 CCE-1525-5 2009-07-30T19:30:16.483Z 2012-01-05T04:31:59.690Z The "Disable shortcut keys - Ctrl+K (Insert | Links | Hyperlink)" setting should be configured correctly for Excel 2007. CM-5 CM-6 CCE-1547-9 2009-07-30T19:30:16.500Z 2012-01-05T04:31:59.767Z The "Disable shortcut keys - Alt+F8 (Developer | Code | Macros)" setting should be configured correctly for Excel 2007. CM-5 CM-6 CCE-1300-3 2009-07-30T19:30:16.500Z 2012-01-05T04:31:59.863Z The "Disable shortcut keys - Alt+F11 (Developer | Code | Visual Basic)" setting should be configured correctly for Excel 2007. CM-5 CM-6 CCE-1331-8 2009-07-30T19:30:16.517Z 2012-01-05T04:31:59.923Z The "Block opening of pre-release versions of file formats new to Excel 2007" setting should be configured correctly for Excel 2007. CM-7 CCE-1468-8 2009-07-30T19:30:16.517Z 2012-01-05T04:31:59.987Z The "Block opening of Open XML file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1490-2 2009-07-30T19:30:16.530Z 2012-01-05T04:32:00.050Z The "Block opening of Binary 12 file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1512-3 2009-07-30T19:30:16.530Z 2012-01-05T04:32:00.113Z The "Block opening of Binary file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1543-8 2009-07-30T19:30:16.547Z 2012-01-05T04:32:00.173Z The "Block opening of Html and Xmlss files types" setting should be configured correctly for Excel 2007. CM-7 CCE-1195-7 2009-07-30T19:30:16.547Z 2012-01-05T04:32:00.237Z The "Block opening of Xml file types" setting should be configured correctly for Excel 2007. CM-7 CCE-554-6 2009-07-30T19:30:16.563Z 2012-01-05T04:32:00.330Z The "Block opening of DIF and SYLK file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1415-9 2009-07-30T19:30:16.563Z 2012-01-05T04:32:00.423Z The "Block opening of Text file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1437-3 2009-07-30T19:30:16.577Z 2012-01-05T04:32:00.487Z The "Block opening of Xll file type" setting should be configured correctly for Excel 2007. CM-7 CCE-1446-4 2009-07-30T19:30:16.593Z 2012-01-05T04:32:00.550Z The "Block saving of Open Xml file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1098-3 2009-07-30T19:30:16.593Z 2012-01-05T04:32:00.613Z The "Block saving of Binary12 file types" setting should be configured correctly for Excel 2007. CM-7 CCE-562-9 2009-07-30T19:30:16.610Z 2012-01-05T04:32:00.657Z The "Block saving of Binary file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1507-3 2009-07-30T19:30:16.610Z 2012-01-05T04:32:00.737Z The "Block saving of Html and Xmlss file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1406-8 2009-07-30T19:30:16.627Z 2012-01-05T04:32:00.783Z The "Block saving Xml file types" setting should be configured correctly for Excel 2007. CM-7 CCE-573-6 2009-07-30T19:30:16.627Z 2012-01-05T04:32:00.847Z The "Block saving DIF and SYLK file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1336-7 2009-07-30T19:30:16.640Z 2012-01-05T04:32:00.907Z The "Block saving of Text file types" setting should be configured correctly for Excel 2007. CM-7 CCE-1230-2 2009-07-30T19:30:16.640Z 2012-01-05T04:32:00.970Z The "Locally cache network file storages" setting should be configured correctly for Excel 2007. CM-6 CCE-1375-5 2009-07-30T19:30:16.657Z 2012-01-05T04:32:01.017Z The "Locally cache PivotTable reports" setting should be configured correctly for Excel 2007. CM-6 CCE-1380-5 2009-07-30T19:30:16.670Z 2012-01-05T04:32:01.067Z The "OLAP PivotTable User Defined Function (UDF) security setting (Allow ALL UDFs | Allow safe UDFs only | Allow NO UDFs)" setting should be configured correctly for Excel 2007. CM-5 CM-6 SC-1 CCE-1376-3 2009-07-30T19:30:16.670Z 2012-01-05T04:32:01.127Z The "Recognize SmartTags" setting should be configured correctly for Excel 2007. CM-6 CCE-1398-7 2009-07-30T19:30:16.687Z 2012-01-05T04:32:01.173Z The "Number of documents in the Recent Documents list (0 - 9)" setting should be configured correctly for InfoPath 2007. AC-6 CM-6 CCE-569-4 2009-07-30T19:30:16.687Z 2012-01-05T04:32:01.237Z The "Offline Mode status (Disabled | Enabled, InfoPath in Offline Mode | Enabled, InfoPath not in Offline Mode)" setting should be configured correctly for InfoPath 2007. CM-6 CCE-1065-2 2009-07-30T19:30:16.703Z 2012-01-05T04:32:01.317Z The "Disable commands" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1361-5 2009-07-30T19:30:16.703Z 2012-01-05T04:32:01.377Z The "Disable commands - File | Print" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1096-7 2009-07-30T19:30:16.717Z 2012-01-05T04:32:01.440Z The "Disable commands - File | Send to Mail Recipient" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1391-2 2009-07-30T19:30:16.717Z 2012-01-05T04:32:01.517Z The "Disable commands - File | Open from SharePoint Site" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1519-8 2009-07-30T19:30:16.733Z 2012-01-05T04:32:01.567Z The "Disable commands - File | Print Preview" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1523-0 2009-07-30T19:30:16.733Z 2012-01-05T04:32:01.627Z The "Disable commands - File | Page Setup" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1171-8 2009-07-30T19:30:16.750Z 2012-01-05T04:32:01.720Z The "Disable commands - Insert | Hyperlinks..." setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1457-1 2009-07-30T19:30:16.767Z 2012-01-05T04:32:01.783Z The "Disable commands - Tools | Set Language" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1426-6 2009-07-30T19:30:16.767Z 2012-01-05T04:32:01.847Z The "Disable commands - Tools | Customize..." setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-805-2 2009-07-30T19:30:16.780Z 2012-01-05T04:32:01.907Z The "Disable commands - Tools | Options..." setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1453-0 2009-07-30T19:30:16.780Z 2012-01-05T04:32:01.957Z The "Disable commands - Help | Microsoft Office Online" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1351-6 2009-07-30T19:30:16.797Z 2012-01-05T04:32:02.017Z The "Disable commands - Office Diagnostics" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-620-5 2009-07-30T19:30:16.797Z 2012-01-05T04:32:02.080Z The "Disable commands - Help | Activate Product..." setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1017-3 2009-07-30T19:30:16.813Z 2012-01-05T04:32:02.143Z The "Disable commands - Print Default" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1021-5 2009-07-30T19:30:16.827Z 2012-01-05T04:32:02.190Z The "Disable shortcut keys" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-1299-7 2009-07-30T19:30:16.827Z 2012-01-05T04:32:02.253Z The "Disable shortcut keys - Print Shortcut (Ctrl+P)" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-1197-3 2009-07-30T19:30:16.843Z 2012-01-05T04:32:02.317Z The "Disable shortcut keys - Insert Hyperlink Shortcut (Ctrl+K)" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-704-7 2009-07-30T19:30:16.843Z 2012-01-05T04:32:02.377Z The "Control behavior for Windows SharePoint Services gradual upgrade (Allow redirections to any location | Allow redirections to Intranet only | Block all redirections)" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1105-6 2009-07-30T19:30:16.860Z 2012-01-05T04:32:02.440Z The "Disable opening of solutions from the Internet security zone" setting should be configured correctly for InfoPath 2007. CM-6 CCE-761-7 2009-07-30T19:30:16.877Z 2012-01-05T04:32:02.567Z The "Allow the use of ActiveX Custom Controls in InfoPath forms" setting should be configured correctly for InfoPath 2007. CM-6 CCE-739-3 2009-07-30T19:30:16.877Z 2012-01-05T04:32:02.613Z The "Run forms in restricted mode if they do not specify a publish location and use only features introduced before InfoPath 2003 SP1" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-1259-1 2009-07-30T19:30:16.890Z 2012-01-05T04:32:02.737Z The "Allow file types as attachments to forms" setting should be configured correctly for InfoPath 2007. CM-6 CCE-1267-4 2009-07-30T19:30:16.890Z 2012-01-05T04:32:02.800Z The "Block specific file types as attachments to forms" setting should be configured correctly for InfoPath 2007. CM-7 CCE-1060-3 2009-07-30T19:30:16.907Z 2012-01-05T04:32:02.863Z The "Prevent users from allowing unsafe file types to be attached to forms" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 SC-1 SI-3 CCE-955-5 2009-07-30T19:30:16.907Z 2012-01-05T04:32:02.923Z The "Display a warning that a form is digitally signed" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-1479-5 2009-07-30T19:30:16.920Z 2012-01-05T04:32:02.987Z The "Control behavior when opening forms in the Internet security zone (Block | Prompt | Allow)" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1360-7 2009-07-30T19:30:16.937Z 2012-01-05T04:32:03.080Z The "Control behavior when opening forms in the Intranet security zone (Block | Prompt | Allow)" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1386-2 2009-07-30T19:30:16.937Z 2012-01-05T04:32:03.157Z The "Control behavior when opening forms in the Local Machine security zone (Block | Prompt | Allow)" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-893-8 2009-07-30T19:30:16.953Z 2012-01-05T04:32:03.220Z The "Control behavior when opening forms in the Trusted Site security zone (Block | Prompt | Allow)" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1290-6 2009-07-30T19:30:16.953Z 2012-01-05T04:32:03.283Z The "Beaconing UI for forms opened in InfoPath (Never show beaconing UI | Always show beaconing UI | Show UI if Form Template is from Internet Zone)" setting should be configured correctly for InfoPath 2007. CM-6 CCE-1381-3 2009-07-30T19:30:16.967Z 2012-01-05T04:32:03.347Z The "Beaconing UI for forms opened in InfoPath Editor ActiveX (Never show beaconing UI | Always show beaconing UI | Show UI if Form Template is from Internet Zone)" setting should be configured correctly for InfoPath 2007. CM-6 CCE-1135-3 2009-07-30T19:30:16.983Z 2012-01-05T04:32:03.407Z The "Disable all application add-ins" setting should be configured correctly for InfoPath 2007. CM-6 SC-1 CCE-1157-7 2009-07-30T19:30:16.983Z 2012-01-05T04:32:03.487Z The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-1434-0 2009-07-30T19:30:17.000Z 2012-01-05T04:32:03.550Z The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-1315-1 2009-07-30T19:30:17.000Z 2012-01-05T04:32:03.613Z The "Control behavior when opening InfoPath e-mail forms containing code or script (Run without prompting | Prompt before running | Never run)" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1210-4 2009-07-30T19:30:17.017Z 2012-01-05T04:32:03.673Z The "Disable sending form template with e-mail forms" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-1236-9 2009-07-30T19:30:17.030Z 2012-01-05T04:32:03.753Z The "Disable dynamic caching of the form template in InfoPath e-mail forms" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-884-7 2009-07-30T19:30:17.047Z 2012-01-05T04:32:03.817Z The "Disable sending InfoPath 2003 Forms as e-mail forms" setting should be configured correctly for InfoPath 2007. CM-5 CM-6 CCE-1518-0 2009-07-30T19:30:17.047Z 2012-01-05T04:32:03.877Z The "Disable e-mail forms running in restricted security level" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1170-0 2009-07-30T19:30:17.063Z 2012-01-05T04:32:03.957Z The "Disable e-mail forms from the Internet security zone" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1316-9 2009-07-30T19:30:17.063Z 2012-01-05T04:32:04.017Z The "Disable e-mail forms from the Intranet security zone" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1567-7 2009-07-30T19:30:17.077Z 2012-01-05T04:32:04.080Z The "Disable e-mail forms from the Full Trust security zone" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1265-8 2009-07-30T19:30:17.093Z 2012-01-05T04:32:04.143Z The "Disable InfoPath e-mail forms in Outlook" setting should be configured correctly for InfoPath 2007. CM-6 CCE-1538-8 2009-07-30T19:30:17.093Z 2012-01-05T04:32:04.207Z The "Information Rights Management" setting should be configured correctly for InfoPath 2007. AC-5 CM-6 CCE-1564-4 2009-07-30T19:30:17.110Z 2012-01-05T04:32:04.267Z The "Custom code" setting should be configured correctly for InfoPath 2007. CM-6 CM-7 CCE-1212-0 2009-07-30T19:30:17.110Z 2012-01-05T04:32:04.347Z The "Email Forms Beaconing UI (Never show UI | Always show UI | Show UI if XSN is in Internet Zone)" setting should be configured correctly for InfoPath 2007. CM-6 CCE-1344-1 2009-07-30T19:30:17.127Z 2012-01-05T04:32:04.407Z The "Disable user customization of Quick Access Toolbar via UI" setting should be configured correctly CM-5 CM-6 CCE-723-7 2009-07-30T19:30:17.140Z 2012-01-05T04:32:04.470Z The "Disable user customization of Quick Access Toolbar via UI - Disallow in Word" setting should be configured correctly CM-5 CM-6 CCE-1384-7 2009-07-30T19:30:17.140Z 2012-01-05T04:32:04.533Z The "Disable user customization of Quick Access Toolbar via UI - Disallow in Excel" setting should be configured correctly CM-5 CM-6 CCE-1159-3 2009-07-30T19:30:17.157Z 2012-01-05T04:32:04.627Z The "Disable user customization of Quick Access Toolbar via UI - Disallow in PowerPoint" setting should be configured correctly CM-5 CM-6 CCE-1146-0 2009-07-30T19:30:17.170Z 2012-01-05T04:32:04.690Z The "Disable user customization of Quick Access Toolbar via UI - Disallow in Access" setting should be configured correctly CM-5 CM-6 CCE-1542-0 2009-07-30T19:30:17.170Z 2012-01-05T04:32:04.767Z The "Disable user customization of Quick Access Toolbar via UI - Disallow in Outlook" setting should be configured correctly CM-5 CM-6 CCE-582-7 2009-07-30T19:30:17.187Z 2012-01-05T04:32:04.830Z The "Disable all user customization of Quick Access Toolbar" setting should be configured correctly CM-6 CCE-1291-4 2009-07-30T19:30:17.187Z 2012-01-05T04:32:04.893Z The "Disable all user customization of Quick Access Toolbar - Disallow in Word" setting should be configured correctly CM-6 CCE-1326-8 2009-07-30T19:30:17.203Z 2012-01-05T04:32:04.957Z The "Disable all user customization of Quick Access Toolbar - Disallow in Excel" setting should be configured correctly CM-6 CCE-1330-0 2009-07-30T19:30:17.203Z 2012-01-05T04:32:05.017Z The "Disable all user customization of Quick Access Toolbar - Disallow in PowerPoint" setting should be configured correctly CM-6 CCE-1335-9 2009-07-30T19:30:17.217Z 2012-01-05T04:32:05.080Z The "Disable all user customization of Quick Access Toolbar - Disallow in Access" setting should be configured correctly CM-6 CCE-1229-4 2009-07-30T19:30:17.233Z 2012-01-05T04:32:05.143Z The "Disable all user customization of Quick Access Toolbar - Disallow in Outlook" setting should be configured correctly CM-6 CCE-630-4 2009-07-30T19:30:17.233Z 2012-01-05T04:32:05.220Z The "Disable UI extending from documents and templates" setting should be configured correctly CM-5 CM-6 CCE-1154-4 2009-07-30T19:30:17.250Z 2012-01-05T04:32:05.283Z The "Disable UI extending from documents and templates - Disallow in Word" setting should be configured correctly CM-5 CM-6 CCE-1410-0 2009-07-30T19:30:17.250Z 2012-01-05T04:32:05.347Z The "Disable UI extending from documents and templates - Disallow in Excel" setting should be configured correctly CM-5 CM-6 CCE-1432-4 2009-07-30T19:30:17.267Z 2012-01-05T04:32:05.407Z The "Disable UI extending from documents and templates - Disallow in PowerPoint" setting should be configured correctly CM-5 CM-6 CCE-1198-1 2009-07-30T19:30:17.280Z 2012-01-05T04:32:05.457Z The "Disable UI extending from documents and templates - Disallow in Access" setting should be configured correctly CM-5 CM-6 CCE-929-0 2009-07-30T19:30:17.280Z 2012-01-05T04:32:05.517Z The "Disable UI extending from documents and templates - Disallow in Outlook" setting should be configured correctly CM-5 CM-6 CCE-1074-4 2009-07-30T19:30:17.297Z 2012-01-05T04:32:05.580Z The "Recognize smart tags in Excel" setting should be configured correctly CM-5 CM-6 CCE-1458-9 2009-07-30T19:30:17.297Z 2012-01-05T04:32:05.627Z The "Disable Clip Art and Media downloads from the client and from Office Online website" setting should be configured correctly CM-6 CM-7 SC-1 SI-3 CCE-1233-6 2009-07-30T19:30:17.313Z 2012-01-05T04:32:05.690Z The "Disable template downloads from the client and from Office Online website" setting should be configured correctly CM-6 SC-1 SI-2 CCE-1379-7 2009-07-30T19:30:17.313Z 2012-01-05T04:32:05.753Z The "Disable access to updates, add-ins, and patches on the Office Online website" setting should be configured correctly SC-8 SI-2 SI-3 CCE-1401-9 2009-07-30T19:30:17.327Z 2012-01-05T04:32:05.817Z The "Prevents users from uploading document templates to the Office Online community." setting should be configured correctly AC-2 CM-6 CCE-1528-9 2009-07-30T19:30:17.343Z 2012-01-05T04:32:05.877Z The "Disable training practice downloads from the Office Online website" setting should be configured correctly CM-5 CM-6 CCE-1533-9 2009-07-30T19:30:17.343Z 2012-01-05T04:32:05.923Z The "Disable customer-submitted templates downloads from Office Online" setting should be configured correctly CM-6 CM-7 SC-1 SI-3 CCE-646-0 2009-07-30T19:30:17.360Z 2012-01-05T04:32:05.987Z The "Open Office documents as read/write while browsing" setting should be configured correctly CM-6 CCE-1438-1 2009-07-30T19:30:17.360Z 2012-01-05T04:32:06.050Z The "Rely on VML for displaying graphics in browsers" setting should be configured correctly CM-6 CM-7 SC-1 SI-3 CCE-711-2 2009-07-30T19:30:17.377Z 2012-01-05T04:32:06.173Z The "Allow PNG as an output format" setting should be configured correctly CM-6 CCE-1292-2 2009-07-30T19:30:17.390Z 2012-01-05T04:32:06.253Z The "Improve Proofing Tools" setting should be configured correctly CM-6 CCE-1615-4 2009-07-30T19:30:17.390Z 2012-01-05T04:32:06.317Z The "Disable Opt-in Wizard on first run" setting should be configured correctly. CM-6 CCE-1191-6 2009-07-30T19:30:17.407Z 2012-01-05T04:32:06.363Z The "Microsoft Office Online" setting should be configured correctly CM-6 CCE-1587-5 2009-07-30T19:30:17.407Z 2012-01-05T04:32:06.423Z The "Disable Password Caching" setting should be configured correctly AC-3 CM-6 CM-7 CCE-1486-0 2009-07-30T19:30:17.420Z 2012-01-05T04:32:06.487Z The "Disable all Trust Bar notifications for security issues" setting should be configured correctly CM-6 CCE-1508-1 2009-07-30T19:30:17.420Z 2012-01-05T04:32:06.550Z The "Protect document metadata for rights managed Office Open XML Files" setting should be configured correctly CM-6 CM-7 CCE-1640-2 2009-07-30T19:30:17.437Z 2012-01-05T04:32:06.613Z The "Protect document metadata for password protected files." setting should be configured correctly SC-7 CCE-1539-6 2009-07-30T19:30:17.453Z 2012-01-05T04:32:06.673Z The "Encryption type for password protected Office Open XML files" setting should be configured correctly CM-6 SC-2 CCE-1561-0 2009-07-30T19:30:17.467Z 2012-01-05T04:32:06.737Z The "Encryption type for password protected Office 97-2003 files" setting should be configured correctly CM-6 SC-2 CCE-1068-6 2009-07-30T19:30:17.467Z 2012-01-05T04:32:06.817Z The "Load Controls in Forms3 (1 | 2 | 3 | 4)" setting should be configured correctly CM-6 CCE-1574-3 2009-07-30T19:30:17.483Z 2012-01-05T04:32:06.893Z The "Automation Security (Disable macros by default | Use application macro security level | Macros enabled)" setting should be configured correctly CM-6 CM-7 CCE-1239-3 2009-07-30T19:30:17.483Z 2012-01-05T04:32:06.940Z The "Prevent Word and Excel from loading managed code extensions" setting should be configured correctly AC-3 SC-1 SI-3 CCE-1623-8 2009-07-30T19:30:17.500Z 2012-01-05T04:32:07.003Z The "Disable hyperlink warnings" setting should be configured correctly CM-6 CM-7 CCE-1083-5 2009-07-30T19:30:17.517Z 2012-01-05T04:32:07.067Z The "Disable password to open UI" setting should be configured correctly AC-3 CM-6 CM-7 CCE-1343-3 2009-07-30T19:30:17.517Z 2012-01-05T04:32:07.127Z The "Download Office Controls" setting should be configured correctly CM-5 CM-6 CCE-1242-7 2009-07-30T19:30:17.530Z 2012-01-05T04:32:07.190Z The "Disable All ActiveX" setting should be configured correctly CM-6 SC-1 CCE-770-8 2009-07-30T19:30:17.530Z 2012-01-05T04:32:07.253Z The "Allow mix of policy and user locations" setting should be configured correctly CM-6 CCE-903-5 2009-07-30T19:30:17.547Z 2012-01-05T04:32:07.317Z The "Disable Smart Document's use of manifests" setting should be configured correctly CM-5 CM-6 CCE-1555-2 2009-07-30T19:30:17.563Z 2012-01-05T04:32:07.377Z The "Completely disable the Smart Documents feature in Word and Excel" setting should be configured correctly CM-6 CCE-1061-1 2009-07-30T19:30:17.563Z 2012-01-05T04:32:07.440Z The "Disable Internet Fax feature" setting should be configured correctly CM-6 CCE-1603-0 2009-07-30T19:30:17.577Z 2012-01-05T04:32:07.503Z The "Prevent users from changing permissions on rights managed content" setting should be configured correctly AC-3 CM-6 CCE-1612-1 2009-07-30T19:30:17.577Z 2012-01-05T04:32:07.567Z The "Allow users with earlier versions of Office to read with browsers..." setting should be configured correctly CM-6 CCE-1493-6 2009-07-30T19:30:17.593Z 2012-01-05T04:32:07.627Z The "Always require users to connect to verify permission" setting should be configured correctly IA-2 CCE-1409-2 2009-07-30T19:30:17.610Z 2012-01-05T04:32:07.707Z The "Always expand groups in Office when restricting permission for documents" setting should be configured correctly CM-6 CCE-1589-1 2009-07-30T19:30:17.610Z 2012-01-05T04:32:07.767Z The "Never allow users to specify groups when restricting permission for documents" setting should be configured correctly AC-3 CM-6 CCE-1237-7 2009-07-30T19:30:17.627Z 2012-01-05T04:32:07.847Z The "Disable Microsoft Passport service for content with restricted permission" setting should be configured correctly CM-6 CCE-1404-3 2009-07-30T19:30:17.627Z 2012-01-05T04:32:07.907Z The "Do not allow users to upgrade Information Rights Management configuration" setting should be configured correctly CM-5 CM-7 CCE-1396-1 2009-07-30T19:30:17.640Z 2012-01-05T04:32:07.970Z The "Key Usage Filtering" setting should be configured correctly CM-6 CCE-1167-6 2009-07-30T19:30:17.657Z 2012-01-05T04:32:08.017Z The "EKU filtering" setting should be configured correctly CM-6 CCE-1585-9 2009-07-30T19:30:17.657Z 2012-01-05T04:32:08.080Z The "Legacy format signatures" setting should be configured correctly AC-3 CM-6 CM-7 SC-5 CCE-1572-7 2009-07-30T19:30:17.670Z 2012-01-05T04:32:08.143Z The "Suppress Office Signing Providers (Enable Western and East Asian | Suppress default Western | Suppress default East Asian | Suppress both Western and East Asian)" setting should be configured correctly CM-6 CCE-1220-3 2009-07-30T19:30:17.687Z 2012-01-05T04:32:08.207Z The "Suppress external signature services menu item" setting should be configured correctly AC-3 SC-1 SI-3 CCE-1634-5 2009-07-30T19:30:17.687Z 2012-01-05T04:32:08.267Z The "Disable Check For Solutions" setting should be configured correctly CM-6 CM-7 SC-1 SI-3 CCE-1643-6 2009-07-30T19:30:17.703Z 2012-01-05T04:32:08.330Z The "Disable inclusion of document properties in PDF and XPS output" setting should be configured correctly CM-6 CM-7 CCE-1546-1 2009-07-30T19:30:17.703Z 2012-01-05T04:32:08.393Z The "Disable Document Information Panel" setting should be configured correctly CM-6 CM-7 CCE-1505-7 2009-07-30T19:30:17.717Z 2012-01-05T04:32:08.487Z The "Document Information Panel Beaconing UI (Never show UI | Always show UI | Show UI if XSN is in Internet Zone)" setting should be configured correctly CM-6 CCE-1545-3 2009-07-30T19:30:17.733Z 2012-01-05T04:32:08.567Z The "Disable the Office client from polling the Office server for published links" setting should be configured correctly CM-5 CM-6 CCE-1549-5 2009-07-30T19:30:17.733Z 2012-01-05T04:32:08.643Z The "Block opening of pre-release versions of file formats new to Word 2007 through the Compatibility Pack for the 2007 Office system and Word 2007 Open XML/Word 97-2003 Format Converter" setting should be configured correctly CM-7 CCE-1431-6 2009-07-30T19:30:17.750Z 2012-01-05T04:32:08.690Z The "Block opening of pre-release versions of file formats new to Excel 2007 through the Compatibility Pack for the 2007 Office system and Excel 2007 Converter" setting should be configured correctly CM-7 CCE-1594-1 2009-07-30T19:30:17.767Z 2012-01-05T04:32:08.767Z The "Block opening of pre-release versions of file formats new to PowerPoint 2007 through the Compatibility Pack for the 2007 Office system and PowerPoint 2007 Converter" setting should be configured correctly CM-7 CCE-1241-9 2009-07-30T19:30:17.767Z 2012-01-05T04:32:08.830Z The "Control Blogging (Enabled | Only SharePoint blogs allowed | All blogging disabled)" setting should be configured correctly CM-6 CM-7 CCE-1607-1 2009-07-30T19:30:17.780Z 2012-01-05T04:32:08.877Z The "Enable Smart Resume" setting should be configured correctly CM-6 CCE-752-6 2009-07-30T19:30:17.780Z 2012-01-05T04:32:08.957Z The "Do not upload media files" setting should be configured correctly CM-6 CM-7 CCE-1166-8 2009-07-30T19:30:17.797Z 2012-01-05T04:32:09.033Z The "Disable hyperlinks to web templates in File | New and task panes" setting should be configured correctly CM-6 CM-7 SC-1 SI-3 CCE-654-4 2009-07-30T19:30:17.813Z 2012-01-05T04:32:09.097Z The "Prevent access to Web-based file storage" setting should be configured correctly CM-6 CM-7 CCE-1192-4 2009-07-30T19:30:17.813Z 2012-01-05T04:32:09.207Z The "Do not allow attachment previewing in Outlook" setting should be configured correctly for Outlook 2007. AC-3 SC-1 CCE-791-4 2009-07-30T19:30:17.827Z 2012-01-05T04:32:09.347Z The "Read e-mail as plain text" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1456-3 2009-07-30T19:30:17.827Z 2012-01-05T04:32:09.487Z The "Read signed e-mail as plain text" setting should be configured correctly for Outlook 2007. CM-6 CM-7 SC-1 SI-3 CCE-1478-7 2009-07-30T19:30:17.843Z 2012-01-05T04:32:09.567Z The "Prevent publishing to Office Online" setting should be configured correctly for Outlook 2007. AC-2 CM-6 CCE-1368-0 2009-07-30T19:30:17.860Z 2012-01-05T04:32:09.627Z The "Prevent publishing to a DAV server" setting should be configured correctly for Outlook 2007. CM-5 CM-6 CCE-1641-0 2009-07-30T19:30:17.860Z 2012-01-05T04:32:09.690Z The "Restrict level of calendar details users can publish (All options are available | Disables 'Full details' | Disables 'Full details' and 'Limited details')" setting should be configured correctly for Outlook 2007. CM-6 CCE-1266-6 2009-07-30T19:30:17.877Z 2012-01-05T04:32:09.753Z The "Access to published calendars" setting should be configured correctly for Outlook 2007. AC-3 CM-6 CCE-1399-5 2009-07-30T19:30:17.877Z 2012-01-05T04:32:09.863Z The "Restrict upload method" setting should be configured correctly for Outlook 2007. CM-6 CCE-1187-4 2009-07-30T19:30:17.890Z 2012-01-05T04:32:09.923Z The "Hide Junk Mail UI" setting should be configured correctly for Outlook 2007. SC-1 SI-3 SI-8 CCE-1588-3 2009-07-30T19:30:17.907Z 2012-01-05T04:32:09.987Z The "Junk E-mail protection level (No Protection, Low, High, Trusted Lists Only)" setting should be configured correctly for Outlook 2007. SC-1 CCE-1117-1 2009-07-30T19:30:17.907Z 2012-01-05T04:32:10.050Z The "Trust E-mail from Contacts" setting should be configured correctly for Outlook 2007. SI-3 CCE-1130-4 2009-07-30T19:30:17.920Z 2012-01-05T04:32:10.127Z The "Add e-mail recipients to users' Safe Senders Lists" setting should be configured correctly for Outlook 2007. SI-3 SI-8 CCE-1093-4 2009-07-30T19:30:17.920Z 2012-01-05T04:32:10.190Z The "Dial-up options" setting should be configured correctly for Outlook 2007. AC-1 CM-6 SC-7 CCE-1599-0 2009-07-30T19:30:17.937Z 2012-01-05T04:32:10.253Z The "Dial-up options - Warn before switching dial-up connection" setting should be configured correctly for Outlook 2007. AC-1 CM-6 SC-7 CCE-1621-2 2009-07-30T19:30:17.953Z 2012-01-05T04:32:10.317Z The "Dial-up options - Hang up when finished sending, receiving, or updating" setting should be configured correctly for Outlook 2007. AC-1 CM-6 SC-7 CCE-1269-0 2009-07-30T19:30:17.967Z 2012-01-05T04:32:10.393Z The "Dial-up options - Automatically dial during a background Send/Receive" setting should be configured correctly for Outlook 2007. AC-1 CM-6 SC-7 CCE-1419-1 2009-07-30T19:30:17.967Z 2012-01-05T04:32:10.457Z The "Do not allow creating, replying, or forwarding signatures for e-mail messages" setting should be configured correctly for Outlook 2007. CM-6 CCE-1551-1 2009-07-30T19:30:17.983Z 2012-01-05T04:32:10.503Z The "Send copy of pictures with HTML messages instead of reference to Internet location" setting should be configured correctly for Outlook 2007. CM-6 CCE-655-1 2009-07-30T19:30:18.000Z 2012-01-05T04:32:10.567Z The "Outlook Rich Text options (Convert to HTML | Convert to Plain Text format | Send Using Outlook Rich Text format)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1592-5 2009-07-30T19:30:18.017Z 2012-01-05T04:32:10.643Z The "Plain text options" setting should be configured correctly for Outlook 2007. CM-6 SI-3 CCE-1614-7 2009-07-30T19:30:18.030Z 2012-01-05T04:32:10.720Z The "Plain text options - Encode attachments in UUENCODE format when sending a plain text message" setting should be configured correctly for Outlook 2007. CM-6 SI-3 CCE-1526-3 2009-07-30T19:30:18.047Z 2012-01-05T04:32:10.817Z The "Set message format (HTML | Rich Text | Plain Text)" setting should be configured correctly for Outlook 2007. CM-6 SI-3 CCE-1111-4 2009-07-30T19:30:18.047Z 2012-01-05T04:32:10.877Z The "Make Outlook the default program for E-mail, Contacts, and Calendar" setting should be configured correctly for Outlook 2007. CM-6 CCE-1494-4 2009-07-30T19:30:18.063Z 2012-01-05T04:32:10.940Z The "Do not allow folders in non-default stores to be set as folder home pages" setting should be configured correctly for Outlook 2007. CM-6 CCE-1287-2 2009-07-30T19:30:18.077Z 2012-01-05T04:32:11.003Z The "Use Unicode format when dragging e-mail message to file system" setting should be configured correctly for Outlook 2007. CM-6 CCE-1529-7 2009-07-30T19:30:18.077Z 2012-01-05T04:32:11.067Z The "Do not allow Outlook object model scripts to run for shared folders" setting should be configured correctly for Outlook 2007. CM-6 CCE-1560-2 2009-07-30T19:30:18.093Z 2012-01-05T04:32:11.127Z The "Do not allow Outlook object model scripts to run for public folders" setting should be configured correctly for Outlook 2007. CM-6 CCE-1596-6 2009-07-30T19:30:18.110Z 2012-01-05T04:32:11.190Z The "Set maximum level of online status on a person name (Do not allow | Allow everywhere except To and CC field | Allow everywhere)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1604-8 2009-07-30T19:30:18.127Z 2012-01-05T04:32:11.253Z The "Display online status on a person name (Never | Everywhere except To and CC field | Everywhere)" setting should be configured correctly for Outlook 2007. AC-3 CM-6 CCE-1648-5 2009-07-30T19:30:18.127Z 2012-01-05T04:32:11.317Z The "Turn off Enable the Person Names Smart Tag option" setting should be configured correctly for Outlook 2007. CM-6 CCE-1516-4 2009-07-30T19:30:18.140Z 2012-01-05T04:32:11.393Z The "Outlook Security Mode (Outlook Default Security | Use Security Form from 'Outlook Security Settings' Public Folder | Use Security Form from 'Outlook 10 Security Settings' Public Folder | Use Outlook Security Group Policy)" setting should be configured correctly for Outlook 2007. CM-6 CCE-1296-3 2009-07-30T19:30:18.157Z 2012-01-05T04:32:11.457Z The "Display Level 1 attachments" setting should be configured correctly for Outlook 2007. CM-5 CM-6 CCE-1388-8 2009-07-30T19:30:18.157Z 2012-01-05T04:32:11.503Z The "Allow users to demote attachments to Level 2" setting should be configured correctly for Outlook 2007. CM-6 CCE-1652-7 2009-07-30T19:30:18.170Z 2012-01-05T04:32:11.567Z The "Do not prompt about Level 1 attachments when sending an item" setting should be configured correctly for Outlook 2007. CM-6 CCE-1569-3 2009-07-30T19:30:18.187Z 2012-01-05T04:32:11.627Z The "Do not prompt about Level 1 attachments when closing an item" setting should be configured correctly for Outlook 2007. CM-6 CCE-1459-7 2009-07-30T19:30:18.187Z 2012-01-05T04:32:11.690Z The "Allow in-place activation of embedded OLE objects" setting should be configured correctly for Outlook 2007. CM-6 CCE-1608-9 2009-07-30T19:30:18.203Z 2012-01-05T04:32:11.737Z The "Display OLE package objects" setting should be configured correctly for Outlook 2007. CM-6 CCE-1617-0 2009-07-30T19:30:18.217Z 2012-01-05T04:32:11.800Z The "Add file extensions to block as Level 1" setting should be configured correctly for Outlook 2007. SI-3 SI-8 CCE-1631-1 2009-07-30T19:30:18.233Z 2012-01-05T04:32:11.863Z The "Remove file extensions blocked as Level 1" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1155-1 2009-07-30T19:30:18.233Z 2012-01-05T04:32:11.940Z The "Add file extensions to block as Level 2" setting should be configured correctly for Outlook 2007. SI-3 SI-8 CCE-1556-0 2009-07-30T19:30:18.250Z 2012-01-05T04:32:12.017Z The "Remove file extensions blocked as Level 2" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1595-8 2009-07-30T19:30:18.267Z 2012-01-05T04:32:12.067Z The "Allow scripts in one-off Outlook forms" setting should be configured correctly for Outlook 2007. SC-1 SI-3 CCE-1436-5 2009-07-30T19:30:18.267Z 2012-01-05T04:32:12.143Z The "Set Outlook object model Custom Actions execution prompt (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 SC-1 SI-3 CCE-1586-7 2009-07-30T19:30:18.280Z 2012-01-05T04:32:12.207Z The "Set control ItemProperty prompt (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly CM-6 CCE-1590-9 2009-07-30T19:30:18.297Z 2012-01-05T04:32:12.300Z The "Configure Outlook object model prompt when sending mail (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1004-1 2009-07-30T19:30:18.297Z 2012-01-05T04:32:12.393Z The "Configure Outlook object model prompt when accessing an address book (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1273-2 2009-07-30T19:30:18.313Z 2012-01-05T04:32:12.457Z The "Configure Outlook object model prompt when reading address information (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1172-6 2009-07-30T19:30:18.327Z 2012-01-05T04:32:12.533Z The "Configure Outlook object model prompt when responding to meeting and task requests (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1568-5 2009-07-30T19:30:18.343Z 2012-01-05T04:32:12.597Z The "Configure Outlook object model prompt when executing Save As (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1573-5 2009-07-30T19:30:18.343Z 2012-01-05T04:32:12.657Z The "Configure Outlook object model prompt When accessing the Formula property of a UserProperty object (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1454-8 2009-07-30T19:30:18.360Z 2012-01-05T04:32:12.720Z The "Configure Outlook object model prompt when accessing address information via UserProperties.Find (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1498-5 2009-07-30T19:30:18.377Z 2012-01-05T04:32:12.783Z The "Required Certificate Authority" setting should be configured correctly for Outlook 2007. CM-5 CM-6 CCE-1630-3 2009-07-30T19:30:18.390Z 2012-01-05T04:32:12.847Z The "S/MIME interoperability with external clients: (Handle internally | Handle externally | Handle if possible)" setting should be configured correctly for Outlook 2007. CM-6 SC-9 CCE-1626-1 2009-07-30T19:30:18.390Z 2012-01-05T04:32:12.893Z The "Always use Rich Text formatting in S/MIME messages" setting should be configured correctly for Outlook 2007. CM-6 CCE-1163-5 2009-07-30T19:30:18.407Z 2012-01-05T04:32:12.957Z The "S/MIME password settings" setting should be configured correctly for Outlook 2007. CM-6 SC-9 CCE-1445-6 2009-07-30T19:30:18.420Z 2012-01-05T04:32:13.033Z The "S/MIME password settings - Default S/MIME password time (minutes): (0 - 2147483647)" setting should be configured correctly for Outlook 2007. CM-6 SC-9 CCE-1582-6 2009-07-30T19:30:18.437Z 2012-01-05T04:32:13.097Z The "S/MIME password settings - Maximum S/MIME password time (minutes): (0 - 2147483647)" setting should be configured correctly for Outlook 2007. CM-6 SC-9 CCE-1357-3 2009-07-30T19:30:18.437Z 2012-01-05T04:32:13.157Z The "Message Formats" setting should be configured correctly for Outlook 2007. CM-5 CM-6 CCE-1132-0 2009-07-30T19:30:18.453Z 2012-01-05T04:32:13.220Z The "Message Formats - Support the following message formats: (S/MIME | Exchange | Fortezza | S/MIME and Exchange | S/MIME and Fortezza | Exchange and Fortezza | S/MIME, Exchange, and Fortezza)" setting should be configured correctly for Outlook 2007. CM-6 SC-1 CCE-1511-5 2009-07-30T19:30:18.467Z 2012-01-05T04:32:13.283Z 2007: The "Do not provide Continue option on Encryption warning dialog boxes" setting should be configured correctly for Outlook 2007. 2003: The "Disable Continue button on all Encryption warning dialogs" setting should be configured correctly. AC-4 CCE-1018-1 2009-07-30T19:30:18.483Z 2012-01-05T04:32:13.363Z The "Run in FIPS compliant mode" setting should be configured correctly for Outlook 2007. CM-6 IA-7 CCE-1181-7 2009-07-30T19:30:18.517Z 2012-01-05T04:32:13.487Z The "Encrypt all e-mail messages" setting should be configured correctly for Outlook 2007 and 2003. CM-6 SC-9 CCE-1639-4 2009-07-30T19:30:18.517Z 2012-01-05T04:32:13.550Z The "Sign all e-mail messages" setting should be configured correctly for Outlook 2007. CM-6 CCE-677-5 2009-07-30T19:30:18.530Z 2012-01-05T04:32:13.627Z The "URL for S/MIME certificates" setting should be configured correctly for Outlook 2007. CM-6 CM-7 SC-9 CCE-687-4 2009-07-30T19:30:18.547Z 2012-01-05T04:32:13.690Z The "Ensure all S/MIME signed messages have a label" setting should be configured correctly for Outlook 2007. CM-6 CCE-1613-9 2009-07-30T19:30:18.563Z 2012-01-05T04:32:13.753Z The "S/MIME receipt requests (Open message if receipt can't be sent | Don't open message if receipt can't be sent | Always prompt before sending receipt | Never send S/MIME )" setting should be configured correctly for Outlook 2007. CM-6 SC-9 CCE-1402-7 2009-07-30T19:30:18.563Z 2012-01-05T04:32:13.817Z The "Fortezza certificate policies" setting should be configured correctly for Outlook 2007. AC-3 CM-6 CCE-1658-4 2009-07-30T19:30:18.577Z 2012-01-05T04:32:13.877Z The "Require SuiteB algorithms for S/MIME operations" setting should be configured correctly for Outlook 2007. CM-6 SC-9 CCE-1662-6 2009-07-30T19:30:18.593Z 2012-01-05T04:32:13.940Z The "Missing CRLs" setting should be configured correctly for Outlook 2007. CM-5 CM-6 IA-5 CCE-1080-1 2009-07-30T19:30:18.610Z 2012-01-05T04:32:14.003Z The "Missing CRLs - Indicate a missing CRL as a(n): (warning | error)" setting should be configured correctly for Outlook 2007. CM-5 CM-6 IA-5 CCE-1076-9 2009-07-30T19:30:18.627Z 2012-01-05T04:32:14.067Z The "Missing root certificates" setting should be configured correctly for Outlook 2007. CM-5 CM-6 IA-5 CCE-1636-0 2009-07-30T19:30:18.640Z 2012-01-05T04:32:14.157Z The "Missing root certificates - Indicate a missing root certificate as a(n): (neither error nor warning | warning | error)" setting should be configured correctly for Outlook 2007. SC-7 CCE-943-1 2009-07-30T19:30:18.657Z 2012-01-05T04:32:14.237Z The "Promote Level 2 errors as errors, not warnings" setting should be configured correctly for Outlook 2007. CM-6 CCE-1591-7 2009-07-30T19:30:18.657Z 2012-01-05T04:32:14.300Z The "Attachment Secure Temporary Folder" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1133-8 2009-07-30T19:30:18.687Z 2012-01-05T04:32:14.363Z The "Display pictures and external content in HTML e-mail" setting should be configured correctly for Outlook 2007. AC-3 SC-1 CCE-725-2 2009-07-30T19:30:18.687Z 2012-01-05T04:32:14.423Z The "Automatically download content for e-mail from people in Safe Senders and Safe Recipients Lists" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1347-4 2009-07-30T19:30:18.703Z 2012-01-05T04:32:14.487Z The "Do not permit download of content from safe zones" setting should be configured correctly for Outlook 2007. CM-6 CCE-1475-3 2009-07-30T19:30:18.717Z 2012-01-05T04:32:14.550Z The "Block Trusted Zones" setting should be configured correctly for Outlook 2007. CM-7 CCE-1497-7 2009-07-30T19:30:18.733Z 2012-01-05T04:32:14.627Z The "Include Internet in Safe Zones for Automatic Picture Download" setting should be configured correctly for Outlook 2007. AC-5 CM-6 CCE-1501-6 2009-07-30T19:30:18.733Z 2012-01-05T04:32:14.690Z The "Include Intranet in Safe Zones for Automatic Picture Download" setting should be configured correctly for Outlook 2007. AC-5 CM-6 CCE-1030-6 2009-07-30T19:30:18.750Z 2012-01-05T04:32:14.767Z The "Security setting for macros (Always warn | Never warn, disable all | Warn for signed, disable unsigned | No security check)" setting should be configured correctly for Outlook 2007. SC-1 SI-3 CCE-1052-0 2009-07-30T19:30:18.767Z 2012-01-05T04:32:14.863Z The "Enable links in e-mail messages" setting should be configured correctly for Outlook 2007. CM-6 CCE-1462-1 2009-07-30T19:30:18.767Z 2012-01-05T04:32:14.957Z The "Apply macro security settings to macros, add-ins, and SmartTags" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1281-5 2009-07-30T19:30:18.780Z 2012-01-05T04:32:15.017Z The "Automatically configure profile based on Active Directory Primary SMTP address" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1303-7 2009-07-30T19:30:18.797Z 2012-01-05T04:32:15.080Z The "Do not allow users to change permissions on folders" setting should be configured correctly for Outlook 2007. AC-3 CM-6 CCE-1082-7 2009-07-30T19:30:18.797Z 2012-01-05T04:32:15.143Z The "Enable RPC encryption" setting should be configured correctly for Outlook 2007. CM-5 CM-6 SC-9 CCE-1712-9 2009-07-30T19:30:18.813Z 2012-01-05T04:32:15.207Z The "Authentication with Exchange Server (Kerberos/NTLM Password Authentication | Kerberos Password Authentication | NTLM Password Authentication)" setting should be configured correctly for Outlook 2007. CM-7 CCE-1131-2 2009-07-30T19:30:18.827Z 2012-01-05T04:32:15.267Z The "Synchronize Outlook RSS Feeds with Common Feed List" setting should be configured correctly for Outlook 2007. CM-6 CCE-1620-4 2009-07-30T19:30:18.827Z 2012-01-05T04:32:15.377Z The "Turn off RSS feature" setting should be configured correctly for Outlook 2007. CM-6 CCE-1541-2 2009-07-30T19:30:18.843Z 2012-01-05T04:32:15.457Z The "Automatically download enclosures" setting should be configured correctly for Outlook 2007. CM-7 SI-8 CCE-1311-0 2009-07-30T19:30:18.860Z 2012-01-05T04:32:15.533Z The "Download full text of articles as HTML attachments" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1682-4 2009-07-30T19:30:18.860Z 2012-01-05T04:32:15.627Z The "Automatically download attachments" setting should be configured correctly for Outlook 2007. CM-6 CM-7 CCE-1461-3 2009-07-30T19:30:18.877Z 2012-01-05T04:32:15.720Z The "Do not include Internet Calendar integration in Outlook" setting should be configured correctly for Outlook 2007. CM-6 CCE-1041-3 2009-07-30T19:30:18.890Z 2012-01-05T04:32:15.830Z The "Disable user entries to server list (Publish default, allow others | Publish default, disallow others)" setting should be configured correctly for Outlook 2007. CM-5 CM-6 CCE-1565-1 2009-07-30T19:30:18.890Z 2012-01-05T04:32:15.923Z The "Do not expand distribution lists" setting should be configured correctly for Outlook 2007. CM-6 CCE-1719-4 2009-07-30T19:30:18.907Z 2012-01-05T04:32:15.987Z The "Save files in this format (PowerPoint Presentation (*.pptx) | PowerPoint Macro-Enabled Presentation (*.pptm) | PowerPoint 97-2003 Presentation (*.ppt))" setting should be configured correctly for PowerPoint 2007. CM-6 CCE-1477-9 2009-07-30T19:30:18.907Z 2012-01-05T04:32:16.050Z The "Number of documents in the Recent Documents list (0 - 50)" setting should be configured correctly for PowerPoint 2007. AC-6 CM-6 CCE-1142-9 2009-07-30T19:30:18.920Z 2012-01-05T04:32:16.127Z The "Determine whether to force encrypted macros to be scanned in Microsoft PowerPoint Open XML presentations" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1649-3 2009-07-30T19:30:18.937Z 2012-01-05T04:32:16.190Z The "Run Programs (disable (don't run any programs) | enable (prompt user before running) | enable all (run without prompting))" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1279-9 2009-07-30T19:30:18.937Z 2012-01-05T04:32:16.253Z The "Make hidden markup visible" setting should be configured correctly for PowerPoint 2007. CM-6 CCE-1451-4 2009-07-30T19:30:18.953Z 2012-01-05T04:32:16.317Z The "Unblock automatic download of linked images" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1204-7 2009-07-30T19:30:18.967Z 2012-01-05T04:32:16.377Z The "Disable all application add-ins" setting should be configured correctly for PowerPoint 2007. CM-6 SC-1 CCE-1107-2 2009-07-30T19:30:18.967Z 2012-01-05T04:32:16.457Z The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for PowerPoint 2007. CM-5 CM-6 CCE-743-5 2009-07-30T19:30:18.983Z 2012-01-05T04:32:16.517Z The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for PowerPoint 2007. CM-5 CM-6 CCE-747-6 2009-07-30T19:30:19.000Z 2012-01-05T04:32:16.580Z The "Allow Trusted Locations not on the computer" setting should be configured correctly for PowerPoint 2007. CM-6 CCE-782-3 2009-07-30T19:30:19.000Z 2012-01-05T04:32:16.643Z The "Disable all trusted locations" setting should be configured correctly for PowerPoint 2007. CM-6 CCE-1327-6 2009-07-30T19:30:19.017Z 2012-01-05T04:32:16.707Z The "Disable commands" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-1723-6 2009-07-30T19:30:19.030Z 2012-01-05T04:32:16.767Z The "Disable commands - Office Button | PowerPoint Options | Customize | All Commands | Web Page Preview" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-1366-4 2009-07-30T19:30:19.030Z 2012-01-05T04:32:16.847Z The "Disable commands - Office Button | Send | Email" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-1679-0 2009-07-30T19:30:19.047Z 2012-01-05T04:32:16.923Z The "Disable commands - Insert | Links | Hyperlink" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-1173-4 2009-07-30T19:30:19.063Z 2012-01-05T04:32:16.987Z The "Disable commands - Review | Proofing | Language" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-1714-5 2009-07-30T19:30:19.063Z 2012-01-05T04:32:17.050Z The "Disable commands - View | Macros | Macros" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-1485-2 2009-07-30T19:30:19.077Z 2012-01-05T04:32:17.157Z The "Disable commands - Developer | Code | Macros" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1687-3 2009-07-30T19:30:19.093Z 2012-01-05T04:32:17.220Z The "Disable commands - Developer | Code | Macro Security" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1709-5 2009-07-30T19:30:19.093Z 2012-01-05T04:32:17.283Z The "Disable commands - Developer | Code | Visual Basic" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1463-9 2009-07-30T19:30:19.110Z 2012-01-05T04:32:17.347Z The "Disable commands - Office Button | PowerPoint Options | Customize | All Commands | Document Location" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-1467-0 2009-07-30T19:30:19.127Z 2012-01-05T04:32:17.407Z The "Disable commands - Disable shortcut keys" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 CCE-1740-0 2009-07-30T19:30:19.127Z 2012-01-05T04:32:17.470Z The "Disable commands - Ctrl+K (Insert | Links | Hyperlink)" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1780-6 2009-07-30T19:30:19.140Z 2012-01-05T04:32:17.550Z The "Disable commands - Alt+F8 (Developer | Code | Macros)" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1661-8 2009-07-30T19:30:19.157Z 2012-01-05T04:32:17.613Z The "Disable commands - Alt+F11 (Developer | Code | Visual Basic)" setting should be configured correctly for PowerPoint 2007. CM-6 CM-7 SC-1 SI-3 CCE-1688-1 2009-07-30T19:30:19.157Z 2012-01-05T04:32:17.720Z The "Block opening of pre-release versions of file formats new to PowerPoint 2007" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1701-2 2009-07-30T19:30:19.170Z 2012-01-05T04:32:17.817Z The "Block opening of Open Xml files types" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1348-2 2009-07-30T19:30:19.187Z 2012-01-05T04:32:17.877Z The "Block opening of Binary file types" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1644-4 2009-07-30T19:30:19.187Z 2012-01-05T04:32:17.940Z The "Block opening of Html file types" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1194-0 2009-07-30T19:30:19.203Z 2012-01-05T04:32:18.003Z The "Block opening of Outlines" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1216-1 2009-07-30T19:30:19.203Z 2012-01-05T04:32:18.067Z The "Block opening of Converters" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1506-5 2009-07-30T19:30:19.217Z 2012-01-05T04:32:18.127Z The "Block saving of Open Xml file types" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1136-1 2009-07-30T19:30:19.233Z 2012-01-05T04:32:18.190Z The "Block saving of Binary file types" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1766-5 2009-07-30T19:30:19.233Z 2012-01-05T04:32:18.253Z The "Block saving of Html file types" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1180-9 2009-07-30T19:30:19.250Z 2012-01-05T04:32:18.317Z The "Block saving of Outlines" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1722-8 2009-07-30T19:30:19.267Z 2012-01-05T04:32:18.393Z The "Block saving of GraphicFilters" setting should be configured correctly for PowerPoint 2007. CM-7 CCE-1731-9 2009-07-30T19:30:19.267Z 2012-01-05T04:32:18.457Z The "Disable Slide Update" setting should be configured correctly for PowerPoint 2007. CM-5 CM-6 CCE-885-4 2009-07-30T19:30:19.280Z 2012-01-05T04:32:18.517Z The "Hidden text" setting should be configured correctly for Word 2007. CM-6 CCE-1656-8 2009-07-30T19:30:19.297Z 2012-01-05T04:32:18.580Z The "Save files in this format (Word document (*.docx) | Single Files Web Page (*.mht) | Web Page (*.htm; *.html) | Web Page, Filtered (*.htm, *.html) | Rich Text Format (*.rtf) | Plain Text (*.txt) | Word 6.0/95 (*.doc) | Word 6.0/95 - Chinese (Simplified) (*.doc) | Word 6.0/95 - Chinese (Traditional) (*.doc) | Word 6.0/95 - Japanese (*.doc) | Word 6.0/95 - Korean (*.doc) | Word 97-2002 & 6.0/95 - RTF | Word 5.1 for Macintosh (*.mcw) | Word 5.0 for Macintosh (*.mcw) | Word 2.x for Windows (*.doc) | Works 4.0 for Windows (*.wps) | WordPerfect 5.x for Windows (*.doc) | WordPerfect 5.1 for DOS (*.doc) | Word 2007 Macro Enabled Document (*.docm) | Word 2007 Macro Free Template (*.dotx) | Word 2007 Macro Enabled Template (*.dotm) | Word 97 - 2003 Document (*.doc) | Word 97 - 2003 Template (*.dot) | Flat XML Document (*.xml))" setting should be configured correctly for Word 2007. CM-6 CCE-1537-0 2009-07-30T19:30:19.297Z 2012-01-05T04:32:18.657Z The "Number of documents in the Recent Documents list (0-50)" setting should be configured correctly for Word 2007. AC-6 CM-6 CCE-1249-2 2009-07-30T19:30:19.313Z 2012-01-05T04:32:18.707Z The "Update automatic links at Open" setting should be configured correctly for Word 2007. CM-6 CCE-1509-9 2009-07-30T19:30:19.327Z 2012-01-05T04:32:18.783Z The "Save smart tags in e-mail" setting should be configured correctly for Word 2007. CM-6 CCE-1280-7 2009-07-30T19:30:19.327Z 2012-01-05T04:32:18.847Z The "Determine whether to force encrypted macros to be scanned in Microsoft Word Open XML documents" setting should be configured correctly for Word 2007. CM-6 CM-7 SC-1 SI-3 CCE-1681-6 2009-07-30T19:30:19.343Z 2012-01-05T04:32:18.923Z The "Disable all application add-ins" setting should be configured correctly for Word 2007. CM-6 SC-1 CCE-1562-8 2009-07-30T19:30:19.360Z 2012-01-05T04:32:18.987Z The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for Word 2007. CM-5 CM-6 CCE-1333-4 2009-07-30T19:30:19.377Z 2012-01-05T04:32:19.050Z The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for Word 2007. CM-5 CM-6 CCE-1355-7 2009-07-30T19:30:19.377Z 2012-01-05T04:32:19.113Z The "Allow Trusted Locations not on the computer" setting should be configured correctly for Word 2007. CM-6 CCE-1637-8 2009-07-30T19:30:19.390Z 2012-01-05T04:32:19.173Z The "Disable all trusted locations" setting should be configured correctly for Word 2007. CM-6 CCE-1659-2 2009-07-30T19:30:19.407Z 2012-01-05T04:32:19.237Z The "Disable commands" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-1329-2 2009-07-30T19:30:19.407Z 2012-01-05T04:32:19.300Z The "Disable commands - Office Button | Word Options | Customize | All Commands | Save As Web Page" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-1632-9 2009-07-30T19:30:19.420Z 2012-01-05T04:32:19.363Z The "Disable commands - Office Button | Word Options | Customize | All Commands | Web Page Preview" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-1425-8 2009-07-30T19:30:19.420Z 2012-01-05T04:32:19.440Z The "Disable commands - Office Button | Send | Email" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-1196-5 2009-07-30T19:30:19.437Z 2012-01-05T04:32:19.503Z The "Disable commands - Insert | Links | Hyperlink" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-936-5 2009-07-30T19:30:19.453Z 2012-01-05T04:32:19.580Z The "Disable commands - Review | Protect | Protect Document" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-1354-0 2009-07-30T19:30:19.453Z 2012-01-05T04:32:19.643Z The "Disable commands - View | Macros | Macros" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-1125-4 2009-07-30T19:30:19.467Z 2012-01-05T04:32:19.720Z The "Disable commands - Developer | Code | Macros" setting should be configured correctly for Word 2007. CM-6 CM-7 SC-1 SI-3 CCE-1742-6 2009-07-30T19:30:19.483Z 2012-01-05T04:32:19.783Z The "Disable commands - Developer | Code | Record Macro" setting should be configured correctly for Word 2007. CM-6 CM-7 SC-1 SI-3 CCE-1782-2 2009-07-30T19:30:19.483Z 2012-01-05T04:32:19.847Z The "Disable commands - Developer | Code | Macro Security" setting should be configured correctly for Word 2007. CM-6 CM-7 SC-1 SI-3 CCE-1306-0 2009-07-30T19:30:19.500Z 2012-01-05T04:32:19.907Z The "Disable commands - Developer | Code | Visual Basic" setting should be configured correctly for Word 2007. CM-6 CM-7 SC-1 SI-3 CCE-1548-7 2009-07-30T19:30:19.517Z 2012-01-05T04:32:19.970Z The "Disable commands - Developer | Templates | Document Template" setting should be configured correctly for Word 2007. CM-6 CM-7 CCE-1716-0 2009-07-30T19:30:19.517Z 2012-01-05T04:32:20.050Z The "Disable shortcut keys" setting should be configured correctly for Word 2007. CM-5 CM-6 CCE-1597-4 2009-07-30T19:30:19.530Z 2012-01-05T04:32:20.113Z The "Disable shortcut keys - Ctrl+F (Home | Editing | Find)" setting should be configured correctly for Word 2007. CM-5 CM-6 CCE-1689-9 2009-07-30T19:30:19.547Z 2012-01-05T04:32:20.173Z The "Disable shortcut keys - Ctrl+K (Insert | Links | Hyperlink)" setting should be configured correctly for Word 2007. CM-5 CM-6 CCE-1570-1 2009-07-30T19:30:19.547Z 2012-01-05T04:32:20.237Z The "Disable shortcut keys - Alt+F8 (Developer | Code | Macros)" setting should be configured correctly for Word 2007. CM-5 CM-6 CCE-1720-2 2009-07-30T19:30:19.563Z 2012-01-05T04:32:20.300Z The "Disable shortcut keys - Alt+F11 (Developer | Code | Visual Basic)" setting should be configured correctly for Word 2007. CM-5 CM-6 CCE-1746-7 2009-07-30T19:30:19.577Z 2012-01-05T04:32:20.363Z The "Block opening of pre-release versions of file formats new to Word 2007" setting should be configured correctly for Word 2007. CM-7 CCE-1504-0 2009-07-30T19:30:19.577Z 2012-01-05T04:32:20.440Z The "Block opening of Open XML file types" setting should be configured correctly for Word 2007. CM-7 CCE-1654-3 2009-07-30T19:30:19.593Z 2012-01-05T04:32:20.503Z The "Block opening of Binary file types" setting should be configured correctly for Word 2007. CM-7 CCE-1160-1 2009-07-30T19:30:19.610Z 2012-01-05T04:32:20.567Z The "Block opening of HTML file types" setting should be configured correctly for Word 2007. CM-7 CCE-958-9 2009-07-30T19:30:19.610Z 2012-01-05T04:32:20.627Z The "Block opening of Word 2003 XML file types" setting should be configured correctly for Word 2007. CM-7 CCE-1579-2 2009-07-30T19:30:19.627Z 2012-01-05T04:32:20.690Z The "Block opening of RTF file types" setting should be configured correctly for Word 2007. CM-7 CCE-984-5 2009-07-30T19:30:19.640Z 2012-01-05T04:32:20.767Z The "Block open Converters" setting should be configured correctly for Word 2007. CM-7 CCE-1072-8 2009-07-30T19:30:19.640Z 2012-01-05T04:32:20.830Z The "Block opening of Text file types" setting should be configured correctly for Word 2007. CM-7 CCE-1503-2 2009-07-30T19:30:19.657Z 2012-01-05T04:32:20.893Z The "Block opening of Internal file types" setting should be configured correctly for Word 2007. CM-7 CCE-1371-4 2009-07-30T19:30:19.670Z 2012-01-05T04:32:20.940Z The "Block opening of files before version" setting should be configured correctly for Word 2007. CM-7 CCE-1019-9 2009-07-30T19:30:19.670Z 2012-01-05T04:32:21.003Z The "Block saving of Open XML file types" setting should be configured correctly for Word 2007. CM-7 CCE-1684-0 2009-07-30T19:30:19.687Z 2012-01-05T04:32:21.067Z The "Block saving of Binary file types" setting should be configured correctly for Word 2007. CM-7 CCE-1675-8 2009-07-30T19:30:19.703Z 2012-01-05T04:32:21.127Z The "Block saving of HTML file types" setting should be configured correctly for Word 2007. CM-7 CCE-1200-5 2009-07-30T19:30:19.703Z 2012-01-05T04:32:21.173Z The "Block saving of Word 2003 XML file types" setting should be configured correctly for Word 2007. CM-7 CCE-1741-8 2009-07-30T19:30:19.717Z 2012-01-05T04:32:21.253Z The "Block saving of RTF file types" setting should be configured correctly for Word 2007. CM-7 CCE-1231-0 2009-07-30T19:30:19.733Z 2012-01-05T04:32:21.347Z The "Block saving of Converters" setting should be configured correctly for Word 2007. CM-7 CCE-1755-8 2009-07-30T19:30:19.750Z 2012-01-05T04:32:21.407Z The "Block saving of Text file types" setting should be configured correctly for Word 2007. CM-7 CCE-1169-2 2009-07-30T19:30:19.750Z 2012-01-05T04:32:21.470Z The InfoPath APTCA Assembly Whitelist setting should be configured correctly. CM-6 CM-7 SC-1 SI-3 CCE-1735-0 2009-07-30T19:30:19.767Z 2012-01-05T04:32:21.550Z The Windows Internet Explorer Feature Control Opt-In (None | InfoPath.exe, Document Information Panel and Workflow forms | InfoPath.exe, Document Information Panel, Workflow forms and 3rd Party Hosting) setting should be configured correctly. CM-6 CM-7 SC-1 SI-3 CCE-1739-2 2009-07-30T19:30:19.780Z 2012-01-05T04:32:21.613Z The InfoPath APTCA Assembly Whitelist Enforcement setting should be configured correctly. CM-6 CM-7 SC-1 SI-3 CCE-933-2 2009-07-30T19:30:19.780Z 2012-01-05T04:32:21.690Z The Disable Package Repair setting should be configured correctly. CM-6 SI-2 CCE-1563-6 2009-07-30T19:30:19.797Z 2012-01-05T04:32:21.767Z The Disable user name and password setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1215-3 2009-07-30T19:30:19.813Z 2012-01-05T04:32:21.830Z The Disable user name and password - excel.exe setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1484-5 2009-07-30T19:30:19.827Z 2012-01-05T04:32:21.893Z The Disable user name and password - powerpnt.exe setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1629-5 2009-07-30T19:30:19.843Z 2012-01-05T04:32:21.957Z The Disable user name and password - pptview.exe setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1762-4 2009-07-30T19:30:19.843Z 2012-01-05T04:32:22.033Z The Disable user name and password - winword.exe setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1660-0 2009-07-30T19:30:19.860Z 2012-01-05T04:32:22.097Z The Disable user name and password - outlook.exe setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1057-9 2009-07-30T19:30:19.877Z 2012-01-05T04:32:22.157Z The Disable user name and password - spDesign.exe setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1285-6 2009-07-30T19:30:19.877Z 2012-01-05T04:32:22.220Z The Disable user name and password - msaccess.exe setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1669-1 2009-07-30T19:30:19.907Z 2012-01-05T04:32:22.300Z The Bind to object setting should be configured correctly. CM-7 CCE-1691-5 2009-07-30T19:30:19.907Z 2012-01-05T04:32:22.363Z The Bind to object - excel.exe setting should be configured correctly. CM-7 CCE-1338-3 2009-07-30T19:30:19.920Z 2012-01-05T04:32:22.423Z The Bind to object - powerpnt.exe setting should be configured correctly. CM-7 CCE-1717-8 2009-07-30T19:30:19.937Z 2012-01-05T04:32:22.487Z The Bind to object - pptview.exe setting should be configured correctly. CM-7 CCE-1488-6 2009-07-30T19:30:19.953Z 2012-01-05T04:32:22.550Z The Bind to object - winword.exe setting should be configured correctly. CM-7 CCE-1638-6 2009-07-30T19:30:19.953Z 2012-01-05T04:32:22.627Z The Bind to object - outlook.exe setting should be configured correctly. CM-7 CCE-1647-7 2009-07-30T19:30:19.967Z 2012-01-05T04:32:22.690Z The Bind to object - spDesign.exe setting should be configured correctly. CM-7 CCE-1294-8 2009-07-30T19:30:19.983Z 2012-01-05T04:32:22.767Z The Bind to object - msaccess.exe setting should be configured correctly. CM-7 CCE-1193-2 2009-07-30T19:30:19.983Z 2012-01-05T04:32:22.830Z The Saved from URL setting should be configured correctly. CM-6 CCE-1352-4 2009-07-30T19:30:20.000Z 2012-01-05T04:32:22.893Z The Saved from URL - excel.exe setting should be configured correctly. CM-6 CCE-928-2 2009-07-30T19:30:20.017Z 2012-01-05T04:32:22.957Z The Saved from URL - powerpnt.exe setting should be configured correctly. CM-6 CCE-1576-8 2009-07-30T19:30:20.030Z 2012-01-05T04:32:23.017Z The Saved from URL - pptview.exe setting should be configured correctly. CM-6 CCE-1100-7 2009-07-30T19:30:20.030Z 2012-01-05T04:32:23.113Z The Saved from URL - pptview.exe setting should be configured correctly. CM-6 CCE-1232-8 2009-07-30T19:30:20.047Z 2012-01-05T04:32:23.190Z The Saved from URL - outlook.exe setting should be configured correctly. CM-6 CCE-1774-9 2009-07-30T19:30:20.063Z 2012-01-05T04:32:23.253Z The Saved from URL - spDesign.exe setting should be configured correctly. CM-6 CCE-906-8 2009-07-30T19:30:20.063Z 2012-01-05T04:32:23.317Z The Saved from URL - msaccess.exe setting should be configured correctly. CM-6 CCE-1034-8 2009-07-30T19:30:20.077Z 2012-01-05T04:32:23.377Z The Navigate URL setting should be configured correctly. CM-6 CM-7 CCE-1435-7 2009-07-30T19:30:20.093Z 2012-01-05T04:32:23.457Z The Navigate URL - excel.exe setting should be configured correctly. CM-6 CM-7 CCE-1708-7 2009-07-30T19:30:20.110Z 2012-01-05T04:32:23.517Z The Navigate URL - powerpnt.exe setting should be configured correctly. CM-6 CM-7 CCE-808-6 2009-07-30T19:30:20.110Z 2012-01-05T04:32:23.580Z The Navigate URL - pptview.exe setting should be configured correctly. CM-6 CM-7 CCE-1650-1 2009-07-30T19:30:20.127Z 2012-01-05T04:32:23.643Z The Navigate URL - winword.exe setting should be configured correctly. CM-6 CM-7 CCE-1223-7 2009-07-30T19:30:20.140Z 2012-01-05T04:32:23.707Z The Navigate URL - outlook.exe setting should be configured correctly. CM-6 CM-7 CCE-1764-0 2009-07-30T19:30:20.157Z 2012-01-05T04:32:23.767Z The Navigate URL - spDesign.exe setting should be configured correctly. CM-6 CM-7 CCE-1769-9 2009-07-30T19:30:20.157Z 2012-01-05T04:32:23.830Z The Navigate URL - msaccess.exe setting should be configured correctly. CM-6 CM-7 CCE-1152-8 2009-07-30T19:30:20.187Z 2012-01-05T04:32:23.893Z The Block popups setting should be configured correctly. CM-7 CCE-1566-9 2009-07-30T19:30:20.187Z 2012-01-05T04:32:23.957Z The Block popups - excel.exe setting should be configured correctly. CM-7 CCE-1077-7 2009-07-30T19:30:20.203Z 2012-01-05T04:32:24.017Z The Block popups - powerpnt.exe setting should be configured correctly. CM-7 CCE-1606-3 2009-07-30T19:30:20.217Z 2012-01-05T04:32:24.080Z The Block popups - pptview.exe setting should be configured correctly. CM-7 CCE-1738-4 2009-07-30T19:30:20.217Z 2012-01-05T04:32:24.143Z The Block popups - winword.exe setting should be configured correctly. CM-7 CCE-1262-5 2009-07-30T19:30:20.233Z 2012-01-05T04:32:24.207Z The Block popups - outlook.exe setting should be configured correctly. CM-7 CCE-1663-4 2009-07-30T19:30:20.250Z 2012-01-05T04:32:24.267Z The Block popups - spDesign.exe setting should be configured correctly. CM-7 CCE-1544-6 2009-07-30T19:30:20.267Z 2012-01-05T04:32:24.317Z The Block popups - msaccess.exe setting should be configured correctly. CM-7 CCE-1443-1 2009-07-30T19:30:20.267Z 2012-01-05T04:32:24.377Z The "Prevent users from customizing attachment security settings" setting should be configured correctly. CM-5 CM-6 CCE-1161-9 2009-07-30T19:30:20.280Z 2012-01-05T04:32:24.423Z The "Access: Macro Security Level" setting should be configured correctly. AC-3 CM-6 CCE-1421-7 2009-07-30T19:30:20.297Z 2012-01-05T04:32:24.487Z The "Access: Trust all installed add – ins and templates" setting should be configured correctly. AC-3 CM-6 CCE-1571-9 2009-07-30T19:30:20.297Z 2012-01-05T04:32:24.550Z The "Excel: Macro Security Level" setting should be configured correctly. SI-3 CCE-1721-0 2009-07-30T19:30:20.313Z 2012-01-05T04:32:24.597Z The "Excel: Trust all installed add – ins and templates" setting should be configured correctly. CM-5 CCE-1602-2 2009-07-30T19:30:20.327Z 2012-01-05T04:32:24.657Z The "Outlook: Macro Security Level" setting should be configured correctly. CM-6 SI-3 CCE-1624-6 2009-07-30T19:30:20.327Z 2012-01-05T04:32:24.707Z The "Outlook: Trust all installed add-ins and templates" setting should be configured correctly. CM-6 SI-3 CCE-1522-2 2009-07-30T19:30:20.343Z 2012-01-05T04:32:24.753Z The "Outlook virus security settings" setting should be configured correctly. CM-6 SI-3 CCE-1183-3 2009-07-30T19:30:20.360Z 2012-01-05T04:32:24.800Z The "S/MIME receipt requests" setting should be configured correctly. CM-6 SC-9 CCE-1611-3 2009-07-30T19:30:20.377Z 2012-01-05T04:32:24.877Z The "PowerPoint: Macro Security Level" setting should be configured correctly. CM-6 SI-3 CCE-1633-7 2009-07-30T19:30:20.390Z 2012-01-05T04:32:24.940Z The "PowerPoint: Trust all installed add – ins and templates" setting should be configured correctly. CM-6 SI-3 CCE-822-7 2009-07-30T19:30:20.407Z 2012-01-05T04:32:24.987Z The "Publisher: Macro Security Level" setting should be configured correctly. CM-6 CM-7 CCE-1734-3 2009-07-30T19:30:20.420Z 2012-01-05T04:32:25.033Z The "Publisher: Trust all installed add–ins and templates" setting should be configured correctly. CM-6 CM-7 SC-1 SI-3 CCE-1628-7 2009-07-30T19:30:20.437Z 2012-01-05T04:32:25.097Z The "Word: Macro Security Level" setting should be configured correctly. CM-6 SI-3 CCE-1761-6 2009-07-30T19:30:20.437Z 2012-01-05T04:32:25.143Z The "Word: Trust all installed add–ins and templates" setting should be configured correctly. CM-6 CM-7 SC-1 SI-3 CCE-1302-9 2009-07-30T19:30:20.453Z 2012-01-05T04:32:25.190Z The "Store random number to improve merge accuracy" setting should be configured correctly. CM-6 CM-7 CCE-1307-8 2009-07-30T19:30:20.467Z 2012-01-05T04:32:25.253Z The "Prevent Users from Changing Office Encryption Settings" setting should be configured correctly. CM-6 CM-7 SC-2 CCE-5658-0 2009-07-30T19:30:20.483Z 2009-07-30T19:30:20.483Z /export/home should be configured on an appropriate filesystem partition SC-2 CCE-6235-6 2009-07-30T19:30:20.500Z 2009-07-30T19:30:20.500Z /var should be configured on an appropriate filesystem partition SC-2 CCE-6315-6 2009-07-30T19:30:20.500Z 2009-07-30T19:30:20.500Z /opt should be configured on an appropriate filesystem partition SC-2 CCE-5947-7 2009-07-30T19:30:20.517Z 2009-07-30T19:30:20.517Z The shell for the root account should be located on the appropriate filesystem AC-6 CM-5 CM-6 CM-7 CCE-5546-7 2009-07-30T19:30:20.530Z 2009-07-30T19:30:20.530Z Core dump size limits should be set appropriately SC-5 CCE-6294-3 2009-07-30T19:30:20.547Z 2009-07-30T19:30:20.547Z The read-only SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-6136-6 2009-07-30T19:30:20.547Z 2009-07-30T19:30:20.547Z The read/write SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-6105-1 2009-07-30T19:30:20.563Z 2009-07-30T19:30:20.563Z Password policy should ban or allow usernames or UIDs in passwords as appropriate IA-5 CCE-6263-8 2009-07-30T19:30:20.593Z 2009-07-30T19:30:20.593Z Password policy should ban or allow words found in a dictionary as appropriate. IA-5 CCE-6448-5 2009-07-30T19:30:20.610Z 2009-07-30T19:30:20.610Z Password policy should enforce the correct amount of special characters IA-5 CCE-6417-0 2009-07-30T19:30:20.610Z 2009-07-30T19:30:20.610Z Password policy should enforce or not enforce the requirement to have mixed case passwords as appropriate. IA-5 CCE-6078-0 2009-07-30T19:30:20.627Z 2009-07-30T19:30:20.627Z The minimum password age should be set as appropriate AC-3 CM-6 CM-7 IA-5 CCE-5906-3 2009-07-30T19:30:20.640Z 2009-07-30T19:30:20.640Z The minimum required password length should be set as appropriate AC-3 CM-6 CM-7 IA-5 CCE-6045-9 2009-07-30T19:30:20.640Z 2009-07-30T19:30:20.640Z Password history should be saved for an appropriate number of password changes IA-5 CCE-5997-2 2009-07-30T19:30:20.657Z 2009-07-30T19:30:20.657Z The number of consecutive failed login attempts required to trigger a lockout should be set as appropriate AC-7 CCE-6358-6 2009-07-30T19:30:20.670Z 2009-07-30T19:30:20.670Z Login access to accounts without passwords should be enabled or disabled as appropriate AC-3 CM-6 IA-5 CCE-6375-0 2009-07-30T19:30:20.687Z 2009-07-30T19:30:20.687Z New users should be required or not required to change their password on first login as appropriate AC-3 CM-6 IA-5 CCE-6080-6 2009-07-30T19:30:20.687Z 2009-07-30T19:30:20.687Z Access to single-user mode (maintainence mode) should require the root password or not as appropriate AC-3 AC-6 CCE-6366-9 2009-07-30T19:30:20.703Z 2009-07-30T19:30:20.703Z All files should be owned by an existing account or not as appropriate. AC-3 CM-6 CCE-6441-0 2009-07-30T19:30:20.717Z 2009-07-30T19:30:20.717Z All files should be owned by an existing group or not as appropriate. AC-3 CM-6 CCE-5644-0 2009-07-30T19:30:20.717Z 2009-07-30T19:30:20.717Z The console login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-5784-4 2009-07-30T19:30:20.733Z 2009-07-30T19:30:20.733Z The SSH login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6502-9 2009-07-30T19:30:20.750Z 2009-07-30T19:30:20.750Z The telnet login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6440-2 2009-07-30T19:30:20.767Z 2009-07-30T19:30:20.767Z The ftp login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6286-9 2009-07-30T19:30:20.767Z 2009-07-30T19:30:20.767Z The graphical login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6472-5 2009-07-30T19:30:20.780Z 2009-07-30T19:30:20.780Z Accounts other than root should be allowed to have the UID 0 or not as appropriate AC-2 CCE-6387-5 2009-07-30T19:30:20.797Z 2009-07-30T19:30:20.797Z Accounts other than root and locked system accounts should be allowed to have a GID of 0 or not as appropriate AC-2 CCE-6224-0 2009-07-30T19:30:20.813Z 2009-07-30T19:30:20.813Z Each account should be assigned a unique UID or not as appropriate AC-3 CM-6 CCE-6515-1 2009-07-30T19:30:20.813Z 2009-07-30T19:30:20.813Z The ftp account should exist or not as appropriate AC-3 CM-6 CCE-6343-8 2009-07-30T19:30:20.827Z 2009-07-30T19:30:20.827Z Login accounts should include an appropriate GECOS identifier or no GECOS identifier AC-3 CM-6 CCE-5527-7 2009-07-30T19:30:20.843Z 2009-07-30T19:30:20.843Z The screen lock should activate after an appropriate period of inactivity AC-1 AC-3 CM-6 CM-7 CCE-5855-2 2009-07-30T19:30:20.860Z 2009-07-30T19:30:20.860Z File permissions should be set appropriately for all shell executables. AC-3 CM-6 CCE-6058-2 2009-07-30T19:30:20.860Z 2009-07-30T19:30:20.860Z Remote (serial) consoles should be enabled or disabled as appropriate. AC-1 SC-7 CCE-8432-7 2009-07-30T19:30:20.877Z 2009-07-30T19:30:20.877Z Root logins should be restricted to the console or not as appropriate. AC-1 SC-7 CCE-6430-3 2009-07-30T19:30:20.890Z 2009-07-30T19:30:20.890Z .netrc files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6522-7 2009-07-30T19:30:20.907Z 2009-07-30T19:30:20.907Z .rhosts files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6346-1 2009-07-30T19:30:20.907Z 2009-07-30T19:30:20.907Z .shosts files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6504-5 2009-07-30T19:30:20.920Z 2009-07-30T19:30:20.920Z The /etc/hosts.equiv file should exist or not as appropriate. AC-3 CM-6 CM-7 CCE-8667-8 2009-07-30T19:30:20.937Z 2012-01-05T04:34:08.847Z The use of NIS special characters (+ or -) in the first field of the /etc/passwd file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-8543-1 2009-07-30T19:30:20.953Z 2012-01-05T04:34:08.893Z The use of NIS special characters (+ or -) in the first field of the /etc/shadow file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-8658-7 2009-07-30T19:30:20.953Z 2012-01-05T04:34:08.957Z The use of NIS special characters (+ or -) in the first field of the /etc/group file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-6184-6 2009-07-30T19:30:20.967Z 2009-07-30T19:30:20.967Z Groups referenced in /etc/passwd should be included in /etc/group or not as appropriate. AC-2 CCE-6413-9 2009-07-30T19:30:20.983Z 2009-07-30T19:30:20.983Z The home directory for the root account should be set appropriately. AC-3 CM-6 CCE-6284-4 2009-07-30T19:30:20.983Z 2009-07-30T19:30:20.983Z The home directory for each user account should be set appropriately. AC-3 CM-6 CCE-5628-3 2009-07-30T19:30:21.000Z 2009-07-30T19:30:21.000Z Home directories referenced in /etc/passwd should exist or not as appropriate AC-3 CM-6 CCE-5730-7 2009-07-30T19:30:21.017Z 2009-07-30T19:30:21.017Z All device files should be located inside an appropriate path AC-6 CCE-6476-6 2009-07-30T19:30:21.017Z 2009-07-30T19:30:21.017Z The ntpd service should be enabled or disabled as appropriate. AU-8 CM-6 CM-7 CCE-6318-0 2009-07-30T19:30:21.030Z 2009-07-30T19:30:21.030Z The Network Time Protocol (ntp) synchronization server should be set appropriately. AU-8 CM-6 CCE-6335-4 2009-07-30T19:30:21.047Z 2009-07-30T19:30:21.047Z The default gateway should be set appropriately. CM-7 CCE-6450-1 2009-07-30T19:30:21.063Z 2009-07-30T19:30:21.063Z The xinetd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6150-7 2009-07-30T19:30:21.063Z 2009-07-30T19:30:21.063Z echo service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6414-7 2009-07-30T19:30:21.077Z 2009-07-30T19:30:21.077Z netstat service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6493-1 2009-07-30T19:30:21.093Z 2009-07-30T19:30:21.093Z rcp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6277-8 2009-07-30T19:30:21.093Z 2009-07-30T19:30:21.093Z chargen service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5545-9 2009-07-30T19:30:21.110Z 2009-07-30T19:30:21.110Z finger service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6202-6 2009-07-30T19:30:21.127Z 2009-07-30T19:30:21.127Z tftpd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6354-5 2009-07-30T19:30:21.140Z 2009-07-30T19:30:21.140Z walld service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6200-0 2009-07-30T19:30:21.140Z 2009-07-30T19:30:21.140Z rstatd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6028-5 2009-07-30T19:30:21.157Z 2009-07-30T19:30:21.157Z sprayd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6415-4 2009-07-30T19:30:21.170Z 2009-07-30T19:30:21.170Z rusersd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6393-3 2009-07-30T19:30:21.170Z 2009-07-30T19:30:21.170Z rlogin service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6296-8 2009-07-30T19:30:21.187Z 2009-07-30T19:30:21.187Z rsh service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6499-8 2009-07-30T19:30:21.203Z 2009-07-30T19:30:21.203Z ftp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6204-2 2009-07-30T19:30:21.217Z 2009-07-30T19:30:21.217Z telnet service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6238-0 2009-07-30T19:30:21.217Z 2009-07-30T19:30:21.217Z DEPRECATED. CCE-5562-4 2009-07-30T19:30:21.233Z 2009-07-30T19:30:21.233Z inn service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6520-1 2009-07-30T19:30:21.250Z 2009-07-30T19:30:21.250Z uucp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6220-8 2009-07-30T19:30:21.267Z 2009-07-30T19:30:21.267Z rexec service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6049-1 2009-07-30T19:30:21.267Z 2009-07-30T19:30:21.267Z font-service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6458-4 2009-07-30T19:30:21.280Z 2009-07-30T19:30:21.280Z imap2 service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6427-9 2009-07-30T19:30:21.297Z 2009-07-30T19:30:21.297Z pop3 service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6554-0 2009-07-30T19:30:21.297Z 2009-07-30T19:30:21.297Z ident service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6422-0 2009-07-30T19:30:21.313Z 2009-07-30T19:30:21.313Z rexd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6369-3 2009-07-30T19:30:21.327Z 2009-07-30T19:30:21.327Z daytime service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6523-5 2009-07-30T19:30:21.343Z 2009-07-30T19:30:21.343Z dtspc (cde-spc) service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5836-2 2009-07-30T19:30:21.360Z 2009-07-30T19:30:21.360Z rquotad service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6426-1 2009-07-30T19:30:21.360Z 2009-07-30T19:30:21.360Z cmsd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5567-3 2009-07-30T19:30:21.377Z 2009-07-30T19:30:21.377Z tooltalk service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6293-5 2009-07-30T19:30:21.390Z 2009-07-30T19:30:21.390Z DEPRECATED. CCE-5575-6 2009-07-30T19:30:21.407Z 2009-07-30T19:30:21.407Z discard service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6270-3 2009-07-30T19:30:21.407Z 2009-07-30T19:30:21.407Z DEPRECATED. CCE-6508-6 2009-07-30T19:30:21.437Z 2009-07-30T19:30:21.437Z vino-server service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6507-8 2009-07-30T19:30:21.437Z 2009-07-30T19:30:21.437Z The bind service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-5576-4 2009-07-30T19:30:21.453Z 2009-07-30T19:30:21.453Z The version string reported by the bind service should be configured appropriately. SC-7 CCE-6243-0 2009-07-30T19:30:21.467Z 2009-07-30T19:30:21.467Z The nfsd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6468-3 2009-07-30T19:30:21.483Z 2009-07-30T19:30:21.483Z The mountd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5918-8 2009-07-30T19:30:21.483Z 2009-07-30T19:30:21.483Z The statd service should be enabled or disabled as appropriate CM-6 CCE-6303-2 2009-07-30T19:30:21.500Z 2009-07-30T19:30:21.500Z The lockd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5669-7 2009-07-30T19:30:21.517Z 2009-07-30T19:30:21.517Z NFS should be configured with appropriate authentication methods AC-3 CM-6 CCE-5809-9 2009-07-30T19:30:21.530Z 2009-07-30T19:30:21.530Z The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports. CM-6 CM-7 CCE-6514-4 2009-07-30T19:30:21.530Z 2009-07-30T19:30:21.530Z The nosuid option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-6462-6 2009-07-30T19:30:21.547Z 2009-07-30T19:30:21.547Z The nosgid option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-6250-5 2009-07-30T19:30:21.563Z 2009-07-30T19:30:21.563Z Sendmail should be enabled or disabled as appropriate CM-6 CCE-6466-7 2009-07-30T19:30:21.577Z 2009-07-30T19:30:21.577Z The sendmail banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6483-2 2009-07-30T19:30:21.593Z 2009-07-30T19:30:21.593Z The decode sendmail alias should be enabled or disabled as appropriate. CM-7 CCE-6408-9 2009-07-30T19:30:21.593Z 2009-07-30T19:30:21.593Z .forward files should be allowed or disallowed as appropriate for all users AC-3 CM-6 CCE-6560-7 2009-07-30T19:30:21.610Z 2009-07-30T19:30:21.610Z Programs executed through the aliases file should be owned by an appropriate user AC-3 CM-6 CCE-6247-1 2009-07-30T19:30:21.627Z 2009-07-30T19:30:21.627Z Programs executed through the aliases file should reside a directory with an appropriate user owner AC-3 CM-6 CCE-5714-1 2009-07-30T19:30:21.640Z 2009-07-30T19:30:21.640Z Sendmail vrfy command should be allowed or not as appropriate CM-6 CCE-6357-8 2009-07-30T19:30:21.640Z 2009-07-30T19:30:21.640Z Sendmail expn command should be allowed or not as appropriate CM-6 CCE-5584-8 2009-07-30T19:30:21.657Z 2009-07-30T19:30:21.657Z Sendmail should be configured with an appropriate logging level CM-6 CCE-6118-4 2009-07-30T19:30:21.670Z 2009-07-30T19:30:21.670Z Sendmail help command should be allowed or not as appropriate CM-6 CCE-6431-1 2009-07-30T19:30:21.687Z 2009-07-30T19:30:21.687Z NIS+ server should operate at an appropriate security level CM-6 CM-7 CCE-6524-3 2009-07-30T19:30:21.687Z 2009-07-30T19:30:21.687Z X-Windows should be enabled or disabled as appropriate CM-6 CM-7 CCE-6435-2 2009-07-30T19:30:21.703Z 2009-07-30T19:30:21.703Z Authorized X-clients should be listed or not in the X*.hosts file as appropriate AC-3 CM-6 CCE-6510-2 2009-07-30T19:30:21.717Z 2009-07-30T19:30:21.717Z X-Windows should write .Xauthority files to users' home directories or not as appropriate CM-6 CM-7 CCE-6558-1 2009-07-30T19:30:21.733Z 2009-07-30T19:30:21.733Z X11 forwarding via SSH should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6025-1 2009-07-30T19:30:21.750Z 2009-07-30T19:30:21.750Z Samba should be enabled or disabled as appropriate AC-3 CM-6 CCE-5748-9 2009-07-30T19:30:21.750Z 2009-07-30T19:30:21.750Z Samba 'hosts allow' option should be configured with an appropriate set of networks AC-3 CM-6 CM-7 SC-5 CCE-6373-5 2009-07-30T19:30:21.767Z 2009-07-30T19:30:21.767Z Samba 'security option' option should be set as appropriate AC-3 CM-6 CCE-5620-0 2009-07-30T19:30:21.780Z 2009-07-30T19:30:21.780Z Samba 'encrypt' passwords option should be set as appropriate AC-3 CM-6 CM-7 SC-5 CCE-6268-7 2009-07-30T19:30:21.797Z 2009-07-30T19:30:21.797Z Samba 'smb passwd file' option should be set to an appropriate password file or no password file AC-3 CM-6 CCE-6501-1 2009-07-30T19:30:21.813Z 2009-07-30T19:30:21.813Z IPv6 should be enabled or disabled as appropriate CM-6 CM-7 CCE-6206-7 2009-07-30T19:30:21.813Z 2009-07-30T19:30:21.813Z /dev/kmem file permissions should be set appropriately AC-3 CM-6 CCE-6602-7 2009-07-30T19:30:21.827Z 2009-07-30T19:30:21.827Z /dev/mem file permissions should be set appropriately AC-3 CM-6 CCE-6571-4 2009-07-30T19:30:21.843Z 2009-07-30T19:30:21.843Z /dev/null file permissions should be set appropriately AC-3 CM-6 CCE-6583-9 2009-07-30T19:30:21.860Z 2009-07-30T19:30:21.860Z resolv.conf file permissions should be set appropriately AC-3 CM-6 CCE-6552-4 2009-07-30T19:30:21.860Z 2009-07-30T19:30:21.860Z /etc/named.conf file permissions should be set appropriately AC-3 CM-6 CCE-6363-6 2009-07-30T19:30:21.877Z 2009-07-30T19:30:21.877Z /usr/bin/at file permissions should be set appropriately AC-3 CM-6 CCE-5623-4 2009-07-30T19:30:21.890Z 2009-07-30T19:30:21.890Z /usr/bin/rdist file permissions should be set appropriately AC-3 CM-6 CCE-5995-6 2009-07-30T19:30:21.907Z 2009-07-30T19:30:21.907Z /usr/sbin/sync file permissions should be set appropriately AC-3 CM-6 CCE-6572-2 2009-07-30T19:30:21.907Z 2009-07-30T19:30:21.907Z Superuser account home directories' permissions should be set appropriately AC-3 CM-6 CCE-5964-2 2009-07-30T19:30:21.920Z 2009-07-30T19:30:21.920Z /etc/samba/smb.conf file permissions should be set appropriately AC-3 CM-6 CCE-6559-9 2009-07-30T19:30:21.937Z 2009-07-30T19:30:21.937Z smbpassword executable permissions should be set appropriately AC-3 CM-6 CCE-5968-3 2009-07-30T19:30:21.953Z 2009-07-30T19:30:21.953Z Aliases file permissions should be set appropriately AC-3 CM-6 CCE-6527-6 2009-07-30T19:30:21.967Z 2009-07-30T19:30:21.967Z File permissions should be set as appropriate for the log file configured to capture critical sendmail messages. AC-3 CM-6 CCE-6245-5 2009-07-30T19:30:21.967Z 2009-07-30T19:30:21.967Z All files executed through /etc/aliases file entries should have file permissions set appropriately AC-3 CM-6 CCE-6384-2 2009-07-30T19:30:21.983Z 2009-07-30T19:30:21.983Z /bin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6371-9 2009-07-30T19:30:22.000Z 2009-07-30T19:30:22.000Z /bin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6252-1 2009-07-30T19:30:22.017Z 2009-07-30T19:30:22.017Z /bin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-6463-4 2009-07-30T19:30:22.030Z 2009-07-30T19:30:22.030Z The /bin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6437-8 2009-07-30T19:30:22.030Z 2009-07-30T19:30:22.030Z /bin/sh file permissions should be set appropriately AC-3 CM-6 CCE-5952-7 2009-07-30T19:30:22.047Z 2009-07-30T19:30:22.047Z /bin/bash file permissions should be set appropriately AC-3 CM-6 CCE-5921-2 2009-07-30T19:30:22.063Z 2009-07-30T19:30:22.063Z /sbin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6564-9 2009-07-30T19:30:22.077Z 2009-07-30T19:30:22.077Z /sbin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6388-3 2009-07-30T19:30:22.077Z 2009-07-30T19:30:22.077Z /sbin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-5636-6 2009-07-30T19:30:22.093Z 2009-07-30T19:30:22.093Z The /sbin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6130-9 2009-07-30T19:30:22.110Z 2009-07-30T19:30:22.110Z /sbin/sh file permissions should be set appropriately AC-3 CM-6 CCE-6443-6 2009-07-30T19:30:22.127Z 2009-07-30T19:30:22.127Z /sbin/bash file permissions should be set appropriately AC-3 CM-6 CCE-6535-9 2009-07-30T19:30:22.127Z 2009-07-30T19:30:22.127Z /usr/bin/csh file permissions should be set appropriately AC-3 CM-6 CCE-5944-4 2009-07-30T19:30:22.140Z 2009-07-30T19:30:22.140Z /usr/bin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-5650-7 2009-07-30T19:30:22.157Z 2009-07-30T19:30:22.157Z /usr/bin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-6548-2 2009-07-30T19:30:22.170Z 2009-07-30T19:30:22.170Z The /usr/bin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6253-9 2009-07-30T19:30:22.170Z 2009-07-30T19:30:22.170Z /usr/bin/sh file permissions should be set appropriately AC-3 CM-6 CCE-6240-6 2009-07-30T19:30:22.187Z 2009-07-30T19:30:22.187Z /usr/bin/bash file permissions should be set appropriately AC-3 CM-6 CCE-6531-8 2009-07-30T19:30:22.203Z 2009-07-30T19:30:22.203Z snmpd.conf file permissions should be set appropriately AC-3 CM-6 CCE-6460-0 2009-07-30T19:30:22.217Z 2009-07-30T19:30:22.217Z /tmp file permissions should be set appropriately AC-3 CM-6 CCE-5905-5 2009-07-30T19:30:22.217Z 2009-07-30T19:30:22.217Z /usr/tmp file permissions should be set appropriately AC-3 CM-6 CCE-6002-0 2009-07-30T19:30:22.233Z 2009-07-30T19:30:22.233Z .Xauthority file permissions should be set appropriately for all users. AC-3 CM-6 CCE-6333-9 2009-07-30T19:30:22.250Z 2009-07-30T19:30:22.250Z /etc/aliases file permissions should be set appropriately AC-3 CM-6 CCE-6099-6 2009-07-30T19:30:22.250Z 2009-07-30T19:30:22.250Z /etc/cron.d/at.allow file permissions should be set appropriately AC-3 CM-6 CCE-6332-1 2009-07-30T19:30:22.267Z 2009-07-30T19:30:22.267Z /etc/cron.d/cron.allow file permissions should be set appropriately AC-3 CM-6 CCE-6473-3 2009-07-30T19:30:22.280Z 2009-07-30T19:30:22.280Z /etc/csh file permissions should be set appropriately AC-3 CM-6 CCE-6442-8 2009-07-30T19:30:22.297Z 2009-07-30T19:30:22.297Z /etc/default/* file permissions should be set appropriately AC-3 CM-6 CCE-6129-1 2009-07-30T19:30:22.297Z 2009-07-30T19:30:22.297Z /etc/default/login file permissions should be set appropriately AC-3 CM-6 CCE-6539-1 2009-07-30T19:30:22.313Z 2009-07-30T19:30:22.313Z The /etc/ftpusers file should exist or not as appropriate AC-3 CM-6 CM-7 CCE-6257-0 2009-07-30T19:30:22.327Z 2009-07-30T19:30:22.327Z /etc/host.lpd file permissions should be set appropriately AC-3 CM-6 CCE-6607-6 2009-07-30T19:30:22.343Z 2009-07-30T19:30:22.343Z /etc/hostname* file permissions should be set appropriately AC-3 CM-6 CCE-6576-3 2009-07-30T19:30:22.343Z 2009-07-30T19:30:22.343Z /etc/hosts file permissions should be set appropriately AC-3 CM-6 CCE-5651-5 2009-07-30T19:30:22.360Z 2009-07-30T19:30:22.360Z /etc/xinetd.conf file permissions should be set appropriately AC-3 CM-6 CCE-6475-8 2009-07-30T19:30:22.377Z 2009-07-30T19:30:22.377Z /etc/issue file permissions should be set appropriately AC-3 CM-6 CCE-6281-0 2009-07-30T19:30:22.390Z 2009-07-30T19:30:22.390Z /etc/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6355-2 2009-07-30T19:30:22.390Z 2009-07-30T19:30:22.390Z /etc/ksh file permissions should be set appropriately AC-3 CM-6 CCE-6540-9 2009-07-30T19:30:22.407Z 2009-07-30T19:30:22.407Z /etc/mail/aliases file permissions should be set appropriately AC-3 CM-6 CCE-6241-4 2009-07-30T19:30:22.420Z 2009-07-30T19:30:22.420Z /etc/motd file permissions should be set appropriately AC-3 CM-6 CCE-6509-4 2009-07-30T19:30:22.437Z 2009-07-30T19:30:22.437Z /etc/netconfig file permissions should be set appropriately AC-3 CM-6 CCE-5835-4 2009-07-30T19:30:22.453Z 2009-07-30T19:30:22.453Z /etc/notrouter file permissions should be set appropriately AC-3 CM-6 CCE-6553-2 2009-07-30T19:30:22.453Z 2009-07-30T19:30:22.453Z /etc/pam.conf file permissions should be set appropriately AC-3 CM-6 CCE-6190-3 2009-07-30T19:30:22.467Z 2009-07-30T19:30:22.467Z /etc/passwd file permissions should be set appropriately AC-3 CM-6 CCE-6269-5 2009-07-30T19:30:22.483Z 2009-07-30T19:30:22.483Z The /etc/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6410-5 2009-07-30T19:30:22.500Z 2009-07-30T19:30:22.500Z /etc/security file permissions should be set appropriately AC-3 CM-6 CCE-6625-8 2009-07-30T19:30:22.500Z 2009-07-30T19:30:22.500Z /etc/services file permissions should be set appropriately AC-3 CM-6 CCE-6599-5 2009-07-30T19:30:22.517Z 2009-07-30T19:30:22.517Z /etc/sh file permissions should be set appropriately AC-3 CM-6 CCE-5735-6 2009-07-30T19:30:22.530Z 2009-07-30T19:30:22.530Z /etc/shadow file permissions should be set appropriately AC-3 CM-6 CCE-5652-3 2009-07-30T19:30:22.547Z 2009-07-30T19:30:22.547Z /etc/syslog.conf file permissions should be set appropriately AC-3 CM-6 CCE-6477-4 2009-07-30T19:30:22.547Z 2009-07-30T19:30:22.547Z DEPRECATED. CCE-6569-8 2009-07-30T19:30:22.563Z 2009-07-30T19:30:22.563Z /etc/fstab file permissions should be set appropriately AC-3 CM-6 CCE-6649-8 2009-07-30T19:30:22.577Z 2009-07-30T19:30:22.577Z DEPRECATED. CCE-5911-3 2009-07-30T19:30:22.593Z 2009-07-30T19:30:22.593Z /var/adm/loginlog file permissions should be set appropriately AC-3 CM-6 CCE-6488-1 2009-07-30T19:30:22.593Z 2009-07-30T19:30:22.593Z /var/adm/messages file permissions should be set appropriately AC-3 CM-6 CCE-6395-8 2009-07-30T19:30:22.610Z 2009-07-30T19:30:22.610Z /var/adm/sulog file permissions should be set appropriately AC-3 CM-6 CCE-6492-3 2009-07-30T19:30:22.627Z 2009-07-30T19:30:22.627Z /var/adm/utmp file permissions should be set appropriately AC-3 CM-6 CCE-5654-9 2009-07-30T19:30:22.640Z 2009-07-30T19:30:22.640Z /var/adm/wtmp file permissions should be set appropriately AC-3 CM-6 CCE-6586-2 2009-07-30T19:30:22.640Z 2009-07-30T19:30:22.640Z /var/adm/authlog file permissions should be set appropriately AC-3 CM-6 CCE-6309-9 2009-07-30T19:30:22.657Z 2009-07-30T19:30:22.657Z /var/adm/syslog file permissions should be set appropriately AC-3 CM-6 CCE-6402-2 2009-07-30T19:30:22.670Z 2009-07-30T19:30:22.670Z /var/mail file permissions should be set appropriately AC-3 CM-6 CCE-6401-4 2009-07-30T19:30:22.687Z 2009-07-30T19:30:22.687Z /var/tmp file permissions should be set appropriately AC-3 CM-6 CCE-6370-1 2009-07-30T19:30:22.687Z 2009-07-30T19:30:22.687Z /usr/lib/pt_chmod file permissions should be set appropriately AC-3 CM-6 CCE-5811-5 2009-07-30T19:30:22.703Z 2009-07-30T19:30:22.703Z /usr/lib/embedded_us file permissions should be set appropriately AC-3 CM-6 CCE-6265-3 2009-07-30T19:30:22.717Z 2009-07-30T19:30:22.717Z /usr/lib/sendmail file permissions should be set appropriately AC-3 CM-6 CCE-6591-2 2009-07-30T19:30:22.733Z 2009-07-30T19:30:22.733Z /usr/kerberos/bin/rsh file permissions should be set appropriately AC-3 CM-6 CCE-6608-4 2009-07-30T19:30:22.750Z 2009-07-30T19:30:22.750Z /var/spool/mail file permissions should be set appropriately AC-3 CM-6 CCE-6344-6 2009-07-30T19:30:22.750Z 2009-07-30T19:30:22.750Z smbpassword file permissions should be set appropriately AC-3 CM-6 CCE-6471-7 2009-07-30T19:30:22.767Z 2009-07-30T19:30:22.767Z System files should be owned by an appropriate user AC-3 CM-6 CCE-6061-6 2009-07-30T19:30:22.780Z 2009-07-30T19:30:22.780Z System files should be owned by an appropriate group AC-3 CM-6 CCE-5890-9 2009-07-30T19:30:22.797Z 2009-07-30T19:30:22.797Z Default/skeleton dot files should be owned by an appropriate user AC-3 CM-6 CCE-5657-2 2009-07-30T19:30:22.813Z 2009-07-30T19:30:22.813Z Default/skeleton dot files should be owned by an appropriate group AC-3 CM-6 CCE-6545-8 2009-07-30T19:30:22.827Z 2009-07-30T19:30:22.827Z Global initialization files should be owned by an appropriate user AC-3 CM-6 CCE-6516-9 2009-07-30T19:30:22.827Z 2009-07-30T19:30:22.827Z Global initialization files should be owned by an appropriate group AC-3 CM-6 CCE-6362-8 2009-07-30T19:30:22.843Z 2009-07-30T19:30:22.843Z Home directories should be owned by an appropriate user AC-3 CM-6 CCE-6587-0 2009-07-30T19:30:22.860Z 2009-07-30T19:30:22.860Z Home directories should be owned by an appropriate group AC-3 CM-6 CCE-5850-3 2009-07-30T19:30:22.877Z 2009-07-30T19:30:22.877Z inetd.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6551-6 2009-07-30T19:30:22.890Z 2009-07-30T19:30:22.890Z xinetd.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6397-4 2009-07-30T19:30:22.890Z 2009-07-30T19:30:22.890Z /etc/services file should be owned by an appropriate user AC-3 CM-6 CCE-6555-7 2009-07-30T19:30:22.907Z 2009-07-30T19:30:22.907Z /etc/services file should be owned by an appropriate group AC-3 CM-6 CCE-6621-7 2009-07-30T19:30:22.920Z 2009-07-30T19:30:22.920Z /etc/notrouter file should be owned by an appropriate user AC-3 CM-6 CCE-6396-6 2009-07-30T19:30:22.937Z 2009-07-30T19:30:22.937Z /etc/notrouter file should be owned by an appropriate group AC-3 CM-6 CCE-6352-9 2009-07-30T19:30:22.953Z 2009-07-30T19:30:22.953Z DEPRECATED. CCE-5969-1 2009-07-30T19:30:22.953Z 2009-07-30T19:30:22.953Z DEPRECATED. CCE-5673-9 2009-07-30T19:30:22.967Z 2009-07-30T19:30:22.967Z /etc/passwd file should be owned by an appropriate user AC-3 CM-6 CCE-5824-8 2009-07-30T19:30:22.983Z 2009-07-30T19:30:22.983Z /etc/passwd file should be owned by an appropriate group AC-3 CM-6 CCE-5685-3 2009-07-30T19:30:23.000Z 2009-07-30T19:30:23.000Z /etc/shadow file should be owned by an appropriate user AC-3 CM-6 CCE-5946-9 2009-07-30T19:30:23.017Z 2009-07-30T19:30:23.017Z /etc/shadow file should be owned by an appropriate group AC-3 CM-6 CCE-5694-5 2009-07-30T19:30:23.030Z 2009-07-30T19:30:23.030Z Environmental variable PATH for superuser accounts should or should not contain world-writable files as appropriate AC-3 CM-6 CCE-6421-2 2009-07-30T19:30:23.047Z 2009-07-30T19:30:23.047Z Environmental variable PATH for superuser accounts should not contain the current directory as the first or last entry AC-3 CM-6 CCE-6642-3 2009-07-30T19:30:23.063Z 2009-07-30T19:30:23.063Z The current directory should or should not be added to the environmental variable PATH by global initialization files as appropriate AC-3 CM-6 CCE-6425-3 2009-07-30T19:30:23.063Z 2009-07-30T19:30:23.063Z The current directory should or should not be added to the environmental variable PATH by local initialization files as appropriate AC-3 CM-6 CCE-5699-4 2009-07-30T19:30:23.077Z 2009-07-30T19:30:23.077Z Local initialization files should allow or deny access to the terminal as appropriate CM-7 CCE-5959-2 2009-07-30T19:30:23.093Z 2009-07-30T19:30:23.093Z The system umask should be set appropriately CM-6 CM-7 CCE-6116-8 2009-07-30T19:30:23.110Z 2009-07-30T19:30:23.110Z The user umask should be set appropriately CM-6 CM-7 CCE-6336-2 2009-07-30T19:30:23.127Z 2009-07-30T19:30:23.127Z Login to privileged accounts should be allowed or denied as appropriate AC-2 CCE-6102-8 2009-07-30T19:30:23.140Z 2009-07-30T19:30:23.140Z /etc/init.d file permissions should be set appropriately AC-3 CM-6 CCE-6679-5 2009-07-30T19:30:23.157Z 2009-07-30T19:30:23.157Z /boot/grub/grub.conf file permissions should be set appropriately AC-3 CM-6 CCE-6653-0 2009-07-30T19:30:23.157Z 2009-07-30T19:30:23.157Z /boot/grub/grub.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6432-9 2009-07-30T19:30:23.170Z 2009-07-30T19:30:23.170Z /boot/grub/grub.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6512-8 2009-07-30T19:30:23.187Z 2009-07-30T19:30:23.187Z /etc/lilo.conf file permissions should be set appropriately AC-3 CM-6 CCE-6212-5 2009-07-30T19:30:23.203Z 2009-07-30T19:30:23.203Z /etc/login.access file permissions should be set appropriately AC-3 CM-6 CCE-6229-9 2009-07-30T19:30:23.203Z 2009-07-30T19:30:23.203Z /etc/security/access.conf file permissions should be set appropriately AC-3 CM-6 CCE-5700-0 2009-07-30T19:30:23.217Z 2009-07-30T19:30:23.217Z /etc/sysctl.conf file permissions should be set appropriately AC-3 CM-6 CCE-6389-1 2009-07-30T19:30:23.233Z 2009-07-30T19:30:23.233Z /etc/securetty file permissions should be set appropriately AC-3 CM-6 CCE-6698-5 2009-07-30T19:30:23.250Z 2009-07-30T19:30:23.250Z /etc/audit/auditd.conf file permissions should be set appropriately AC-3 CM-6 CCE-6420-4 2009-07-30T19:30:23.250Z 2009-07-30T19:30:23.250Z audit.rules file permissions should be set appropriately AU-9 CCE-5953-5 2009-07-30T19:30:23.267Z 2009-07-30T19:30:23.267Z DEPRECATED in favor of CCE-8569-6, CCE-7990-5, and CCE-8624-9. CCE-8569-6 2009-07-30T19:30:23.280Z 2009-07-30T19:30:23.280Z /etc/auto.master file should be owned by an appropriate user AC-3 CM-6 CCE-7990-5 2009-07-30T19:30:23.297Z 2009-07-30T19:30:23.297Z /etc/auto.misc file should be owned by an appropriate user AC-3 CM-6 CCE-8624-9 2009-07-30T19:30:23.313Z 2009-07-30T19:30:23.313Z /etc/auto.net file should be owned by an appropriate user AC-3 CM-6 CCE-6547-4 2009-07-30T19:30:23.313Z 2009-07-30T19:30:23.313Z /etc/lilo.conf file should be owned by an appropriate user AC-3 CM-6 CCE-5704-2 2009-07-30T19:30:23.327Z 2009-07-30T19:30:23.327Z /etc/login.access file should be owned by an appropriate user AC-3 CM-6 CCE-6525-0 2009-07-30T19:30:23.343Z 2009-07-30T19:30:23.343Z /etc/security/access.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6115-0 2009-07-30T19:30:23.360Z 2009-07-30T19:30:23.360Z /etc/sysctl.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6383-4 2009-07-30T19:30:23.377Z 2009-07-30T19:30:23.377Z /etc/securetty file should be owned by an appropriate user AC-3 CM-6 CCE-5716-6 2009-07-30T19:30:23.377Z 2009-07-30T19:30:23.377Z /etc/audit/auditd.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6631-6 2009-07-30T19:30:23.390Z 2009-07-30T19:30:23.390Z audit.rules file should be owned by an appropriate user AU-9 CCE-6596-1 2009-07-30T19:30:23.407Z 2009-07-30T19:30:23.407Z DEPRECATED in favor of CCE-8335-2, CCE-8498-8, and CCE-8383-2. CCE-8335-2 2009-07-30T19:30:23.420Z 2009-07-30T19:30:23.420Z /etc/auto.master file should be owned by an appropriate user AC-3 CM-6 CCE-8498-8 2009-07-30T19:30:23.437Z 2009-07-30T19:30:23.437Z /etc/auto.misc file should be owned by an appropriate user AC-3 CM-6 CCE-8383-2 2009-07-30T19:30:23.437Z 2009-07-30T19:30:23.437Z /etc/auto.net file should be owned by an appropriate user AC-3 CM-6 CCE-6675-3 2009-07-30T19:30:23.453Z 2009-07-30T19:30:23.453Z /etc/lilo.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6195-2 2009-07-30T19:30:23.467Z 2009-07-30T19:30:23.467Z /etc/login.access file should be owned by an appropriate group AC-3 CM-6 CCE-5900-6 2009-07-30T19:30:23.483Z 2009-07-30T19:30:23.483Z /etc/security/access.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6304-0 2009-07-30T19:30:23.500Z 2009-07-30T19:30:23.500Z /etc/sysctl.conf file should be owned by an appropriate group AC-3 CM-6 CCE-5720-8 2009-07-30T19:30:23.500Z 2009-07-30T19:30:23.500Z /etc/securetty file should be owned by an appropriate group AC-3 CM-6 CCE-5726-5 2009-07-30T19:30:23.517Z 2009-07-30T19:30:23.517Z /etc/audit/auditd.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6376-8 2009-07-30T19:30:23.530Z 2009-07-30T19:30:23.530Z audit.rules file should be owned by an appropriate group AU-9 CCE-6222-4 2009-07-30T19:30:23.547Z 2009-07-30T19:30:23.547Z DEPRECATED in favor of CCE-8347-7 CCE-8526-6, and CCE-8369-1. CCE-8347-7 2009-07-30T19:30:23.563Z 2009-07-30T19:30:23.563Z /etc/auto.master file should be owned by an appropriate group AC-3 CM-6 CCE-8526-6 2009-07-30T19:30:23.577Z 2009-07-30T19:30:23.577Z /etc/auto.misc file should be owned by an appropriate group AC-3 CM-6 CCE-8369-1 2009-07-30T19:30:23.577Z 2009-07-30T19:30:23.577Z /etc/auto.net file should be owned by an appropriate group AC-3 CM-6 CCE-6424-6 2009-07-30T19:30:23.593Z 2009-07-30T19:30:23.593Z Access controls through login.access and access.conf should be set for non-superusers or not as appropriate CM-7 CCE-6312-3 2009-07-30T19:30:23.610Z 2009-07-30T19:30:23.610Z Global initialization files should allow or deny write access to the terminal as appropriate CM-7 CCE-6528-4 2009-07-30T19:30:23.627Z 2009-07-30T19:30:23.627Z Ctrl-Alt-Delete should be enabled or disabled as appropriate CM-6 CCE-6691-0 2009-07-30T19:30:23.640Z 2009-07-30T19:30:23.640Z An appropriate bootloader should be used CM-2 CM-6 CM-7 CCE-6519-3 2009-07-30T19:30:23.657Z 2012-01-05T04:34:15.970Z GRUB should be configured with a password or not as appropriate CM-7 CCE-6594-6 2009-07-30T19:30:23.670Z 2012-01-05T04:34:16.017Z LILO should be configured with a password or not as appropriate AC-3 CM-6 CM-7 SC-5 CCE-8118-2 2009-07-30T19:30:23.687Z 2009-07-30T19:30:23.687Z System should be configured to boot and appropriate set of operating systems CM-7 SC-2 CCE-5972-5 2009-07-30T19:30:23.687Z 2009-07-30T19:30:23.687Z The primary filesystem partition should be using an appropriate filesystem AC-6 SC-2 CCE-6364-4 2009-07-30T19:30:23.703Z 2009-07-30T19:30:23.703Z The ugidd daemon should be enabled or disabled as appropriate CM-6 CM-7 CCE-5813-1 2009-07-30T19:30:23.717Z 2009-07-30T19:30:23.717Z NFS insecure locks should be enabled or disabled as appropriate AC-3 CM-6 CCE-5752-1 2009-07-30T19:30:23.733Z 2009-07-30T19:30:23.733Z X server audit level should be set appropriately AU-2 CM-6 CM-7 CCE-5753-9 2009-07-30T19:30:23.750Z 2009-07-30T19:30:23.750Z X server timeout should be set appropriately AC-1 AC-3 CM-6 CM-7 CCE-6297-6 2009-07-30T19:30:23.767Z 2009-07-30T19:30:23.767Z X server ac should be enabled or disabled as appropriate CM-6 CM-7 CCE-6671-2 2009-07-30T19:30:23.780Z 2009-07-30T19:30:23.780Z X server core should be enabled or disabled as appropriate CM-6 CM-7 CCE-6538-3 2009-07-30T19:30:23.797Z 2009-07-30T19:30:23.797Z X server nolock should be enabled or disabled as appropriate CM-7 CCE-6486-5 2009-07-30T19:30:23.813Z 2009-07-30T19:30:23.813Z PAM console should be enabled or disabled as appropriate CM-6 CM-7 CCE-6644-9 2009-07-30T19:30:23.813Z 2009-07-30T19:30:23.813Z shutdown account should be present or not as appropriate CM-6 CCE-6706-6 2009-07-30T19:30:23.827Z 2009-07-30T19:30:23.827Z halt account should be present or not as appropriate AC-2 CCE-6617-5 2009-07-30T19:30:23.843Z 2009-07-30T19:30:23.843Z games account should be present or not as appropriate AC-3 CCE-5758-8 2009-07-30T19:30:23.860Z 2009-07-30T19:30:23.860Z operator account should be present or not as appropriate CM-6 CM-7 CCE-6041-8 2009-07-30T19:30:23.877Z 2009-07-30T19:30:23.877Z Auditing should be enabled or disabled at boot time as appropriate AU-2 CCE-6715-7 2009-07-30T19:30:23.877Z 2009-07-30T19:30:23.877Z System logons should be audited or not as appropriate AU-2 CCE-6666-2 2009-07-30T19:30:23.890Z 2009-07-30T19:30:23.890Z System logoffs should be audited or not as appropriate AU-2 CCE-6530-0 2009-07-30T19:30:23.920Z 2009-07-30T19:30:23.920Z Password changes should be audited or not as appropriate AU-2 IA-5 CCE-5772-9 2009-07-30T19:30:23.920Z 2009-07-30T19:30:23.920Z su usage should be audited or not as appropriate AU-2 CCE-6759-5 2009-07-30T19:30:23.953Z 2009-07-30T19:30:23.953Z Creation of superuser groups should be audited or not as appropriate AC-6 CM-6 CCE-5778-6 2009-07-30T19:30:23.953Z 2009-07-30T19:30:23.953Z Clearing of the audit log file should be audited or not as appropriate AU-2 AU-3 CCE-6628-2 2009-07-30T19:30:23.967Z 2009-07-30T19:30:23.967Z Startup/shutdown of audit functions should be audited or not as appropriate AU-2 CCE-6470-9 2009-07-30T19:30:23.983Z 2009-07-30T19:30:23.983Z Use of identification/authorization mechanisms should be audited or not as appropriate AC-3 AU-2 IA-5 CCE-6597-9 2009-07-30T19:30:24.000Z 2009-07-30T19:30:24.000Z Remote access from outside the corporate network should be audited or not as appropriate AC-1 AU-2 SC-7 CCE-6566-4 2009-07-30T19:30:24.017Z 2009-07-30T19:30:24.017Z Change of permissions/privileges should be audited or not as appropriate AC-3 CM-6 CCE-6727-2 2009-07-30T19:30:24.030Z 2009-07-30T19:30:24.030Z Modification of superuser groups should be audited or not as appropriate AU-2 CCE-6692-8 2009-07-30T19:30:24.030Z 2009-07-30T19:30:24.030Z Sudo usage should be audited or not as appropriate AU-2 CCE-6124-2 2009-07-30T19:30:24.047Z 2009-07-30T19:30:24.047Z Hard core dump size limits should be set appropriately SC-5 CCE-3416-5 2009-07-30T19:30:24.063Z 2009-07-30T19:30:24.063Z The rhnsd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4218-4 2009-07-30T19:30:24.077Z 2009-07-30T19:30:24.077Z The yum-updatesd service should be enabled or disabled as appropriate. CM-6 CM-7 SI-2 CCE-4209-3 2009-07-30T19:30:24.093Z 2009-07-30T19:30:24.093Z The AIDE package should be installed or not as appropriate CM-6 CM-7 CCE-4249-9 2009-07-30T19:30:24.093Z 2009-07-30T19:30:24.093Z The nodev option should be enabled or disabled as appropriate for all non-root partitions. AC-6 CM-6 CM-7 CCE-3522-0 2009-07-30T19:30:24.127Z 2009-07-30T19:30:24.127Z The nodev option should be enabled or disabled as appropriate for all removable media. CM-7 MP-2 CCE-4275-4 2009-07-30T19:30:24.127Z 2009-07-30T19:30:24.127Z The noexec option should be enabled or disabled as appropriate for all removable media. CM-7 MP-2 CCE-4042-8 2009-07-30T19:30:24.157Z 2009-07-30T19:30:24.157Z The nosuid option should be enabled or disabled as appropriate for all removable media. CM-7 MP-2 CCE-3685-5 2009-07-30T19:30:24.157Z 2009-07-30T19:30:24.157Z Console device ownership should be restricted to root-only as appropriate. CM-6 CCE-4187-1 2009-07-30T19:30:24.170Z 2009-07-30T19:30:24.170Z The USB device support module should be loaded or not as appropriate CM-7 SI-3 CCE-4006-3 2009-07-30T19:30:24.187Z 2009-07-30T19:30:24.187Z The USB device support module should be installed or not as appropriate CM-7 SI-3 CCE-4173-1 2009-07-30T19:30:24.203Z 2009-07-30T19:30:24.203Z USB kernel support should be enabled or disabled as appropriate. CM-7 CCE-3944-6 2009-07-30T19:30:24.217Z 2009-07-30T19:30:24.217Z The ability to boot from USB devices should be enabled or disabled as appropriate CM-6 CM-7 CCE-4072-5 2009-07-30T19:30:24.217Z 2009-07-30T19:30:24.217Z The autofs service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4231-7 2009-07-30T19:30:24.233Z 2009-07-30T19:30:24.233Z The GNOME automounter (gnome-volume-manager) should be enabled or disabled as appropriate CM-7 CCE-3988-3 2009-07-30T19:30:24.250Z 2009-07-30T19:30:24.250Z The /etc/shadow file should be owned by the appropriate group. AC-3 CM-6 CCE-3883-6 2009-07-30T19:30:24.267Z 2009-07-30T19:30:24.267Z The /etc/group file should be owned by the appropriate group. AC-3 CM-6 CCE-3276-3 2009-07-30T19:30:24.280Z 2009-07-30T19:30:24.280Z The /etc/group file should be owned by the appropriate user. AC-3 CM-6 CCE-3932-1 2009-07-30T19:30:24.297Z 2009-07-30T19:30:24.297Z File permissions for /etc/gshadow should be set correctly. AC-3 CM-6 CCE-4064-2 2009-07-30T19:30:24.297Z 2009-07-30T19:30:24.297Z The /etc/gshadow file should be owned by the appropriate group. AC-3 CM-6 CCE-4210-1 2009-07-30T19:30:24.313Z 2009-07-30T19:30:24.313Z The /etc/gshadow file should be owned by the appropriate user. AC-3 CM-6 CCE-3918-0 2009-07-30T19:30:24.327Z 2009-07-30T19:30:24.327Z The /etc/shadow file should be owned by the appropriate user. AC-3 CM-6 CCE-3566-7 2009-07-30T19:30:24.343Z 2009-07-30T19:30:24.343Z File permissions for /etc/passwd should be set correctly. AC-3 CM-6 CCE-3958-6 2009-07-30T19:30:24.360Z 2009-07-30T19:30:24.360Z The /etc/passwd file should be owned by the appropriate user. AC-3 CM-6 CCE-3967-7 2009-07-30T19:30:24.377Z 2009-07-30T19:30:24.377Z File permissions for /etc/group should be set correctly. AC-3 CM-6 CCE-3495-9 2009-07-30T19:30:24.390Z 2009-07-30T19:30:24.390Z The /etc/passwd file should be owned by the appropriate group. AC-3 CM-6 CCE-4130-1 2009-07-30T19:30:24.390Z 2009-07-30T19:30:24.390Z File permissions for /etc/shadow should be set correctly. AC-3 CM-6 CCE-3399-3 2009-07-30T19:30:24.407Z 2009-07-30T19:30:24.407Z The sticky bit should be set or not set as appropriate for all world-writable directories. CM-6 CCE-3795-2 2009-07-30T19:30:24.420Z 2009-07-30T19:30:24.420Z The world-write permission should be enabled or disabled as appropriate for all files. CM-6 CM-7 CCE-4178-0 2009-07-30T19:30:24.437Z 2009-07-30T19:30:24.437Z The sgid bit should be set or not set as appropriate for all files. AC-1 AC-2 IA-2 CCE-3324-1 2009-07-30T19:30:24.453Z 2009-07-30T19:30:24.453Z The suid bit should be set or not set as appropriate for all files. AC-3 CM-6 IA-5 CCE-4223-4 2009-07-30T19:30:24.467Z 2009-07-30T19:30:24.467Z All files should be owned by a user as appropriate AC-3 CM-6 CCE-3573-3 2009-07-30T19:30:24.467Z 2009-07-30T19:30:24.467Z All files should be owned by a group as appropriate AC-3 CM-6 CCE-4220-0 2009-07-30T19:30:24.483Z 2009-07-30T19:30:24.483Z The daemon umask should be set as appropriate AC-3 CM-6 CCE-4225-9 2009-07-30T19:30:24.500Z 2009-07-30T19:30:24.500Z Core dumps for all users should be enabled or disabled as appropriate SC-5 CCE-4247-3 2009-07-30T19:30:24.517Z 2009-07-30T19:30:24.517Z Core dumps for setuid programs should be enabled or disabled as appropriate SI-1 CCE-4146-7 2009-07-30T19:30:24.530Z 2009-07-30T19:30:24.530Z ExecShield randomized placement of virtual memory regions should be enabled or disabled as appropriate AC-3 CM-6 CCE-4168-1 2009-07-30T19:30:24.530Z 2009-07-30T19:30:24.530Z ExecShield should be enabled or disabled as appropriate CM-7 CCE-4172-3 2009-07-30T19:30:24.547Z 2009-07-30T19:30:24.547Z Kernel support for the XD/NX processor feature should be enabled or disabled as appropriate CM-7 CCE-4177-2 2009-07-30T19:30:24.563Z 2009-07-30T19:30:24.563Z The XD/NX processor feature should be enabled or disabled as appropriate in the BIOS CM-6 CM-7 CCE-3820-8 2009-07-30T19:30:24.577Z 2009-07-30T19:30:24.577Z Logins through the specified virtual console interface should be enabled or disabled as appropriate CM-6 CM-7 CCE-3485-0 2009-07-30T19:30:24.593Z 2009-07-30T19:30:24.593Z Logins through the specified virtual console device should be enabled or disabled as appropriate CM-6 CM-7 CCE-4111-1 2009-07-30T19:30:24.610Z 2009-07-30T19:30:24.610Z Logins through the primary console device should be enabled or disabled as appropriate CM-6 CM-7 CCE-4256-4 2009-07-30T19:30:24.627Z 2009-07-30T19:30:24.627Z Login prompts on serial ports should be enabled or disabled as appropriate. AC-8 CM-6 CCE-4274-7 2009-07-30T19:30:24.640Z 2009-07-30T19:30:24.640Z Command access to the root account should be enabled or disabled as appropriate. AC-6 CM-6 CCE-4044-4 2009-07-30T19:30:24.640Z 2009-07-30T19:30:24.640Z Sudo privileges should granted or rejected to the wheel group as appropriate AC-3 CM-6 CCE-3987-5 2009-07-30T19:30:24.657Z 2009-07-30T19:30:24.657Z Login access to non-root system accounts should be enabled or disabled as appropriate AC-3 CM-6 CCE-4238-2 2009-07-30T19:30:24.670Z 2009-07-30T19:30:24.670Z Login access to accounts without passwords should be enabled or disabled as appropriate AC-3 CM-6 IA-5 CCE-4009-7 2009-07-30T19:30:24.687Z 2009-07-30T19:30:24.687Z Anonymous root logins are enabled or disabled as appropriate AC-2 IA-4 CCE-4154-1 2009-07-30T19:30:24.703Z 2009-07-30T19:30:24.703Z The password minimum length should be set appropriately AC-3 CM-6 CM-7 IA-5 CCE-4180-6 2009-07-30T19:30:24.703Z 2009-07-30T19:30:24.703Z The "minimum password age" policy should meet minimum requirements. CM-6 IA-5 CCE-4092-3 2009-07-30T19:30:24.717Z 2009-07-30T19:30:24.717Z The "maximum password age" policy should meet minimum requirements. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-4097-2 2009-07-30T19:30:24.733Z 2009-07-30T19:30:24.733Z The password warn age should be set appropriately AC-3 CM-6 CM-7 IA-5 CCE-4114-5 2009-07-30T19:30:24.750Z 2009-07-30T19:30:24.750Z NIS file inclusions should be set appropriately in the /etc/passwd file CM-6 CM-7 CCE-3762-2 2009-07-30T19:30:24.767Z 2012-01-05T04:34:18.627Z DEPRECATED in favor of CCE-14113-5, CCE-14672-0, CCE-14712-4, CCE-14122-6. Was: The password strength should meet minimum requirements AC-3 CM-6 CM-7 IA-5 CCE-3410-8 2009-07-30T19:30:24.767Z 2009-07-30T19:30:24.767Z The "account lockout threshold" policy should meet minimum requirements. AC-7 CM-6 CCE-4185-5 2009-07-30T19:30:24.780Z 2009-07-30T19:30:24.780Z The /usr/sbin/userhelper file should be owned by the appropriate group. AC-3 CM-6 CCE-3952-9 2009-07-30T19:30:24.797Z 2009-07-30T19:30:24.797Z File permissions for /usr/sbin/userhelper should be set correctly. AC-3 CM-6 CCE-3301-9 2009-07-30T19:30:24.813Z 2009-07-30T19:30:24.813Z The PATH variable should be set correctly for user root CM-6 CM-7 CCE-4090-7 2009-07-30T19:30:24.827Z 2009-07-30T19:30:24.827Z File permissions should be set correctly for the home directories for all user accounts. AC-3 CM-6 CCE-3844-8 2009-07-30T19:30:24.827Z 2009-07-30T19:30:24.827Z The default umask for all users should be set correctly for the bash shell CM-6 CM-7 CCE-4227-5 2009-07-30T19:30:24.843Z 2009-07-30T19:30:24.843Z The default umask for all users should be set correctly for the csh shell CM-6 CM-7 CCE-3870-3 2009-07-30T19:30:24.860Z 2009-07-30T19:30:24.860Z The default umask for all users should be set correctly CM-6 CM-7 CCE-4144-2 2009-07-30T19:30:24.877Z 2009-07-30T19:30:24.877Z The /etc/grub.conf file should be owned by the appropriate user. AC-3 CM-6 CCE-3923-0 2009-07-30T19:30:24.890Z 2009-07-30T19:30:24.890Z File permissions for /etc/grub.conf should be set correctly. AC-3 CM-6 CCE-3818-2 2009-07-30T19:30:24.890Z 2009-07-30T19:30:24.890Z The grub boot loader should have password protection enabled or disabled as appropriate AC-3 CM-7 IA-5 CCE-4197-0 2009-07-30T19:30:24.907Z 2009-07-30T19:30:24.907Z The /etc/grub.conf file should be owned by the appropriate group. AC-3 CM-6 CCE-4241-6 2009-07-30T19:30:24.920Z 2009-07-30T19:30:24.920Z The requirement for a password to boot into single-user mode should be configured correctly. AC-6 IA-5 CCE-4245-7 2009-07-30T19:30:24.937Z 2009-07-30T19:30:24.937Z The ability for users to perform interactive startups should be enabled or disabled as appropriate. CM-7 IA-4 SC-2 CCE-3689-7 2009-07-30T19:30:24.953Z 2009-07-30T19:30:24.953Z The idle time-out value for the default /bin/tcsh shell should meet the minimum requirements. AC-1 CCE-3707-7 2009-07-30T19:30:24.953Z 2009-07-30T19:30:24.953Z The idle time-out value for the default /bin/bash shell should meet the minimum requirements. AC-1 CCE-3315-9 2009-07-30T19:30:24.967Z 2009-07-30T19:30:24.967Z The allowed period of inactivity gnome desktop lockout should be configured correctly. AC-1 AC-3 CM-6 CM-7 CCE-3910-7 2009-07-30T19:30:24.983Z 2009-07-30T19:30:24.983Z The vlock package should be installed or not as appropriate CM-6 CM-7 CCE-4060-0 2009-07-30T19:30:25.000Z 2009-07-30T19:30:25.000Z The system login banner text should be set correctly. AC-3 AC-8 CM-6 CCE-4188-9 2009-07-30T19:30:25.017Z 2009-07-30T19:30:25.017Z The direct gnome login warning banner should be set correctly. AC-3 AC-8 CM-6 CCE-3977-6 2009-07-30T19:30:25.030Z 2009-07-30T19:30:25.030Z SELinux should be enabled or disabled as appropriate AC-3 CM-6 CCE-3999-0 2009-07-30T19:30:25.030Z 2009-07-30T19:30:25.030Z The SELinux state should be set appropriately. CM-6 CM-7 CCE-3624-4 2009-07-30T19:30:25.047Z 2009-07-30T19:30:25.047Z The SELinux policy should be set appropriately. CM-6 CM-7 CCE-4254-9 2009-07-30T19:30:25.063Z 2009-07-30T19:30:25.063Z The setroubleshoot service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4148-3 2009-07-30T19:30:25.077Z 2009-07-30T19:30:25.077Z The setroubleshoot package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-3668-1 2009-07-30T19:30:25.093Z 2009-07-30T19:30:25.093Z The mcstrans service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4129-3 2009-07-30T19:30:25.093Z 2009-07-30T19:30:25.093Z The restorecond service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4151-7 2009-07-30T19:30:25.110Z 2009-07-30T19:30:25.110Z The default setting for sending ICMP redirects should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4155-8 2009-07-30T19:30:25.127Z 2009-07-30T19:30:25.127Z Sending ICMP redirects should be enabled or disabled for all interfaces as appropriate. CM-6 CCE-3561-8 2009-07-30T19:30:25.140Z 2009-07-30T19:30:25.140Z IP forwarding should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-3472-8 2009-07-30T19:30:25.157Z 2009-07-30T19:30:25.157Z Accepting "secure" ICMP redirects (those from gateways listed in the default gateways list) should be enabled or disabled for all interfaces as appropriate. AC-4 CM-7 CCE-4217-6 2009-07-30T19:30:25.170Z 2009-07-30T19:30:25.170Z Accepting ICMP redirects should be enabled or disabled for all interfaces as appropriate. CM-7 CCE-4133-5 2009-07-30T19:30:25.187Z 2009-07-30T19:30:25.187Z Ignoring bogus ICMP responses to broadcasts should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-4265-5 2009-07-30T19:30:25.203Z 2009-07-30T19:30:25.203Z Sending TCP syncookies should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3644-2 2009-07-30T19:30:25.203Z 2009-07-30T19:30:25.203Z Ignoring ICMP echo requests (pings) sent to broadcast / multicast addresses should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-4186-3 2009-07-30T19:30:25.217Z 2009-07-30T19:30:25.217Z The default setting for accepting ICMP redirects should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4080-8 2009-07-30T19:30:25.233Z 2009-07-30T19:30:25.233Z Performing source validation by reverse path should be enabled or disabled for all interfaces as appropriate. CM-6 CM-7 CCE-3339-9 2009-07-30T19:30:25.250Z 2009-07-30T19:30:25.250Z The default setting for accepting "secure" ICMP redirects (those from gateways listed in the default gateways list) should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4320-8 2009-07-30T19:30:25.267Z 2009-07-30T19:30:25.267Z Logging of "martian" packets (those with impossible addresses) should be enabled or disabled for all interfaces as appropriate. CM-7 CCE-3840-6 2009-07-30T19:30:25.267Z 2009-07-30T19:30:25.267Z The default setting for performing source validation by reverse path should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4091-5 2009-07-30T19:30:25.280Z 2009-07-30T19:30:25.280Z The default setting for accepting source routed packets should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4236-6 2009-07-30T19:30:25.297Z 2009-07-30T19:30:25.297Z Accepting source routed packets should be enabled or disabled for all interfaces as appropriate. CM-7 CCE-3628-5 2009-07-30T19:30:25.313Z 2009-07-30T19:30:25.313Z All wireless devices should be enabled or disabled in the BIOS as appropriate. CM-7 CCE-4276-2 2009-07-30T19:30:25.327Z 2009-07-30T19:30:25.327Z All wireless interfaces should be enabled or disabled as appropriate. CM-7 CCE-4170-7 2009-07-30T19:30:25.343Z 2009-07-30T19:30:25.343Z Device drivers for wireless devices should be included or excluded from the kernel as appropriate. AC-1 CM-6 CCE-3562-6 2009-07-30T19:30:25.360Z 2009-07-30T19:30:25.360Z Automatic loading of the IPv6 kernel module should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3377-9 2009-07-30T19:30:25.360Z 2009-07-30T19:30:25.360Z Global IPv6 initialization should be enabled or disabled as appropriate. CM-7 CCE-4296-0 2009-07-30T19:30:25.377Z 2009-07-30T19:30:25.377Z IPv6 configuration should be enabled or disabled as appropriate for all interfaces. CM-6 CM-7 CCE-3381-1 2009-07-30T19:30:25.390Z 2009-07-30T19:30:25.390Z The default setting for IPv6 configuration should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4269-7 2009-07-30T19:30:25.407Z 2009-07-30T19:30:25.407Z Accepting IPv6 router advertisements should be enabled or disabled as appropriate for all network interfaces. CM-7 CCE-4291-1 2009-07-30T19:30:25.420Z 2009-07-30T19:30:25.420Z The default setting for accepting IPv6 router advertisements should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4313-3 2009-07-30T19:30:25.437Z 2009-07-30T19:30:25.437Z Accepting redirects from IPv6 routers should be enabled or disabled as appropriate for all network interfaces. CM-6 CM-7 CCE-4198-8 2009-07-30T19:30:25.437Z 2009-07-30T19:30:25.437Z The default setting for accepting redirects from IPv6 routers should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-3842-2 2009-07-30T19:30:25.453Z 2009-07-30T19:30:25.453Z IPv6 privacy extensions should be configured appropriately for all interfaces. CM-6 CM-7 CCE-4221-8 2009-07-30T19:30:25.467Z 2009-07-30T19:30:25.467Z The default setting for accepting router preference via IPv6 router advertisement should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4137-6 2009-07-30T19:30:25.483Z 2009-07-30T19:30:25.483Z The default number of global unicast IPv6 addresses allowed per network interface should be set appropriately. CM-7 CCE-4159-0 2009-07-30T19:30:25.500Z 2009-07-30T19:30:25.500Z The default number of IPv6 router solicitations for network interfaces to send should be set appropriately. CM-7 CCE-3895-0 2009-07-30T19:30:25.517Z 2009-07-30T19:30:25.517Z The default number of IPv6 duplicate address detection solicitations for network interfaces to send per configured address should be set appropriately. CM-7 CCE-4287-9 2009-07-30T19:30:25.517Z 2009-07-30T19:30:25.517Z The default setting for autoconfiguring network interfaces using prefix information in IPv6 router advertisements should be enabled or disabled as appropriate. AC-4 SC-5 SC-7 CCE-4058-4 2009-07-30T19:30:25.530Z 2009-07-30T19:30:25.530Z The default setting for accepting prefix information via IPv6 router advertisement should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4128-5 2009-07-30T19:30:25.547Z 2009-07-30T19:30:25.547Z The default setting for accepting a default router via IPv6 router advertisement should be enabled or disabled for network interfaces as appropriate. AC-4 SC-5 SC-7 CCE-4167-3 2009-07-30T19:30:25.563Z 2009-07-30T19:30:25.563Z The ip6tables service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4189-7 2009-07-30T19:30:25.577Z 2009-07-30T19:30:25.577Z The iptables service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3679-8 2009-07-30T19:30:25.593Z 2009-07-30T19:30:25.593Z The syslog service should be enabled or disabled as appropriate. AU-2 CM-6 CM-7 CCE-3701-0 2009-07-30T19:30:25.610Z 2009-07-30T19:30:25.610Z All syslog log files should be owned by the appropriate group. AC-3 CM-6 CCE-4233-3 2009-07-30T19:30:25.610Z 2009-07-30T19:30:25.610Z File permissions for all syslog log files should be set correctly. AC-3 CM-6 CCE-4366-1 2009-07-30T19:30:25.627Z 2009-07-30T19:30:25.627Z All syslog log files should be owned by the appropriate user. AC-3 CM-6 CCE-4260-6 2009-07-30T19:30:25.640Z 2009-07-30T19:30:25.640Z Syslog logs should be sent to a remote loghost or not as appropriate AU-1 CCE-3382-9 2009-07-30T19:30:25.657Z 2009-07-30T19:30:25.657Z Syslogd should accept remote messages or not as appropriate CM-7 CCE-4182-2 2009-07-30T19:30:25.670Z 2009-07-30T19:30:25.670Z The logrotate (syslog rotater) service should be enabled or disabled as appropriate. AU-2 AU-9 CM-6 CCE-4323-2 2009-07-30T19:30:25.687Z 2009-07-30T19:30:25.687Z The logwatch service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4292-9 2009-07-30T19:30:25.703Z 2009-07-30T19:30:25.703Z The auditd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4234-1 2009-07-30T19:30:25.717Z 2009-07-30T19:30:25.717Z The inetd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4252-3 2009-07-30T19:30:25.717Z 2009-07-30T19:30:25.717Z The xinetd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4023-8 2009-07-30T19:30:25.733Z 2009-07-30T19:30:25.733Z The inetd package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-4164-0 2009-07-30T19:30:25.750Z 2009-07-30T19:30:25.750Z The xinetd package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-3390-2 2009-07-30T19:30:25.767Z 2009-07-30T19:30:25.767Z The telnet service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4330-7 2009-07-30T19:30:25.780Z 2009-07-30T19:30:25.780Z The telnet-server package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-3974-3 2009-07-30T19:30:25.797Z 2009-07-30T19:30:25.797Z The rcp service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4141-8 2009-07-30T19:30:25.813Z 2009-07-30T19:30:25.813Z The rsh service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3537-8 2009-07-30T19:30:25.827Z 2009-07-30T19:30:25.827Z The rlogin service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4308-3 2009-07-30T19:30:25.843Z 2009-07-30T19:30:25.843Z The rsh package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-3705-1 2009-07-30T19:30:25.860Z 2009-07-30T19:30:25.860Z The ypbind service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4348-9 2009-07-30T19:30:25.877Z 2009-07-30T19:30:25.877Z The ypserv package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-4273-9 2009-07-30T19:30:25.890Z 2009-07-30T19:30:25.890Z The tftp service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3916-4 2009-07-30T19:30:25.907Z 2009-07-30T19:30:25.907Z The tftp-server package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-3412-4 2009-07-30T19:30:25.920Z 2009-07-30T19:30:25.920Z The firstboot service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4229-1 2009-07-30T19:30:25.937Z 2009-07-30T19:30:25.937Z The gpm service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4123-6 2009-07-30T19:30:25.953Z 2009-07-30T19:30:25.953Z The irqbalance service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4286-1 2009-07-30T19:30:25.953Z 2009-07-30T19:30:25.953Z The isdn service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3425-6 2009-07-30T19:30:25.967Z 2009-07-30T19:30:25.967Z The kdump service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4211-9 2009-07-30T19:30:25.983Z 2009-07-30T19:30:25.983Z The kudzu service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3854-7 2009-07-30T19:30:26.000Z 2009-07-30T19:30:26.000Z The mdmonitor service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4356-2 2009-07-30T19:30:26.017Z 2009-07-30T19:30:26.017Z The microcode_ctl service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4369-5 2009-07-30T19:30:26.030Z 2009-07-30T19:30:26.030Z The network service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4100-4 2009-07-30T19:30:26.047Z 2009-07-30T19:30:26.047Z The pcscd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3455-3 2009-07-30T19:30:26.063Z 2009-07-30T19:30:26.063Z The smartd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4421-4 2009-07-30T19:30:26.077Z 2009-07-30T19:30:26.077Z The readahead_early service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4302-6 2009-07-30T19:30:26.093Z 2009-07-30T19:30:26.093Z The readahead_later service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3822-4 2009-07-30T19:30:26.110Z 2009-07-30T19:30:26.110Z The messagebus service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4364-6 2009-07-30T19:30:26.127Z 2009-07-30T19:30:26.127Z The haldaemon service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4355-4 2009-07-30T19:30:26.140Z 2009-07-30T19:30:26.140Z The bluetooth service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4377-8 2009-07-30T19:30:26.157Z 2009-07-30T19:30:26.157Z The hidd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4289-5 2009-07-30T19:30:26.170Z 2009-07-30T19:30:26.170Z The apmd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4298-6 2009-07-30T19:30:26.170Z 2009-07-30T19:30:26.170Z The acpid service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4051-9 2009-07-30T19:30:26.187Z 2009-07-30T19:30:26.187Z The cpuspeed service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4324-0 2009-07-30T19:30:26.203Z 2009-07-30T19:30:26.203Z The crond service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4406-5 2009-07-30T19:30:26.217Z 2009-07-30T19:30:26.217Z The anacron service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4428-9 2009-07-30T19:30:26.233Z 2009-07-30T19:30:26.233Z The anacron package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-4322-4 2009-07-30T19:30:26.250Z 2009-07-30T19:30:26.250Z The /etc/cron.monthly file should be owned by the appropriate group. AC-3 CM-6 CCE-4450-3 2009-07-30T19:30:26.250Z 2009-07-30T19:30:26.250Z File permissions for /etc/cron.daily should be set correctly. AC-3 CM-6 CCE-4331-5 2009-07-30T19:30:26.267Z 2009-07-30T19:30:26.267Z The /etc/cron.weekly file should be owned by the appropriate group. AC-3 CM-6 CCE-3851-3 2009-07-30T19:30:26.280Z 2009-07-30T19:30:26.280Z The /etc/crontab file should be owned by the appropriate user. AC-3 CM-6 CCE-4379-4 2009-07-30T19:30:26.297Z 2009-07-30T19:30:26.297Z The /etc/anacrontab file should be owned by the appropriate user. AC-3 CM-6 CCE-4388-5 2009-07-30T19:30:26.313Z 2009-07-30T19:30:26.313Z File permissions for /etc/crontab should be set correctly. AC-3 CM-6 CCE-4054-3 2009-07-30T19:30:26.327Z 2009-07-30T19:30:26.327Z The /etc/cron.hourly file should be owned by the appropriate group. AC-3 CM-6 CCE-4441-2 2009-07-30T19:30:26.327Z 2009-07-30T19:30:26.327Z The /etc/cron.monthly file should be owned by the appropriate user. AC-3 CM-6 CCE-4212-7 2009-07-30T19:30:26.343Z 2009-07-30T19:30:26.343Z The /etc/cron.d file should be owned by the appropriate group. AC-3 CM-6 CCE-4380-2 2009-07-30T19:30:26.360Z 2009-07-30T19:30:26.360Z The /etc/cron.d file should be owned by the appropriate user. AC-3 CM-6 CCE-3833-1 2009-07-30T19:30:26.377Z 2009-07-30T19:30:26.377Z The /etc/cron.weekly file should be owned by the appropriate user. AC-3 CM-6 CCE-3604-6 2009-07-30T19:30:26.390Z 2009-07-30T19:30:26.390Z The /etc/anacrontab file should be owned by the appropriate group. AC-3 CM-6 CCE-4106-1 2009-07-30T19:30:26.407Z 2009-07-30T19:30:26.407Z File permissions for /etc/cron.hourly should be set correctly. AC-3 CM-6 CCE-3983-4 2009-07-30T19:30:26.420Z 2009-07-30T19:30:26.420Z The /etc/cron.hourly file should be owned by the appropriate user. AC-3 CM-6 CCE-3626-9 2009-07-30T19:30:26.420Z 2009-07-30T19:30:26.420Z The /etc/crontab file should be owned by the appropriate group. AC-3 CM-6 CCE-4022-0 2009-07-30T19:30:26.437Z 2009-07-30T19:30:26.437Z The /etc/cron.daily file should be owned by the appropriate user. AC-3 CM-6 CCE-4304-2 2009-07-30T19:30:26.453Z 2009-07-30T19:30:26.453Z File permissions for /etc/anacrontab should be set correctly. AC-3 CM-6 CCE-4203-6 2009-07-30T19:30:26.467Z 2009-07-30T19:30:26.467Z File permissions for /etc/cron.weekly should be set correctly. CM-6 CCE-4251-5 2009-07-30T19:30:26.483Z 2009-07-30T19:30:26.483Z File permissions for /etc/cron.monthly should be set correctly. AC-3 CM-6 CCE-3481-9 2009-07-30T19:30:26.500Z 2009-07-30T19:30:26.500Z The /etc/cron.daily file should be owned by the appropriate group. AC-3 CM-6 CCE-4250-7 2009-07-30T19:30:26.517Z 2009-07-30T19:30:26.517Z File permissions for /etc/cron.d should be set correctly. AC-3 CM-6 CCE-4268-9 2009-07-30T19:30:26.517Z 2009-07-30T19:30:26.517Z The sshd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4272-1 2009-07-30T19:30:26.530Z 2009-07-30T19:30:26.530Z SSH should be installed or uninstalled as appropriate CM-7 CCE-4295-2 2009-07-30T19:30:26.547Z 2009-07-30T19:30:26.547Z Inbound connections to the ssh port should be allowed or denied as appropriate AC-1 CM-6 CCE-4325-7 2009-07-30T19:30:26.563Z 2009-07-30T19:30:26.563Z SSH version 1 protocol support should be enabled or disabled as appropriate. CM-7 CCE-3845-5 2009-07-30T19:30:26.577Z 2009-07-30T19:30:26.577Z The SSH idle timout interval should be set to an appropriate value AC-1 CM-7 CCE-4475-0 2009-07-30T19:30:26.593Z 2009-07-30T19:30:26.593Z Emulation of the rsh command through the ssh server should be enabled or disabled as appropriate SC-7 CCE-4370-3 2009-07-30T19:30:26.610Z 2009-07-30T19:30:26.610Z SSH host-based authentication should be enabled or disabled as appropriate CM-7 CCE-4387-7 2009-07-30T19:30:26.610Z 2009-07-30T19:30:26.610Z Root login via SSH should be enabled or disabled as appropriate AC-1 SC-7 CCE-3660-8 2009-07-30T19:30:26.627Z 2009-07-30T19:30:26.627Z Remote connections from accounts with empty passwords should be enabled or disabled as appropriate AC-1 SC-7 CCE-4431-3 2009-07-30T19:30:26.640Z 2009-07-30T19:30:26.640Z SSH warning banner should be enabled or disabled as appropriate AC-3 AC-8 CM-6 CCE-4462-8 2009-07-30T19:30:26.657Z 2009-07-30T19:30:26.657Z X Windows should be enabled or disabled at system boot as appropriate CM-6 CM-7 CCE-4422-2 2009-07-30T19:30:26.670Z 2009-07-30T19:30:26.670Z X Windows should be installed or removed as appropriate CM-6 CM-7 CCE-4303-4 2009-07-30T19:30:26.687Z 2009-07-30T19:30:26.687Z DEPRECTATED in favor of CCE-4448-7 CCE-4448-7 2009-07-30T19:30:26.703Z 2009-07-30T19:30:26.703Z The xfs service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4074-1 2009-07-30T19:30:26.717Z 2009-07-30T19:30:26.717Z X Windows System Listening for remote connections should be enabled or disabled as appropriate AC-1 CM-6 CM-7 CCE-3717-6 2009-07-30T19:30:26.733Z 2009-07-30T19:30:26.733Z Warning banners for gui login users should be enabled or disabled as appropriate AC-3 AC-8 CM-6 CCE-4365-3 2009-07-30T19:30:26.750Z 2009-07-30T19:30:26.750Z The avahi-daemon service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4136-8 2009-07-30T19:30:26.750Z 2009-07-30T19:30:26.750Z The Avahi daemon should be configured to serve via Ipv6 or not as appropriate CM-6 CM-7 CCE-4409-9 2009-07-30T19:30:26.767Z 2009-07-30T19:30:26.767Z The Avahi daemon should be configured to serve via Ipv4 or not as appropriate CM-6 CM-7 CCE-4426-3 2009-07-30T19:30:26.780Z 2009-07-30T19:30:26.780Z Avahi should be configured to accept packets with a TTL field not equal to 255 or not as appropriate CM-7 CCE-4193-9 2009-07-30T19:30:26.797Z 2009-07-30T19:30:26.797Z Avahi should be configured to allow other stacks from binding to port 5353 or not as appropriate CM-7 CCE-4444-6 2009-07-30T19:30:26.813Z 2009-07-30T19:30:26.813Z Avahi publishing of local information should be enabled or disabled as appropriate CM-6 CM-7 CCE-4352-1 2009-07-30T19:30:26.827Z 2009-07-30T19:30:26.827Z Avahi publishing of local information by user applications should be enabled or disabled as appropriate CM-6 CM-7 CCE-4433-9 2009-07-30T19:30:26.843Z 2009-07-30T19:30:26.843Z Avahi publishing of hardware information should be enabled or disabled as appropriate CM-7 SC-7 CCE-4451-1 2009-07-30T19:30:26.860Z 2009-07-30T19:30:26.860Z Avahi publishing of workstation name should be enabled or disabled as appropriate CM-6 CM-7 CCE-4341-4 2009-07-30T19:30:26.860Z 2009-07-30T19:30:26.860Z Avahi publishing of IP addresses should be enabled or disabled as appropriate CM-7 SC-7 CCE-4358-8 2009-07-30T19:30:26.877Z 2009-07-30T19:30:26.877Z Avahi publishing of domain name should be enabled or disabled as appropriate CM-7 SC-7 CCE-4112-9 2009-07-30T19:30:26.890Z 2009-07-30T19:30:26.890Z The cups service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3755-6 2009-07-30T19:30:26.907Z 2009-07-30T19:30:26.907Z CUPS service should be enabled or disabled as appropriate CM-6 CM-7 CCE-3649-1 2009-07-30T19:30:26.920Z 2009-07-30T19:30:26.920Z Firewall access to printing service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4420-6 2009-07-30T19:30:26.937Z 2009-07-30T19:30:26.937Z Remote print browsing should be enabled or disabled as appropriate CM-7 CCE-4407-3 2009-07-30T19:30:26.953Z 2009-07-30T19:30:26.953Z CUPS should be allowed or denied the ability to listen for Incoming printer information as appropriate CM-7 CCE-4425-5 2009-07-30T19:30:26.967Z 2009-07-30T19:30:26.967Z The hplip service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4191-3 2009-07-30T19:30:26.967Z 2009-07-30T19:30:26.967Z The dhcp client service should be enabled or disabled as appropriate for each interface. CM-6 CM-7 CCE-4336-4 2009-07-30T19:30:26.983Z 2009-07-30T19:30:26.983Z The dhcpd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4464-4 2009-07-30T19:30:27.000Z 2009-07-30T19:30:27.000Z The dhcp package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-4257-2 2009-07-30T19:30:27.017Z 2009-07-30T19:30:27.017Z The dynamic DNS feature of the DHCP server should be enabled or disabled as appropriate AC-6 CM-6 CM-7 SC-2 CCE-4403-2 2009-07-30T19:30:27.030Z 2009-07-30T19:30:27.030Z DHCPDECLINE messages should be accepted or denied by the DHCP server as appropriate AU-2 CCE-4345-5 2009-07-30T19:30:27.047Z 2009-07-30T19:30:27.047Z BOOTP queries should be accepted or denied by the DHCP server as appropriate CM-6 CM-7 CCE-3724-2 2009-07-30T19:30:27.063Z 2009-07-30T19:30:27.063Z Domain name server information should be sent or not sent by the DHCP server as appropriate. CM-6 CCE-4243-2 2009-07-30T19:30:27.077Z 2009-07-30T19:30:27.077Z Default routers should be sent or not sent by the DHCP server as appropriate. CM-6 CCE-4389-3 2009-07-30T19:30:27.093Z 2009-07-30T19:30:27.093Z Domain name should be sent or not sent by the DHCP server as appropriate. CM-6 CCE-3913-1 2009-07-30T19:30:27.093Z 2009-07-30T19:30:27.093Z NIS domain should be sent or not sent by the DHCP server as appropriate. CM-6 CM-7 CCE-4169-9 2009-07-30T19:30:27.110Z 2009-07-30T19:30:27.110Z NIS servers should be sent or not sent by the DHCP server as appropriate. CM-6 CM-7 CCE-4318-2 2009-07-30T19:30:27.127Z 2009-07-30T19:30:27.127Z Time offset should be sent or not sent by the DHCP server as appropriate. AU-8 CM-6 CM-7 CCE-4319-0 2009-07-30T19:30:27.140Z 2009-07-30T19:30:27.140Z NTP servers should be sent or not sent by the DHCP server as appropriate. AU-8 CM-6 CCE-3733-3 2009-07-30T19:30:27.157Z 2009-07-30T19:30:27.157Z dhcpd logging should be enabled or disabled as appropriate. AU-2 CCE-4376-0 2009-07-30T19:30:27.170Z 2009-07-30T19:30:27.170Z The ntpd service should be enabled or disabled as appropriate. AU-8 CM-6 CM-7 CCE-4134-3 2009-07-30T19:30:27.187Z 2009-07-30T19:30:27.187Z Network access to ntpd should be allowed or denied as appropriate CM-7 CCE-4385-1 2009-07-30T19:30:27.203Z 2009-07-30T19:30:27.203Z A remote NTP Server for time synchronization should be specified or not as appropriate AU-8 CCE-4032-9 2009-07-30T19:30:27.217Z 2009-07-30T19:30:27.217Z OpenNTPD should be installed or uninstalled as appropriate AU-8 CM-6 CCE-4424-8 2009-07-30T19:30:27.233Z 2009-07-30T19:30:27.233Z The ntp daemon should be enabled or disabled as appropriate AU-8 CM-6 CCE-3487-6 2009-07-30T19:30:27.250Z 2009-07-30T19:30:27.250Z The ntp daemon synchronization server should be set appropriately AU-8 CM-6 CCE-4416-4 2009-07-30T19:30:27.267Z 2009-07-30T19:30:27.267Z The sendmail service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4293-7 2009-07-30T19:30:27.280Z 2009-07-30T19:30:27.280Z The listening sendmail daemon should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3501-4 2009-07-30T19:30:27.297Z 2009-07-30T19:30:27.297Z The ldap service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4360-4 2009-07-30T19:30:27.313Z 2009-07-30T19:30:27.313Z File permissions for /etc/pki/tls/CA/cacert.pem should be set correctly. AC-3 CM-6 CCE-4378-6 2009-07-30T19:30:27.327Z 2009-07-30T19:30:27.327Z File permissions for /etc/pki/tls/ldap/serverkey.pem should be set correctly. AC-3 CM-6 CCE-4492-5 2009-07-30T19:30:27.360Z 2009-07-30T19:30:27.360Z The /etc/pki/tls/ldap file should be owned by the appropriate user. AC-3 CM-6 CCE-4263-0 2009-07-30T19:30:27.377Z 2009-07-30T19:30:27.377Z File permissions for /etc/pki/tls/ldap/servercert.pem should be set correctly. AC-3 CM-6 CCE-3502-2 2009-07-30T19:30:27.390Z 2009-07-30T19:30:27.390Z The /etc/pki/tls/ldap/serverkey.pem file should be owned by the appropriate user. AC-3 CM-6 CCE-4449-5 2009-07-30T19:30:27.407Z 2009-07-30T19:30:27.407Z The /etc/pki/tls/CA/cacert.pem file should be owned by the appropriate user. AC-3 CM-6 CCE-4361-2 2009-07-30T19:30:27.453Z 2009-07-30T19:30:27.453Z File permissions for /etc/pki/tls/ldap should be set correctly. AC-3 CM-6 CCE-4427-1 2009-07-30T19:30:27.483Z 2009-07-30T19:30:27.483Z The /etc/pki/tls/CA/cacert.pem file should be owned by the appropriate group. AC-3 CM-6 CCE-4321-6 2009-07-30T19:30:27.500Z 2009-07-30T19:30:27.500Z The /etc/pki/tls/ldap/serverkey.pem file should be owned by the appropriate group. AC-3 CM-6 CCE-4339-8 2009-07-30T19:30:27.517Z 2009-07-30T19:30:27.517Z The /etc/pki/tls/ldap file should be owned by the appropriate group. AC-3 CM-6 CCE-4105-3 2009-07-30T19:30:27.530Z 2009-07-30T19:30:27.530Z The /etc/pki/tls/ldap/servercert.pem file should be owned by the appropriate user. AC-3 CM-6 CCE-3718-4 2009-07-30T19:30:27.547Z 2009-07-30T19:30:27.547Z The /etc/pki/tls/ldap/servercert.pem file should be owned by the appropriate group. AC-3 CM-6 CCE-4484-2 2009-07-30T19:30:27.563Z 2009-07-30T19:30:27.563Z The /var/lib/ldap/* files should be owned by the appropriate group. AC-3 CM-6 CCE-4502-1 2009-07-30T19:30:27.577Z 2009-07-30T19:30:27.577Z The /var/lib/ldap/* files should be owned by the appropriate user. AC-3 CM-6 CCE-4396-8 2009-07-30T19:30:27.593Z 2009-07-30T19:30:27.593Z The nfslock service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3535-2 2009-07-30T19:30:27.610Z 2009-07-30T19:30:27.610Z The rpcgssd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3568-3 2009-07-30T19:30:27.627Z 2009-07-30T19:30:27.627Z The rpcidmapd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4533-6 2009-07-30T19:30:27.640Z 2009-07-30T19:30:27.640Z The netfs service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4550-0 2009-07-30T19:30:27.657Z 2009-07-30T19:30:27.657Z The portmap service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4559-1 2009-07-30T19:30:27.670Z 2009-07-30T19:30:27.670Z The lockd service should be configured to use a static port or a dynamic portmapper port for TCP as appropriate AC-4 CM-6 CM-7 CCE-4015-4 2009-07-30T19:30:27.687Z 2009-07-30T19:30:27.687Z The statd service should be configured to use an outgoing static port or an outgoing dynamic portmapper port as appropriate CM-6 CCE-3667-3 2009-07-30T19:30:27.703Z 2009-07-30T19:30:27.703Z The statd service should be configured to use a static port or a dynamic portmapper port as appropriate CM-6 CCE-4310-9 2009-07-30T19:30:27.717Z 2009-07-30T19:30:27.717Z The lockd service should be configured to use a static port or a dynamic portmapper port for UDP as appropriate AC-4 CM-6 CM-7 CCE-4438-8 2009-07-30T19:30:27.733Z 2009-07-30T19:30:27.733Z The mountd service should be configured to use a static port or a dynamic portmapper port as appropriate CM-6 CM-7 CCE-3579-0 2009-07-30T19:30:27.750Z 2009-07-30T19:30:27.750Z The rquotad service should be configured to use a static port or a dynamic portmapper port as appropriate CM-6 CM-7 CCE-4473-5 2009-07-30T19:30:27.767Z 2009-07-30T19:30:27.767Z The nfs service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4491-7 2009-07-30T19:30:27.780Z 2009-07-30T19:30:27.780Z The rpcsvcgssd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4368-7 2009-07-30T19:30:27.797Z 2009-07-30T19:30:27.797Z The nodev option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-4024-6 2009-07-30T19:30:27.813Z 2009-07-30T19:30:27.813Z The nosuid option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-4526-0 2009-07-30T19:30:27.813Z 2009-07-30T19:30:27.813Z The noexec option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-4544-3 2009-07-30T19:30:27.827Z 2009-07-30T19:30:27.827Z Root squashing should be enabled or disabled as appropriate for all NFS shares CM-7 CCE-4465-1 2009-07-30T19:30:27.843Z 2009-07-30T19:30:27.843Z Restriction of NFS clients to privileged ports should be enabled or disabled as appropriate CM-7 CCE-4350-5 2009-07-30T19:30:27.860Z 2009-07-30T19:30:27.860Z Write access to NFS shares should be enabled or disabled as appropriate CM-6 CM-7 CCE-3578-2 2009-07-30T19:30:27.877Z 2009-07-30T19:30:27.877Z The named service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4219-2 2009-07-30T19:30:27.890Z 2009-07-30T19:30:27.890Z The bind package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-3985-9 2009-07-30T19:30:27.907Z 2009-07-30T19:30:27.907Z The /var/named/chroot/etc/named.conf file should be owned by the appropriate group. AC-3 CM-6 CCE-4487-5 2009-07-30T19:30:27.920Z 2009-07-30T19:30:27.920Z File permissions for /var/named/chroot/etc/named.conf should be set correctly. AC-3 CM-6 CCE-4258-0 2009-07-30T19:30:27.937Z 2009-07-30T19:30:27.937Z The /var/named/chroot/etc/named.conf file should be owned by the appropriate user. AC-3 CM-6 CCE-4399-2 2009-07-30T19:30:27.953Z 2009-07-30T19:30:27.953Z LDAP's dynamic updates feature should be enabled or disabled as appropriate CM-7 CCE-3919-8 2009-07-30T19:30:27.967Z 2009-07-30T19:30:27.967Z The vsftpd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4549-2 2009-07-30T19:30:27.983Z 2009-07-30T19:30:27.983Z Logging of vsftpd transactions should be enabled or disabled as appropriate CM-7 CCE-4554-2 2009-07-30T19:30:28.000Z 2009-07-30T19:30:28.000Z A warning banner for all FTP users should be enabled or disabled as appropriate AC-3 AC-8 CM-6 CCE-4443-8 2009-07-30T19:30:28.000Z 2009-07-30T19:30:28.000Z Local user login to the vsftpd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4461-0 2009-07-30T19:30:28.017Z 2009-07-30T19:30:28.017Z File uploads via vsftpd should be enabled or disabled as appropriate CM-7 CCE-4338-0 2009-07-30T19:30:28.030Z 2009-07-30T19:30:28.030Z The httpd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4514-6 2009-07-30T19:30:28.047Z 2009-07-30T19:30:28.047Z The httpd package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-4346-3 2009-07-30T19:30:28.063Z 2009-07-30T19:30:28.063Z The apache 2 server software should be installed or removed as appropriate CM-6 CM-7 CCE-4474-3 2009-07-30T19:30:28.077Z 2009-07-30T19:30:28.077Z The apache2 server's ServerTokens value should be set appropriately CM-6 CM-7 CCE-3756-4 2009-07-30T19:30:28.093Z 2009-07-30T19:30:28.093Z The apache2 server's ServerSignature value should be set appropriately CM-6 CM-7 CCE-4509-6 2009-07-30T19:30:28.110Z 2009-07-30T19:30:28.110Z File permissions for /etc/httpd/conf should be set correctly. AC-3 CM-6 CCE-4386-9 2009-07-30T19:30:28.127Z 2009-07-30T19:30:28.127Z File permissions for /etc/httpd/conf/* should be set correctly. AC-3 CM-6 CCE-4029-5 2009-07-30T19:30:28.127Z 2009-07-30T19:30:28.140Z File permissions for /usr/sbin/httpd should be set correctly. AC-3 CM-6 CCE-3581-6 2009-07-30T19:30:28.140Z 2009-07-30T19:30:28.140Z The /etc/httpd/conf/* files should be owned by the appropriate group. AC-3 CM-6 CCE-4574-0 2009-07-30T19:30:28.157Z 2009-07-30T19:30:28.157Z File permissions for /var/log/httpd should be set correctly. AC-3 CM-6 CCE-3847-1 2009-07-30T19:30:28.170Z 2009-07-30T19:30:28.170Z The dovecot service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4239-0 2009-07-30T19:30:28.187Z 2009-07-30T19:30:28.187Z The dovecot package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-4384-4 2009-07-30T19:30:28.203Z 2009-07-30T19:30:28.203Z Dovecot should be configured to support the imaps protocol or not as necessary SC-7 CCE-3887-7 2009-07-30T19:30:28.217Z 2009-07-30T19:30:28.217Z Dovecot should be configured to support the pop3s protocol or not as necessary SC-7 CCE-4530-2 2009-07-30T19:30:28.233Z 2009-07-30T19:30:28.233Z Dovecot should be configured to support the pop3 protocol or not as necessary SC-7 CCE-4547-6 2009-07-30T19:30:28.250Z 2009-07-30T19:30:28.250Z Dovecot should be configured to support the imap protocol or not as necessary SC-7 CCE-4552-6 2009-07-30T19:30:28.267Z 2009-07-30T19:30:28.267Z Dovecot plaintext authentication of clients should be enabled or disabled as necessary SC-7 CCE-4371-1 2009-07-30T19:30:28.280Z 2009-07-30T19:30:28.280Z The Dovecot option to drop privileges to user before executing mail process should be enabled or not as appropriate CM-6 CM-7 CCE-4410-7 2009-07-30T19:30:28.280Z 2009-07-30T19:30:28.280Z The Dovecot option to spawn a new login process per connection should be enabled or not as appropriate AC-3 CM-6 CM-7 IA-5 CCE-4551-8 2009-07-30T19:30:28.297Z 2009-07-30T19:30:28.297Z The smb service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4556-7 2009-07-30T19:30:28.313Z 2009-07-30T19:30:28.313Z The squid service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4076-6 2009-07-30T19:30:28.327Z 2009-07-30T19:30:28.327Z The squid package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-4454-5 2009-07-30T19:30:28.343Z 2009-07-30T19:30:28.343Z The Squid option to force FTP passive connections should be enabled or not as appropriate CM-6 CCE-4353-9 2009-07-30T19:30:28.360Z 2009-07-30T19:30:28.360Z The Squid max request HTTP header length should be set to an appropriate value CM-6 CCE-4503-9 2009-07-30T19:30:28.377Z 2009-07-30T19:30:28.377Z The Squid option to check for RFC compliant hostnames should be enabled or not as appropriate CM-6 CCE-3585-7 2009-07-30T19:30:28.390Z 2009-07-30T19:30:28.390Z The Squid option to ignore unknown nameservers should be enabled or not as appropriate CM-6 CM-7 CCE-4419-8 2009-07-30T19:30:28.407Z 2009-07-30T19:30:28.407Z The Squid max reply HTTP header length should be set to an appropriate value CM-6 CCE-3692-1 2009-07-30T19:30:28.420Z 2009-07-30T19:30:28.420Z The Squid EUID should be set to an appropriate user AC-3 CM-6 CCE-4459-4 2009-07-30T19:30:28.420Z 2009-07-30T19:30:28.420Z The Squid option to perform FTP sanity checks should be enabled or not as appropriate CM-6 CCE-4476-8 2009-07-30T19:30:28.437Z 2009-07-30T19:30:28.437Z The Squid GUID should be set to an appropriate group AC-3 CM-6 CCE-4181-4 2009-07-30T19:30:28.453Z 2009-07-30T19:30:28.453Z The Squid option to show proxy client IP addresses in HTTP headers should be enabled or disabled as appropriate AC-4 CM-6 CM-7 SC-7 CCE-4577-3 2009-07-30T19:30:28.467Z 2009-07-30T19:30:28.467Z The Squid option to log HTTP MIME headers should be enabled or disabled as appropriate CM-6 CM-7 CCE-4344-8 2009-07-30T19:30:28.483Z 2009-07-30T19:30:28.483Z The Squid option to allow underscores in hostnames should be enabled or disabled as appropriate CM-6 CCE-4494-1 2009-07-30T19:30:28.500Z 2009-07-30T19:30:28.500Z The Squid option to suppress the httpd version string should be enabled or disabled as appropriate CM-6 CCE-4511-2 2009-07-30T19:30:28.517Z 2009-07-30T19:30:28.517Z Squid should be configured to allow gss-http traffic or not as appropriate CM-7 CCE-4529-4 2009-07-30T19:30:28.547Z 2009-07-30T19:30:28.547Z Squid should be configured to allow https traffic or not as appropriate CM-7 CCE-3610-3 2009-07-30T19:30:28.563Z 2009-07-30T19:30:28.563Z Squid should be configured to allow wais traffic or not as appropriate CM-7 CCE-4466-9 2009-07-30T19:30:28.577Z 2009-07-30T19:30:28.577Z Squid should be configured to allow multiling http traffic or not as appropriate CM-7 CCE-4607-8 2009-07-30T19:30:28.593Z 2009-07-30T19:30:28.593Z Squid should be configured to allow http traffic or not as appropriate CM-7 CCE-4255-6 2009-07-30T19:30:28.610Z 2009-07-30T19:30:28.610Z Squid should be configured to allow ftp traffic or not as appropriate CM-7 CCE-4127-7 2009-07-30T19:30:28.627Z 2009-07-30T19:30:28.627Z Squid should be configured to allow gopher traffic or not as appropriate CM-7 CCE-4519-5 2009-07-30T19:30:28.640Z 2009-07-30T19:30:28.640Z Squid should be configured to allow filemaker traffic or not as appropriate CM-7 CCE-4413-1 2009-07-30T19:30:28.657Z 2009-07-30T19:30:28.657Z Squid proxy access to localhost should be allowed or denied as appropriate CM-7 CCE-4373-7 2009-07-30T19:30:28.670Z 2009-07-30T19:30:28.670Z Squid should be configured to allow http-mgmt traffic or not as appropriate CM-7 CCE-3765-5 2009-07-30T19:30:28.687Z 2009-07-30T19:30:28.687Z The snmpd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4404-0 2009-07-30T19:30:28.703Z 2009-07-30T19:30:28.703Z The net-smtp package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-5943-6 2009-07-30T19:30:28.733Z 2009-07-30T19:30:28.733Z /export/home should be configured on an appropriate filesystem partition SC-2 CCE-6771-0 2009-07-30T19:30:28.750Z 2009-07-30T19:30:28.750Z /var should be configured on an appropriate filesystem partition SC-2 CCE-6723-1 2009-07-30T19:30:28.767Z 2009-07-30T19:30:28.767Z /opt should be configured on an appropriate filesystem partition SC-2 CCE-6505-2 2009-07-30T19:30:28.767Z 2009-07-30T19:30:28.767Z The shell for the root account should be located on the appropriate filesystem AC-6 CM-5 CM-6 CM-7 CCE-6725-6 2009-07-30T19:30:28.780Z 2009-07-30T19:30:28.780Z Core dump size limits should be set appropriately SC-5 CCE-5779-4 2009-07-30T19:30:28.813Z 2009-07-30T19:30:28.813Z The read-only SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-6193-7 2009-07-30T19:30:28.827Z 2009-07-30T19:30:28.827Z The read/write SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-6162-2 2009-07-30T19:30:28.843Z 2009-07-30T19:30:28.843Z DEPRECATED. CCE-6074-9 2009-07-30T19:30:28.843Z 2009-07-30T19:30:28.843Z Password policy should ban or allow words found in a dictionary as appropriate. IA-5 CCE-6382-6 2009-07-30T19:30:28.860Z 2009-07-30T19:30:28.860Z Password policy should enforce the correct amount of special characters IA-5 CCE-6228-1 2009-07-30T19:30:28.890Z 2009-07-30T19:30:28.890Z Password policy should enforce or not enforce the requirement to have mixed case passwords as appropriate. IA-5 CCE-6386-7 2009-07-30T19:30:28.907Z 2009-07-30T19:30:28.907Z The minimum password age should be set as appropriate AC-3 CM-6 CM-7 IA-5 CCE-5781-0 2009-07-30T19:30:28.920Z 2009-07-30T19:30:28.920Z The minimum required password length should be set as appropriate AC-3 CM-6 CM-7 IA-5 CCE-6529-2 2009-07-30T19:30:28.937Z 2009-07-30T19:30:28.937Z Password history should be saved for an appropriate number of password changes IA-5 CCE-6106-9 2009-07-30T19:30:28.953Z 2009-07-30T19:30:28.953Z The number of consecutive failed login attempts required to trigger a lockout should be set as appropriate AC-7 CCE-5787-7 2009-07-30T19:30:28.967Z 2009-07-30T19:30:28.967Z Login access to accounts without passwords should be enabled or disabled as appropriate AC-3 CM-6 IA-5 CCE-5989-9 2009-07-30T19:30:28.983Z 2009-07-30T19:30:28.983Z New users should be required or not required to change their password on first login as appropriate AC-3 CM-6 CCE-6694-4 2009-07-30T19:30:29.000Z 2009-07-30T19:30:29.000Z Access to single-user mode (maintainence mode) should require the root password or not as appropriate AC-3 AC-6 CCE-6711-6 2009-07-30T19:30:29.000Z 2009-07-30T19:30:29.000Z The delay between failed logins should be set as appropriate AC-3 CM-6 CM-7 CCE-6178-8 2009-07-30T19:30:29.017Z 2009-07-30T19:30:29.017Z All files should be owned by an existing account or not as appropriate. AC-3 CM-6 CCE-6015-2 2009-07-30T19:30:29.030Z 2009-07-30T19:30:29.030Z All files should be owned by an existing group or not as appropriate. AC-3 CM-6 CCE-6398-2 2009-07-30T19:30:29.047Z 2009-07-30T19:30:29.047Z The console login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-5869-3 2009-07-30T19:30:29.063Z 2009-07-30T19:30:29.063Z The SSH login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6774-4 2009-07-30T19:30:29.077Z 2009-07-30T19:30:29.077Z The telnet login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6616-7 2009-07-30T19:30:29.093Z 2009-07-30T19:30:29.093Z The ftp login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-5792-7 2009-07-30T19:30:29.110Z 2009-07-30T19:30:29.110Z The graphical login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6590-4 2009-07-30T19:30:29.127Z 2009-07-30T19:30:29.127Z Accounts other than root should be allowed to have the UID 0 or not as appropriate AC-2 CCE-6436-0 2009-07-30T19:30:29.140Z 2009-07-30T19:30:29.140Z Accounts other than root and locked system accounts should be allowed to have a GID of 0 or not as appropriate AC-2 CCE-5827-1 2009-07-30T19:30:29.157Z 2009-07-30T19:30:29.157Z Each account should be assigned a unique UID or not as appropriate AC-3 CM-6 CCE-6779-3 2009-07-30T19:30:29.170Z 2009-07-30T19:30:29.170Z The ftp account should exist or not as appropriate AC-3 CM-6 CCE-6735-5 2009-07-30T19:30:29.187Z 2009-07-30T19:30:29.187Z Login accounts should include an appropriate GECOS identifier or no GECOS identifier AC-3 CM-6 CCE-6532-6 2009-07-30T19:30:29.203Z 2009-07-30T19:30:29.203Z The screen lock should activate after an appropriate period of inactivity AC-1 AC-3 CM-6 CM-7 CCE-6739-7 2009-07-30T19:30:29.217Z 2009-07-30T19:30:29.217Z File permissions should be set appropriately for all shell executables. AC-3 CM-6 CCE-6316-4 2009-07-30T19:30:29.233Z 2009-07-30T19:30:29.233Z Remote (serial) consoles should be enabled or disabled as appropriate. AC-1 SC-7 CCE-5793-5 2009-07-30T19:30:29.250Z 2009-07-30T19:30:29.250Z Root logins should be restricted to the console or not as appropriate. AC-1 SC-7 CCE-6676-1 2009-07-30T19:30:29.267Z 2009-07-30T19:30:29.267Z .netrc files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6707-4 2009-07-30T19:30:29.280Z 2009-07-30T19:30:29.280Z .rhosts files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6266-1 2009-07-30T19:30:29.297Z 2009-07-30T19:30:29.297Z .shosts files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6487-3 2009-07-30T19:30:29.313Z 2009-07-30T19:30:29.313Z The /etc/hosts.equiv file should exist or not as appropriate. AC-3 CM-6 CM-7 CCE-6521-9 2009-07-30T19:30:29.327Z 2012-01-05T04:34:31.237Z The use of NIS special characters (+ or -) in the first field of the /etc/passwd file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-5865-1 2009-07-30T19:30:29.343Z 2012-01-05T04:34:31.283Z The use of NIS special characters (+ or -) in the first field of the /etc/shadow file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-6239-8 2009-07-30T19:30:29.360Z 2012-01-05T04:34:31.347Z The use of NIS special characters (+ or -) in the first field of the /etc/group file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-6556-5 2009-07-30T19:30:29.377Z 2009-07-30T19:30:29.377Z The /etc/shells file should exist or not as appropriate CM-6 CCE-5795-0 2009-07-30T19:30:29.390Z 2009-07-30T19:30:29.390Z Shells referenced in /etc/passwd should be included in /etc/shells or not as appropriate CM-6 CCE-6772-8 2009-07-30T19:30:29.407Z 2009-07-30T19:30:29.407Z Groups referenced in /etc/passwd should be included in /etc/group or not as appropriate. AC-2 CCE-6662-1 2009-07-30T19:30:29.420Z 2009-07-30T19:30:29.420Z The home directory for the root account should be set appropriately. AC-3 CM-6 CCE-5814-9 2009-07-30T19:30:29.420Z 2009-07-30T19:30:29.420Z The home directory for each user account should be set appropriately. AC-3 CM-6 CCE-6496-4 2009-07-30T19:30:29.437Z 2009-07-30T19:30:29.437Z Home directories referenced in /etc/passwd should exist or not as appropriate AC-3 CM-6 CCE-6716-5 2009-07-30T19:30:29.453Z 2009-07-30T19:30:29.453Z All device files should be located inside an appropriate path AC-6 CCE-6627-4 2009-07-30T19:30:29.467Z 2009-07-30T19:30:29.467Z The ntpd service should be enabled or disabled as appropriate. AU-8 CM-6 CM-7 CCE-5971-7 2009-07-30T19:30:29.483Z 2009-07-30T19:30:29.483Z The Network Time Protocol (ntp) synchronization server should be set appropriately. AU-8 CM-6 CCE-6808-0 2009-07-30T19:30:29.500Z 2009-07-30T19:30:29.500Z All logon attempts should be logged or not logged as appropriate AC-3 CM-6 CCE-5966-7 2009-07-30T19:30:29.517Z 2009-07-30T19:30:29.517Z All su (switch user) activity should be logged or not as appropriate AC-3 CM-6 CCE-6812-2 2009-07-30T19:30:29.530Z 2009-07-30T19:30:29.530Z Filesystem logging/journaling should be performed or not as appropriate AU-2 CCE-6160-6 2009-07-30T19:30:29.547Z 2009-07-30T19:30:29.547Z Automount should be enabled or disabled as appropriate CM-6 CM-7 CCE-6781-9 2009-07-30T19:30:29.563Z 2009-07-30T19:30:29.563Z Source-routed packets should be accepted or rejected as appropriate. CM-7 CCE-5818-0 2009-07-30T19:30:29.577Z 2009-07-30T19:30:29.577Z Response to ICMP timestamp requests should be enabled or disabled as appropriate CM-7 CCE-6164-8 2009-07-30T19:30:29.593Z 2009-07-30T19:30:29.593Z Response to ICMP timestamp broadcast requests should be enabled or disabled as appropriate CM-7 CCE-5823-0 2009-07-30T19:30:29.610Z 2009-07-30T19:30:29.610Z Response to ICMP echo (ping) requests should be enabled or disabled as appropriate CM-7 CCE-6574-8 2009-07-30T19:30:29.610Z 2009-07-30T19:30:29.610Z Executable stack should be enabled or disabled as appropriate CM-7 CCE-6340-4 2009-07-30T19:30:29.627Z 2009-07-30T19:30:29.627Z The default gateway should be set appropriately. CM-7 CCE-5826-3 2009-07-30T19:30:29.640Z 2009-07-30T19:30:29.640Z The inetd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6720-7 2009-07-30T19:30:29.657Z 2009-07-30T19:30:29.657Z echo service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6795-9 2009-07-30T19:30:29.670Z 2009-07-30T19:30:29.670Z netstat service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6623-3 2009-07-30T19:30:29.687Z 2009-07-30T19:30:29.687Z rcp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6288-5 2009-07-30T19:30:29.703Z 2009-07-30T19:30:29.703Z chargen service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6755-3 2009-07-30T19:30:29.717Z 2009-07-30T19:30:29.717Z finger service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5831-3 2009-07-30T19:30:29.733Z 2009-07-30T19:30:29.733Z tftpd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6478-2 2009-07-30T19:30:29.750Z 2009-07-30T19:30:29.750Z walld service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6821-3 2009-07-30T19:30:29.767Z 2009-07-30T19:30:29.767Z rstatd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6482-4 2009-07-30T19:30:29.780Z 2009-07-30T19:30:29.780Z sprayd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6543-3 2009-07-30T19:30:29.797Z 2009-07-30T19:30:29.797Z rusersd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6636-5 2009-07-30T19:30:29.813Z 2009-07-30T19:30:29.813Z rlogin service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6418-8 2009-07-30T19:30:29.827Z 2009-07-30T19:30:29.827Z rsh service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6119-2 2009-07-30T19:30:29.843Z 2009-07-30T19:30:29.843Z ftp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6634-0 2009-07-30T19:30:29.860Z 2009-07-30T19:30:29.860Z telnet service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6339-6 2009-07-30T19:30:29.860Z 2009-07-30T19:30:29.860Z DEPRECATED. CCE-6823-9 2009-07-30T19:30:29.877Z 2009-07-30T19:30:29.877Z inn service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5845-3 2009-07-30T19:30:29.890Z 2009-07-30T19:30:29.890Z uucp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6806-4 2009-07-30T19:30:29.907Z 2009-07-30T19:30:29.907Z rexec service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6325-5 2009-07-30T19:30:29.920Z 2009-07-30T19:30:29.920Z inetd logging should be enabled or disabled as appropriate AU-2 CCE-5920-4 2009-07-30T19:30:29.937Z 2009-07-30T19:30:29.937Z font-service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6766-0 2009-07-30T19:30:29.953Z 2009-07-30T19:30:29.953Z imap2 service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6614-2 2009-07-30T19:30:29.967Z 2009-07-30T19:30:29.967Z pop3 service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6728-0 2009-07-30T19:30:29.983Z 2009-07-30T19:30:29.983Z ident service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6494-9 2009-07-30T19:30:30.000Z 2009-07-30T19:30:30.000Z rexd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6834-6 2009-07-30T19:30:30.017Z 2009-07-30T19:30:30.017Z sadmin service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6777-7 2009-07-30T19:30:30.030Z 2009-07-30T19:30:30.030Z daytime service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6305-7 2009-07-30T19:30:30.047Z 2009-07-30T19:30:30.047Z dtspc (cde-spc) service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6776-9 2009-07-30T19:30:30.063Z 2009-07-30T19:30:30.063Z rquotad service should be enabled or disabled as appropriate CM-6 CM-7 CCE-5857-8 2009-07-30T19:30:30.077Z 2009-07-30T19:30:30.077Z cmsd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6154-9 2009-07-30T19:30:30.093Z 2009-07-30T19:30:30.093Z tooltalk service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6334-7 2009-07-30T19:30:30.110Z 2009-07-30T19:30:30.110Z xdmcp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6810-6 2009-07-30T19:30:30.127Z 2009-07-30T19:30:30.127Z discard service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6639-9 2009-07-30T19:30:30.140Z 2009-07-30T19:30:30.140Z DEPRECATED. CCE-5965-9 2009-07-30T19:30:30.157Z 2009-07-30T19:30:30.157Z vino-server service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6484-0 2009-07-30T19:30:30.170Z 2009-07-30T19:30:30.170Z The bind service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6704-1 2009-07-30T19:30:30.187Z 2009-07-30T19:30:30.187Z The version string reported by the bind service should be configured appropriately. SC-7 CCE-5866-9 2009-07-30T19:30:30.203Z 2009-07-30T19:30:30.203Z SSH Protocol v1 should be enabled or disabled as appropriate CM-7 CCE-6682-9 2009-07-30T19:30:30.217Z 2009-07-30T19:30:30.217Z TCP_WRAPPERS should be enabled or disabled as appropriate AC-3 CM-6 CM-7 SC-5 CCE-6651-4 2009-07-30T19:30:30.233Z 2009-07-30T19:30:30.233Z SNMP version 1 should be enabled or disabled as appropriate AC-3 CM-6 CCE-6686-0 2009-07-30T19:30:30.250Z 2009-07-30T19:30:30.250Z The nfsd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6655-5 2009-07-30T19:30:30.267Z 2009-07-30T19:30:30.267Z The mountd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6754-6 2009-07-30T19:30:30.280Z 2009-07-30T19:30:30.280Z The statd service should be enabled or disabled as appropriate CM-6 CCE-6345-3 2009-07-30T19:30:30.297Z 2009-07-30T19:30:30.297Z The lockd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6816-3 2009-07-30T19:30:30.313Z 2009-07-30T19:30:30.313Z NFS should be configured to respond or not as appropriate to client requests that do not include a user id . AC-1 AC-2 IA-2 CCE-6842-9 2009-07-30T19:30:30.327Z 2009-07-30T19:30:30.327Z NFS should be configured to respond or not as appropriate to client requests that do not originate from a privileged port. AC-1 AC-2 CCE-6807-2 2009-07-30T19:30:30.343Z 2009-07-30T19:30:30.343Z NFS should be configured with appropriate authentication methods AC-3 CM-6 CCE-6573-0 2009-07-30T19:30:30.360Z 2009-07-30T19:30:30.360Z The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports. CM-6 CM-7 CCE-5874-3 2009-07-30T19:30:30.377Z 2009-07-30T19:30:30.377Z The nosuid option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-6775-1 2009-07-30T19:30:30.390Z 2009-07-30T19:30:30.390Z Sendmail should be enabled or disabled as appropriate CM-6 CCE-6537-5 2009-07-30T19:30:30.407Z 2009-07-30T19:30:30.407Z The sendmail banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6740-5 2009-07-30T19:30:30.420Z 2009-07-30T19:30:30.420Z The decode sendmail alias should be enabled or disabled as appropriate. CM-7 CCE-6874-2 2009-07-30T19:30:30.453Z 2009-07-30T19:30:30.453Z .forward files should be allowed or disallowed as appropriate for all users AC-3 CM-6 CCE-6843-7 2009-07-30T19:30:30.467Z 2009-07-30T19:30:30.467Z Programs executed through the aliases file should be owned by an appropriate user AC-3 CM-6 CCE-6654-8 2009-07-30T19:30:30.483Z 2009-07-30T19:30:30.483Z Programs executed through the aliases file should reside a directory with an appropriate user owner AC-3 CM-6 CCE-6063-2 2009-07-30T19:30:30.500Z 2009-07-30T19:30:30.500Z Sendmail vrfy command should be allowed or not as appropriate CM-6 CCE-6526-8 2009-07-30T19:30:30.517Z 2009-07-30T19:30:30.517Z Sendmail expn command should be allowed or not as appropriate CM-6 CCE-5880-0 2009-07-30T19:30:30.530Z 2009-07-30T19:30:30.530Z Sendmail should be configured with an appropriate logging level CM-6 CCE-6756-1 2009-07-30T19:30:30.547Z 2009-07-30T19:30:30.547Z Sendmail help command should be allowed or not as appropriate CM-6 CCE-6853-6 2009-07-30T19:30:30.563Z 2009-07-30T19:30:30.563Z NIS+ server should operate at an appropriate security level CM-6 CM-7 CCE-6513-6 2009-07-30T19:30:30.577Z 2009-07-30T19:30:30.577Z X-Windows should be enabled or disabled as appropriate CM-6 CM-7 CCE-6588-8 2009-07-30T19:30:30.593Z 2009-07-30T19:30:30.593Z Authorized X-clients should be listed or not in the X*.hosts file as appropriate AC-3 CM-6 CCE-5914-7 2009-07-30T19:30:30.610Z 2009-07-30T19:30:30.610Z X-Windows should write .Xauthority files to users' home directories or not as appropriate CM-6 CM-7 CCE-5881-8 2009-07-30T19:30:30.627Z 2009-07-30T19:30:30.627Z X11 forwarding via SSH should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6169-7 2009-07-30T19:30:30.640Z 2009-07-30T19:30:30.640Z Samba should be enabled or disabled as appropriate AC-3 CM-6 CCE-6811-4 2009-07-30T19:30:30.657Z 2009-07-30T19:30:30.657Z Samba 'hosts allow' option should be configured with an appropriate set of networks AC-3 CM-6 CM-7 SC-5 CCE-6763-7 2009-07-30T19:30:30.670Z 2009-07-30T19:30:30.670Z Samba 'security option' option should be set as appropriate AC-3 CM-6 CCE-6605-0 2009-07-30T19:30:30.687Z 2009-07-30T19:30:30.687Z Samba 'encrypt' passwords option should be set as appropriate AC-3 CM-6 CM-7 SC-5 CCE-6749-6 2009-07-30T19:30:30.703Z 2009-07-30T19:30:30.703Z Samba 'smb passwd file' option should be set to an appropriate password file or no password file AC-3 CM-6 CCE-6216-6 2009-07-30T19:30:30.717Z 2009-07-30T19:30:30.717Z IPv6 should be enabled or disabled as appropriate CM-6 CM-7 CCE-6467-5 2009-07-30T19:30:30.733Z 2009-07-30T19:30:30.733Z The "at" utility directory permissions should be set as appropriate AC-3 CM-6 CCE-6687-8 2009-07-30T19:30:30.750Z 2009-07-30T19:30:30.750Z at.allow file permissions should be set appropriately AC-3 CM-6 CCE-6657-1 2009-07-30T19:30:30.767Z 2009-07-30T19:30:30.767Z at.deny file permissions should be set appropriately AC-3 CM-6 CCE-6097-0 2009-07-30T19:30:30.780Z 2009-07-30T19:30:30.780Z Cron directory permissions should be set appropriately AC-3 CM-6 CCE-6784-3 2009-07-30T19:30:30.797Z 2009-07-30T19:30:30.797Z Crontab directory permissions should be set appropriately AC-3 CM-6 CCE-6498-0 2009-07-30T19:30:30.813Z 2009-07-30T19:30:30.813Z Cron log file permissions should be set appropriately AC-3 CM-6 CCE-6533-4 2009-07-30T19:30:30.827Z 2009-07-30T19:30:30.827Z cron.allow file permissions should be set appropriately AC-3 CM-6 CCE-6736-3 2009-07-30T19:30:30.843Z 2009-07-30T19:30:30.843Z cron.deny file permissions should be set appropriately AC-3 CM-6 CCE-6652-2 2009-07-30T19:30:30.860Z 2009-07-30T19:30:30.860Z Crontab file permissions should be set appropriately AC-3 CM-6 CCE-6832-0 2009-07-30T19:30:30.877Z 2009-07-30T19:30:30.877Z /dev/kmem file permissions should be set appropriately AC-3 CM-6 CCE-6445-1 2009-07-30T19:30:30.890Z 2009-07-30T19:30:30.890Z /dev/mem file permissions should be set appropriately AC-3 CM-6 CCE-6356-0 2009-07-30T19:30:30.907Z 2009-07-30T19:30:30.907Z /dev/null file permissions should be set appropriately AC-3 CM-6 CCE-5892-5 2009-07-30T19:30:30.920Z 2009-07-30T19:30:30.920Z resolv.conf file permissions should be set appropriately AC-3 CM-6 CCE-5895-8 2009-07-30T19:30:30.937Z 2009-07-30T19:30:30.937Z /etc/named.conf file permissions should be set appropriately AC-3 CM-6 CCE-6033-5 2009-07-30T19:30:30.953Z 2009-07-30T19:30:30.953Z File permissions should be set appropriately for all user home directories. AC-3 CM-6 CCE-6377-6 2009-07-30T19:30:30.967Z 2009-07-30T19:30:30.967Z /etc/exports file permissions should be set appropriately AC-3 CM-6 CCE-6751-2 2009-07-30T19:30:30.983Z 2009-07-30T19:30:30.983Z /usr/bin/at file permissions should be set appropriately AC-3 CM-6 CCE-6848-6 2009-07-30T19:30:31.000Z 2009-07-30T19:30:31.000Z /usr/bin/rdist file permissions should be set appropriately AC-3 CM-6 CCE-6883-3 2009-07-30T19:30:31.017Z 2009-07-30T19:30:31.017Z /usr/sbin/sync file permissions should be set appropriately AC-3 CM-6 CCE-6724-9 2009-07-30T19:30:31.030Z 2009-07-30T19:30:31.030Z Superuser account home directories' permissions should be set appropriately AC-3 CM-6 CCE-6663-9 2009-07-30T19:30:31.047Z 2009-07-30T19:30:31.047Z /etc/samba/smb.conf file permissions should be set appropriately AC-3 CM-6 CCE-6570-6 2009-07-30T19:30:31.063Z 2009-07-30T19:30:31.063Z smbpassword executable permissions should be set appropriately AC-3 CM-6 CCE-6667-0 2009-07-30T19:30:31.077Z 2009-07-30T19:30:31.077Z Aliases file permissions should be set appropriately AC-3 CM-6 CCE-5897-4 2009-07-30T19:30:31.093Z 2009-07-30T19:30:31.093Z File permissions should be set as appropriate for the log file configured to capture critical sendmail messages. AC-3 CM-6 CCE-6380-0 2009-07-30T19:30:31.110Z 2009-07-30T19:30:31.110Z All files executed through /etc/aliases file entries should have file permissions set appropriately AC-3 CM-6 CCE-5901-4 2009-07-30T19:30:31.127Z 2009-07-30T19:30:31.127Z /bin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6142-4 2009-07-30T19:30:31.140Z 2009-07-30T19:30:31.140Z /bin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-5902-2 2009-07-30T19:30:31.157Z 2009-07-30T19:30:31.157Z /bin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-6544-1 2009-07-30T19:30:31.170Z 2009-07-30T19:30:31.170Z The /bin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6830-4 2009-07-30T19:30:31.187Z 2009-07-30T19:30:31.187Z /bin/sh file permissions should be set appropriately AC-3 CM-6 CCE-6407-1 2009-07-30T19:30:31.203Z 2009-07-30T19:30:31.203Z /bin/bash file permissions should be set appropriately AC-3 CM-6 CCE-6693-6 2009-07-30T19:30:31.217Z 2009-07-30T19:30:31.217Z /sbin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6750-4 2009-07-30T19:30:31.233Z 2009-07-30T19:30:31.233Z /sbin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6719-9 2009-07-30T19:30:31.250Z 2009-07-30T19:30:31.250Z /sbin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-6506-0 2009-07-30T19:30:31.267Z 2009-07-30T19:30:31.267Z The /sbin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6598-7 2009-07-30T19:30:31.280Z 2009-07-30T19:30:31.280Z /sbin/sh file permissions should be set appropriately AC-3 CM-6 CCE-6593-8 2009-07-30T19:30:31.297Z 2009-07-30T19:30:31.297Z /sbin/bash file permissions should be set appropriately AC-3 CM-6 CCE-6188-7 2009-07-30T19:30:31.313Z 2009-07-30T19:30:31.313Z /usr/bin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6034-3 2009-07-30T19:30:31.327Z 2009-07-30T19:30:31.327Z /usr/bin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6664-7 2009-07-30T19:30:31.343Z 2009-07-30T19:30:31.343Z /usr/bin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-6131-7 2009-07-30T19:30:31.360Z 2009-07-30T19:30:31.360Z The /usr/bin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6897-3 2009-07-30T19:30:31.377Z 2009-07-30T19:30:31.377Z /usr/bin/sh file permissions should be set appropriately AC-3 CM-6 CCE-6884-1 2009-07-30T19:30:31.390Z 2009-07-30T19:30:31.390Z /usr/bin/bash file permissions should be set appropriately AC-3 CM-6 CCE-6584-7 2009-07-30T19:30:31.407Z 2009-07-30T19:30:31.407Z snmpd.conf file permissions should be set appropriately AC-3 CM-6 CCE-6879-1 2009-07-30T19:30:31.420Z 2009-07-30T19:30:31.420Z /tmp file permissions should be set appropriately AC-3 CM-6 CCE-6461-8 2009-07-30T19:30:31.437Z 2009-07-30T19:30:31.437Z /usr/tmp file permissions should be set appropriately AC-3 CM-6 CCE-6742-1 2009-07-30T19:30:31.453Z 2009-07-30T19:30:31.453Z traceroute executable file permissions should be set appropriately AC-3 CM-6 CCE-6839-5 2009-07-30T19:30:31.467Z 2009-07-30T19:30:31.467Z .Xauthority file permissions should be set appropriately for all users. AC-3 CM-6 CCE-6773-6 2009-07-30T19:30:31.483Z 2009-07-30T19:30:31.483Z /etc/aliases file permissions should be set appropriately AC-3 CM-6 CCE-6429-5 2009-07-30T19:30:31.500Z 2009-07-30T19:30:31.500Z /etc/cron.d/at.allow file permissions should be set appropriately AC-3 CM-6 CCE-6901-3 2009-07-30T19:30:31.517Z 2009-07-30T19:30:31.517Z /etc/cron.d/cron.allow file permissions should be set appropriately AC-3 CM-6 CCE-5908-9 2009-07-30T19:30:31.530Z 2009-07-30T19:30:31.530Z /etc/csh file permissions should be set appropriately AC-3 CM-6 CCE-6875-9 2009-07-30T19:30:31.547Z 2009-07-30T19:30:31.547Z /etc/default/* file permissions should be set appropriately AC-3 CM-6 CCE-6347-9 2009-07-30T19:30:31.563Z 2009-07-30T19:30:31.563Z /etc/default/login file permissions should be set appropriately AC-3 CM-6 CCE-5916-2 2009-07-30T19:30:31.577Z 2009-07-30T19:30:31.577Z /etc/dfs file permissions should be set appropriately AC-3 CM-6 CCE-6714-0 2009-07-30T19:30:31.610Z 2009-07-30T19:30:31.610Z /etc/fs file permissions should be set appropriately AC-3 CM-6 CCE-5924-6 2009-07-30T19:30:31.610Z 2009-07-30T19:30:31.627Z The /etc/ftpusers file should exist or not as appropriate AC-3 CM-6 CM-7 CCE-6814-8 2009-07-30T19:30:31.627Z 2009-07-30T19:30:31.627Z /etc/host.lpd file permissions should be set appropriately AC-3 CM-6 CCE-6801-5 2009-07-30T19:30:31.640Z 2009-07-30T19:30:31.640Z /etc/hostname* file permissions should be set appropriately AC-3 CM-6 CCE-6695-1 2009-07-30T19:30:31.657Z 2009-07-30T19:30:31.657Z /etc/hosts file permissions should be set appropriately AC-3 CM-6 CCE-6893-2 2009-07-30T19:30:31.687Z 2009-07-30T19:30:31.687Z /etc/inetd.conf file permissions should be set appropriately AC-3 CM-6 CCE-6722-3 2009-07-30T19:30:31.703Z 2009-07-30T19:30:31.703Z /etc/issue file permissions should be set appropriately AC-3 CM-6 CCE-5928-7 2009-07-30T19:30:31.717Z 2009-07-30T19:30:31.717Z /etc/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6857-7 2009-07-30T19:30:31.733Z 2009-07-30T19:30:31.733Z /etc/ksh file permissions should be set appropriately AC-3 CM-6 CCE-5935-2 2009-07-30T19:30:31.750Z 2009-07-30T19:30:31.750Z /etc/mail/aliases file permissions should be set appropriately AC-3 CM-6 CCE-6849-4 2009-07-30T19:30:31.767Z 2009-07-30T19:30:31.767Z /etc/motd file permissions should be set appropriately AC-3 CM-6 CCE-5948-5 2009-07-30T19:30:31.780Z 2009-07-30T19:30:31.780Z /etc/netconfig file permissions should be set appropriately AC-3 CM-6 CCE-5958-4 2009-07-30T19:30:31.797Z 2009-07-30T19:30:31.797Z /etc/notrouter file permissions should be set appropriately AC-3 CM-6 CCE-6788-4 2009-07-30T19:30:31.813Z 2009-07-30T19:30:31.813Z /etc/pam.conf file permissions should be set appropriately AC-3 CM-6 CCE-6757-9 2009-07-30T19:30:31.827Z 2009-07-30T19:30:31.827Z /etc/passwd file permissions should be set appropriately AC-3 CM-6 CCE-6669-6 2009-07-30T19:30:31.843Z 2009-07-30T19:30:31.843Z The /etc/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6872-6 2009-07-30T19:30:31.860Z 2009-07-30T19:30:31.860Z /etc/security file permissions should be set appropriately AC-3 CM-6 CCE-6889-0 2009-07-30T19:30:31.877Z 2009-07-30T19:30:31.877Z /etc/services file permissions should be set appropriately AC-3 CM-6 CCE-6717-3 2009-07-30T19:30:31.890Z 2009-07-30T19:30:31.890Z /etc/sh file permissions should be set appropriately AC-3 CM-6 CCE-6827-0 2009-07-30T19:30:31.907Z 2009-07-30T19:30:31.907Z /etc/shadow file permissions should be set appropriately AC-3 CM-6 CCE-6464-2 2009-07-30T19:30:31.920Z 2009-07-30T19:30:31.920Z /etc/syslog.conf file permissions should be set appropriately AC-3 CM-6 CCE-5960-0 2009-07-30T19:30:31.953Z 2009-07-30T19:30:31.953Z /etc/ufs file permissions should be set appropriately AC-3 CM-6 CCE-6809-8 2009-07-30T19:30:31.983Z 2009-07-30T19:30:31.983Z /etc/vfstab file permissions should be set appropriately AC-3 CM-6 CCE-5967-5 2009-07-30T19:30:32.000Z 2009-07-30T19:30:32.000Z /etc/vold.conf file permissions should be set appropriately AC-3 CM-6 CCE-6385-9 2009-07-30T19:30:32.017Z 2009-07-30T19:30:32.017Z /var/adm/loginlog file permissions should be set appropriately AC-3 CM-6 CCE-6005-3 2009-07-30T19:30:32.030Z 2009-07-30T19:30:32.030Z /var/adm/messages file permissions should be set appropriately AC-3 CM-6 CCE-6226-5 2009-07-30T19:30:32.047Z 2009-07-30T19:30:32.047Z /var/adm/sulog file permissions should be set appropriately AC-3 CM-6 CCE-6137-4 2009-07-30T19:30:32.063Z 2009-07-30T19:30:32.063Z /var/adm/utmp file permissions should be set appropriately AC-3 CM-6 CCE-6732-2 2009-07-30T19:30:32.093Z 2009-07-30T19:30:32.093Z /var/adm/wtmp file permissions should be set appropriately AC-3 CM-6 CCE-6789-2 2009-07-30T19:30:32.110Z 2009-07-30T19:30:32.110Z /var/adm/authlog file permissions should be set appropriately AC-3 CM-6 CCE-6855-1 2009-07-30T19:30:32.127Z 2009-07-30T19:30:32.127Z /var/adm/syslog file permissions should be set appropriately AC-3 CM-6 CCE-6824-7 2009-07-30T19:30:32.140Z 2009-07-30T19:30:32.140Z /var/mail file permissions should be set appropriately AC-3 CM-6 CCE-6965-8 2009-07-30T19:30:32.170Z 2009-07-30T19:30:32.170Z /var/tmp file permissions should be set appropriately AC-3 CM-6 CCE-6916-1 2009-07-30T19:30:32.187Z 2009-07-30T19:30:32.187Z /usr/lib/pt_chmod file permissions should be set appropriately AC-3 CM-6 CCE-6745-4 2009-07-30T19:30:32.203Z 2009-07-30T19:30:32.203Z /usr/lib/embedded_us file permissions should be set appropriately AC-3 CM-6 CCE-6295-0 2009-07-30T19:30:32.233Z 2009-07-30T19:30:32.233Z /usr/lib/sendmail file permissions should be set appropriately AC-3 CM-6 CCE-6123-4 2009-07-30T19:30:32.250Z 2009-07-30T19:30:32.250Z /usr/kerberos/bin/rsh file permissions should be set appropriately AC-3 CM-6 CCE-6449-3 2009-07-30T19:30:32.267Z 2009-07-30T19:30:32.267Z /var/spool/mail file permissions should be set appropriately AC-3 CM-6 CCE-6718-1 2009-07-30T19:30:32.280Z 2009-07-30T19:30:32.280Z smbpassword file permissions should be set appropriately AC-3 CM-6 CCE-6815-5 2009-07-30T19:30:32.297Z 2009-07-30T19:30:32.297Z At directory should be owned by an appropriate user AC-3 CM-6 CCE-6967-4 2009-07-30T19:30:32.313Z 2009-07-30T19:30:32.313Z At directory should be owned by an appropriate group AC-3 CM-6 CCE-6403-0 2009-07-30T19:30:32.327Z 2009-07-30T19:30:32.327Z at.allow file should be owned by an appropriate user AC-3 CM-6 CCE-6747-0 2009-07-30T19:30:32.343Z 2009-07-30T19:30:32.343Z at.allow file should be owned by an appropriate group AC-3 CM-6 CCE-6909-6 2009-07-30T19:30:32.360Z 2009-07-30T19:30:32.360Z at.deny file should be owned by an appropriate user AC-3 CM-6 CCE-6125-9 2009-07-30T19:30:32.377Z 2009-07-30T19:30:32.377Z at.deny file should be owned by an appropriate group AC-3 CM-6 CCE-6878-3 2009-07-30T19:30:32.390Z 2009-07-30T19:30:32.390Z Cron directories should be owned by an appropriate user AC-3 CM-6 CCE-5998-0 2009-07-30T19:30:32.407Z 2009-07-30T19:30:32.407Z Cron directories should be owned by an appropriate group AC-3 CM-6 CCE-6971-6 2009-07-30T19:30:32.420Z 2009-07-30T19:30:32.420Z Crontab directories should be owned by an appropriate user AC-3 CM-6 CCE-6613-4 2009-07-30T19:30:32.437Z 2009-07-30T19:30:32.437Z Crontab directories should be owned by an appropriate group AC-3 CM-6 CCE-6006-1 2009-07-30T19:30:32.453Z 2009-07-30T19:30:32.453Z cron.allow file should be owned by an appropriate user AC-3 CM-6 CCE-6589-6 2009-07-30T19:30:32.467Z 2009-07-30T19:30:32.467Z cron.allow file should be owned by an appropriate group AC-3 CM-6 CCE-6201-8 2009-07-30T19:30:32.483Z 2009-07-30T19:30:32.483Z cron.deny should be owned by an appropriate user AC-3 CM-6 CCE-6866-8 2009-07-30T19:30:32.500Z 2009-07-30T19:30:32.500Z cron.deny data should be owned by an appropriate group AC-3 CM-6 CCE-6791-8 2009-07-30T19:30:32.517Z 2009-07-30T19:30:32.517Z crontab files should be owned by an appropriate user AC-3 CM-6 CCE-6008-7 2009-07-30T19:30:32.530Z 2009-07-30T19:30:32.530Z crontab files should be owned by an appropriate group AC-3 CM-6 CCE-6907-0 2009-07-30T19:30:32.547Z 2009-07-30T19:30:32.547Z /etc/resolv.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6374-3 2009-07-30T19:30:32.563Z 2009-07-30T19:30:32.563Z /etc/resolv.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6938-5 2009-07-30T19:30:32.577Z 2009-07-30T19:30:32.577Z /etc/named.boot file should be owned by an appropriate user AC-3 CM-6 CCE-6019-4 2009-07-30T19:30:32.593Z 2009-07-30T19:30:32.593Z /etc/named.boot file should be owned by an appropriate group AC-3 CM-6 CCE-6825-4 2009-07-30T19:30:32.610Z 2009-07-30T19:30:32.610Z /etc/named.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6922-9 2009-07-30T19:30:32.627Z 2009-07-30T19:30:32.627Z /etc/named.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6770-2 2009-07-30T19:30:32.640Z 2009-07-30T19:30:32.640Z DEPRECATED. CCE-6863-5 2009-07-30T19:30:32.657Z 2009-07-30T19:30:32.657Z DEPRECATED. CCE-6036-8 2009-07-30T19:30:32.670Z 2009-07-30T19:30:32.670Z DEPRECATED. CCE-6994-8 2009-07-30T19:30:32.687Z 2009-07-30T19:30:32.687Z DEPRECATED. CCE-6946-8 2009-07-30T19:30:32.703Z 2009-07-30T19:30:32.703Z DEPRECATED. CCE-6963-3 2009-07-30T19:30:32.717Z 2009-07-30T19:30:32.717Z DEPRECATED. CCE-6822-1 2009-07-30T19:30:32.733Z 2009-07-30T19:30:32.733Z DEPRECATED. CCE-6962-5 2009-07-30T19:30:32.750Z 2009-07-30T19:30:32.750Z DEPRECATED. CCE-6416-2 2009-07-30T19:30:32.767Z 2009-07-30T19:30:32.767Z Each user home directory should be owned by an appropriate user. AC-3 CM-6 CCE-6244-8 2009-07-30T19:30:32.780Z 2009-07-30T19:30:32.780Z Each user home directory should be owned by an appropriate group. AC-3 CM-6 CCE-6958-3 2009-07-30T19:30:32.797Z 2009-07-30T19:30:32.797Z inetd.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6038-4 2009-07-30T19:30:32.813Z 2009-07-30T19:30:32.813Z inetd.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6804-9 2009-07-30T19:30:32.827Z 2009-07-30T19:30:32.827Z /etc/exports should be owned by an appropriate user AC-3 CM-6 CCE-6518-5 2009-07-30T19:30:32.843Z 2009-07-30T19:30:32.843Z /etc/exports should be owned by an appropriate user AC-3 CM-6 CCE-6989-8 2009-07-30T19:30:32.860Z 2009-07-30T19:30:32.860Z Exported files and directories should be owned by an appropriate user AC-3 CM-6 CCE-6896-5 2009-07-30T19:30:32.877Z 2009-07-30T19:30:32.877Z Exported files and directories should be owned by an appropriate user AC-3 CM-6 CCE-6209-1 2009-07-30T19:30:32.890Z 2009-07-30T19:30:32.890Z DEPRECATED. CCE-6997-1 2009-07-30T19:30:32.907Z 2009-07-30T19:30:32.907Z DEPRECATED. CCE-6838-7 2009-07-30T19:30:32.920Z 2009-07-30T19:30:32.920Z DEPRECATED. CCE-6790-0 2009-07-30T19:30:32.937Z 2009-07-30T19:30:32.937Z DEPRECATED. CCE-6982-3 2009-07-30T19:30:32.967Z 2009-07-30T19:30:32.967Z DEPRECATED. CCE-6968-2 2009-07-30T19:30:32.983Z 2009-07-30T19:30:32.983Z DEPRECATED. CCE-6986-4 2009-07-30T19:30:33.000Z 2009-07-30T19:30:33.000Z /etc/services file should be owned by an appropriate user AC-3 CM-6 CCE-6942-7 2009-07-30T19:30:33.017Z 2009-07-30T19:30:33.017Z /etc/services file should be owned by an appropriate group AC-3 CM-6 CCE-6726-4 2009-07-30T19:30:33.030Z 2009-07-30T19:30:33.030Z DEPRECATED. CCE-6924-5 2009-07-30T19:30:33.047Z 2009-07-30T19:30:33.047Z DEPRECATED. CCE-6769-4 2009-07-30T19:30:33.063Z 2009-07-30T19:30:33.063Z /etc/notrouter file should be owned by an appropriate user AC-3 CM-6 CCE-6796-7 2009-07-30T19:30:33.077Z 2009-07-30T19:30:33.077Z /etc/notrouter file should be owned by an appropriate group AC-3 CM-6 CCE-6637-3 2009-07-30T19:30:33.093Z 2009-07-30T19:30:33.093Z DEPRECATED. CCE-7018-5 2009-07-30T19:30:33.110Z 2009-07-30T19:30:33.110Z DEPRECATED. CCE-6987-2 2009-07-30T19:30:33.127Z 2009-07-30T19:30:33.127Z /etc/samba/smb.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6798-3 2009-07-30T19:30:33.140Z 2009-07-30T19:30:33.140Z /etc/samba/smb.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6705-8 2009-07-30T19:30:33.157Z 2009-07-30T19:30:33.157Z smbpasswd executable should be owned by an appropriate user AC-3 CM-6 CCE-6930-2 2009-07-30T19:30:33.170Z 2009-07-30T19:30:33.170Z smbpasswd executable should be owned by an appropriate group AC-3 CM-6 CCE-6819-7 2009-07-30T19:30:33.187Z 2009-07-30T19:30:33.187Z DEPRECATED. CCE-6647-2 2009-07-30T19:30:33.203Z 2009-07-30T19:30:33.203Z DEPRECATED. CCE-6974-0 2009-07-30T19:30:33.217Z 2009-07-30T19:30:33.217Z DEPRECATED. CCE-6898-1 2009-07-30T19:30:33.233Z 2009-07-30T19:30:33.233Z DEPRECATED. CCE-6854-4 2009-07-30T19:30:33.250Z 2009-07-30T19:30:33.250Z Programs executed through aliases file entries should be owned by an appropriate user AC-3 CM-6 CCE-6678-7 2009-07-30T19:30:33.267Z 2009-07-30T19:30:33.267Z Programs executed through aliases file entries should be owned by an appropriate group AC-3 CM-6 CCE-6914-6 2009-07-30T19:30:33.280Z 2009-07-30T19:30:33.280Z DEPRECATED. CCE-6446-9 2009-07-30T19:30:33.297Z 2009-07-30T19:30:33.297Z DEPRECATED. CCE-7006-0 2009-07-30T19:30:33.313Z 2009-07-30T19:30:33.313Z DEPRECATED. CCE-6350-3 2009-07-30T19:30:33.327Z 2009-07-30T19:30:33.327Z snmpd.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6261-2 2009-07-30T19:30:33.360Z 2009-07-30T19:30:33.360Z snmpd.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6040-0 2009-07-30T19:30:33.377Z 2009-07-30T19:30:33.377Z /etc/syslog.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6859-3 2009-07-30T19:30:33.390Z 2009-07-30T19:30:33.390Z /etc/syslog.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6701-7 2009-07-30T19:30:33.407Z 2009-07-30T19:30:33.407Z traceroute executable should be owned by an appropriate user AC-3 CM-6 CCE-6802-3 2009-07-30T19:30:33.420Z 2009-07-30T19:30:33.420Z traceroute executable should be owned by an appropriate group AC-3 CM-6 CCE-6098-8 2009-07-30T19:30:33.453Z 2009-07-30T19:30:33.453Z /usr/lib/sendmail file should be owned by an appropriate user AC-3 CM-6 CCE-6053-3 2009-07-30T19:30:33.467Z 2009-07-30T19:30:33.467Z /usr/lib/sendmail file should be owned by an appropriate group AC-3 CM-6 CCE-6700-9 2009-07-30T19:30:33.483Z 2009-07-30T19:30:33.483Z /etc/passwd file should be owned by an appropriate user AC-3 CM-6 CCE-6943-5 2009-07-30T19:30:33.500Z 2009-07-30T19:30:33.500Z /etc/passwd file should be owned by an appropriate group AC-3 CM-6 CCE-6890-8 2009-07-30T19:30:33.517Z 2009-07-30T19:30:33.517Z /etc/shadow file should be owned by an appropriate user AC-3 CM-6 CCE-6660-5 2009-07-30T19:30:33.530Z 2009-07-30T19:30:33.530Z /etc/shadow file should be owned by an appropriate group AC-3 CM-6 CCE-6059-0 2009-07-30T19:30:33.547Z 2009-07-30T19:30:33.547Z smbpasswd file should be owned by an appropriate user AC-3 CM-6 CCE-6648-0 2009-07-30T19:30:33.577Z 2009-07-30T19:30:33.577Z smbpasswd file should be owned by an appropriate group AC-3 CM-6 CCE-6060-8 2009-07-30T19:30:33.593Z 2009-07-30T19:30:33.593Z Environmental variable PATH for superuser accounts should or should not contain world-writable files as appropriate AC-3 CM-6 CCE-6681-1 2009-07-30T19:30:33.610Z 2009-07-30T19:30:33.610Z Environmental variable PATH for superuser accounts should not contain the current directory as the first or last entry AC-3 CM-6 CCE-6709-0 2009-07-30T19:30:33.627Z 2009-07-30T19:30:33.627Z The current wokring directory should or should not be added to the environmental variable PATH by global initialization files as appropriate AC-3 CM-6 CCE-6934-4 2009-07-30T19:30:33.640Z 2009-07-30T19:30:33.640Z The current working directory should or should not be added to the environmental variable PATH by local initialization files as appropriate AC-3 CM-6 CCE-6762-9 2009-07-30T19:30:33.657Z 2009-07-30T19:30:33.657Z DEPRECATED. CCE-6064-0 2009-07-30T19:30:33.670Z 2009-07-30T19:30:33.670Z The current directory should or should not be added to the environmental variable PATH by run control scripts as appropriate AC-3 CM-6 CCE-6748-8 2009-07-30T19:30:33.703Z 2009-07-30T19:30:33.703Z The system umask should be set appropriately CM-6 CM-7 CCE-6906-2 2009-07-30T19:30:33.717Z 2009-07-30T19:30:33.717Z The user umask should be set appropriately CM-6 CM-7 CCE-6611-8 2009-07-30T19:30:33.733Z 2009-07-30T19:30:33.733Z DEPRECATED. CCE-7061-5 2009-07-30T19:30:33.750Z 2009-07-30T19:30:33.750Z DEPRECATED. CCE-6831-2 2009-07-30T19:30:33.767Z 2009-07-30T19:30:33.767Z DEPRECATED. CCE-6818-9 2009-07-30T19:30:33.780Z 2009-07-30T19:30:33.780Z DEPRECATED. CCE-8393-1 2009-07-30T19:30:33.797Z 2009-07-30T19:30:33.797Z The cron.allow file should be configured with the set of users permitted to use the cron facility as appropriate. CM-7 CCE-7925-1 2009-07-30T19:30:33.813Z 2009-07-30T19:30:33.813Z The cron.deny file should be configured with the set of users not permitted to use the cron facility as appropriate. CM-7 CCE-7771-9 2009-07-30T19:30:33.843Z 2009-07-30T19:30:33.843Z Cron logging should be enabled or disabled as appropriate AC-3 CM-6 CCE-7961-6 2009-07-30T19:30:33.860Z 2009-07-30T19:30:33.860Z The at.allow file should be configured with the set of users permitted to use the at facility as appropriate. AC-3 AC-5 CM-6 CCE-7674-5 2009-07-30T19:30:33.877Z 2009-07-30T19:30:33.877Z The at.deny file should be configured with the set of users not permitted to use the at facility as appropriate. AC-3 AC-5 CM-6 CCE-6071-5 2009-07-30T19:30:33.890Z 2009-07-30T19:30:33.890Z /etc/init.d file permissions should be set appropriately AC-3 CM-6 CCE-6246-3 2009-07-30T19:30:33.907Z 2009-07-30T19:30:33.907Z /usr/aset/userlist file permissions should be set appropriately AC-3 CM-6 CCE-6072-3 2009-07-30T19:30:33.920Z 2009-07-30T19:30:33.920Z /etc/rmmount.conf file permissions should be set appropriately AC-3 CM-6 CCE-6964-1 2009-07-30T19:30:33.937Z 2009-07-30T19:30:33.937Z /var/log/pamlog file permissions should be set appropriately AC-3 CM-6 CCE-6073-1 2009-07-30T19:30:33.953Z 2009-07-30T19:30:33.953Z /etc/security/audit_control file permissions should be set appropriately AC-3 CM-6 CCE-6846-0 2009-07-30T19:30:33.967Z 2009-07-30T19:30:33.967Z /etc/security/audit_class file permissions should be set appropriately AC-3 CM-6 CCE-6155-6 2009-07-30T19:30:33.983Z 2009-07-30T19:30:33.983Z /etc/security/audit_event file permissions should be set appropriately AC-3 CM-6 CCE-6873-4 2009-07-30T19:30:34.000Z 2009-07-30T19:30:34.000Z /usr/aset/userlist file permissions should be set appropriately AC-3 CM-6 CCE-6404-8 2009-07-30T19:30:34.030Z 2009-07-30T19:30:34.030Z /etc/auto_* file should be owned by an appropriate user AC-3 CM-6 CCE-8457-4 2009-07-30T19:30:34.047Z 2009-07-30T19:30:34.047Z /etc/auto.master file should be owned by an appropriate user AC-3 CM-6 CCE-7984-8 2009-07-30T19:30:34.063Z 2009-07-30T19:30:34.063Z /etc/auto.misc file should be owned by an appropriate user AC-3 CM-6 CCE-7800-6 2009-07-30T19:30:34.077Z 2009-07-30T19:30:34.077Z /etc/auto.net file should be owned by an appropriate user AC-3 CM-6 CCE-6858-5 2009-07-30T19:30:34.093Z 2009-07-30T19:30:34.093Z /etc/rmmount.conf file should be owned by an appropriate user AC-3 CM-6 CCE-7002-9 2009-07-30T19:30:34.110Z 2009-07-30T19:30:34.110Z /var/log/pamlog file should be owned by an appropriate user AC-3 CM-6 CCE-6329-7 2009-07-30T19:30:34.127Z 2009-07-30T19:30:34.127Z /etc/security/audit_control file should be owned by an appropriate user AC-3 CM-6 CCE-6941-9 2009-07-30T19:30:34.140Z 2009-07-30T19:30:34.140Z /etc/security/audit_class file should be owned by an appropriate user AC-3 CM-6 CCE-6954-2 2009-07-30T19:30:34.157Z 2009-07-30T19:30:34.157Z /etc/security/audit_event file should be owned by an appropriate user AC-3 CM-6 CCE-6782-7 2009-07-30T19:30:34.170Z 2009-07-30T19:30:34.170Z DEPRECATED in favor of CCE-8338-6, CCE-8428-5, and CCE-8539-9. CCE-8338-6 2009-07-30T19:30:34.187Z 2009-07-30T19:30:34.187Z /etc/auto.master file should be owned by an appropriate group AC-3 CM-6 CCE-8428-5 2009-07-30T19:30:34.203Z 2009-07-30T19:30:34.203Z /etc/auto.misc file should be owned by an appropriate group AC-3 CM-6 CCE-8539-9 2009-07-30T19:30:34.217Z 2009-07-30T19:30:34.217Z /etc/auto.net file should be owned by an appropriate group AC-3 CM-6 CCE-7050-8 2009-07-30T19:30:34.233Z 2009-07-30T19:30:34.233Z /usr/aset/userlist file should be owned by an appropriate group AC-3 CM-6 CCE-7019-3 2009-07-30T19:30:34.250Z 2009-07-30T19:30:34.250Z /etc/rmmount.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6112-7 2009-07-30T19:30:34.267Z 2009-07-30T19:30:34.267Z /var/log/pamlog file should be owned by an appropriate group AC-3 CM-6 CCE-6786-8 2009-07-30T19:30:34.280Z 2009-07-30T19:30:34.280Z /etc/security/audit_control file should be owned by an appropriate group AC-3 CM-6 CCE-6381-8 2009-07-30T19:30:34.297Z 2009-07-30T19:30:34.297Z /etc/security/audit_class file should be owned by an appropriate group AC-3 CM-6 CCE-6411-3 2009-07-30T19:30:34.327Z 2009-07-30T19:30:34.327Z /etc/security/audit_event file should be owned by an appropriate group AC-3 CM-6 CCE-6882-5 2009-07-30T19:30:34.343Z 2009-07-30T19:30:34.343Z DEPRECATED in favor of CCE-8399-8, CCE-8304-8, and CCE-8642-1. CCE-8399-8 2009-07-30T19:30:34.360Z 2009-07-30T19:30:34.360Z /etc/auto.master file should be owned by an appropriate group AC-3 CM-6 CCE-8304-8 2009-07-30T19:30:34.377Z 2009-07-30T19:30:34.377Z /etc/auto.misc file should be owned by an appropriate group AC-3 CM-6 CCE-8642-1 2009-07-30T19:30:34.390Z 2009-07-30T19:30:34.390Z /etc/auto.net file should be owned by an appropriate group AC-3 CM-6 CCE-7068-0 2009-07-30T19:30:34.407Z 2009-07-30T19:30:34.407Z DEPRECATED. CCE-6851-0 2009-07-30T19:30:34.420Z 2009-07-30T19:30:34.420Z DEPRECATED. CCE-7072-2 2009-07-30T19:30:34.437Z 2009-07-30T19:30:34.437Z Generic PAM authentication should be enabled or disabled as appropriate AC-3 CCE-6077-2 2009-07-30T19:30:34.453Z 2009-07-30T19:30:34.453Z rsh auth should be allowed or disallowed by PAM as appropriate CM-7 CCE-6917-9 2009-07-30T19:30:34.467Z 2009-07-30T19:30:34.467Z rlogin auth should be allowed by pam.d or not as appropriate CM-7 CCE-6090-5 2009-07-30T19:30:34.483Z 2009-07-30T19:30:34.483Z PAM access to /dev/console should be logged at an appropriate level or not logged as appropriate AU-2 CM-6 CM-7 CCE-7055-7 2009-07-30T19:30:34.500Z 2009-07-30T19:30:34.500Z PAM should be logged at an appropriate level AU-2 CM-6 CM-7 CCE-6871-8 2009-07-30T19:30:34.517Z 2009-07-30T19:30:34.517Z /usr/aset/masters/uid_aliases should contain an appropriate listing of aliases AC-3 CM-6 CCE-6412-1 2009-07-30T19:30:34.530Z 2009-07-30T19:30:34.530Z The Solaris Automated Security Enhancement Tool (ASET) tune.low file should exist or not as appropriate CM-6 CM-7 CCE-6092-1 2009-07-30T19:30:34.547Z 2009-07-30T19:30:34.547Z The Solaris Automated Security Enhancement Tool (ASET) tune.med file should exist or not as appropriate CM-6 CM-7 CCE-6828-8 2009-07-30T19:30:34.563Z 2009-07-30T19:30:34.563Z The Solaris Automated Security Enhancement Tool (ASET) tune.high file should exist or not as appropriate CM-6 CM-7 CCE-6361-0 2009-07-30T19:30:34.577Z 2009-07-30T19:30:34.577Z The uid_aliases file should exist or not as appropriate CM-6 CM-7 CCE-7044-1 2009-07-30T19:30:34.610Z 2012-01-05T04:34:40.567Z The low security directory list should be set appropriately CM-6 CM-7 CCE-6409-7 2009-07-30T19:30:34.627Z 2012-01-05T04:34:40.613Z The medium security directory list should be set appropriately CM-6 CCE-6797-5 2009-07-30T19:30:34.640Z 2012-01-05T04:34:40.690Z The high security directory list should be set appropriately CM-6 CM-7 CCE-6391-7 2009-07-30T19:30:34.657Z 2012-01-05T04:34:40.767Z The ASET periodic schedule setting should be set appropriately CM-6 CCE-7015-1 2009-07-30T19:30:34.670Z 2012-01-05T04:34:40.830Z The UID aliases pointer should be set appropriately CM-6 CM-7 CCE-6359-4 2009-07-30T19:30:34.687Z 2009-07-30T19:30:34.687Z Users should be listed in the ASET userlist file or not as appropriate CM-6 CM-7 CCE-6456-8 2009-07-30T19:30:34.703Z 2012-01-05T04:34:40.893Z ASET should check NIS+ tables or not as appropriate CM-6 CCE-6101-0 2009-07-30T19:30:34.717Z 2009-07-30T19:30:34.717Z EEPROM security mode should be set appropriately SC-7 CCE-6931-0 2009-07-30T19:30:34.733Z 2009-07-30T19:30:34.733Z EEPROM warning banner should be set appropriately AC-3 AC-8 CM-6 CCE-6199-4 2009-07-30T19:30:34.750Z 2009-07-30T19:30:34.750Z The noexec_user_stack parameter should be set or not as appropriate AC-6 CM-6 CM-7 CCE-6433-7 2009-07-30T19:30:34.767Z 2009-07-30T19:30:34.767Z The no_exec_user_stack_log parameter should be set or not as appropriate CM-6 CM-7 CCE-6887-4 2009-07-30T19:30:34.780Z 2009-07-30T19:30:34.780Z The default login console should be set appropriately CM-7 CCE-6111-9 2009-07-30T19:30:34.797Z 2009-07-30T19:30:34.797Z Default sleeptime should be set appropriately CM-6 CCE-6368-5 2009-07-30T19:30:34.813Z 2009-07-30T19:30:34.813Z Default number of allowed retries should be set appropriately AC-7 CCE-6273-7 2009-07-30T19:30:34.843Z 2009-07-30T19:30:34.843Z The default number of syslog failed logins retried should be set appropriately AC-7 CM-6 CCE-6126-7 2009-07-30T19:30:34.860Z 2009-07-30T19:30:34.860Z Default su console should be set appropriately AC-7 CM-6 CCE-6127-5 2009-07-30T19:30:34.877Z 2009-07-30T19:30:34.877Z auditing should be logged to an appropriate directory CM-6 CCE-6351-1 2009-07-30T19:30:34.890Z 2009-07-30T19:30:34.890Z login and logout events (lo class) should be audited or not as appropriate AU-2 CCE-6699-3 2009-07-30T19:30:34.907Z 2009-07-30T19:30:34.907Z DEPRECATED. CCE-6915-3 2009-07-30T19:30:34.920Z 2009-07-30T19:30:34.920Z Non attributable events (na class) should be audited or not as appropriate AU-2 CM-6 CM-7 CCE-6132-5 2009-07-30T19:30:34.953Z 2009-07-30T19:30:34.953Z The free space threshold to warn at should be set appropriately CM-6 CCE-6888-2 2009-07-30T19:30:34.967Z 2009-07-30T19:30:34.967Z DEPRECATED. CCE-6923-7 2009-07-30T19:30:34.983Z 2009-07-30T19:30:34.983Z DEPRECATED. CCE-6500-3 2009-07-30T19:30:35.000Z 2009-07-30T19:30:35.000Z DEPRECATED. CCE-6703-3 2009-07-30T19:30:35.017Z 2009-07-30T19:30:35.017Z Password changes should be audited or not as appropriate AU-2 IA-5 CCE-6752-0 2009-07-30T19:30:35.030Z 2009-07-30T19:30:35.030Z su usage should be audited or not as appropriate AU-2 CCE-6862-7 2009-07-30T19:30:35.063Z 2009-07-30T19:30:35.063Z Creation/modification of superuser groups should be audited or not as appropriate AC-6 CM-6 CCE-6139-0 2009-07-30T19:30:35.077Z 2009-07-30T19:30:35.077Z Clearing of the audit log file should be audited or not as appropriate AU-2 AU-3 CCE-7088-8 2009-07-30T19:30:35.093Z 2009-07-30T19:30:35.093Z Use of identification/authorization mechanisms should be audited or not as appropriate AC-3 AU-2 IA-5 CCE-7040-9 2009-07-30T19:30:35.110Z 2009-07-30T19:30:35.110Z chmod command should be audited or not as appropriate CM-6 CCE-6577-1 2009-07-30T19:30:35.127Z 2009-07-30T19:30:35.127Z The user audit file should contain an appropriate set of never-audit flags AU-2 CCE-6419-6 2009-07-30T19:30:35.140Z 2009-07-30T19:30:35.140Z The /var/log/authlog log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6167-1 2009-07-30T19:30:35.157Z 2009-07-30T19:30:35.157Z The /var/log/syslog log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6638-1 2009-07-30T19:30:35.187Z 2009-07-30T19:30:35.187Z The /var/adm/messages log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6145-7 2009-07-30T19:30:35.203Z 2009-07-30T19:30:35.203Z The /var/adm/sulog log should be enabled or disabled as appropriate AU-2 CM-6 CM-7 CCE-6894-0 2009-07-30T19:30:35.217Z 2009-07-30T19:30:35.217Z The /var/adm/utmp[x] log should be enabled or disabled as appropriate AU-2 CM-6 CCE-7079-7 2009-07-30T19:30:35.233Z 2009-07-30T19:30:35.233Z The /var/adm/wtmp[x] log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6674-6 2009-07-30T19:30:35.250Z 2009-07-30T19:30:35.250Z The /var/adm/sshlog log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6457-6 2009-07-30T19:30:35.280Z 2009-07-30T19:30:35.280Z The /var/log/pamlog log should be enabled or disabled as appropriate AU-2 CM-6 CCE-7039-1 2009-07-30T19:30:35.297Z 2009-07-30T19:30:35.297Z Unsuccessful login attemps should be logged or not as appropriate AC-3 AC-7 AU-2 CCE-7051-6 2009-07-30T19:30:35.313Z 2009-07-30T19:30:35.313Z su usage should be audited or not as appropriate AU-2 CCE-6629-0 2009-07-30T19:30:35.343Z 2009-07-30T19:30:35.343Z auth usage should be audited or not as appropriate AU-2 CCE-6497-2 2009-07-30T19:30:35.360Z 2009-07-30T19:30:35.360Z /var directory should be owned by an appropriate user AC-3 CM-6 CCE-7135-7 2009-07-30T19:30:35.377Z 2009-07-30T19:30:35.377Z /var/log directory should be owned by an appropriate user AC-3 CM-6 CCE-6840-3 2009-07-30T19:30:35.390Z 2009-07-30T19:30:35.390Z /var/adm directory should be owned by an appropriate user AC-3 CM-6 CCE-6996-3 2009-07-30T19:30:35.407Z 2009-07-30T19:30:35.407Z DEPRECATED. CCE-6948-4 2009-07-30T19:30:35.420Z 2009-07-30T19:30:35.420Z BSM auditing should be enabled or disabled as appropriate AU-2 CCE-6900-5 2009-07-30T19:30:35.437Z 2009-07-30T19:30:35.437Z DEPRECATED. CCE-6542-5 2009-07-30T19:30:35.453Z 2009-07-30T19:30:35.453Z DEPRECATED. CCE-6278-6 2009-07-30T19:30:35.467Z 2009-07-30T19:30:35.467Z DEPRECATED. CCE-6546-6 2009-07-30T19:30:35.483Z 2009-07-30T19:30:35.483Z The serial port listener should be enabled or disabled as appropriate CM-6 CM-7 CCE-6626-6 2009-07-30T19:30:35.500Z 2009-07-30T19:30:35.500Z The TCP max connection limit should be set appropriately AC-4 SC-5 SC-7 CCE-7075-5 2009-07-30T19:30:35.517Z 2009-07-30T19:30:35.517Z The TCP abort interval should be set appropriately AC-4 SC-5 SC-7 CCE-6612-6 2009-07-30T19:30:35.547Z 2009-07-30T19:30:35.547Z Forwarding of directed broadcasts should be enabled or disabled as appropriate CM-7 CCE-6330-5 2009-07-30T19:30:35.563Z 2009-07-30T19:30:35.563Z Response to echo (ping) request broadcasts should be enabled or disabled as appropriate CM-7 CCE-6826-2 2009-07-30T19:30:35.577Z 2009-07-30T19:30:35.577Z Response to ICMP timestamp requests should be enabled or disabled as appropriate CM-7 CCE-7042-5 2009-07-30T19:30:35.593Z 2009-07-30T19:30:35.593Z Response to ICMP timestamp broadcast requests should be enabled or disabled as appropriate CM-7 CCE-6993-0 2009-07-30T19:30:35.610Z 2009-07-30T19:30:35.610Z Response to mask addresses should be enabled or disabled as appropriate CM-7 CCE-6918-7 2009-07-30T19:30:35.627Z 2009-07-30T19:30:35.627Z ARP cleanup interval should be set appropriately CM-6 CCE-7121-7 2009-07-30T19:30:35.640Z 2012-01-05T04:34:42.487Z ARP IRE interval should be set appropriately CM-6 CCE-7077-1 2009-07-30T19:30:35.670Z 2009-07-30T19:30:35.670Z IP redirects should be followed or ignored as appropriate AC-3 CM-6 CM-7 SC-5 CCE-7090-4 2009-07-30T19:30:35.687Z 2009-07-30T19:30:35.687Z Sending of IP redirects should be enabled or disabled as appropriate CM-6 CCE-6561-5 2009-07-30T19:30:35.703Z 2009-07-30T19:30:35.703Z Forwarding of source routed packets should be enabled or disabled as appropriate CM-7 CCE-6970-8 2009-07-30T19:30:35.717Z 2009-07-30T19:30:35.717Z IP forwarding should be enabled or disabled as appropriate AC-3 CM-6 CM-7 SC-5 CCE-6279-4 2009-07-30T19:30:35.733Z 2009-07-30T19:30:35.733Z Strict destination multihoming should be enabled or disabled as appropriate CM-7 CCE-7001-1 2009-07-30T19:30:35.750Z 2009-07-30T19:30:35.750Z Forwarding of source routed IPv6 packets should be enabled or disabled as appropriate CM-7 CCE-6940-1 2009-07-30T19:30:35.780Z 2009-07-30T19:30:35.780Z IPv6 forwarding should be enabled or disabled as appropriate CM-6 CM-7 CCE-7032-6 2009-07-30T19:30:35.797Z 2009-07-30T19:30:35.797Z TCP reverse source routes should be enabled or disabled as appropriate CM-7 CCE-6534-2 2009-07-30T19:30:35.813Z 2009-07-30T19:30:35.813Z Routing should be enabled or disabled as appropriate CM-7 CCE-6148-1 2009-07-30T19:30:35.827Z 2009-07-30T19:30:35.827Z Caching of the RBAC prof_attr should be enabled or disabled as appropriate CM-6 CCE-6978-1 2009-07-30T19:30:35.843Z 2009-07-30T19:30:35.843Z Multicast route assignment should be enabled or disabled as appropriate CM-7 CCE-6744-7 2009-07-30T19:30:35.860Z 2009-07-30T19:30:35.860Z Print services through inetd should be enabled or disabled as appropriate CM-7 CCE-7070-6 2009-07-30T19:30:35.877Z 2009-07-30T19:30:35.877Z NFS server logging should be enabled or disabled as appropriate AU-1 AU-2 CCE-6836-1 2009-07-30T19:30:35.890Z 2009-07-30T19:30:35.890Z Global initialization files should allow or deny write access to the terminal as appropriate CM-7 CCE-7074-8 2009-07-30T19:30:35.907Z 2009-07-30T19:30:35.907Z DEPRECATED. CCE-7012-8 2009-07-30T19:30:35.937Z 2009-07-30T19:30:35.937Z DEPRECATED. CCE-7041-7 2009-07-30T19:30:35.953Z 2009-07-30T19:30:35.953Z Caching of the RBAC exec_attr should be enabled or disabled as appropriate CM-6 CCE-7116-7 2009-07-30T19:30:35.967Z 2009-07-30T19:30:35.967Z Caching of the RBAC user_attr should be enabled or disabled as appropriate CM-6 CCE-8477-2 2009-07-30T19:30:35.983Z 2009-07-30T19:30:35.983Z The chmod command system call should be audited or not as appropriate AU-2 CCE-7027-6 2009-07-30T19:30:36.000Z 2009-07-30T19:30:36.000Z The chown system call should be audited or not as appropriate AU-2 CCE-6618-3 2009-07-30T19:30:36.017Z 2009-07-30T19:30:36.017Z The fchmod system call should be audited or not as appropriate AU-3 CCE-6680-3 2009-07-30T19:30:36.030Z 2009-07-30T19:30:36.030Z The fchown system call should be audited or not as appropriate AU-3 CCE-6152-3 2009-07-30T19:30:36.047Z 2009-07-30T19:30:36.047Z The lchown system call should be audited or not as appropriate AU-3 CCE-6153-1 2009-07-30T19:30:36.063Z 2009-07-30T19:30:36.063Z The setgroups system call should be audited or not as appropriate AU-9 CCE-6658-9 2009-07-30T19:30:36.077Z 2009-07-30T19:30:36.077Z The setpgrp system call should be audited or not as appropriate AU-9 CCE-6908-8 2009-07-30T19:30:36.093Z 2009-07-30T19:30:36.093Z The setreuid system call should be audited or not as appropriate AU-9 CCE-7124-1 2009-07-30T19:30:36.110Z 2009-07-30T19:30:36.110Z The setregid system call should be audited or not as appropriate AU-9 CCE-6761-1 2009-07-30T19:30:36.140Z 2009-07-30T19:30:36.140Z The setegid system call should be audited or not as appropriate AU-9 CCE-6176-2 2009-07-30T19:30:36.157Z 2009-07-30T19:30:36.157Z The seteuid system call should be audited or not as appropriate AU-9 CCE-6181-2 2009-07-30T19:30:36.170Z 2009-07-30T19:30:36.170Z System ftp logoffs should be audited or not as appropriate AU-2 CCE-6183-8 2009-07-30T19:30:36.187Z 2009-07-30T19:30:36.187Z System telnet logons should be audited or not as appropriate AU-2 CCE-6447-7 2009-07-30T19:30:36.203Z 2009-07-30T19:30:36.203Z System ssh logons should be audited or not as appropriate AU-2 CCE-7099-5 2009-07-30T19:30:36.217Z 2009-07-30T19:30:36.217Z System rlogin logons should be audited or not as appropriate AU-2 CCE-6187-9 2009-07-30T19:30:36.233Z 2009-07-30T19:30:36.233Z System rshd logons should be audited or not as appropriate AU-2 CCE-6622-5 2009-07-30T19:30:36.250Z 2009-07-30T19:30:36.250Z System rexecd logons should be audited or not as appropriate AU-2 CCE-7182-9 2009-07-30T19:30:36.267Z 2009-07-30T19:30:36.267Z System rexd logons should be audited or not as appropriate AU-2 CCE-7151-4 2009-07-30T19:30:36.280Z 2009-07-30T19:30:36.280Z System ftp logons should be audited or not as appropriate AU-2 CCE-7122-5 2009-07-30T19:30:36.313Z 2009-07-30T19:30:36.313Z rlogin auth should be allowed or disallowed by PAM as appropriate CM-7 CCE-7091-2 2009-07-30T19:30:36.327Z 2009-07-30T19:30:36.327Z rlogin auth should be allowed by pam.d or not as appropriate CM-7 CCE-6937-7 2009-07-30T19:30:36.343Z 2009-07-30T19:30:36.343Z Hard core dump size limits should be set appropriately SC-5 CCE-6844-5 2009-07-30T19:30:36.360Z 2009-07-30T19:30:36.360Z Root logins should be allowed or not as appropriate from SSH consoles AC-1 SC-7 CCE-7173-8 2009-07-30T19:30:36.377Z 2009-07-30T19:30:36.377Z /export/home should be configured on an appropriate filesystem partition SC-2 CCE-6194-5 2009-07-30T19:30:36.407Z 2009-07-30T19:30:36.407Z /var should be configured on an appropriate filesystem partition SC-2 CCE-6995-5 2009-07-30T19:30:36.420Z 2009-07-30T19:30:36.420Z /opt should be configured on an appropriate filesystem partition SC-2 CCE-6632-4 2009-07-30T19:30:36.453Z 2009-07-30T19:30:36.453Z The shell for the root account should be located on the appropriate filesystem AC-6 CM-5 CM-6 CM-7 CCE-6196-0 2009-07-30T19:30:36.467Z 2009-07-30T19:30:36.467Z Core dump size limits should be set appropriately SC-5 CCE-6981-5 2009-07-30T19:30:36.483Z 2009-07-30T19:30:36.483Z The read-only SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-6951-8 2009-07-30T19:30:36.500Z 2009-07-30T19:30:36.500Z The read/write SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-7167-0 2009-07-30T19:30:36.517Z 2009-07-30T19:30:36.517Z DEPRECATED. CCE-6919-5 2009-07-30T19:30:36.547Z 2009-07-30T19:30:36.547Z Password policy should ban or allow words found in a dictionary as appropriate. IA-5 CCE-6198-6 2009-07-30T19:30:36.563Z 2009-07-30T19:30:36.563Z Password policy should enforce the correct amount of special characters IA-5 CCE-7049-0 2009-07-30T19:30:36.577Z 2009-07-30T19:30:36.577Z Password policy should enforce or not enforce the requirement to have mixed case passwords as appropriate. IA-5 CCE-7146-4 2009-07-30T19:30:36.593Z 2009-07-30T19:30:36.593Z The minimum password age should be set as appropriate AC-3 CM-6 CM-7 IA-5 CCE-7080-5 2009-07-30T19:30:36.627Z 2009-07-30T19:30:36.627Z The minimum required password length should be set as appropriate AC-3 CM-6 CM-7 IA-5 CCE-7086-2 2009-07-30T19:30:36.640Z 2009-07-30T19:30:36.640Z Password history should be saved for an appropriate number of password changes IA-5 CCE-6434-5 2009-07-30T19:30:36.657Z 2009-07-30T19:30:36.657Z The number of consecutive failed login attempts required to trigger a lockout should be set as appropriate AC-7 CCE-7196-9 2009-07-30T19:30:36.670Z 2009-07-30T19:30:36.670Z Login access to accounts without passwords should be enabled or disabled as appropriate AC-3 CM-6 IA-5 CCE-7024-3 2009-07-30T19:30:36.687Z 2009-07-30T19:30:36.687Z New users should be required or not required to change their password on first login as appropriate AC-3 CM-6 CCE-7104-3 2009-07-30T19:30:36.717Z 2009-07-30T19:30:36.717Z Access to single-user mode (maintainence mode) should require the root password or not as appropriate AC-3 AC-6 CCE-7028-4 2009-07-30T19:30:36.733Z 2009-07-30T19:30:36.733Z The delay between failed logins should be set as appropriate AC-3 CM-6 CM-7 CCE-7108-4 2009-07-30T19:30:36.750Z 2009-07-30T19:30:36.750Z All files should be owned by an existing account or not as appropriate. AC-3 CM-6 CCE-6323-0 2009-07-30T19:30:36.767Z 2009-07-30T19:30:36.767Z All files should be owned by an existing group or not as appropriate. AC-3 CM-6 CCE-6218-2 2009-07-30T19:30:36.780Z 2009-07-30T19:30:36.780Z The console login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-7066-4 2009-07-30T19:30:36.797Z 2009-07-30T19:30:36.797Z The SSH login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6903-9 2009-07-30T19:30:36.827Z 2009-07-30T19:30:36.827Z The telnet login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6837-9 2009-07-30T19:30:36.843Z 2009-07-30T19:30:36.843Z The ftp login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6683-7 2009-07-30T19:30:36.860Z 2009-07-30T19:30:36.860Z The graphical login banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6841-1 2009-07-30T19:30:36.877Z 2009-07-30T19:30:36.877Z Accounts other than root should be allowed to have the UID 0 or not as appropriate AC-2 CCE-7185-2 2009-07-30T19:30:36.890Z 2009-07-30T19:30:36.890Z Accounts other than root and locked system accounts should be allowed to have a GID of 0 or not as appropriate AC-2 CCE-6255-4 2009-07-30T19:30:36.907Z 2009-07-30T19:30:36.907Z Each account should be assigned a unique UID or not as appropriate AC-3 CM-6 CCE-6688-6 2009-07-30T19:30:36.920Z 2009-07-30T19:30:36.920Z The ftp account should exist or not as appropriate AC-3 CM-6 CCE-7164-7 2009-07-30T19:30:36.937Z 2009-07-30T19:30:36.937Z Login accounts should include an appropriate GECOS identifier or no GECOS identifier AC-3 CM-6 CCE-6926-0 2009-07-30T19:30:36.953Z 2009-07-30T19:30:36.953Z The screen lock should activate after an appropriate period of inactivity AC-1 AC-3 CM-6 CM-7 CCE-6895-7 2009-07-30T19:30:36.983Z 2009-07-30T19:30:36.983Z File permissions should be set appropriately for all shell executables. AC-3 CM-6 CCE-7245-4 2009-07-30T19:30:37.000Z 2009-07-30T19:30:37.000Z Remote (serial) consoles should be enabled or disabled as appropriate. AC-1 SC-7 CCE-7232-2 2009-07-30T19:30:37.017Z 2009-07-30T19:30:37.017Z Root logins should be restricted to the console or not as appropriate. AC-1 SC-7 CCE-6311-5 2009-07-30T19:30:37.030Z 2009-07-30T19:30:37.030Z .netrc files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6976-5 2009-07-30T19:30:37.047Z 2009-07-30T19:30:37.047Z .rhosts files should exist or not as appropriate for all users. AC-3 CM-6 CCE-7157-1 2009-07-30T19:30:37.063Z 2009-07-30T19:30:37.063Z .shosts files should exist or not as appropriate for all users. AC-3 CM-6 CCE-6712-4 2009-07-30T19:30:37.077Z 2009-07-30T19:30:37.077Z The /etc/hosts.equiv file should exist or not as appropriate. AC-3 CM-6 CM-7 CCE-7183-7 2009-07-30T19:30:37.093Z 2012-01-05T04:34:44.753Z The use of NIS special characters (+ or -) in the first field of the /etc/passwd file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-7117-5 2009-07-30T19:30:37.110Z 2012-01-05T04:34:44.800Z The use of NIS special characters (+ or -) in the first field of the /etc/shadow file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-7152-2 2009-07-30T19:30:37.140Z 2012-01-05T04:34:44.863Z The use of NIS special characters (+ or -) in the first field of the /etc/group file should be allowed or disallowed as appropriate. AC-4 SC-5 SC-7 CCE-7214-0 2009-07-30T19:30:37.157Z 2009-07-30T19:30:37.157Z The /etc/shells file should exist or not as appropriate CM-6 CCE-6258-8 2009-07-30T19:30:37.170Z 2009-07-30T19:30:37.170Z Shells referenced in /etc/passwd should be included in /etc/shells or not as appropriate CM-6 CCE-6536-7 2009-07-30T19:30:37.187Z 2009-07-30T19:30:37.187Z Groups referenced in /etc/passwd should be included in /etc/group or not as appropriate. AC-2 CCE-6324-8 2009-07-30T19:30:37.203Z 2009-07-30T19:30:37.203Z The home directory for the root account should be set appropriately. AC-3 CM-6 CCE-7258-7 2009-07-30T19:30:37.217Z 2009-07-30T19:30:37.217Z The home directory for each user account should be set appropriately. AC-3 CM-6 CCE-6260-4 2009-07-30T19:30:37.233Z 2009-07-30T19:30:37.233Z Home directories referenced in /etc/passwd should exist or not as appropriate AC-3 CM-6 CCE-7119-1 2009-07-30T19:30:37.267Z 2009-07-30T19:30:37.267Z All device files should be located inside an appropriate path AC-6 CCE-7105-0 2009-07-30T19:30:37.280Z 2009-07-30T19:30:37.280Z The ntpd service should be enabled or disabled as appropriate. AU-8 CM-6 CM-7 CCE-6264-6 2009-07-30T19:30:37.297Z 2009-07-30T19:30:37.297Z The Network Time Protocol (ntp) synchronization server should be set appropriately. AU-8 CM-6 CCE-7201-7 2009-07-30T19:30:37.313Z 2009-07-30T19:30:37.313Z All logon attempts should be logged or not logged as appropriate AC-3 CM-6 CCE-6902-1 2009-07-30T19:30:37.327Z 2009-07-30T19:30:37.327Z All su (switch user) activity should be logged or not as appropriate AC-3 CM-6 CCE-7186-0 2009-07-30T19:30:37.360Z 2009-07-30T19:30:37.360Z Filesystem logging/journaling should be performed or not as appropriate AU-2 CCE-6267-9 2009-07-30T19:30:37.377Z 2009-07-30T19:30:37.377Z Automount should be enabled or disabled as appropriate CM-6 CM-7 CCE-6276-0 2009-07-30T19:30:37.390Z 2009-07-30T19:30:37.390Z Source-routed packets should be accepted or rejected as appropriate. CM-7 CCE-6885-8 2009-07-30T19:30:37.407Z 2009-07-30T19:30:37.407Z Response to ICMP timestamp requests should be enabled or disabled as appropriate CM-7 CCE-6485-7 2009-07-30T19:30:37.420Z 2009-07-30T19:30:37.420Z Response to ICMP timestamp broadcast requests should be enabled or disabled as appropriate CM-7 CCE-7017-7 2009-07-30T19:30:37.437Z 2009-07-30T19:30:37.437Z Response to ICMP echo (ping) requests should be enabled or disabled as appropriate CM-7 CCE-6285-1 2009-07-30T19:30:37.453Z 2009-07-30T19:30:37.453Z Executable stack should be enabled or disabled as appropriate CM-7 CCE-7053-2 2009-07-30T19:30:37.467Z 2009-07-30T19:30:37.467Z The default gateway should be set appropriately. CM-7 CCE-6713-2 2009-07-30T19:30:37.483Z 2009-07-30T19:30:37.483Z The inetd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6541-7 2009-07-30T19:30:37.517Z 2009-07-30T19:30:37.517Z echo service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6585-4 2009-07-30T19:30:37.530Z 2009-07-30T19:30:37.530Z netstat service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6287-7 2009-07-30T19:30:37.547Z 2009-07-30T19:30:37.547Z rcp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7156-3 2009-07-30T19:30:37.563Z 2009-07-30T19:30:37.563Z chargen service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7045-8 2009-07-30T19:30:37.577Z 2009-07-30T19:30:37.577Z finger service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6746-2 2009-07-30T19:30:37.593Z 2009-07-30T19:30:37.593Z tftpd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7137-3 2009-07-30T19:30:37.610Z 2009-07-30T19:30:37.610Z walld service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7234-8 2009-07-30T19:30:37.627Z 2009-07-30T19:30:37.627Z rstatd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6299-2 2009-07-30T19:30:37.657Z 2009-07-30T19:30:37.657Z sprayd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6307-3 2009-07-30T19:30:37.670Z 2009-07-30T19:30:37.670Z rusersd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6567-2 2009-07-30T19:30:37.687Z 2009-07-30T19:30:37.687Z rlogin service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7098-7 2009-07-30T19:30:37.703Z 2009-07-30T19:30:37.703Z rsh service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7067-2 2009-07-30T19:30:37.733Z 2009-07-30T19:30:37.733Z ftp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7005-2 2009-07-30T19:30:37.750Z 2009-07-30T19:30:37.750Z telnet service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6630-8 2009-07-30T19:30:37.780Z 2009-07-30T19:30:37.780Z inn service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7145-6 2009-07-30T19:30:37.797Z 2009-07-30T19:30:37.797Z uucp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6308-1 2009-07-30T19:30:37.813Z 2009-07-30T19:30:37.813Z rexec service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6803-1 2009-07-30T19:30:37.827Z 2009-07-30T19:30:37.827Z inetd logging should be enabled or disabled as appropriate AU-2 CCE-6604-3 2009-07-30T19:30:37.860Z 2009-07-30T19:30:37.860Z font-service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7058-1 2009-07-30T19:30:37.877Z 2009-07-30T19:30:37.877Z imap2 service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7274-4 2009-07-30T19:30:37.890Z 2009-07-30T19:30:37.890Z pop3 service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7149-8 2009-07-30T19:30:37.907Z 2009-07-30T19:30:37.907Z ident service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7118-3 2009-07-30T19:30:37.920Z 2009-07-30T19:30:37.920Z rexd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6650-6 2009-07-30T19:30:37.953Z 2009-07-30T19:30:37.953Z sadmin service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7153-0 2009-07-30T19:30:37.967Z 2009-07-30T19:30:37.967Z daytime service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7307-2 2009-07-30T19:30:37.983Z 2009-07-30T19:30:37.983Z dtspc (cde-spc) service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6945-0 2009-07-30T19:30:38.000Z 2009-07-30T19:30:38.000Z rquotad service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6685-2 2009-07-30T19:30:38.017Z 2009-07-30T19:30:38.017Z cmsd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7059-9 2009-07-30T19:30:38.047Z 2009-07-30T19:30:38.047Z tooltalk service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7275-1 2009-07-30T19:30:38.063Z 2009-07-30T19:30:38.063Z xdmcp service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7249-6 2009-07-30T19:30:38.077Z 2009-07-30T19:30:38.077Z discard service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7089-6 2009-07-30T19:30:38.110Z 2009-07-30T19:30:38.110Z vino-server service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6603-5 2009-07-30T19:30:38.140Z 2009-07-30T19:30:38.140Z The bind service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-6947-6 2009-07-30T19:30:38.157Z 2009-07-30T19:30:38.157Z The version string reported by the bind service should be configured appropriately. SC-7 CCE-7172-0 2009-07-30T19:30:38.170Z 2009-07-30T19:30:38.170Z SSH Protocol v1 should be enabled or disabled as appropriate CM-7 CCE-6321-4 2009-07-30T19:30:38.187Z 2009-07-30T19:30:38.187Z TCP_WRAPPERS should be enabled or disabled as appropriate AC-3 CM-6 CM-7 SC-5 CCE-6322-2 2009-07-30T19:30:38.203Z 2009-07-30T19:30:38.203Z SNMP version 1 should be enabled or disabled as appropriate AC-3 CM-6 CCE-7189-4 2009-07-30T19:30:38.233Z 2009-07-30T19:30:38.233Z The nfsd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-7154-8 2009-07-30T19:30:38.250Z 2009-07-30T19:30:38.250Z The mountd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-6595-3 2009-07-30T19:30:38.280Z 2009-07-30T19:30:38.280Z The statd service should be enabled or disabled as appropriate CM-6 CCE-7031-8 2009-07-30T19:30:38.297Z 2009-07-30T19:30:38.297Z The lockd service should be enabled or disabled as appropriate CM-6 CM-7 CCE-8602-5 2009-07-30T19:30:38.313Z 2009-07-30T19:30:38.313Z NFS should be configured to respond or not as appropriate to client requests that do not include a user id . AC-1 AC-2 IA-2 CCE-6877-5 2009-07-30T19:30:38.327Z 2009-07-30T19:30:38.327Z NFS should be configured to respond or not as appropriate to client requests that do not originate from a privileged port AC-1 AC-2 CCE-7097-9 2009-07-30T19:30:38.343Z 2012-01-05T04:34:47.003Z NFS should be configured with appropriate authentication methods AC-3 CM-6 CCE-7220-7 2009-07-30T19:30:38.377Z 2009-07-30T19:30:38.377Z The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports. CM-6 CM-7 CCE-7062-3 2009-07-30T19:30:38.390Z 2009-07-30T19:30:38.390Z The nosuid option should be enabled or disabled for all NFS mounts as appropriate AC-6 CM-6 CM-7 CCE-6453-5 2009-07-30T19:30:38.407Z 2009-07-30T19:30:38.407Z Sendmail should be enabled or disabled as appropriate CM-6 CCE-7299-1 2009-07-30T19:30:38.420Z 2009-07-30T19:30:38.420Z The sendmail banner should be set appropriately. AC-3 AC-8 CM-6 CCE-6643-1 2009-07-30T19:30:38.437Z 2009-07-30T19:30:38.437Z The decode sendmail alias should be enabled or disabled as appropriate. CM-7 CCE-6328-9 2009-07-30T19:30:38.453Z 2009-07-30T19:30:38.453Z .forward files should be allowed or disallowed as appropriate for all users AC-3 CM-6 CCE-6338-8 2009-07-30T19:30:38.483Z 2009-07-30T19:30:38.483Z Programs executed through the aliases file should be owned by an appropriate user AC-3 CM-6 CCE-7158-9 2009-07-30T19:30:38.500Z 2009-07-30T19:30:38.500Z Programs executed through the aliases file should reside a directory with an appropriate user owner AC-3 CM-6 CCE-6489-9 2009-07-30T19:30:38.517Z 2009-07-30T19:30:38.517Z Sendmail vrfy command should be allowed or not as appropriate CM-6 CCE-7317-1 2009-07-30T19:30:38.530Z 2009-07-30T19:30:38.530Z Sendmail expn command should be allowed or not as appropriate CM-6 CCE-7096-1 2009-07-30T19:30:38.547Z 2009-07-30T19:30:38.547Z Sendmail should be configured with an appropriate logging level CM-6 CCE-6696-9 2009-07-30T19:30:38.563Z 2009-07-30T19:30:38.563Z Sendmail help command should be allowed or not as appropriate CM-6 CCE-7193-6 2009-07-30T19:30:38.577Z 2009-07-30T19:30:38.577Z DEPRECTATED in favor of CCE-8421-0 and CCE-8330-3 CCE-8421-0 2009-07-30T19:30:38.610Z 2009-07-30T19:30:38.610Z NIS clinent should be enabled or disabled as appropriate AC-3 CM-6 CCE-8330-3 2009-07-30T19:30:38.627Z 2009-07-30T19:30:38.627Z NIS server should be enabled or disabled as appropriate CM-6 CM-7 CCE-7290-0 2009-07-30T19:30:38.640Z 2009-07-30T19:30:38.640Z NIS+ server should operate at an appropriate security level CM-6 CM-7 CCE-7259-5 2009-07-30T19:30:38.657Z 2009-07-30T19:30:38.657Z X-Windows should be enabled or disabled as appropriate CM-6 CM-7 CCE-7038-3 2009-07-30T19:30:38.670Z 2009-07-30T19:30:38.670Z Authorized X-clients should be listed or not in the X*.hosts file as appropriate AC-3 CM-6 CCE-7228-0 2009-07-30T19:30:38.687Z 2009-07-30T19:30:38.687Z X-Windows should write .Xauthority files to users' home directories or not as appropriate CM-6 CM-7 CCE-7197-7 2009-07-30T19:30:38.717Z 2009-07-30T19:30:38.717Z X11 forwarding via SSH should be enabled or disabled as appropriate. CM-6 CM-7 CCE-7230-6 2009-07-30T19:30:38.733Z 2009-07-30T19:30:38.733Z Samba should be enabled or disabled as appropriate AC-3 CM-6 CCE-6557-3 2009-07-30T19:30:38.750Z 2009-07-30T19:30:38.750Z Samba 'hosts allow' option should be configured with an appropriate set of networks CM-6 CM-7 SC-5 CCE-6961-7 2009-07-30T19:30:38.767Z 2009-07-30T19:30:38.767Z Samba 'security option' option should be set as appropriate AC-3 CM-6 CCE-6341-2 2009-07-30T19:30:38.780Z 2009-07-30T19:30:38.780Z Samba 'encrypt' passwords option should be set as appropriate AC-3 CM-6 CM-7 SC-5 CCE-7264-5 2009-07-30T19:30:38.813Z 2009-07-30T19:30:38.813Z Samba 'smb passwd file' option should be set to an appropriate password file or no password file AC-3 CM-6 CCE-6783-5 2009-07-30T19:30:38.827Z 2009-07-30T19:30:38.827Z IPv6 should be enabled or disabled as appropriate CM-6 CM-7 CCE-6342-0 2009-07-30T19:30:38.843Z 2009-07-30T19:30:38.843Z The "at" utility directory permissions should be set as appropriate AC-3 CM-6 CCE-7251-2 2009-07-30T19:30:38.860Z 2009-07-30T19:30:38.860Z at.allow file permissions should be set appropriately AC-3 CM-6 CCE-6367-7 2009-07-30T19:30:38.877Z 2009-07-30T19:30:38.877Z at.deny file permissions should be set appropriately AC-3 CM-6 CCE-7215-7 2009-07-30T19:30:38.890Z 2009-07-30T19:30:38.890Z Cron directory permissions should be set appropriately AC-3 CM-6 CCE-7336-1 2009-07-30T19:30:38.907Z 2009-07-30T19:30:38.907Z Crontab directory permissions should be set appropriately AC-3 CM-6 CCE-6428-7 2009-07-30T19:30:38.937Z 2009-07-30T19:30:38.937Z Cron log file permissions should be set appropriately AC-3 CM-6 CCE-7194-4 2009-07-30T19:30:38.953Z 2009-07-30T19:30:38.953Z cron.allow file permissions should be set appropriately AC-3 CM-6 CCE-7181-1 2009-07-30T19:30:38.967Z 2009-07-30T19:30:38.967Z cron.deny file permissions should be set appropriately AC-3 CM-6 CCE-7120-9 2009-07-30T19:30:38.983Z 2009-07-30T19:30:38.983Z Crontab file permissions should be set appropriately AC-3 CM-6 CCE-7150-6 2009-07-30T19:30:39.017Z 2009-07-30T19:30:39.017Z /dev/kmem file permissions should be set appropriately AC-3 CM-6 CCE-6378-4 2009-07-30T19:30:39.030Z 2009-07-30T19:30:39.030Z /dev/mem file permissions should be set appropriately AC-3 CM-6 CCE-7029-2 2009-07-30T19:30:39.047Z 2009-07-30T19:30:39.047Z /dev/null file permissions should be set appropriately AC-3 CM-6 CCE-7231-4 2009-07-30T19:30:39.063Z 2009-07-30T19:30:39.063Z resolv.conf file permissions should be set appropriately AC-3 CM-6 CCE-7179-5 2009-07-30T19:30:39.077Z 2009-07-30T19:30:39.077Z /etc/named.conf file permissions should be set appropriately AC-3 CM-6 CCE-6491-5 2009-07-30T19:30:39.110Z 2009-07-30T19:30:39.110Z File permissions should be set appropriately for all user home directories. AC-3 CM-6 CCE-7337-9 2009-07-30T19:30:39.140Z 2009-07-30T19:30:39.140Z /etc/exports file permissions should be set appropriately AC-3 CM-6 CCE-6668-8 2009-07-30T19:30:39.157Z 2009-07-30T19:30:39.157Z /usr/bin/at file permissions should be set appropriately AC-3 CM-6 CCE-6936-9 2009-07-30T19:30:39.170Z 2009-07-30T19:30:39.170Z /usr/bin/rdist file permissions should be set appropriately AC-3 CM-6 CCE-7174-6 2009-07-30T19:30:39.203Z 2009-07-30T19:30:39.203Z /usr/sbin/sync file permissions should be set appropriately AC-3 CM-6 CCE-7063-1 2009-07-30T19:30:39.217Z 2009-07-30T19:30:39.217Z Superuser account home directories' permissions should be set appropriately AC-3 CM-6 CCE-7248-8 2009-07-30T19:30:39.233Z 2009-07-30T19:30:39.233Z /etc/samba/smb.conf file permissions should be set appropriately AC-3 CM-6 CCE-7218-1 2009-07-30T19:30:39.250Z 2009-07-30T19:30:39.250Z smbpassword executable permissions should be set appropriately AC-3 CM-6 CCE-7376-7 2009-07-30T19:30:39.280Z 2009-07-30T19:30:39.280Z Aliases file permissions should be set appropriately AC-3 CM-6 CCE-7217-3 2009-07-30T19:30:39.297Z 2009-07-30T19:30:39.297Z File permissions should be set as appropriate for the log file configured to capture critical sendmail messages. AC-3 CM-6 CCE-7109-2 2009-07-30T19:30:39.313Z 2009-07-30T19:30:39.313Z All files executed through /etc/aliases file entries should have file permissions set appropriately AC-3 CM-6 CCE-6933-6 2009-07-30T19:30:39.343Z 2009-07-30T19:30:39.343Z /bin/csh file permissions should be set appropriately AC-3 CM-6 CCE-7136-5 2009-07-30T19:30:39.360Z 2009-07-30T19:30:39.360Z /bin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-7171-2 2009-07-30T19:30:39.390Z 2009-07-30T19:30:39.390Z /bin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-7250-4 2009-07-30T19:30:39.407Z 2009-07-30T19:30:39.407Z The /bin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-7267-8 2009-07-30T19:30:39.420Z 2009-07-30T19:30:39.420Z /bin/sh file permissions should be set appropriately AC-3 CM-6 CCE-7003-7 2009-07-30T19:30:39.437Z 2009-07-30T19:30:39.437Z /bin/bash file permissions should be set appropriately AC-3 CM-6 CCE-7329-6 2009-07-30T19:30:39.467Z 2009-07-30T19:30:39.467Z /sbin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6721-5 2009-07-30T19:30:39.483Z 2009-07-30T19:30:39.483Z /sbin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-6672-0 2009-07-30T19:30:39.500Z 2009-07-30T19:30:39.500Z /sbin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-7309-8 2009-07-30T19:30:39.517Z 2009-07-30T19:30:39.517Z The /sbin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-7278-5 2009-07-30T19:30:39.547Z 2009-07-30T19:30:39.547Z /sbin/sh file permissions should be set appropriately AC-3 CM-6 CCE-7353-6 2009-07-30T19:30:39.563Z 2009-07-30T19:30:39.563Z /sbin/bash file permissions should be set appropriately AC-3 CM-6 CCE-7269-4 2009-07-30T19:30:39.577Z 2009-07-30T19:30:39.577Z /usr/bin/csh file permissions should be set appropriately AC-3 CM-6 CCE-6490-7 2009-07-30T19:30:39.593Z 2009-07-30T19:30:39.593Z /usr/bin/jsh file permissions should be set appropriately AC-3 CM-6 CCE-7286-8 2009-07-30T19:30:39.610Z 2009-07-30T19:30:39.610Z /usr/bin/ksh file permissions should be set appropriately AC-3 CM-6 CCE-7348-6 2009-07-30T19:30:39.640Z 2009-07-30T19:30:39.640Z The /usr/bin/rsh file should exist or not as appropriate CM-6 CM-7 CCE-7176-1 2009-07-30T19:30:39.657Z 2009-07-30T19:30:39.657Z /usr/bin/sh file permissions should be set appropriately AC-3 CM-6 CCE-6379-2 2009-07-30T19:30:39.670Z 2009-07-30T19:30:39.670Z /usr/bin/bash file permissions should be set appropriately AC-3 CM-6 CCE-7292-6 2009-07-30T19:30:39.687Z 2009-07-30T19:30:39.687Z snmpd.conf file permissions should be set appropriately AC-3 CM-6 CCE-7243-9 2009-07-30T19:30:39.717Z 2009-07-30T19:30:39.717Z /tmp file permissions should be set appropriately AC-3 CM-6 CCE-7355-1 2009-07-30T19:30:39.733Z 2009-07-30T19:30:39.733Z /usr/tmp file permissions should be set appropriately AC-3 CM-6 CCE-7095-3 2009-07-30T19:30:39.750Z 2009-07-30T19:30:39.750Z traceroute executable file permissions should be set appropriately AC-3 CM-6 CCE-7113-4 2009-07-30T19:30:39.780Z 2009-07-30T19:30:39.780Z .Xauthority file permissions should be set appropriately for all users. AC-3 CM-6 CCE-6439-4 2009-07-30T19:30:39.797Z 2009-07-30T19:30:39.797Z /etc/aliases file permissions should be set appropriately AC-3 CM-6 CCE-7144-9 2009-07-30T19:30:39.813Z 2009-07-30T19:30:39.813Z /etc/cron.d/at.allow file permissions should be set appropriately AC-3 CM-6 CCE-6927-8 2009-07-30T19:30:39.827Z 2009-07-30T19:30:39.827Z /etc/cron.d/cron.allow file permissions should be set appropriately AC-3 CM-6 CCE-6645-6 2009-07-30T19:30:39.843Z 2009-07-30T19:30:39.843Z /etc/csh file permissions should be set appropriately AC-3 CM-6 CCE-6768-6 2009-07-30T19:30:39.860Z 2009-07-30T19:30:39.860Z /etc/default/* file permissions should be set appropriately AC-3 CM-6 CCE-6861-9 2009-07-30T19:30:39.890Z 2009-07-30T19:30:39.890Z /etc/default/login file permissions should be set appropriately AC-3 CM-6 CCE-6835-3 2009-07-30T19:30:39.907Z 2009-07-30T19:30:39.907Z /etc/dfs file permissions should be set appropriately AC-3 CM-6 CCE-7293-4 2009-07-30T19:30:39.920Z 2009-07-30T19:30:39.920Z /etc/fs file permissions should be set appropriately AC-3 CM-6 CCE-6624-1 2009-07-30T19:30:39.953Z 2009-07-30T19:30:39.953Z The /etc/ftpusers file should exist or not as appropriate AC-3 CM-6 CM-7 CCE-6950-0 2009-07-30T19:30:39.967Z 2009-07-30T19:30:39.967Z /etc/host.lpd file permissions should be set appropriately AC-3 CM-6 CCE-6610-0 2009-07-30T19:30:39.983Z 2009-07-30T19:30:39.983Z /etc/hostname* file permissions should be set appropriately AC-3 CM-6 CCE-7187-8 2009-07-30T19:30:40.000Z 2009-07-30T19:30:40.000Z /etc/hosts file permissions should be set appropriately AC-3 CM-6 CCE-6953-4 2009-07-30T19:30:40.017Z 2009-07-30T19:30:40.017Z /etc/inetd.conf file permissions should be set appropriately AC-3 CM-6 CCE-6390-9 2009-07-30T19:30:40.047Z 2009-07-30T19:30:40.047Z /etc/issue file permissions should be set appropriately AC-3 CM-6 CCE-7008-6 2009-07-30T19:30:40.063Z 2009-07-30T19:30:40.063Z /etc/jsh file permissions should be set appropriately AC-3 CM-6 CCE-7184-5 2009-07-30T19:30:40.077Z 2009-07-30T19:30:40.077Z /etc/ksh file permissions should be set appropriately AC-3 CM-6 CCE-6392-5 2009-07-30T19:30:40.093Z 2009-07-30T19:30:40.093Z /etc/mail/aliases file permissions should be set appropriately AC-3 CM-6 CCE-6615-9 2009-07-30T19:30:40.110Z 2009-07-30T19:30:40.110Z /etc/motd file permissions should be set appropriately AC-3 CM-6 CCE-7087-0 2009-07-30T19:30:40.127Z 2009-07-30T19:30:40.127Z /etc/netconfig file permissions should be set appropriately AC-3 CM-6 CCE-6805-6 2009-07-30T19:30:40.157Z 2009-07-30T19:30:40.157Z /etc/notrouter file permissions should be set appropriately AC-3 CM-6 CCE-7069-8 2009-07-30T19:30:40.170Z 2009-07-30T19:30:40.170Z /etc/pam.conf file permissions should be set appropriately AC-3 CM-6 CCE-6399-0 2009-07-30T19:30:40.187Z 2009-07-30T19:30:40.187Z /etc/passwd file permissions should be set appropriately AC-3 CM-6 CCE-7289-2 2009-07-30T19:30:40.203Z 2009-07-30T19:30:40.203Z The /etc/rsh file should exist or not as appropriate CM-6 CM-7 CCE-6778-5 2009-07-30T19:30:40.217Z 2009-07-30T19:30:40.217Z /etc/security file permissions should be set appropriately AC-3 CM-6 CCE-6394-1 2009-07-30T19:30:40.250Z 2009-07-30T19:30:40.250Z /etc/services file permissions should be set appropriately AC-3 CM-6 CCE-7022-7 2009-07-30T19:30:40.267Z 2009-07-30T19:30:40.267Z /etc/sh file permissions should be set appropriately AC-3 CM-6 CCE-6991-4 2009-07-30T19:30:40.280Z 2009-07-30T19:30:40.280Z /etc/shadow file permissions should be set appropriately AC-3 CM-6 CCE-6733-0 2009-07-30T19:30:40.297Z 2009-07-30T19:30:40.297Z /etc/syslog.conf file permissions should be set appropriately AC-3 CM-6 CCE-6562-3 2009-07-30T19:30:40.327Z 2009-07-30T19:30:40.327Z /etc/ufs file permissions should be set appropriately AC-3 CM-6 CCE-7011-0 2009-07-30T19:30:40.343Z 2009-07-30T19:30:40.343Z /etc/vfstab file permissions should be set appropriately AC-3 CM-6 CCE-6400-6 2009-07-30T19:30:40.360Z 2009-07-30T19:30:40.360Z /etc/vold.conf file permissions should be set appropriately AC-3 CM-6 CCE-7272-8 2009-07-30T19:30:40.377Z 2009-07-30T19:30:40.377Z /var/adm/loginlog file permissions should be set appropriately AC-3 CM-6 CCE-7347-8 2009-07-30T19:30:40.390Z 2009-07-30T19:30:40.390Z /var/adm/messages file permissions should be set appropriately AC-3 CM-6 CCE-6990-6 2009-07-30T19:30:40.420Z 2009-07-30T19:30:40.420Z /var/adm/sulog file permissions should be set appropriately AC-3 CM-6 CCE-7210-8 2009-07-30T19:30:40.437Z 2009-07-30T19:30:40.437Z /var/adm/utmp file permissions should be set appropriately AC-3 CM-6 CCE-7240-5 2009-07-30T19:30:40.453Z 2009-07-30T19:30:40.453Z /var/adm/wtmp file permissions should be set appropriately AC-3 CM-6 CCE-6928-6 2009-07-30T19:30:40.467Z 2009-07-30T19:30:40.467Z /var/adm/authlog file permissions should be set appropriately AC-3 CM-6 CCE-7020-1 2009-07-30T19:30:40.483Z 2009-07-30T19:30:40.483Z /var/adm/syslog file permissions should be set appropriately AC-3 CM-6 CCE-7159-7 2009-07-30T19:30:40.517Z 2009-07-30T19:30:40.517Z /var/mail file permissions should be set appropriately AC-3 CM-6 CCE-7397-3 2009-07-30T19:30:40.530Z 2009-07-30T19:30:40.530Z /var/tmp file permissions should be set appropriately AC-3 CM-6 CCE-7273-6 2009-07-30T19:30:40.547Z 2009-07-30T19:30:40.547Z /usr/lib/pt_chmod file permissions should be set appropriately AC-3 CM-6 CCE-7366-8 2009-07-30T19:30:40.563Z 2009-07-30T19:30:40.563Z /usr/lib/embedded_us file permissions should be set appropriately AC-3 CM-6 CCE-7340-3 2009-07-30T19:30:40.577Z 2009-07-30T19:30:40.577Z /usr/lib/sendmail file permissions should be set appropriately AC-3 CM-6 CCE-7101-9 2009-07-30T19:30:40.593Z 2009-07-30T19:30:40.593Z /usr/kerberos/bin/rsh file permissions should be set appropriately AC-3 CM-6 CCE-7207-4 2009-07-30T19:30:40.627Z 2009-07-30T19:30:40.627Z /var/spool/mail file permissions should be set appropriately AC-3 CM-6 CCE-7326-2 2009-07-30T19:30:40.640Z 2009-07-30T19:30:40.640Z smbpassword file permissions should be set appropriately AC-3 CM-6 CCE-6405-5 2009-07-30T19:30:40.657Z 2009-07-30T19:30:40.657Z At directory should be owned by an appropriate user AC-3 CM-6 CCE-7393-2 2009-07-30T19:30:40.670Z 2009-07-30T19:30:40.670Z At directory should be owned by an appropriate group AC-3 CM-6 CCE-7203-3 2009-07-30T19:30:40.687Z 2009-07-30T19:30:40.687Z at.allow file should be owned by an appropriate user AC-3 CM-6 CCE-6767-8 2009-07-30T19:30:40.717Z 2009-07-30T19:30:40.717Z at.allow file should be owned by an appropriate group AC-3 CM-6 CCE-6860-1 2009-07-30T19:30:40.733Z 2009-07-30T19:30:40.733Z at.deny file should be owned by an appropriate user AC-3 CM-6 CCE-6452-7 2009-07-30T19:30:40.750Z 2009-07-30T19:30:40.750Z at.deny file should be owned by an appropriate group AC-3 CM-6 CCE-7378-3 2009-07-30T19:30:40.767Z 2009-07-30T19:30:40.767Z Cron directories should be owned by an appropriate user AC-3 CM-6 CCE-7161-3 2009-07-30T19:30:40.797Z 2009-07-30T19:30:40.797Z Cron directories should be owned by an appropriate group AC-3 CM-6 CCE-7236-3 2009-07-30T19:30:40.813Z 2009-07-30T19:30:40.813Z Crontab directories should be owned by an appropriate user AC-3 CM-6 CCE-7351-0 2009-07-30T19:30:40.827Z 2009-07-30T19:30:40.827Z Crontab directories should be owned by an appropriate group AC-3 CM-6 CCE-6601-9 2009-07-30T19:30:40.843Z 2009-07-30T19:30:40.843Z cron.allow file should be owned by an appropriate user AC-3 CM-6 CCE-6580-5 2009-07-30T19:30:40.877Z 2009-07-30T19:30:40.877Z cron.allow file should be owned by an appropriate group AC-3 CM-6 CCE-7225-6 2009-07-30T19:30:40.907Z 2009-07-30T19:30:40.907Z cron.deny should be owned by an appropriate user AC-3 CM-6 CCE-7305-6 2009-07-30T19:30:40.920Z 2009-07-30T19:30:40.920Z cron.deny data should be owned by an appropriate group AC-3 CM-6 CCE-7283-5 2009-07-30T19:30:40.953Z 2009-07-30T19:30:40.953Z crontab files should be owned by an appropriate user AC-3 CM-6 CCE-6670-4 2009-07-30T19:30:40.967Z 2009-07-30T19:30:40.967Z crontab files should be owned by an appropriate group AC-3 CM-6 CCE-7115-9 2009-07-30T19:30:41.000Z 2009-07-30T19:30:41.000Z /etc/resolv.conf file should be owned by an appropriate user AC-3 CM-6 CCE-7400-5 2009-07-30T19:30:41.030Z 2009-07-30T19:30:41.030Z /etc/resolv.conf file should be owned by an appropriate group AC-3 CM-6 CCE-7242-1 2009-07-30T19:30:41.063Z 2009-07-30T19:30:41.063Z /etc/named.boot file should be owned by an appropriate user AC-3 CM-6 CCE-7304-9 2009-07-30T19:30:41.077Z 2009-07-30T19:30:41.077Z /etc/named.boot file should be owned by an appropriate group AC-3 CM-6 CCE-7092-0 2009-07-30T19:30:41.110Z 2009-07-30T19:30:41.110Z /etc/named.conf file should be owned by an appropriate user AC-3 CM-6 CCE-7308-0 2009-07-30T19:30:41.127Z 2009-07-30T19:30:41.127Z /etc/named.conf file should be owned by an appropriate group AC-3 CM-6 CCE-7306-4 2009-07-30T19:30:41.140Z 2009-07-30T19:30:41.140Z DEPRECATED. CCE-7398-1 2009-07-30T19:30:41.157Z 2009-07-30T19:30:41.157Z DEPRECATED. CCE-6459-2 2009-07-30T19:30:41.187Z 2009-07-30T19:30:41.187Z DEPRECATED. CCE-7035-9 2009-07-30T19:30:41.203Z 2009-07-30T19:30:41.203Z DEPRECATED. CCE-7110-0 2009-07-30T19:30:41.217Z 2009-07-30T19:30:41.217Z DEPRECATED. CCE-7440-1 2009-07-30T19:30:41.233Z 2009-07-30T19:30:41.233Z DEPRECATED. CCE-7453-4 2009-07-30T19:30:41.267Z 2009-07-30T19:30:41.267Z DEPRECATED. CCE-7052-4 2009-07-30T19:30:41.280Z 2009-07-30T19:30:41.280Z DEPRECATED. CCE-7457-5 2009-07-30T19:30:41.297Z 2009-07-30T19:30:41.297Z Each user home directory should be owned by an appropriate user. AC-3 CM-6 CCE-7268-6 2009-07-30T19:30:41.313Z 2009-07-30T19:30:41.313Z Each user home directory should be owned by an appropriate group. AC-3 CM-6 CCE-7237-1 2009-07-30T19:30:41.327Z 2009-07-30T19:30:41.327Z inetd.conf file should be owned by an appropriate user AC-3 CM-6 CCE-7147-2 2009-07-30T19:30:41.360Z 2009-07-30T19:30:41.360Z inetd.conf file should be owned by an appropriate group AC-3 CM-6 CCE-7363-5 2009-07-30T19:30:41.377Z 2009-07-30T19:30:41.377Z /etc/exports should be owned by an appropriate user AC-3 CM-6 CCE-6737-1 2009-07-30T19:30:41.390Z 2009-07-30T19:30:41.390Z /etc/exports should be owned by an appropriate group AC-3 CM-6 CCE-7459-1 2009-07-30T19:30:41.407Z 2009-07-30T19:30:41.407Z Exported files and directories should be owned by an appropriate user AC-3 CM-6 CCE-8359-2 2009-07-30T19:30:41.420Z 2009-07-30T19:30:41.420Z Exported files and directories should be owned by an appropriate group AC-3 CM-6 CCE-7434-4 2009-07-30T19:30:41.453Z 2009-07-30T19:30:41.453Z DEPRECATED. CCE-7276-9 2009-07-30T19:30:41.467Z 2009-07-30T19:30:41.467Z DEPRECATED. CCE-7064-9 2009-07-30T19:30:41.483Z 2009-07-30T19:30:41.483Z DEPRECATED. CCE-7407-0 2009-07-30T19:30:41.500Z 2009-07-30T19:30:41.500Z DEPRECATED. CCE-7359-3 2009-07-30T19:30:41.530Z 2009-07-30T19:30:41.530Z DEPRECATED. CCE-7280-1 2009-07-30T19:30:41.547Z 2009-07-30T19:30:41.547Z DEPRECATED. CCE-6469-1 2009-07-30T19:30:41.563Z 2009-07-30T19:30:41.563Z /etc/services file should be owned by an appropriate user AC-3 CM-6 CCE-6474-1 2009-07-30T19:30:41.577Z 2009-07-30T19:30:41.577Z /etc/services file should be owned by an appropriate group AC-3 CM-6 CCE-6729-8 2009-07-30T19:30:41.610Z 2009-07-30T19:30:41.610Z DEPRECATED. CCE-7430-2 2009-07-30T19:30:41.627Z 2009-07-30T19:30:41.627Z DEPRECATED. CCE-7358-5 2009-07-30T19:30:41.640Z 2009-07-30T19:30:41.640Z /etc/notrouter file should be owned by an appropriate user AC-3 CM-6 CCE-7438-5 2009-07-30T19:30:41.657Z 2009-07-30T19:30:41.657Z /etc/notrouter file should be owned by an appropriate group AC-3 CM-6 CCE-7262-9 2009-07-30T19:30:41.687Z 2009-07-30T19:30:41.687Z DEPRECATED. CCE-6479-0 2009-07-30T19:30:41.703Z 2009-07-30T19:30:41.703Z DEPRECATED. CCE-7125-8 2009-07-30T19:30:41.717Z 2009-07-30T19:30:41.717Z /etc/samba/smb.conf file should be owned by an appropriate user AC-3 CM-6 CCE-7282-7 2009-07-30T19:30:41.733Z 2009-07-30T19:30:41.733Z /etc/samba/smb.conf file should be owned by an appropriate group AC-3 CM-6 CCE-7471-6 2009-07-30T19:30:41.767Z 2009-07-30T19:30:41.767Z smbpasswd executable should be owned by an appropriate user AC-3 CM-6 CCE-7441-9 2009-07-30T19:30:41.780Z 2009-07-30T19:30:41.780Z smbpasswd executable should be owned by an appropriate group AC-3 CM-6 CCE-6850-2 2009-07-30T19:30:41.797Z 2009-07-30T19:30:41.797Z DEPRECATED. CCE-6480-8 2009-07-30T19:30:41.813Z 2009-07-30T19:30:41.813Z DEPRECATED. CCE-7071-4 2009-07-30T19:30:41.827Z 2009-07-30T19:30:41.827Z DEPRECATED. CCE-7296-7 2009-07-30T19:30:41.860Z 2009-07-30T19:30:41.860Z DEPRECATED. CCE-6886-6 2009-07-30T19:30:41.877Z 2009-07-30T19:30:41.877Z Programs executed through aliases file entries should be owned by an appropriate user AC-3 CM-6 CCE-7401-3 2009-07-30T19:30:41.890Z 2009-07-30T19:30:41.890Z Programs executed through aliases file entries should be owned by an appropriate group AC-3 CM-6 CCE-7368-4 2009-07-30T19:30:41.920Z 2009-07-30T19:30:41.920Z DEPRECATED. CCE-7352-8 2009-07-30T19:30:41.937Z 2009-07-30T19:30:41.937Z DEPRECATED. CCE-7056-5 2009-07-30T19:30:41.953Z 2009-07-30T19:30:41.953Z DEPRECATED. CCE-7460-9 2009-07-30T19:30:41.967Z 2009-07-30T19:30:41.967Z snmpd.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6481-6 2009-07-30T19:30:41.983Z 2009-07-30T19:30:41.983Z snmpd.conf file should be owned by an appropriate group AC-3 CM-6 CCE-7241-3 2009-07-30T19:30:42.017Z 2009-07-30T19:30:42.017Z /etc/syslog.conf file should be owned by an appropriate user AC-3 CM-6 CCE-7404-7 2009-07-30T19:30:42.030Z 2009-07-30T19:30:42.030Z /etc/syslog.conf file should be owned by an appropriate group AC-3 CM-6 CCE-6495-6 2009-07-30T19:30:42.047Z 2009-07-30T19:30:42.047Z traceroute executable should be owned by an appropriate user AC-3 CM-6 CCE-6633-2 2009-07-30T19:30:42.063Z 2009-07-30T19:30:42.063Z traceroute executable should be owned by an appropriate group AC-3 CM-6 CCE-7461-7 2009-07-30T19:30:42.093Z 2009-07-30T19:30:42.093Z /usr/lib/sendmail file should be owned by an appropriate user AC-3 CM-6 CCE-7078-9 2009-07-30T19:30:42.110Z 2009-07-30T19:30:42.110Z /usr/lib/sendmail file should be owned by an appropriate group AC-3 CM-6 CCE-7300-7 2009-07-30T19:30:42.127Z 2009-07-30T19:30:42.127Z /etc/passwd file should be owned by an appropriate user AC-3 CM-6 CCE-7270-2 2009-07-30T19:30:42.157Z 2009-07-30T19:30:42.157Z /etc/passwd file should be owned by an appropriate group AC-3 CM-6 CCE-7076-3 2009-07-30T19:30:42.187Z 2009-07-30T19:30:42.187Z /etc/shadow file should be owned by an appropriate user AC-3 CM-6 CCE-6904-7 2009-07-30T19:30:42.203Z 2009-07-30T19:30:42.203Z /etc/shadow file should be owned by an appropriate group AC-3 CM-6 CCE-6983-1 2009-07-30T19:30:42.233Z 2009-07-30T19:30:42.233Z smbpasswd file should be owned by an appropriate user AC-3 CM-6 CCE-7247-0 2009-07-30T19:30:42.250Z 2009-07-30T19:30:42.250Z smbpasswd file should be owned by an appropriate group AC-3 CM-6 CCE-7238-9 2009-07-30T19:30:42.267Z 2009-07-30T19:30:42.267Z Environmental variable PATH for superuser accounts should or should not contain world-writable files as appropriate AC-3 CM-6 CCE-7375-9 2009-07-30T19:30:42.280Z 2009-07-30T19:30:42.280Z Environmental variable PATH for superuser accounts should not contain the current directory as the first or last entry AC-3 CM-6 CCE-7458-3 2009-07-30T19:30:42.313Z 2009-07-30T19:30:42.313Z The current wokring directory should or should not be added to the environmental variable PATH by global initialization files as appropriate AC-3 CM-6 CCE-7155-5 2009-07-30T19:30:42.327Z 2009-07-30T19:30:42.327Z The current working directory should or should not be added to the environmental variable PATH by local initialization files as appropriate AC-3 CM-6 CCE-7481-5 2009-07-30T19:30:42.343Z 2009-07-30T19:30:42.343Z DEPRECATED. CCE-7331-2 2009-07-30T19:30:42.377Z 2009-07-30T19:30:42.377Z The current directory should or should not be added to the environmental variable PATH by run control scripts as appropriate AC-3 CM-6 CCE-7361-9 2009-07-30T19:30:42.390Z 2009-07-30T19:30:42.390Z The system umask should be set appropriately CM-6 CM-7 CCE-6921-1 2009-07-30T19:30:42.407Z 2009-07-30T19:30:42.407Z The user umask should be set appropriately CM-6 CM-7 CCE-6503-7 2009-07-30T19:30:42.437Z 2009-07-30T19:30:42.437Z DEPRECATED in favor of CCE-7736-2. CCE-7060-7 2009-07-30T19:30:42.453Z 2009-07-30T19:30:42.453Z DEPRECATED in favor of CCE-8221-4. CCE-7497-1 2009-07-30T19:30:42.467Z 2009-07-30T19:30:42.467Z DEPRECATED in favor of CCE-7736-2. CCE-6787-6 2009-07-30T19:30:42.500Z 2009-07-30T19:30:42.500Z DEPRECATED in favor of CCE-8221-4. CCE-7736-2 2009-07-30T19:30:42.517Z 2009-07-30T19:30:42.517Z The cron.allow file should be configured with the set of users permitted to use the cron facility as appropriate. CM-7 CCE-8221-4 2009-07-30T19:30:42.530Z 2009-07-30T19:30:42.530Z The cron.deny file should be configured with the set of users not permitted to use the cron facility as appropriate. CM-7 CCE-6998-9 2009-07-30T19:30:42.563Z 2009-07-30T19:30:42.563Z Cron logging should be enabled or disabled as appropriate AC-3 CM-6 CCE-7206-6 2009-07-30T19:30:42.577Z 2009-07-30T19:30:42.577Z DEPRECATED in favor of CCE-8171-1. CCE-7345-2 2009-07-30T19:30:42.593Z 2009-07-30T19:30:42.593Z DEPRECATED in favor of CCE-7839-4. CCE-8171-1 2009-07-30T19:30:42.627Z 2009-07-30T19:30:42.627Z The at.allow file should be configured with the set of users permitted to use the at facility as appropriate. AC-3 AC-5 CM-6 CCE-7839-4 2009-07-30T19:30:42.640Z 2009-07-30T19:30:42.640Z The at.deny file should be configured with the set of users not permitted to use the at facility as appropriate. AC-3 AC-5 CM-6 CCE-6697-7 2009-07-30T19:30:42.670Z 2009-07-30T19:30:42.670Z /etc/init.d file permissions should be set appropriately AC-3 CM-6 CCE-7010-2 2009-07-30T19:30:42.687Z 2009-07-30T19:30:42.687Z /usr/aset/userlist file permissions should be set appropriately AC-3 CM-6 CCE-7424-5 2009-07-30T19:30:42.703Z 2009-07-30T19:30:42.703Z /etc/rmmount.conf file permissions should be set appropriately AC-3 CM-6 CCE-6511-0 2009-07-30T19:30:42.733Z 2009-07-30T19:30:42.733Z /var/log/pamlog file permissions should be set appropriately AC-3 CM-6 CCE-6517-7 2009-07-30T19:30:42.750Z 2009-07-30T19:30:42.750Z /etc/security/audit_control file permissions should be set appropriately AC-3 CM-6 CCE-6549-0 2009-07-30T19:30:42.780Z 2009-07-30T19:30:42.780Z /etc/security/audit_class file permissions should be set appropriately AC-3 CM-6 CCE-6550-8 2009-07-30T19:30:42.797Z 2009-07-30T19:30:42.797Z /etc/security/audit_event file permissions should be set appropriately AC-3 CM-6 CCE-6880-9 2009-07-30T19:30:42.813Z 2009-07-30T19:30:42.813Z /usr/aset/userlist file permissions should be set appropriately AC-3 CM-6 CCE-7470-8 2009-07-30T19:30:42.843Z 2009-07-30T19:30:42.843Z DEPRECATED in favor of CE-8488-9, CCE-8494-7 and CCE-8314-7. CCE-8488-9 2009-07-30T19:30:42.860Z 2009-07-30T19:30:42.860Z /etc/auto.master file should be owned by an appropriate user AC-3 CM-6 CCE-8494-7 2009-07-30T19:30:42.890Z 2009-07-30T19:30:42.890Z /etc/auto.misc file should be owned by an appropriate user AC-3 CM-6 CCE-8314-7 2009-07-30T19:30:42.920Z 2009-07-30T19:30:42.920Z /etc/auto.net file should be owned by an appropriate user AC-3 CM-6 CCE-7380-9 2009-07-30T19:30:42.937Z 2009-07-30T19:30:42.937Z /etc/rmmount.conf file should be owned by an appropriate user AC-3 CM-6 CCE-6582-1 2009-07-30T19:30:42.967Z 2009-07-30T19:30:42.967Z /var/log/pamlog file should be owned by an appropriate user AC-3 CM-6 CCE-7406-2 2009-07-30T19:30:42.983Z 2009-07-30T19:30:42.983Z /etc/security/audit_control file should be owned by an appropriate user AC-3 CM-6 CCE-7190-2 2009-07-30T19:30:43.000Z 2009-07-30T19:30:43.000Z /etc/security/audit_class file should be owned by an appropriate user AC-3 CM-6 CCE-7265-2 2009-07-30T19:30:43.017Z 2009-07-30T19:30:43.017Z /etc/security/audit_event file should be owned by an appropriate user AC-3 CM-6 CCE-6563-1 2009-07-30T19:30:43.047Z 2009-07-30T19:30:43.047Z DEPRECATED. CCE-6565-6 2009-07-30T19:30:43.077Z 2009-07-30T19:30:43.077Z /usr/aset/userlist file should be owned by an appropriate group AC-3 CM-6 CCE-7223-1 2009-07-30T19:30:43.110Z 2009-07-30T19:30:43.110Z /etc/rmmount.conf file should be owned by an appropriate group AC-3 CM-6 CCE-7394-0 2009-07-30T19:30:43.127Z 2009-07-30T19:30:43.127Z /var/log/pamlog file should be owned by an appropriate group AC-3 CM-6 CCE-7222-3 2009-07-30T19:30:43.140Z 2009-07-30T19:30:43.140Z /etc/security/audit_control file should be owned by an appropriate group AC-3 CM-6 CCE-7553-1 2009-07-30T19:30:43.170Z 2009-07-30T19:30:43.170Z /etc/security/audit_class file should be owned by an appropriate group AC-3 CM-6 CCE-7444-3 2009-07-30T19:30:43.187Z 2009-07-30T19:30:43.187Z /etc/security/audit_event file should be owned by an appropriate group AC-3 CM-6 CCE-6568-0 2009-07-30T19:30:43.203Z 2009-07-30T19:30:43.203Z DEPRECATED in favor of CCE-8665-2, CCE-7766-9, CCE-8264-4. CCE-8665-2 2009-07-30T19:30:43.217Z 2009-07-30T19:30:43.217Z /etc/auto.master file should be owned by an appropriate group AC-3 CM-6 CCE-7766-9 2009-07-30T19:30:43.250Z 2009-07-30T19:30:43.250Z /etc/auto.misc file should be owned by an appropriate group AC-3 CM-6 CCE-8264-4 2009-07-30T19:30:43.267Z 2009-07-30T19:30:43.267Z /etc/auto.net file should be owned by an appropriate group AC-3 CM-6 CCE-6575-5 2009-07-30T19:30:43.280Z 2009-07-30T19:30:43.280Z DEPRECATED. CCE-7025-0 2009-07-30T19:30:43.297Z 2009-07-30T19:30:43.297Z DEPRECATED. CCE-7126-6 2009-07-30T19:30:43.327Z 2009-07-30T19:30:43.327Z Generic PAM authentication should be enabled or disabled as appropriate AC-3 CCE-7491-4 2009-07-30T19:30:43.343Z 2009-07-30T19:30:43.343Z rsh auth should be allowed or disallowed by PAM as appropriate CM-7 CCE-7482-3 2009-07-30T19:30:43.360Z 2009-07-30T19:30:43.360Z rlogin auth should be allowed by pam.d or not as appropriate CM-7 CCE-7244-7 2009-07-30T19:30:43.377Z 2009-07-30T19:30:43.377Z PAM access to /dev/console should be logged at an appropriate level or not logged as appropriate AU-2 CM-6 CM-7 CCE-7323-9 2009-07-30T19:30:43.407Z 2009-07-30T19:30:43.407Z PAM should be logged at an appropriate level AU-2 CM-6 CM-7 CCE-7420-3 2009-07-30T19:30:43.420Z 2009-07-30T19:30:43.420Z /usr/aset/masters/uid_aliases should contain an appropriate listing of aliases AC-3 CM-6 CCE-7341-1 2009-07-30T19:30:43.437Z 2009-07-30T19:30:43.437Z The Solaris Automated Security Enhancement Tool (ASET) tune.low file should exist or not as appropriate CM-6 CM-7 CCE-7169-6 2009-07-30T19:30:43.453Z 2009-07-30T19:30:43.453Z The Solaris Automated Security Enhancement Tool (ASET) tune.med file should exist or not as appropriate CM-6 CM-7 CCE-6935-1 2009-07-30T19:30:43.483Z 2009-07-30T19:30:43.483Z The Solaris Automated Security Enhancement Tool (ASET) tune.high file should exist or not as appropriate CM-6 CM-7 CCE-7548-1 2009-07-30T19:30:43.517Z 2009-07-30T19:30:43.517Z The uid_aliases file should exist or not as appropriate CM-6 CM-7 CCE-7486-4 2009-07-30T19:30:43.547Z 2009-07-30T19:30:43.547Z The low security directory list should be set appropriately CM-6 CM-7 CCE-6891-6 2009-07-30T19:30:43.593Z 2009-07-30T19:30:43.593Z The medium security directory list should be set appropriately CM-6 CM-7 CCE-7468-2 2009-07-30T19:30:43.610Z 2009-07-30T19:30:43.610Z The high security directory list should be set appropriately CM-6 CM-7 CCE-7310-6 2009-07-30T19:30:43.640Z 2009-07-30T19:30:43.640Z The ASET periodic schedule setting should be set appropriately CM-6 CM-7 CCE-7344-5 2009-07-30T19:30:43.687Z 2009-07-30T19:30:43.687Z The UID aliases pointer should be set appropriately CM-6 CM-7 CCE-7547-3 2009-07-30T19:30:43.717Z 2009-07-30T19:30:43.717Z Users should be listed in the ASET userlist file or not as appropriate CM-6 CM-7 CCE-7563-0 2009-07-30T19:30:43.733Z 2009-07-30T19:30:43.733Z ASET should check NIS+ tables or not as appropriate CM-6 CCE-7514-3 2009-07-30T19:30:43.750Z 2009-07-30T19:30:43.750Z EEPROM security mode should be set appropriately SC-7 CCE-7127-4 2009-07-30T19:30:43.767Z 2009-07-30T19:30:43.767Z EEPROM warning banner should be set appropriately AC-3 AC-8 CM-6 CCE-7016-9 2009-07-30T19:30:43.797Z 2012-01-05T04:34:55.517Z The noexec_user_stack flag should be set on the user stack or not as appropriate AC-6 CM-6 CM-7 CCE-6579-7 2009-07-30T19:30:43.813Z 2009-07-30T19:30:43.813Z Attempted stack eploit logging should be enabled or disabled as appropriate AU-2 SI-4 CCE-7141-5 2009-07-30T19:30:43.827Z 2009-07-30T19:30:43.827Z The default login console should be set appropriately CM-7 CCE-6581-3 2009-07-30T19:30:43.843Z 2009-07-30T19:30:43.843Z Default sleeptime should be set appropriately CM-6 CCE-7188-6 2009-07-30T19:30:43.877Z 2009-07-30T19:30:43.877Z Default number of allowed retries should be set appropriately AC-7 CCE-7315-5 2009-07-30T19:30:43.890Z 2009-07-30T19:30:43.890Z The default number of syslog failed logins retried should be set appropriately AC-7 CM-6 CCE-7302-3 2009-07-30T19:30:43.907Z 2009-07-30T19:30:43.907Z Default su console should be set appropriately AC-7 CM-6 CCE-7542-4 2009-07-30T19:30:43.920Z 2009-07-30T19:30:43.920Z auditing should be logged to an appropriate directory CM-6 CCE-7009-4 2009-07-30T19:30:43.953Z 2009-07-30T19:30:43.953Z login and logout events (lo class) should be audited or not as appropriate AU-2 CCE-7445-0 2009-07-30T19:30:43.967Z 2009-07-30T19:30:43.967Z DEPRECATED. CCE-6977-3 2009-07-30T19:30:43.983Z 2009-07-30T19:30:43.983Z Non attributable events (na class) should be audited or not as appropriate AU-2 CM-6 CM-7 CCE-7577-0 2009-07-30T19:30:44.017Z 2009-07-30T19:30:44.017Z The free space threshold to warn at should be set appropriately CM-6 CCE-6600-1 2009-07-30T19:30:44.030Z 2009-07-30T19:30:44.030Z DEPRECATED. CCE-7437-7 2009-07-30T19:30:44.047Z 2009-07-30T19:30:44.047Z DEPRECATED in favor of CCE-7009-4. CCE-7388-2 2009-07-30T19:30:44.077Z 2009-07-30T19:30:44.077Z DEPRECATED in favor of CCE-7009-4. CCE-7586-1 2009-07-30T19:30:44.093Z 2012-01-05T04:34:56.050Z Password changes should be audited or not as appropriate AU-2 IA-5 CCE-6899-9 2009-07-30T19:30:44.110Z 2009-07-30T19:30:44.110Z su usage should be audited or not as appropriate AU-2 CCE-6868-4 2009-07-30T19:30:44.140Z 2009-07-30T19:30:44.140Z Creation/modification of superuser groups should be audited or not as appropriate AC-6 CM-6 CCE-7483-1 2009-07-30T19:30:44.157Z 2009-07-30T19:30:44.157Z Clearing of the audit log file should be audited or not as appropriate AU-2 AU-3 CCE-7580-4 2009-07-30T19:30:44.187Z 2009-07-30T19:30:44.187Z Use of identification/authorization mechanisms should be audited or not as appropriate AC-3 AU-2 IA-5 CCE-6606-8 2009-07-30T19:30:44.203Z 2012-01-05T04:34:56.267Z chmod command should be audited or not as appropriate CM-6 CCE-6929-4 2009-07-30T19:30:44.217Z 2009-07-30T19:30:44.217Z The user audit file should contain an appropriate set of never-audit flags AU-2 CCE-6793-4 2009-07-30T19:30:44.250Z 2009-07-30T19:30:44.250Z The /var/log/authlog log should be enabled or disabled as appropriate AU-2 CM-6 CCE-7559-8 2009-07-30T19:30:44.267Z 2009-07-30T19:30:44.267Z The /var/log/syslog log should be enabled or disabled as appropriate AU-2 CM-6 CCE-7510-1 2009-07-30T19:30:44.280Z 2009-07-30T19:30:44.280Z The /var/adm/messages log should be enabled or disabled as appropriate AU-2 CM-6 CCE-7399-9 2009-07-30T19:30:44.313Z 2009-07-30T19:30:44.313Z The /var/adm/sulog log should be enabled or disabled as appropriate AU-2 CM-6 CM-7 CCE-7501-0 2009-07-30T19:30:44.327Z 2009-07-30T19:30:44.327Z The /var/adm/utmp[x] log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6609-2 2009-07-30T19:30:44.343Z 2009-07-30T19:30:44.343Z The /var/adm/wtmp[x] log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6619-1 2009-07-30T19:30:44.360Z 2009-07-30T19:30:44.360Z The /var/adm/sshlog log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6730-6 2009-07-30T19:30:44.390Z 2009-07-30T19:30:44.390Z The /var/log/pamlog log should be enabled or disabled as appropriate AU-2 CM-6 CCE-6910-4 2009-07-30T19:30:44.407Z 2009-07-30T19:30:44.407Z DEPRECATED in favor of CCE-7009-4. CCE-7254-6 2009-07-30T19:30:44.420Z 2009-07-30T19:30:44.420Z su usage should be audited or not as appropriate AU-2 CCE-6690-2 2009-07-30T19:30:44.437Z 2009-07-30T19:30:44.437Z auth usage should be audited or not as appropriate AU-2 CCE-7474-0 2009-07-30T19:30:44.467Z 2009-07-30T19:30:44.467Z /var directory should be owned by an appropriate user AC-3 CM-6 CCE-7320-5 2009-07-30T19:30:44.483Z 2009-07-30T19:30:44.483Z /var/log directory should be owned by an appropriate user CM-6 CCE-7584-6 2009-07-30T19:30:44.500Z 2009-07-30T19:30:44.500Z /var/adm directory should be owned by an appropriate user AC-3 CM-6 CCE-7412-0 2009-07-30T19:30:44.517Z 2009-07-30T19:30:44.517Z DEPRECATED. CCE-7492-2 2009-07-30T19:30:44.547Z 2009-07-30T19:30:44.547Z BSM auditing should be enabled or disabled as appropriate AU-2 CCE-7515-0 2009-07-30T19:30:44.563Z 2009-07-30T19:30:44.563Z DEPRECATED. CCE-7216-5 2009-07-30T19:30:44.577Z 2009-07-30T19:30:44.577Z DEPRECATED. CCE-7436-9 2009-07-30T19:30:44.593Z 2009-07-30T19:30:44.593Z DEPRECATED. CCE-7312-2 2009-07-30T19:30:44.627Z 2009-07-30T19:30:44.627Z DEPRECATED. CCE-7533-3 2009-07-30T19:30:44.640Z 2009-07-30T19:30:44.640Z The TCP max connection limit should be set appropriately AC-4 SC-5 SC-7 CCE-6620-9 2009-07-30T19:30:44.657Z 2009-07-30T19:30:44.657Z The TCP abort interval should be set appropriately AC-4 SC-5 SC-7 CCE-7503-6 2009-07-30T19:30:44.687Z 2009-07-30T19:30:44.687Z Forwarding of directed broadcasts should be enabled or disabled as appropriate CM-7 CCE-6640-7 2009-07-30T19:30:44.703Z 2009-07-30T19:30:44.703Z Response to echo (ping) request broadcasts should be enabled or disabled as appropriate CM-7 CCE-7130-8 2009-07-30T19:30:44.717Z 2009-07-30T19:30:44.717Z Response to ICMP timestamp requests should be enabled or disabled as appropriate CM-7 CCE-7496-3 2009-07-30T19:30:44.750Z 2009-07-30T19:30:44.750Z Response to ICMP timestamp broadcast requests should be enabled or disabled as appropriate CM-7 CCE-6741-3 2009-07-30T19:30:44.767Z 2009-07-30T19:30:44.767Z Response to mask addresses should be enabled or disabled as appropriate CM-7 CCE-7335-3 2009-07-30T19:30:44.780Z 2009-07-30T19:30:44.780Z ARP cleanup interval should be set appropriately CM-6 CCE-7432-8 2009-07-30T19:30:44.813Z 2009-07-30T19:30:44.813Z ARP IRE interval should be set appropriately CM-6 CCE-7449-2 2009-07-30T19:30:44.827Z 2009-07-30T19:30:44.827Z IP redirects should be followed or ignored as appropriate AC-3 CM-6 CM-7 SC-5 CCE-7414-6 2009-07-30T19:30:44.843Z 2009-07-30T19:30:44.843Z Sending of IP redirects should be enabled or disabled as appropriate CM-6 CCE-6641-5 2009-07-30T19:30:44.877Z 2009-07-30T19:30:44.877Z Forwarding of source routed packets should be enabled or disabled as appropriate CM-7 CCE-6646-4 2009-07-30T19:30:44.890Z 2009-07-30T19:30:44.890Z IP forwarding should be enabled or disabled as appropriate AC-3 CM-6 CM-7 SC-5 CCE-6865-0 2009-07-30T19:30:44.907Z 2009-07-30T19:30:44.907Z Strict destination multihoming should be enabled or disabled as appropriate CM-7 CCE-7626-5 2009-07-30T19:30:44.920Z 2009-07-30T19:30:44.920Z Forwarding of source routed IPv6 packets should be enabled or disabled as appropriate CM-7 CCE-7107-6 2009-07-30T19:30:44.953Z 2009-07-30T19:30:44.953Z IPv6 forwarding should be enabled or disabled as appropriate CM-6 CM-7 CCE-7488-0 2009-07-30T19:30:44.967Z 2009-07-30T19:30:44.967Z TCP reverse source routes should be enabled or disabled as appropriate CM-7 CCE-6656-3 2009-07-30T19:30:44.983Z 2009-07-30T19:30:44.983Z Routing should be enabled or disabled as appropriate CM-7 CCE-7653-9 2009-07-30T19:30:45.017Z 2009-07-30T19:30:45.017Z Caching of the RBAC prof_attr should be enabled or disabled as appropriate CM-6 CCE-7057-3 2009-07-30T19:30:45.030Z 2009-07-30T19:30:45.030Z Multicast route assignment should be enabled or disabled as appropriate CM-7 CCE-7405-4 2009-07-30T19:30:45.047Z 2009-07-30T19:30:45.047Z Print services through inetd should be enabled or disabled as appropriate CM-7 CCE-7000-3 2009-07-30T19:30:45.063Z 2009-07-30T19:30:45.063Z NFS server logging should be enabled or disabled as appropriate AU-1 AU-2 CCE-6876-7 2009-07-30T19:30:45.093Z 2009-07-30T19:30:45.093Z Global initialization files should allow or deny write access to the terminal as appropriate CM-7 CCE-7343-7 2009-07-30T19:30:45.110Z 2009-07-30T19:30:45.110Z DEPRECATED. CCE-7607-5 2009-07-30T19:30:45.127Z 2009-07-30T19:30:45.127Z DEPRECATED. CCE-7581-2 2009-07-30T19:30:45.140Z 2009-07-30T19:30:45.140Z Caching of the RBAC exec_attr should be enabled or disabled as appropriate CM-6 CCE-6673-8 2009-07-30T19:30:45.170Z 2009-07-30T19:30:45.170Z Caching of the RBAC user_attr should be enabled or disabled as appropriate CM-6 CCE-8236-2 2009-07-30T19:30:45.187Z 2009-07-30T19:30:45.187Z The chmod system call should be audited or not as appropriate AU-2 CCE-6659-7 2009-07-30T19:30:45.203Z 2009-07-30T19:30:45.203Z The chown system call should be audited or not as appropriate AU-2 CCE-6661-3 2009-07-30T19:30:45.233Z 2009-07-30T19:30:45.233Z The fchmod system call should be audited or not as appropriate AU-3 CCE-7590-3 2009-07-30T19:30:45.250Z 2009-07-30T19:30:45.250Z The fchown system call should be audited or not as appropriate AU-3 CCE-6665-4 2009-07-30T19:30:45.267Z 2009-07-30T19:30:45.267Z The lchown system call should be audited or not as appropriate AU-3 CCE-7493-0 2009-07-30T19:30:45.297Z 2009-07-30T19:30:45.297Z The setgroups system call should be audited or not as appropriate AU-9 CCE-7277-7 2009-07-30T19:30:45.313Z 2009-07-30T19:30:45.313Z The setpgrp system call should be audited or not as appropriate AU-9 CCE-6677-9 2009-07-30T19:30:45.343Z 2009-07-30T19:30:45.343Z The setreuid system call should be audited or not as appropriate AU-9 CCE-7526-7 2009-07-30T19:30:45.360Z 2009-07-30T19:30:45.360Z The setregid system call should be audited or not as appropriate AU-9 CCE-7253-8 2009-07-30T19:30:45.390Z 2009-07-30T19:30:45.390Z The setegid system call should be audited or not as appropriate AU-9 CCE-6702-5 2009-07-30T19:30:45.407Z 2009-07-30T19:30:45.407Z The seteuid system call should be audited or not as appropriate AU-9 CCE-7603-4 2009-07-30T19:30:45.437Z 2009-07-30T19:30:45.437Z System ftp logoffs should be audited or not as appropriate AU-2 CCE-6684-5 2009-07-30T19:30:45.453Z 2009-07-30T19:30:45.453Z System telnet logons should be audited or not as appropriate AU-2 CCE-7390-8 2009-07-30T19:30:45.483Z 2009-07-30T19:30:45.483Z System ssh logons should be audited or not as appropriate AU-2 CCE-7178-7 2009-07-30T19:30:45.500Z 2009-07-30T19:30:45.500Z System rlogin logons should be audited or not as appropriate AU-2 CCE-7381-7 2009-07-30T19:30:45.530Z 2009-07-30T19:30:45.530Z System rshd logons should be audited or not as appropriate AU-2 CCE-7521-8 2009-07-30T19:30:45.547Z 2009-07-30T19:30:45.547Z System rexecd logons should be audited or not as appropriate AU-2 CCE-7350-2 2009-07-30T19:30:45.563Z 2009-07-30T19:30:45.563Z System rexd logons should be audited or not as appropriate AU-2 CCE-7588-7 2009-07-30T19:30:45.593Z 2009-07-30T19:30:45.593Z System ftp logons should be audited or not as appropriate AU-2 CCE-7103-5 2009-07-30T19:30:45.610Z 2009-07-30T19:30:45.610Z rlogin auth should be allowed or disallowed by PAM as appropriate CM-7 CCE-6944-3 2009-07-30T19:30:45.640Z 2009-07-30T19:30:45.640Z rlogin auth should be allowed by pam.d or not as appropriate CM-7 CCE-7568-9 2009-07-30T19:30:45.657Z 2009-07-30T19:30:45.657Z Hard core dump size limits should be set appropriately SC-5 CCE-7665-3 2009-07-30T19:30:45.670Z 2009-07-30T19:30:45.670Z Root logins should be allowed or not as appropriate from SSH consoles AC-1 SC-7 CCE-4508-8 2009-07-30T19:30:45.703Z 2009-07-30T19:30:45.703Z The tooltalk service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4327-3 2009-07-30T19:30:45.717Z 2009-07-30T19:30:45.717Z The calendar manager should be enabled or disabled as appropriate. CM-7 CCE-4468-5 2009-07-30T19:30:45.750Z 2009-07-30T19:30:45.750Z The GNOME logon service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4512-0 2009-07-30T19:30:45.780Z 2009-07-30T19:30:45.780Z The CDE logon service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4375-2 2009-07-30T19:30:45.813Z 2009-07-30T19:30:45.813Z The sendmail services should be enabled or disabled as appropriate. CM-7 CCE-4393-5 2009-07-30T19:30:45.827Z 2009-07-30T19:30:45.827Z The web console should be enabled or disabled as appropriate. CM-7 CCE-3662-4 2009-07-30T19:30:45.860Z 2009-07-30T19:30:45.860Z The WBEM services should be enabled or disabled as appropriate. CM-7 CCE-4442-0 2009-07-30T19:30:45.890Z 2009-07-30T19:30:45.890Z The BSD line printer protocol should be enabled or disabled as appropriate. CM-7 CCE-4596-3 2009-07-30T19:30:45.907Z 2009-07-30T19:30:45.907Z The keyserv service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4486-7 2009-07-30T19:30:45.920Z 2009-07-30T19:30:45.920Z The NIS server daemon should be enabled or disabled as appropriate CM-7 CCE-4362-0 2009-07-30T19:30:45.983Z 2009-07-30T19:30:45.983Z The NIS passwd daemon should be enabled or disabled as appropriate CM-7 CCE-3622-8 2009-07-30T19:30:46.000Z 2009-07-30T19:30:46.000Z The NIS update daemon should be enabled or disabled as appropriate CM-7 CCE-4299-4 2009-07-30T19:30:46.017Z 2009-07-30T19:30:46.017Z The NIS xfr daemon should be enabled or disabled as appropriate CM-7 CCE-4592-2 2009-07-30T19:30:46.047Z 2009-07-30T19:30:46.047Z The NIS client daemons should be enabled or disabled as appropriate CM-7 CCE-4614-4 2009-07-30T19:30:46.063Z 2009-07-30T19:30:46.063Z The nisplus daemons should be enabled or disabled as appropriate CM-7 CCE-4279-6 2009-07-30T19:30:46.077Z 2009-07-30T19:30:46.077Z The ldap cache manager should be enabled or disabled as appropriate CM-7 CCE-4557-5 2009-07-30T19:30:46.110Z 2009-07-30T19:30:46.110Z The Kerberos TGT Expiration warning should be enabled or disabled as appropriate CM-6 CM-7 CCE-4588-0 2009-07-30T19:30:46.127Z 2009-07-30T19:30:46.127Z The Generic Security Service daemons should be enabled or disabled as appropriate CM-6 CM-7 CCE-4354-7 2009-07-30T19:30:46.140Z 2009-07-30T19:30:46.140Z The volfs service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4240-8 2009-07-30T19:30:46.170Z 2009-07-30T19:30:46.170Z The smserver service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4517-9 2009-07-30T19:30:46.187Z 2009-07-30T19:30:46.187Z The Samba smbd service should be enabled or disabled as approriate CM-6 CM-7 CCE-4284-6 2009-07-30T19:30:46.203Z 2009-07-30T19:30:46.203Z The Samba nmbd service should be enabled or disabled as approriate CM-6 CM-7 CCE-4429-7 2009-07-30T19:30:46.233Z 2009-07-30T19:30:46.233Z The automount daemon should be enabled or disabled as appropriate CM-7 CCE-4306-7 2009-07-30T19:30:46.250Z 2009-07-30T19:30:46.250Z The apache web servicer should be enabled or disabled as appropriate CM-6 CM-7 CCE-4499-0 2009-07-30T19:30:46.267Z 2009-07-30T19:30:46.267Z The mpxio-upgrade service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4266-3 2009-07-30T19:30:46.297Z 2009-07-30T19:30:46.297Z The metainit service (Solaris 10 <= 11/06) should be enabled or disabled as appropriate CM-7 CCE-4411-5 2009-07-30T19:30:46.313Z 2009-07-30T19:30:46.313Z The mdmonitor service (Solaris 10 <= 11/06) should be enabled or disabled as appropriate CM-7 CCE-4305-9 2009-07-30T19:30:46.327Z 2009-07-30T19:30:46.327Z The volume manager GUI mdcomm service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4477-6 2009-07-30T19:30:46.343Z 2009-07-30T19:30:46.343Z The meta service should be enabled or disabled as appropriate CM-6 CM-7 CCE-3650-9 2009-07-30T19:30:46.377Z 2009-07-30T19:30:46.377Z The metaed service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4571-6 2009-07-30T19:30:46.390Z 2009-07-30T19:30:46.390Z The metamh service should be enabled or disabled as appropriate CM-6 CM-7 CCE-3950-3 2009-07-30T19:30:46.407Z 2009-07-30T19:30:46.407Z The local rpc port mapping service should be enabled or disabled as appropriate CM-6 CM-7 CCE-4470-1 2009-07-30T19:30:46.437Z 2009-07-30T19:30:46.437Z The Kerberos kadmind service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4598-9 2009-07-30T19:30:46.453Z 2009-07-30T19:30:46.453Z The Kerberos krb5kdc service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4620-1 2009-07-30T19:30:46.467Z 2009-07-30T19:30:46.467Z The Kerberos kpropd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4333-1 2009-07-30T19:30:46.500Z 2009-07-30T19:30:46.500Z The Kerberos ktkt_warnd service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3857-0 2009-07-30T19:30:46.517Z 2009-07-30T19:30:46.517Z NFS server functionality should be enabled or disabled as appropriate. AC-3 CM-6 CCE-4359-6 2009-07-30T19:30:46.530Z 2009-07-30T19:30:46.530Z NFS client functionality should be enabled or disabled as appropriate. AC-3 CM-6 CCE-4615-1 2009-07-30T19:30:46.547Z 2009-07-30T19:30:46.547Z The telnet service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4007-1 2009-07-30T19:30:46.577Z 2009-07-30T19:30:46.577Z The FTP service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3901-6 2009-07-30T19:30:46.593Z 2009-07-30T19:30:46.593Z The BOOTP service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4553-4 2009-07-30T19:30:46.627Z 2009-07-30T19:30:46.627Z The RARP service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4584-9 2009-07-30T19:30:46.640Z 2009-07-30T19:30:46.640Z The DHCP server functionality should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4611-0 2009-07-30T19:30:46.657Z 2009-07-30T19:30:46.657Z The DNS server functionality should be enabled or disabled as appropriate. AC-6 CM-6 CM-7 SC-2 CCE-3655-8 2009-07-30T19:30:46.687Z 2009-07-30T19:30:46.687Z The TFTP server functionality should be configured and enabled or disabled as appropriate. CM-6 CM-7 CCE-4541-9 2009-07-30T19:30:46.703Z 2009-07-30T19:30:46.703Z The BSD print spooler should enabled or disabled as appropriate. CM-7 CCE-4483-4 2009-07-30T19:30:46.717Z 2009-07-30T19:30:46.717Z The Solaris print server functionality should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3663-2 2009-07-30T19:30:46.750Z 2009-07-30T19:30:46.750Z The IPP listener should be enabled or disabled as appropriate. CM-7 CCE-4037-8 2009-07-30T19:30:46.767Z 2009-07-30T19:30:46.767Z The SNMP service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4540-1 2009-07-30T19:30:46.780Z 2009-07-30T19:30:46.780Z The read-only SNMP community string should be set appropriately. AC-3 CM-6 CM-7 IA-5 CCE-4434-7 2009-07-30T19:30:46.813Z 2009-07-30T19:30:46.813Z TCP Wrappers should be enabled or disabled as appropriate for all services. AC-3 CM-6 CM-7 SC-5 CCE-4570-8 2009-07-30T19:30:46.827Z 2009-07-30T19:30:46.827Z The core dump directory owner should be restricted. AC-3 CM-6 CM-7 SC-5 CCE-4478-4 2009-07-30T19:30:46.860Z 2009-07-30T19:30:46.860Z The core dump directory group owner should be restricted. AC-3 CM-6 CM-7 SC-5 CCE-4623-5 2009-07-30T19:30:46.877Z 2009-07-30T19:30:46.877Z File permissions for the core dump directory should be set correctly. AC-3 CM-6 CCE-4522-9 2009-07-30T19:30:46.907Z 2009-07-30T19:30:46.907Z Core dumps should be enabled/disabled as appropriate SC-5 CCE-4297-8 2009-07-30T19:30:46.920Z 2009-07-30T19:30:46.920Z Kernel stack protection should be enabled or disabled as appropriate. CM-7 CCE-4548-4 2009-07-30T19:30:46.937Z 2009-07-30T19:30:46.937Z Strong TCP Sequence numbers should be enabled or disabled as appropriate. CM-7 CCE-4566-6 2009-07-30T19:30:46.967Z 2009-07-30T19:30:46.967Z IPv4 source route forwarding should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-4439-6 2009-07-30T19:30:46.983Z 2009-07-30T19:30:46.983Z IPv6 source route forwarding should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4456-0 2009-07-30T19:30:47.017Z 2009-07-30T19:30:47.017Z Reverse source routed packets should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4602-9 2009-07-30T19:30:47.030Z 2009-07-30T19:30:47.030Z Forwarding broadcasts should be enabled or disabled as appropriate. CM-7 CCE-3752-3 2009-07-30T19:30:47.063Z 2009-07-30T19:30:47.063Z Unestablished tcp connection queue should be set appropriately. AC-4 CM-6 CM-7 SC-7 CCE-4417-2 2009-07-30T19:30:47.077Z 2009-07-30T19:30:47.077Z Established tcp connection queue should be set appropriately. AC-3 CM-6 CCE-4311-7 2009-07-30T19:30:47.093Z 2009-07-30T19:30:47.093Z Respond to ICMP timestamp request should be enabled or disabled. CM-7 CCE-4562-5 2009-07-30T19:30:47.127Z 2009-07-30T19:30:47.127Z Respond to ICMP broadcast timestamp request should be enabled or disabled. CM-7 CCE-4082-4 2009-07-30T19:30:47.140Z 2009-07-30T19:30:47.140Z Respond to ICMP netmask request should be enabled or disabled as appropriate. CM-7 CCE-3681-4 2009-07-30T19:30:47.170Z 2009-07-30T19:30:47.170Z Respond to ICMP echo broadcast request should be enabled or disabled as appropriate. CM-7 CCE-4642-5 2009-07-30T19:30:47.187Z 2009-07-30T19:30:47.187Z The ARP cache cleanup interval should be set appropriately. SC-2 CCE-4532-8 2009-07-30T19:30:47.203Z 2009-07-30T19:30:47.203Z The ARP IRE scan rate should be set appropriately. CM-6 CCE-4624-3 2009-07-30T19:30:47.233Z 2009-07-30T19:30:47.233Z The IPv4 ICMP redirect should be enabled or disabled CM-6 CM-7 CCE-4518-7 2009-07-30T19:30:47.250Z 2009-07-30T19:30:47.250Z The IPv6 ICMP redirect should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4676-3 2009-07-30T19:30:47.267Z 2009-07-30T19:30:47.267Z Extended TCP reserved ports should be set appropriately. AC-3 CM-6 CM-7 SC-5 CCE-3699-6 2009-07-30T19:30:47.297Z 2009-07-30T19:30:47.297Z IPv4 strict multihoming should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-4575-7 2009-07-30T19:30:47.313Z 2009-07-30T19:30:47.313Z IPv6 strict multihoming should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4593-0 2009-07-30T19:30:47.327Z 2009-07-30T19:30:47.327Z ICMPv4 redirects should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-4095-6 2009-07-30T19:30:47.360Z 2009-07-30T19:30:47.360Z ICMPv6 redirects should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-3684-8 2009-07-30T19:30:47.377Z 2009-07-30T19:30:47.377Z IP forwarding should enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-4288-7 2009-07-30T19:30:47.390Z 2009-07-30T19:30:47.390Z IP routing should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-4671-4 2009-07-30T19:30:47.407Z 2009-07-30T19:30:47.407Z inetd tracing should be enabled as appropriate. AU-2 CCE-4455-2 2009-07-30T19:30:47.437Z 2009-07-30T19:30:47.437Z The logging option for the ftp service should be enabled or disabled as appropriate. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-4397-6 2009-07-30T19:30:47.453Z 2009-07-30T19:30:47.453Z The daemon debug log file owner should be restricted. CM-7 CCE-4415-6 2009-07-30T19:30:47.467Z 2009-07-30T19:30:47.467Z The daemon debug log file permissions should be set appropriately. AC-3 CM-6 CCE-4560-9 2009-07-30T19:30:47.500Z 2009-07-30T19:30:47.500Z The daemon debug log file group owner should be restricted. CM-7 CCE-4582-3 2009-07-30T19:30:47.530Z 2009-07-30T19:30:47.530Z The debug logging option for daemons should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3979-2 2009-07-30T19:30:47.563Z 2009-07-30T19:30:47.563Z Capture of syslog AUTH Messages should be enabled or disabled as appropriate AU-2 CCE-4124-4 2009-07-30T19:30:47.577Z 2009-07-30T19:30:47.577Z The loginlog file owner should be restricted. AC-6 CCE-4626-8 2009-07-30T19:30:47.593Z 2009-07-30T19:30:47.593Z The loginlog file permissions should be set appropriately. AC-3 CM-6 CCE-4635-9 2009-07-30T19:30:47.627Z 2009-07-30T19:30:47.627Z The loginlog file group owner should be restricted. AC-6 CCE-3930-5 2009-07-30T19:30:47.640Z 2009-07-30T19:30:47.640Z Capture of failed login attempts should be enabled or disabled as appropriate AC-7 AU-3 CCE-4309-1 2009-07-30T19:30:47.670Z 2009-07-30T19:30:47.670Z The threshold of syslog logging of failed login attempts should be configured correctly. AC-7 AU-2 CCE-4591-4 2009-07-30T19:30:47.687Z 2009-07-30T19:30:47.687Z Cron logging should be enabled or disabled as appropriate. AC-3 CM-6 CCE-4490-9 2009-07-30T19:30:47.717Z 2009-07-30T19:30:47.717Z Cron log file owner should be restricted AC-3 CM-6 CCE-4683-9 2009-07-30T19:30:47.733Z 2009-07-30T19:30:47.733Z Cron log file group owner should be restricted AC-3 CM-6 CCE-4472-7 2009-07-30T19:30:47.750Z 2009-07-30T19:30:47.750Z Cron log file permissions should be set appropriately AC-3 CM-6 CCE-3992-5 2009-07-30T19:30:47.780Z 2009-07-30T19:30:47.780Z System Accounting should be enabled or disabled as appropriate CM-7 CCE-4481-8 2009-07-30T19:30:47.797Z 2009-07-30T19:30:47.797Z The system accounting file owner should be restricted. AC-6 CM-7 CCE-4630-0 2009-07-30T19:30:47.813Z 2009-07-30T19:30:47.813Z The systems accounting file group owner should be restricted. AC-6 CM-7 CCE-4542-7 2009-07-30T19:30:47.843Z 2009-07-30T19:30:47.843Z The system accounting file permissions should be set appropriately. AC-3 CM-6 CCE-4675-5 2009-07-30T19:30:47.860Z 2009-07-30T19:30:47.860Z Kernel level auditing should be enabled or disabled as appropriate AU-2 CCE-4679-7 2009-07-30T19:30:47.877Z 2009-07-30T19:30:47.877Z Kernel level auditing for login/logout should be enabled or disabled as appropriate AU-2 CCE-4075-8 2009-07-30T19:30:47.907Z 2009-07-30T19:30:47.907Z Kernel level auditing for administrative actions should be enabled or disabled as appropriate AU-2 CCE-4600-3 2009-07-30T19:30:47.920Z 2009-07-30T19:30:47.920Z Kernel level auditing for file attribute modification should be enabled or disabled as appropriate AU-2 CCE-4498-2 2009-07-30T19:30:47.937Z 2009-07-30T19:30:47.937Z Kernel level auditing for process start/stop should be enabled or disabled as appropriate AU-2 CCE-4401-6 2009-07-30T19:30:47.967Z 2009-07-30T19:30:47.967Z Kernel level auditing for process modify should be enabled or disabled as appropriate AU-2 CCE-4337-2 2009-07-30T19:30:47.983Z 2009-07-30T19:30:47.983Z Kernel level auditing for processes should be enabled or disabled as appropriate AU-2 CCE-4606-0 2009-07-30T19:30:48.000Z 2009-07-30T19:30:48.000Z Kernel level auditing for exec should be enabled or disabled as appropriate AU-2 CCE-4610-2 2009-07-30T19:30:48.030Z 2009-07-30T19:30:48.030Z Kernel level auditing for root login/logout should be enabled or disabled as appropriate AU-2 CCE-4126-9 2009-07-30T19:30:48.047Z 2009-07-30T19:30:48.047Z Audit log file ownership should be restricted. AU-9 CCE-4633-4 2009-07-30T19:30:48.077Z 2009-07-30T19:30:48.077Z Audit log file group ownership should be restricted. AU-9 CCE-4527-8 2009-07-30T19:30:48.093Z 2009-07-30T19:30:48.093Z Audit log permissions should be restricted. AU-9 CCE-4672-2 2009-07-30T19:30:48.127Z 2009-07-30T19:30:48.127Z The daemon user's umask should be set appropriately. AC-3 CM-6 CCE-4315-8 2009-07-30T19:30:48.157Z 2009-07-30T19:30:48.157Z The setuid option should be enabled or disabled on removable media as appropriate. AC-1 AC-2 IA-2 CCE-3760-6 2009-07-30T19:30:48.187Z 2009-07-30T19:30:48.187Z The pkgchk utility should be used to verify ownership, group ownership, and access permissions for installed packages as appropriate. AC-3 AC-6 CM-6 CCE-4312-5 2009-07-30T19:30:48.203Z 2009-07-30T19:30:48.203Z The pkgchk utility should be used to force default settings for ownership, group ownership, and access permissions for installed packages as appropriate. AC-3 AC-6 CM-6 CCE-4721-7 2009-07-30T19:30:48.217Z 2009-07-30T19:30:48.217Z The sticky bit should be enabled or disabled as appropriate for all world-writable directories. CM-6 CCE-4351-3 2009-07-30T19:30:48.250Z 2009-07-30T19:30:48.250Z World-writable files should be found and examined for appropriateness. CM-6 CM-7 CCE-4743-1 2009-07-30T19:30:48.267Z 2009-07-30T19:30:48.267Z setgid files should be found and examined for appropriateness CM-6 CCE-4281-2 2009-07-30T19:30:48.280Z 2009-07-30T19:30:48.280Z setuid files should be found and examined for appropriateness CM-6 CCE-4660-7 2009-07-30T19:30:48.313Z 2009-07-30T19:30:48.313Z Unowned files should be found and removed or given to a valid user as appropriate. CM-6 CM-7 CCE-4682-1 2009-07-30T19:30:48.327Z 2009-07-30T19:30:48.327Z Files with extended attributes should be found and handled as appropriate. CM-7 CCE-4435-4 2009-07-30T19:30:48.360Z 2009-07-30T19:30:48.360Z Serial port login prompts should be enabled or disabled as appropriate. CM-6 CCE-4576-5 2009-07-30T19:30:48.377Z 2009-07-30T19:30:48.377Z Access to secure RPC for the 'nobody' user should be enabled or disabled as appropriate. AC-3 CCE-4726-6 2009-07-30T19:30:48.407Z 2009-07-30T19:30:48.407Z SSH version 2 protocol should be enabled or disabled as appropriate. CM-7 CCE-4638-3 2009-07-30T19:30:48.420Z 2009-07-30T19:30:48.420Z SSH X11 forwarding should be enabled or disabled as appropriate. CM-7 CCE-4748-0 2009-07-30T19:30:48.453Z 2009-07-30T19:30:48.453Z SSH maximum number of retries for authentication should be set as appropriate. CM-7 CCE-4395-0 2009-07-30T19:30:48.467Z 2009-07-30T19:30:48.467Z SSH maximum number or retries for authentication log should be set as appropriate. CM-7 CCE-4030-3 2009-07-30T19:30:48.500Z 2009-07-30T19:30:48.500Z SSH integration with .rhosts should be enabled or disabled as appropriate. CM-7 CCE-4655-7 2009-07-30T19:30:48.517Z 2009-07-30T19:30:48.517Z SSH integration with .rhosts/hosts.equiv should be enabled or disabled as appropriate. CM-7 CCE-3946-1 2009-07-30T19:30:48.547Z 2009-07-30T19:30:48.547Z SSH Rhosts RSA Authentication should be enabled or disabled as appropriate. CM-7 CCE-4713-4 2009-07-30T19:30:48.563Z 2009-07-30T19:30:48.563Z Root login via SSH should be enabled or disabled as appropriate. AC-1 SC-7 CCE-4708-4 2009-07-30T19:30:48.593Z 2009-07-30T19:30:48.593Z SSH should be configured to enable or disable empty passwords as appropriate. CM-7 CCE-4603-7 2009-07-30T19:30:48.610Z 2009-07-30T19:30:48.610Z The SSH banner should be enabled or disabled as appropriate. AC-3 AC-8 CM-6 CCE-4021-2 2009-07-30T19:30:48.640Z 2009-07-30T19:30:48.640Z PAM Rhosts support should be enabled or disabled. CM-6 CM-7 CCE-4678-9 2009-07-30T19:30:48.657Z 2009-07-30T19:30:48.657Z The ftpusers file should restrict the root account as appropriate. AC-6 CM-6 CM-7 CCE-4695-3 2009-07-30T19:30:48.687Z 2009-07-30T19:30:48.687Z The ftpusers file should restrict the daemon account as appropriate. AC-6 CM-6 CM-7 CCE-4510-4 2009-07-30T19:30:48.717Z 2009-07-30T19:30:48.717Z The ftpusers file should restrict the bin account as appropriate. AC-6 CM-6 CM-7 CCE-4157-4 2009-07-30T19:30:48.733Z 2009-07-30T19:30:48.733Z The ftpusers file should restrict the sys account as appropriate. AC-6 CM-6 CM-7 CCE-4677-1 2009-07-30T19:30:48.750Z 2009-07-30T19:30:48.750Z The ftpusers file should restrict the adm account as appropriate. AC-6 CM-6 CM-7 CCE-4179-8 2009-07-30T19:30:48.780Z 2009-07-30T19:30:48.780Z The ftpusers file should restrict the lp account as appropriate. AC-6 CM-6 CM-7 CCE-4589-8 2009-07-30T19:30:48.797Z 2009-07-30T19:30:48.797Z The ftpusers file should restrict the uucp account as appropriate. AC-6 CM-6 CM-7 CCE-4113-7 2009-07-30T19:30:48.813Z 2009-07-30T19:30:48.813Z The ftpusers file should restrict the smmsp account as appropriate. AC-6 CM-6 CM-7 CCE-4739-9 2009-07-30T19:30:48.843Z 2009-07-30T19:30:48.843Z The ftpusers file should restrict the listen account as appropriate. AC-6 CM-6 CM-7 CCE-4135-0 2009-07-30T19:30:48.860Z 2009-07-30T19:30:48.860Z The ftpusers file should restrict the gdm account as appropriate. AC-6 CM-6 CM-7 CCE-3768-9 2009-07-30T19:30:48.877Z 2009-07-30T19:30:48.877Z The ftpusers file should restrict the webservd account as appropriate. AC-6 CM-6 CM-7 CCE-3782-0 2009-07-30T19:30:48.907Z 2009-07-30T19:30:48.907Z The ftpusers file should restrict the nobody account as appropriate. AC-6 CM-6 CM-7 CCE-4347-1 2009-07-30T19:30:48.920Z 2009-07-30T19:30:48.920Z The ftpusers file should restrict the noaccess account as appropriate. AC-6 CM-6 CM-7 CCE-4497-4 2009-07-30T19:30:48.953Z 2009-07-30T19:30:48.953Z The ftpusers file should restrict the nobody4 account as appropriate. AC-6 CM-6 CM-7 CCE-4432-1 2009-07-30T19:30:48.967Z 2009-07-30T19:30:48.967Z The failed login delay should be set appropriately. AC-3 AC-7 IA-5 CCE-4705-0 2009-07-30T19:30:48.983Z 2009-07-30T19:30:48.983Z The default CDE screenlock timeout should be set appropriately. AC-1 AC-3 CM-6 CM-7 CCE-4723-3 2009-07-30T19:30:49.017Z 2009-07-30T19:30:49.017Z The default GNOME screenlock timeout should be set appropriately. AC-1 AC-3 CM-6 CM-7 CCE-4622-7 2009-07-30T19:30:49.030Z 2009-07-30T19:30:49.030Z The GNOME screenlock should be enabled or disabled as appropriate. AC-1 CM-7 CCE-4644-1 2009-07-30T19:30:49.063Z 2009-07-30T19:30:49.063Z Use of the cron.allow file should be enabled or disabled as appropriate CM-6 CM-7 CCE-4543-5 2009-07-30T19:30:49.077Z 2009-07-30T19:30:49.077Z Use of the at.allow file should be enabled or disabled as appropriate CM-6 CM-7 CCE-4437-0 2009-07-30T19:30:49.110Z 2009-07-30T19:30:49.110Z The /etc/cron.d/cron.allow file should be owned by the appropriate user. AC-3 CM-6 CCE-4706-8 2009-07-30T19:30:49.140Z 2009-07-30T19:30:49.140Z The /etc/cron.d/cron.allow file should be owned by the appropriate group. AC-3 CM-6 CCE-4693-8 2009-07-30T19:30:49.170Z 2009-07-30T19:30:49.170Z File permissions for the /etc/cron.d/cron.allow file should be configured correctly. AC-3 CM-6 CCE-4710-0 2009-07-30T19:30:49.187Z 2009-07-30T19:30:49.187Z File permissions for the /etc/cron.d/at.allow file should be configured correctly. AC-3 CM-6 CCE-4230-9 2009-07-30T19:30:49.217Z 2009-07-30T19:30:49.217Z The /etc/cron.d/at.allow file should be owned by the appropriate user. AC-3 CM-6 CCE-4445-3 2009-07-30T19:30:49.233Z 2009-07-30T19:30:49.233Z The /etc/cron.d/at.allow file should be owned by the appropriate group. AC-3 CM-6 CCE-4458-6 2009-07-30T19:30:49.267Z 2009-07-30T19:30:49.267Z The ability to login as root directly should be configured correctly. AC-6 CM-6 CM-7 CCE-4102-0 2009-07-30T19:30:49.280Z 2009-07-30T19:30:49.280Z The "account lockout threshold" policy should meet minimum requirements. AC-7 CM-6 CCE-4754-8 2009-07-30T19:30:49.297Z 2009-07-30T19:30:49.297Z Account lockout should be enabled or disabled as appropriate. AC-7 CCE-4648-2 2009-07-30T19:30:49.327Z 2009-07-30T19:30:49.327Z The eeprom security mode should be configured appropriately. CM-6 CM-7 CCE-3826-5 2009-07-30T19:30:49.343Z 2009-07-30T19:30:49.343Z The grub menu password protection should be enabled or disabled as appropriate. AC-3 CM-7 IA-5 CCE-4525-2 2009-07-30T19:30:49.377Z 2009-07-30T19:30:49.377Z The daemon account should be locked or unlocked as appropriate. CM-7 CCE-4657-3 2009-07-30T19:30:49.390Z 2009-07-30T19:30:49.390Z The bin account should be locked or unlocked as appropriate. CM-6 CM-7 CCE-4661-5 2009-07-30T19:30:49.407Z 2009-07-30T19:30:49.407Z The shell for the bin account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4807-4 2009-07-30T19:30:49.437Z 2009-07-30T19:30:49.437Z The nuucp account should be locked or unlocked as appropriate. CM-6 CM-7 CCE-4701-9 2009-07-30T19:30:49.453Z 2009-07-30T19:30:49.453Z The shell for the nuucp account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4669-8 2009-07-30T19:30:49.467Z 2009-07-30T19:30:49.467Z The smmsp account should be locked or unlocked as appropriate. CM-6 CM-7 CCE-4436-2 2009-07-30T19:30:49.500Z 2009-07-30T19:30:49.500Z The shell for the smmsp account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4815-7 2009-07-30T19:30:49.517Z 2009-07-30T19:30:49.517Z The listen account should be locked or unlocked as appropriate. CM-6 CM-7 CCE-4696-1 2009-07-30T19:30:49.530Z 2009-07-30T19:30:49.530Z The shell for the listen account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4216-8 2009-07-30T19:30:49.563Z 2009-07-30T19:30:49.563Z The gdm account should be locked or unlocked as appropriate. AC-6 CM-6 CM-7 CCE-4758-9 2009-07-30T19:30:49.577Z 2009-07-30T19:30:49.577Z The shell for the gdm account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4621-9 2009-07-30T19:30:49.610Z 2009-07-30T19:30:49.610Z The webservd account should be locked or unlocked as appropriate. CM-7 SC-7 CCE-4515-3 2009-07-30T19:30:49.627Z 2009-07-30T19:30:49.627Z The shell for the webservd account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4282-0 2009-07-30T19:30:49.657Z 2009-07-30T19:30:49.657Z The nobody account should be locked or unlocked as appropriate. AC-6 CM-6 CM-7 CCE-4802-5 2009-07-30T19:30:49.670Z 2009-07-30T19:30:49.670Z The shell for the nobody account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4806-6 2009-07-30T19:30:49.687Z 2009-07-30T19:30:49.687Z The noaccess account should be locked or unlocked as appropriate. AC-6 CM-6 CM-7 CCE-4471-9 2009-07-30T19:30:49.717Z 2009-07-30T19:30:49.717Z The shell for the noaccess account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4617-7 2009-07-30T19:30:49.733Z 2009-07-30T19:30:49.733Z The nobody4 account should be locked or unlocked as appropriate. AC-6 CM-6 CM-7 CCE-4418-0 2009-07-30T19:30:49.750Z 2009-07-30T19:30:49.750Z The shell for the nobody4 account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4810-8 2009-07-30T19:30:49.780Z 2009-07-30T19:30:49.780Z The sys account should be locked or unlocked as appropriate. CM-6 CCE-3955-2 2009-07-30T19:30:49.797Z 2009-07-30T19:30:49.797Z The adm account should be locked or unlocked as appropriate. CM-6 CM-7 CCE-3834-9 2009-07-30T19:30:49.827Z 2009-07-30T19:30:49.827Z The shell for the adm account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4408-1 2009-07-30T19:30:49.843Z 2009-07-30T19:30:49.843Z The lp account should be locked or unlocked as appropriate. AC-3 AC-7 IA-5 CCE-4536-9 2009-07-30T19:30:49.877Z 2009-07-30T19:30:49.877Z The shell for the lp account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4809-0 2009-07-30T19:30:49.890Z 2009-07-30T19:30:49.890Z The uucp account should be locked or unlocked as appropriate. CM-6 CM-7 CCE-3841-4 2009-07-30T19:30:49.920Z 2009-07-30T19:30:49.920Z The shell for the uucp account should be assigned appropriately. AC-6 CM-5 CM-6 CM-7 CCE-4724-1 2009-07-30T19:30:49.937Z 2009-07-30T19:30:49.937Z All user login accounts with empty passwords should be locked or unlocked as appropriate. IA-2 IA-5 CCE-4367-9 2009-07-30T19:30:49.967Z 2009-07-30T19:30:49.967Z The "minimum password age" policy should meet minimum requirements. CM-6 IA-5 CCE-4165-7 2009-07-30T19:30:49.983Z 2009-07-30T19:30:49.983Z The "maximum password age" policy should meet minimum requirements. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-4836-3 2009-07-30T19:30:50.000Z 2009-07-30T19:30:50.000Z The password expiration warning time should be set appropriately AC-3 CM-6 CM-7 IA-5 CCE-4625-0 2009-07-30T19:30:50.030Z 2009-07-30T19:30:50.030Z The strong password PASSLENGTH value should meet minimum requirements CM-6 IA-5 CCE-4770-4 2009-07-30T19:30:50.047Z 2009-07-30T19:30:50.047Z The strong password NAMECHECK value should meet minimum requirements CM-6 IA-5 CCE-4563-3 2009-07-30T19:30:50.077Z 2009-07-30T19:30:50.077Z The strong password HISTORY value should meet minimum requirements CM-6 IA-5 CCE-4832-2 2009-07-30T19:30:50.093Z 2009-07-30T19:30:50.093Z The strong password MINDIFF value should meet minimum requirements CM-6 IA-5 CCE-4572-4 2009-07-30T19:30:50.127Z 2009-07-30T19:30:50.127Z The strong password MINALPHA value should meet minimum requirements CM-6 IA-5 CCE-4480-0 2009-07-30T19:30:50.157Z 2009-07-30T19:30:50.157Z The strong password MINUPPER value should meet minimum requirements CM-6 IA-5 CCE-4731-6 2009-07-30T19:30:50.170Z 2009-07-30T19:30:50.170Z The strong password MINLOWER value should meet minimum requirements CM-6 IA-5 CCE-4753-0 2009-07-30T19:30:50.203Z 2009-07-30T19:30:50.203Z The strong password MINNONALPHA value should meet minimum requirements CM-6 IA-5 CCE-4775-3 2009-07-30T19:30:50.217Z 2009-07-30T19:30:50.217Z The strong password MAXREPEATS value should meet minimum requirements CM-6 IA-5 CCE-3856-2 2009-07-30T19:30:50.233Z 2009-07-30T19:30:50.233Z The strong password WHITESPACE value should meet minimum requirements CM-6 IA-5 CCE-4402-4 2009-07-30T19:30:50.267Z 2009-07-30T19:30:50.267Z The strong password DICTIONDBDIR value should be configured correctly CM-6 IA-5 CCE-4670-6 2009-07-30T19:30:50.280Z 2009-07-30T19:30:50.280Z The strong password DICTIONLIST value should be configured correctly CM-6 IA-5 CCE-4314-1 2009-07-30T19:30:50.313Z 2009-07-30T19:30:50.313Z No Legacy "+" entries in passwd, shadow, and group files should be verified to be appropriate AC-1 AC-2 IA-2 CCE-4816-5 2009-07-30T19:30:50.327Z 2009-07-30T19:30:50.327Z No UID 0 Accounts exist other than root should be verified to be appropriate AC-1 AC-2 IA-2 CCE-4834-8 2009-07-30T19:30:50.360Z 2009-07-30T19:30:50.360Z Default group for root account should be configured correctly AC-3 CM-6 CCE-4728-2 2009-07-30T19:30:50.377Z 2009-07-30T19:30:50.377Z The home directory of the root user should be set correctly. AC-3 CM-6 CCE-4631-8 2009-07-30T19:30:50.390Z 2009-07-30T19:30:50.390Z The PATH for the root user should be configured correctly. CM-6 CM-7 CCE-4538-5 2009-07-30T19:30:50.420Z 2009-07-30T19:30:50.420Z File permissions should be set correctly for the home directories for all user accounts. AC-3 CM-6 CCE-4561-7 2009-07-30T19:30:50.437Z 2009-07-30T19:30:50.437Z File permissions should be set correctly for user configuration files. AC-3 CM-6 CCE-4578-1 2009-07-30T19:30:50.453Z 2009-07-30T19:30:50.453Z File permissions should be set correctly for .netrc files. AC-3 CM-6 CCE-4843-9 2009-07-30T19:30:50.483Z 2009-07-30T19:30:50.483Z Presence of .rhost files should be checked to be appropriate CM-6 CM-7 CCE-4737-3 2009-07-30T19:30:50.500Z 2009-07-30T19:30:50.500Z The default umask should be configured correctly. CM-6 CM-7 CCE-3897-6 2009-07-30T19:30:50.530Z 2009-07-30T19:30:50.530Z The default umask for ftp users should be set appropriately. CM-6 CM-7 CCE-4746-4 2009-07-30T19:30:50.547Z 2009-07-30T19:30:50.547Z The default setting for all users to allow terminal messages via the mesg utility should be configured correctly. AC-4 SC-5 SC-7 CCE-4760-5 2009-07-30T19:30:50.563Z 2009-07-30T19:30:50.563Z General login services should display a banner as appropriate before authentication. AC-3 AC-8 CM-6 CCE-4301-8 2009-07-30T19:30:50.593Z 2009-07-30T19:30:50.593Z General login services should display a banner as appropriate after authentication. AC-3 AC-8 CM-6 CCE-4698-7 2009-07-30T19:30:50.610Z 2009-07-30T19:30:50.610Z CDE should display a banner as appropriate before authentication. AC-3 AC-8 CM-6 CCE-4222-6 2009-07-30T19:30:50.627Z 2009-07-30T19:30:50.627Z GNOME should display a banner as appropriate before authentication. AC-3 AC-8 CM-6 CCE-4103-8 2009-07-30T19:30:50.657Z 2009-07-30T19:30:50.657Z The FTP service should display a banner as appropriate before authentication. AC-3 AC-8 CM-6 CCE-4870-2 2009-07-30T19:30:50.670Z 2009-07-30T19:30:50.670Z The telnet service banner should be set appropriately. AC-3 AC-8 CM-6 CCE-4896-7 2009-07-30T19:30:50.703Z 2009-07-30T19:30:50.703Z The power-on banner should be set appropriately. AC-3 AC-8 CM-6 CCE-4663-1 2009-07-30T19:30:50.717Z 2009-07-30T19:30:50.717Z The sendmail greeting should be set appropriately. AC-3 AC-8 CM-6 CCE-2715-1 2009-07-30T19:30:50.750Z 2009-07-30T19:30:50.750Z The "reset account lockout counter after" policy should meet minimum requirements. AC-7 CM-6 CCE-2363-0 2009-07-30T19:30:50.767Z 2009-07-30T19:30:50.767Z The "account lockout duration" policy should meet minimum requirements. AC-7 CM-6 CCE-3177-3 2009-07-30T19:30:50.797Z 2009-07-30T19:30:50.797Z The "account lockout threshold" policy should meet minimum requirements. AC-7 CM-6 CCE-2820-9 2009-07-30T19:30:50.813Z 2009-07-30T19:30:50.813Z Auditing of "account logon" events on success should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3089-0 2009-07-30T19:30:50.827Z 2009-07-30T19:30:50.827Z Auditing of "account logon" events on failure should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3234-2 2009-07-30T19:30:50.860Z 2009-07-30T19:30:50.860Z Auditing of "account management" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3287-0 2009-07-30T19:30:50.877Z 2009-07-30T19:30:50.877Z Auditing of "account management" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3041-1 2009-07-30T19:30:50.890Z 2009-07-30T19:30:50.890Z Auditing of "directory service access" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3309-2 2009-07-30T19:30:50.920Z 2009-07-30T19:30:50.920Z Auditing of "directory service access" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3076-7 2009-07-30T19:30:50.937Z 2009-07-30T19:30:50.937Z Auditing of "logon" events on success should be enabled or disabled as appropriate.. AC-7 AU-2 CCE-2970-2 2009-07-30T19:30:50.967Z 2009-07-30T19:30:50.967Z Auditing of "logon" events on failure should be enabled or disabled as appropriate.. AC-7 AU-2 CCE-2724-3 2009-07-30T19:30:50.983Z 2009-07-30T19:30:50.983Z Auditing of "object access" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3243-3 2009-07-30T19:30:51.000Z 2009-07-30T19:30:51.000Z Auditing of "object access" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2746-6 2009-07-30T19:30:51.030Z 2009-07-30T19:30:51.030Z Auditing of "policy change" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2653-4 2009-07-30T19:30:51.047Z 2009-07-30T19:30:51.047Z Auditing of "policy change" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2322-6 2009-07-30T19:30:51.077Z 2009-07-30T19:30:51.077Z Auditing of "privilege use" events on success should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3257-3 2009-07-30T19:30:51.093Z 2009-07-30T19:30:51.093Z Auditing of "privilege use" events on failure should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3024-7 2009-07-30T19:30:51.127Z 2009-07-30T19:30:51.127Z Auditing of "process tracking" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2927-2 2009-07-30T19:30:51.140Z 2009-07-30T19:30:51.140Z Auditing of "process tracking" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2953-8 2009-07-30T19:30:51.170Z 2009-07-30T19:30:51.170Z Auditing of "system" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3222-7 2009-07-30T19:30:51.187Z 2009-07-30T19:30:51.187Z Auditing of "system" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3121-1 2009-07-30T19:30:51.203Z 2012-01-05T04:36:41.893Z The "restrict guest access to application log" policy should be set correctly. AU-4 CM-6 CCE-3015-5 2009-07-30T19:30:51.233Z 2012-01-05T04:36:41.970Z The application log maximum size should be configured correctly.. AU-4 AU-5 CM-6 CCE-2905-8 2009-07-30T19:30:51.250Z 2012-01-05T04:36:42.050Z The "when maximum log size is reached" property should be set correctly for the Application log. AU-4 AU-5 CM-6 CCE-2659-1 2009-07-30T19:30:51.280Z 2012-01-05T04:36:42.113Z The "restrict guest access to security log" policy should be set correctly. AU-4 CM-6 CCE-3302-7 2009-07-30T19:30:51.297Z 2012-01-05T04:36:42.173Z The security log maximum size should be configured correctly.. AU-4 AU-6 AU-9 CCE-3196-3 2009-07-30T19:30:51.327Z 2012-01-05T04:36:42.253Z The "when maximum log size is reached" property should be set correctly for the Security log. AU-4 AU-5 CM-6 CCE-2839-9 2009-07-30T19:30:51.343Z 2012-01-05T04:36:42.317Z The "restrict guest access to system log" policy should be set correctly. AU-4 CM-6 CCE-3165-8 2009-07-30T19:30:51.377Z 2012-01-05T04:36:42.393Z The system log maximum size should be configured correctly. AU-4 AU-6 AU-9 CCE-2931-4 2009-07-30T19:30:51.390Z 2012-01-05T04:36:42.457Z The "when maximum log size is reached" property should be set correctly for the System log. AU-4 AU-5 CM-6 CCE-2967-8 2009-07-30T19:30:51.407Z 2009-07-30T19:30:51.407Z The "maximum password age" policy should meet minimum requirements. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-3240-9 2009-07-30T19:30:51.437Z 2009-07-30T19:30:51.437Z The "minimum password age" policy should meet minimum requirements. CM-6 IA-5 CCE-2883-7 2009-07-30T19:30:51.453Z 2009-07-30T19:30:51.453Z The "minimum password length" policy should meet minimum requirements. CM-6 IA-5 CCE-3033-8 2009-07-30T19:30:51.483Z 2009-07-30T19:30:51.483Z The "password must meet complexity requirments" policy should be set correctly. CM-6 IA-5 CCE-2323-4 2009-07-30T19:30:51.500Z 2009-07-30T19:30:51.500Z The "enforce password history" policy should meet minimum requirements. CM-6 IA-5 CCE-3311-8 2009-07-30T19:30:51.517Z 2009-07-30T19:30:51.517Z The "store password using reversible encryption for all users in the domain" policy should be set correctly. CM-6 IA-5 CCE-3316-7 2009-07-30T19:30:51.547Z 2012-03-17T03:34:46.747Z The startup type of the Messenger service should be correct. CM-6 CM-7 CCE-3082-5 2009-07-30T19:30:51.563Z 2012-03-17T03:34:46.827Z The startup type of the NetMeeting Remote Desktop Sharing service should be correct. AC-1 CCE-3232-6 2009-07-30T19:30:51.593Z 2012-01-05T04:36:43.050Z The behavior surrounding Anonymous users' abiliity to display lists of SAM accounts and shares should be correct. AC-3 CM-6 CM-7 SC-5 CCE-3272-2 2009-07-30T19:30:51.627Z 2012-01-05T04:36:43.157Z The behavior surrounding Anonymous users' abiliity to display lists of SAM accounts should be correct. AC-3 CM-6 CM-7 SC-5 CCE-2339-0 2009-07-30T19:30:51.640Z 2012-01-05T04:36:43.220Z The behavior surrounding Anonymous SID/Name translation should be correct. AC-3 CM-6 CM-7 SC-5 CCE-3248-2 2009-07-30T19:30:51.670Z 2009-07-30T19:30:51.670Z Use of the built-in Guest account should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-3032-0 2009-07-30T19:30:51.687Z 2009-07-30T19:30:51.687Z Use of the built-in Administrator account should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-3314-2 2009-07-30T19:30:51.717Z 2012-01-05T04:36:43.393Z The "Message title for users attempting to log on" policy should be set correctly. AC-8 CM-6 CM-7 SC-5 CCE-3336-5 2009-07-30T19:30:51.733Z 2012-01-05T04:36:43.470Z The "Message text for users attempting to log on" policy should be set correctly. AC-8 CM-6 CM-7 SC-5 CCE-3072-6 2009-07-30T19:30:51.767Z 2009-07-30T19:30:51.767Z Automatic Logon should be properly configured. AC-3 CM-6 CM-7 IA-2 SC-5 CCE-2719-3 2009-07-30T19:30:51.797Z 2009-07-30T19:30:51.797Z Autoplay on all Drive Types should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3239-1 2009-07-30T19:30:51.813Z 2009-07-30T19:30:51.813Z ICMP Redirects should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3261-5 2009-07-30T19:30:51.843Z 2009-07-30T19:30:51.843Z IP Source Routing should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3279-7 2009-07-30T19:30:51.860Z 2009-07-30T19:30:51.860Z IRDP should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3173-2 2009-07-30T19:30:51.890Z 2009-07-30T19:30:51.890Z Display Last User Name in Logon Screen should be properly configured. AC-3 AC-9 CM-6 CCE-3067-6 2009-07-30T19:30:51.920Z 2009-07-30T19:30:51.920Z System availability to Master Browser should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3120-3 2009-07-30T19:30:51.953Z 2009-07-30T19:30:51.953Z TCP/IP Dead Gateway Detection should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3142-7 2009-07-30T19:30:51.967Z 2009-07-30T19:30:51.967Z The TCP/IP KeepAlive Time should be set correctly . AC-4 SC-5 SC-7 CCE-2785-4 2009-07-30T19:30:52.000Z 2009-07-30T19:30:52.000Z TCP/IP NetBIOS Name Release on Request Prevented should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2679-9 2009-07-30T19:30:52.030Z 2009-07-30T19:30:52.030Z TCP/IP SYN Flood Attack Protection should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3181-5 2009-07-30T19:30:52.047Z 2009-07-30T19:30:52.047Z Security Audit log warning level should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3199-7 2009-07-30T19:30:52.077Z 2009-07-30T19:30:52.077Z Safe DLL Search Mode should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2714-4 2009-07-30T19:30:52.093Z 2009-07-30T19:30:52.093Z The built-in Administrator account should be correctly named. AC-3 CM-6 CM-7 SC-5 CCE-2359-8 2009-07-30T19:30:52.110Z 2009-07-30T19:30:52.110Z The built-in Guest account should be correctly named. AC-3 CM-6 CM-7 SC-5 CCE-2519-7 2009-07-30T19:30:52.140Z 2012-01-05T04:36:44.267Z The amount of idle time required before disconnecting a session should be set correctly. AC-1 AC-3 CM-6 CM-7 CCE-3285-4 2009-07-30T19:30:52.157Z 2012-01-05T04:36:44.347Z The "Audit the access of global system objects" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3303-5 2009-07-30T19:30:52.187Z 2012-01-05T04:36:44.423Z The "Audit the use of backup and restore privilege" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3307-6 2009-07-30T19:30:52.217Z 2012-01-05T04:36:44.517Z The "Disable CTRL+ALT+Delete Requirement for Logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3325-8 2009-07-30T19:30:52.233Z 2012-01-05T04:36:44.597Z The "Prevent Users from Installing Printer Drivers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2858-9 2009-07-30T19:30:52.267Z 2012-01-05T04:36:44.673Z The "Restrict CD-ROM Access to Locally Logged-On User Only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3168-2 2009-07-30T19:30:52.280Z 2012-01-05T04:36:44.753Z The "Restrict Floppy Access to Locally Logged-On User Only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3212-8 2009-07-30T19:30:52.313Z 2012-01-05T04:36:44.830Z The "Secure Channel: Require Strong (Windows 2000 or later) Session Key" policy should be set correctly. CM-6 SC-2 CCE-2838-1 2009-07-30T19:30:52.327Z 2012-01-05T04:36:44.907Z The "Send Unencrypted Password to Connect to Third-Party SMB Servers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3230-0 2009-07-30T19:30:52.360Z 2012-01-05T04:36:44.987Z The "Users Prompted to Change Password Before Expiration" policy should be set correctly. AC-3 CM-6 CM-7 IA-5 CCE-3001-5 2009-07-30T19:30:52.377Z 2012-01-05T04:36:45.080Z The "Shut Down system immediately if unable to log security audits" policy should be set correctly. AC-3 AU-5 CM-6 CM-7 SC-5 CCE-3252-4 2009-07-30T19:30:52.407Z 2012-01-05T04:36:45.157Z The "Digitally Sign Client Communication (Always)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2380-4 2009-07-30T19:30:52.420Z 2012-01-05T04:36:45.237Z The "Digitally Sign Client Communication (When Possible)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3023-9 2009-07-30T19:30:52.453Z 2012-01-05T04:36:45.330Z The "Digitally Sign Server Communication (Always)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3164-1 2009-07-30T19:30:52.467Z 2012-01-05T04:36:45.407Z The "Digitally Sign Server Communication (When Possible)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2376-2 2009-07-30T19:30:52.500Z 2012-01-05T04:36:45.503Z The "Number of Previous Logons to Cache" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3225-0 2009-07-30T19:30:52.530Z 2012-01-05T04:36:45.613Z The "Allowed to Format and Eject Removable NTFS Media" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3330-8 2009-07-30T19:30:52.547Z 2012-01-05T04:36:45.707Z The "Secure Channel: Digitally Encrypt or Sign Secure Channel Data (Always)" policy should be set correctly. CM-6 SC-2 CCE-2467-9 2009-07-30T19:30:52.577Z 2012-01-05T04:36:45.783Z The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3233-4 2009-07-30T19:30:52.593Z 2012-01-05T04:36:45.877Z The "Secure Channel: Digitally Sign Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3251-6 2009-07-30T19:30:52.627Z 2012-01-05T04:36:45.970Z The "Smart Card Removal Behavior" policy should be set correctly. CM-6 CM-7 SC-5 CCE-3255-7 2009-07-30T19:30:52.640Z 2012-01-05T04:36:46.050Z The "Prevent System Maintenance of Computer Account Password" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2398-6 2009-07-30T19:30:52.670Z 2012-01-05T04:36:46.127Z The "Limit local account user of blank passwords to console logon only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3326-6 2009-07-30T19:30:52.687Z 2012-01-05T04:36:46.207Z The "Allow undock without having to logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3075-9 2009-07-30T19:30:52.703Z 2012-01-05T04:36:46.283Z The "Maximum machine account password age" policy should be set correctly. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-3220-1 2009-07-30T19:30:52.733Z 2012-01-05T04:36:46.377Z The "Require Domain Controller authentication to unlock workstation" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3361-3 2009-07-30T19:30:52.750Z 2012-01-05T04:36:46.457Z The "Disconnect clients when logon hours expire" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3379-5 2009-07-30T19:30:52.780Z 2012-01-05T04:36:46.533Z The "Do not allow storage of credentials or .NET Passports" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2457-0 2009-07-30T19:30:52.813Z 2012-01-05T04:36:46.627Z The "Let Everyone permissions apply to anonymous users" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3380-3 2009-07-30T19:30:52.843Z 2012-01-05T04:36:46.720Z The "Named Pipes that can be accessed anonymously" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2825-8 2009-07-30T19:30:52.860Z 2012-01-05T04:36:46.817Z The "Remotely accessible registry paths" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3349-8 2009-07-30T19:30:52.890Z 2012-01-05T04:36:46.957Z The "Shares that can be accessed anonymously" policy should be set correctly. AC-3 CM-6 CM-7 CCE-3367-0 2009-07-30T19:30:52.907Z 2012-01-05T04:36:47.067Z The "Sharing and security model for local accounts" policy should be set correctly. AC-3 CM-6 CM-7 CCE-3138-5 2009-07-30T19:30:52.937Z 2012-01-05T04:36:47.143Z The "Do not store LAN Manager hash value on next password change" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3283-9 2009-07-30T19:30:52.953Z 2009-07-30T19:30:52.953Z The "Force logoff when logon hours expire" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3050-2 2009-07-30T19:30:52.983Z 2012-01-05T04:36:47.253Z The "Screen Saver Timeout" setting should be configured correctly for the current user. AC-1 AC-3 CM-6 CM-7 CCE-3429-8 2009-07-30T19:30:53.017Z 2012-01-05T04:36:47.330Z The "Always Prompt Client for Password upon Connection" policy should be set correctly for Terminal Services. IA-2 CCE-3323-3 2009-07-30T19:30:53.030Z 2012-01-05T04:36:47.407Z The "Allow Solicited Remote Assistance" policy should be set correctly for Terminal Services. CM-6 CCE-3217-7 2009-07-30T19:30:53.063Z 2012-01-05T04:36:47.470Z The "Allow Unsolicited Remote Assistance" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3358-9 2009-07-30T19:30:53.077Z 2009-07-30T19:30:53.077Z The "Configure Automatic Updates" should be set correctly CM-2 CM-6 CCE-3345-6 2009-07-30T19:30:53.093Z 2009-07-30T19:30:53.093Z The "Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box" should be set correctly CM-6 CCE-3363-9 2009-07-30T19:30:53.127Z 2009-07-30T19:30:53.127Z The "Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box" should be set correctly CM-6 CCE-2462-0 2009-07-30T19:30:53.157Z 2009-07-30T19:30:53.157Z The "No auto-restart for scheduled Automatic Updates installations CM-2 CM-6 SI-2 CCE-2852-2 2009-07-30T19:30:53.187Z 2009-07-30T19:30:53.187Z The "Reschedule Automatic Updates scheduled installations" should be set correctly CM-6 SI-2 CCE-3371-2 2009-07-30T19:30:53.217Z 2009-07-30T19:30:53.217Z The "DCOM: Machine access Restrictions in Security Descriptor Definition Language (SDDL) syntax" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-3266-4 2009-07-30T19:30:53.233Z 2009-07-30T19:30:53.233Z The "DCOM: Machine Launch Restrictions in the Security Descriptor Definition Language (SDDL) syntax" security option should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3411-6 2009-07-30T19:30:53.267Z 2009-07-30T19:30:53.267Z The "Display user information when the session is locked" setting should be configured correctly. AC-3 CM-6 CCE-2772-2 2009-07-30T19:30:53.280Z 2009-07-30T19:30:53.280Z The "Interactive logon: Requre smart card" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-3292-0 2009-07-30T19:30:53.313Z 2009-07-30T19:30:53.313Z The "Network access: Restrict anonymous access to named pipes and shares" setting should be configured correctly. AC-3 CM-6 CCE-3459-5 2009-07-30T19:30:53.327Z 2009-07-30T19:30:53.327Z MSS:(TCPMaxConnectResponseRetransmission) SYN-ACK retansmissions when a connection request is not acknowledged AC-3 CM-6 CM-7 SC-5 CCE-3460-3 2009-07-30T19:30:53.360Z 2009-07-30T19:30:53.360Z MSS:(TCPMaxDataRetransmissions) How many times unacknowledged data is retransmitted AC-3 CM-6 CM-7 SC-5 CCE-3244-1 2009-07-30T19:30:53.377Z 2009-07-30T19:30:53.377Z The automatic generation of 8.3 file names for NTFS should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-3394-4 2009-07-30T19:30:53.407Z 2009-07-30T19:30:53.407Z RPC Endpiont Mapper Client Authentication (SP2 only) IA-2 CCE-3160-9 2009-07-30T19:30:53.437Z 2009-07-30T19:30:53.437Z Restrictions for Unauthenticated RPC clients (SP2 only) IA-2 CCE-3054-4 2009-07-30T19:30:53.453Z 2009-07-30T19:30:53.453Z Domain Profile: Protect all network connections (SP2 only) AC-1 SC-7 CCE-3187-2 2009-07-30T19:30:53.483Z 2009-07-30T19:30:53.483Z Domain Profile: Do not allow exceptions (SP2 only) SC-7 CCE-3405-8 2009-07-30T19:30:53.500Z 2009-07-30T19:30:53.500Z Domain Profile: Allow local program exceptions SC-7 CCE-3158-3 2009-07-30T19:30:53.530Z 2009-07-30T19:30:53.530Z Domain Profile: Allow remote administration AC-1 SC-7 CCE-3431-4 2009-07-30T19:30:53.563Z 2009-07-30T19:30:53.563Z Domain Profile: Allow file and printer sharing exception (SP2 only) SC-7 CCE-3458-7 2009-07-30T19:30:53.577Z 2009-07-30T19:30:53.577Z Domain Profile: Allow Remote Desktop exception (SP2 only) AC-1 SC-7 CCE-2964-5 2009-07-30T19:30:53.610Z 2009-07-30T19:30:53.610Z Domain Profile: Allow UPnP framework exception (SP2 only) SC-7 CCE-3365-4 2009-07-30T19:30:53.627Z 2009-07-30T19:30:53.627Z The "Windows Firewall: Prohibit notifications" setting should be configured correctly for the Domain Profile. AC-4 SC-7 CCE-3260-7 2009-07-30T19:30:53.657Z 2012-01-05T04:36:48.550Z The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 SC-7 CCE-2533-8 2009-07-30T19:30:53.670Z 2012-01-05T04:36:48.613Z The log file path and name for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-3299-5 2009-07-30T19:30:53.703Z 2012-01-05T04:36:48.690Z The log file size limit for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-3414-0 2009-07-30T19:30:53.717Z 2012-01-05T04:36:48.753Z The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 SC-7 CCE-3436-3 2009-07-30T19:30:53.750Z 2009-07-30T19:30:53.750Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Domain Profile. SC-5 SC-7 CCE-3202-9 2009-07-30T19:30:53.767Z 2009-07-30T19:30:53.767Z Domain Profile: Define port exceptions (SP2 only) SC-7 CCE-3180-7 2009-07-30T19:30:53.797Z 2009-07-30T19:30:53.797Z Domain Profile: Allow local port exceptions (SP2 only) SC-7 CCE-3329-0 2009-07-30T19:30:53.813Z 2009-07-30T19:30:53.813Z Standard Profile: Protect all network connections (SP2 only) AC-1 SC-7 CCE-3347-2 2009-07-30T19:30:53.827Z 2009-07-30T19:30:53.827Z Standard Profile: Do not allow exceptions (SP2 only) AC-1 SC-7 CCE-3334-0 2009-07-30T19:30:53.860Z 2009-07-30T19:30:53.860Z Standard Profile: Allow local program exceptions (SP2 only) CM-7 CCE-3352-2 2009-07-30T19:30:53.877Z 2009-07-30T19:30:53.877Z Standard Profile: Allow remote administration exception (SP2 only) AC-1 SC-7 CCE-3369-6 2009-07-30T19:30:53.907Z 2009-07-30T19:30:53.907Z Standard Profile: Allow file and printer sharing exception (SP2 only) CM-7 CCE-3387-8 2009-07-30T19:30:53.937Z 2009-07-30T19:30:53.937Z Standard Profile: Allow Remote Desktop exception (SP2 only) AC-1 SC-7 CCE-3268-0 2009-07-30T19:30:53.967Z 2009-07-30T19:30:53.967Z Standard Profile: Allow UPnP framework exception (SP2 only) CM-7 CCE-3409-0 2009-07-30T19:30:53.983Z 2009-07-30T19:30:53.983Z The "Windows Firewall: Prohibit notifications" setting should be configured correctly for the Standard Profile. AC-4 SC-7 CCE-3440-5 2009-07-30T19:30:54.017Z 2009-07-30T19:30:54.017Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Standard Profile. SC-5 SC-7 CCE-3462-9 2009-07-30T19:30:54.030Z 2009-07-30T19:30:54.030Z Standard Profile: Define port exceptions (SP2 only) AC-1 SC-7 CCE-3356-3 2009-07-30T19:30:54.063Z 2009-07-30T19:30:54.063Z Standard Profile: Allow local port exceptions (SP2 only) CM-7 CCE-2999-1 2009-07-30T19:30:54.077Z 2009-07-30T19:30:54.077Z Domain Profile - Inbound Connections CM-6 CCE-3439-7 2009-07-30T19:30:54.110Z 2012-01-05T04:36:49.393Z Domain Profile - Outbound Connections SC-7 CCE-3457-9 2009-07-30T19:30:54.127Z 2012-01-05T04:36:49.470Z Domain Profile - Apply Local Firewall Rules SC-7 CCE-2977-7 2009-07-30T19:30:54.157Z 2012-01-05T04:36:49.533Z Domain Profile - Apply Local Connection Security Rules SC-7 CCE-3373-8 2009-07-30T19:30:54.170Z 2012-01-05T04:36:49.613Z Private Profile- Firewall State SC-7 CCE-3395-1 2009-07-30T19:30:54.203Z 2012-01-05T04:36:49.707Z Private Profile - Inbound Connections SC-7 CCE-3166-6 2009-07-30T19:30:54.217Z 2012-01-05T04:36:49.817Z Private Profile - Outbound Connections SC-7 CCE-3417-3 2009-07-30T19:30:54.250Z 2012-01-05T04:36:49.907Z User notifications when a program is blocked from receiving inbound connections by Windows Firewall should be enabled or disabled as appropriate for the Private Profile. AC-8 CCE-2924-9 2009-07-30T19:30:54.267Z 2012-01-05T04:36:49.987Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Private Profile. SC-5 SC-7 CCE-3360-5 2009-07-30T19:30:54.297Z 2012-01-05T04:36:50.067Z Private Profile - Apply Local Firewall Rules SC-7 CCE-2854-8 2009-07-30T19:30:54.313Z 2012-01-05T04:36:50.190Z Private Profile - Apply Local Connection Security Rules SC-7 CCE-3246-6 2009-07-30T19:30:54.343Z 2012-01-05T04:36:50.283Z Public Profile- Firewall State SC-7 CCE-3263-1 2009-07-30T19:30:54.360Z 2012-01-05T04:36:50.377Z Public Profile - Inbound Connections SC-7 CCE-3351-4 2009-07-30T19:30:54.390Z 2012-01-05T04:36:50.470Z Public Profile - Outbound Connections SC-7 CCE-2998-3 2009-07-30T19:30:54.407Z 2012-01-05T04:36:50.550Z User notifications when a program is blocked from receiving inbound connections by Windows Firewall should be enabled or disabled as appropriate for the Public Profile. AC-8 CCE-2641-9 2009-07-30T19:30:54.437Z 2012-01-05T04:36:50.643Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Public Profile. SC-5 SC-7 CCE-2650-0 2009-07-30T19:30:54.467Z 2012-01-05T04:36:50.720Z Public Profile - Apply Local Firewall Rules SC-7 CCE-3426-4 2009-07-30T19:30:54.483Z 2012-01-05T04:36:50.800Z Public Profile - Apply Local Connection Security Rules SC-7 CCE-3320-9 2009-07-30T19:30:54.517Z 2012-01-05T04:36:50.863Z Logon - Do not process the legacy run list AC-2 CM-6 CCE-3086-6 2009-07-30T19:30:54.530Z 2012-01-05T04:36:50.957Z Logon - Do not process the run once list AC-2 CM-6 CCE-3452-0 2009-07-30T19:30:54.563Z 2012-01-05T04:36:51.033Z Group Policy - Registry policy processing CM-6 CCE-3364-7 2009-07-30T19:30:54.577Z 2012-01-05T04:36:51.143Z Turn off Internet download for Web publishing and online ordering wizards CM-6 CCE-3259-9 2009-07-30T19:30:54.610Z 2012-01-05T04:36:51.237Z Turn off the Windows Messenger Customer Experience Improvement Program CM-6 CCE-2778-9 2009-07-30T19:30:54.627Z 2012-01-05T04:36:51.330Z Turn off Search Companion content file updates CM-5 CM-6 CCE-3421-5 2009-07-30T19:30:54.657Z 2012-01-05T04:36:51.423Z Turn off printing over HTTP CM-6 CCE-2754-0 2009-07-30T19:30:54.670Z 2012-01-05T04:36:51.503Z Turn off downloading of print drivers over HTTP CM-6 CCE-3278-9 2009-07-30T19:30:54.703Z 2012-01-05T04:36:51.627Z Turn off Windows Update device driver searching CM-2 CM-6 CCE-2471-1 2009-07-30T19:30:54.717Z 2012-01-05T04:36:51.720Z Enumerate administrator accounts on elevation AC-6 CCE-3310-0 2009-07-30T19:30:54.733Z 2012-01-05T04:36:51.783Z Require trusted path for credential entry CM-7 CCE-3327-4 2009-07-30T19:30:54.767Z 2012-01-05T04:36:51.847Z Deny all add-ons unless specifically allowed in the Add-on List CM-6 CCE-2975-1 2009-07-30T19:30:54.797Z 2012-01-05T04:36:51.923Z The "Do not allow passwords to be saved" setting should be configured correctly for Terminal Services. IA-2 IA-5 CCE-2874-6 2009-07-30T19:30:54.813Z 2012-01-05T04:36:51.987Z The "Do not allow drive redirection" setting should be configured correctly for Terminal Services. CM-6 CCE-3415-7 2009-07-30T19:30:54.843Z 2012-01-05T04:36:52.050Z Access to registry editing tools is set correctly. AC-4 CCE-3169-0 2009-07-30T19:30:54.877Z 2012-01-05T04:36:52.127Z Prompt for password on resume from hibernate/suspend is set correctly. AC-1 CCE-3437-1 2009-07-30T19:30:54.890Z 2012-01-05T04:36:52.207Z Do not preserve zone information in file attachments is set correcly. CM-6 CCE-2979-3 2009-07-30T19:30:54.920Z 2012-01-05T04:36:52.283Z Hide mechanisms to remove zone information is set correcly. CM-6 CCE-3300-1 2009-07-30T19:30:54.937Z 2012-01-05T04:36:52.363Z Notify antivirus programs when opening attachments is set correcly. SI-3 CCE-3305-0 2009-07-30T19:30:54.967Z 2012-01-05T04:36:52.423Z Outlook Express attachment blocking is set correctly. CM-7 SI-8 CCE-3450-4 2009-07-30T19:30:55.000Z 2012-01-05T04:36:52.487Z Audit: Force audit policy subcategory settings are set correcly. AC-3 CM-6 CM-7 SC-5 CCE-3102-1 2009-07-30T19:30:55.017Z 2009-07-30T19:30:55.017Z The "Log Access For Setup Log" setting should be configured correctly. AU-2 SC-7 CCE-3388-6 2009-07-30T19:30:55.047Z 2009-07-30T19:30:55.047Z The startup type of the Windows Search service should be configured correctly. CM-6 CCE-3270-6 2009-07-30T19:30:55.063Z 2009-07-30T19:30:55.063Z The startup type of Microsoft Peer-to-Peer Networking Services should be configured correctly. CM-6 CM-7 CCE-3045-2 2009-07-30T19:30:55.093Z 2009-07-30T19:30:55.093Z The "Prohibit Access of the Windows Connect Now Wizards" setting should be configured correctly. SC-7 CCE-3331-6 2009-07-30T19:30:55.127Z 2009-07-30T19:30:55.127Z The "Allow remote access to the PnP interface" setting should be configured correctly. AC-1 CCE-3464-5 2009-07-30T19:30:55.140Z 2009-07-30T19:30:55.140Z The "Do not create system restore point when new device driver installed" setting should be configured correctly. CM-6 CCE-3468-6 2009-07-30T19:30:55.170Z 2009-07-30T19:30:55.170Z The "Do not send a Windows Error Report when a generic driver is installed on a device" setting should be configured correctly. SI-1 CCE-3362-1 2009-07-30T19:30:55.187Z 2009-07-30T19:30:55.187Z The "Turn Off Access to All Windows Update Feature" setting should be configured correctly. CM-2 SI-2 CCE-3454-6 2009-07-30T19:30:55.217Z 2009-07-30T19:30:55.217Z The "Turn Off Automatic Root Certificates Update" setting should be configured correctly. CM-6 CCE-3348-0 2009-07-30T19:30:55.233Z 2009-07-30T19:30:55.233Z The "Turn Off Event Views 'Events.asp' Links" setting should be configured correctly. CM-6 CCE-2868-8 2009-07-30T19:30:55.267Z 2009-07-30T19:30:55.267Z The "Turn Off Handwriting Reconition Error Reporting" setting should be configured correctly. CM-6 CCE-2877-9 2009-07-30T19:30:55.280Z 2009-07-30T19:30:55.280Z The "Turn Off Help and Support Center "Did You Know?" Content" setting should be configured correctly. CM-6 CCE-3406-6 2009-07-30T19:30:55.297Z 2009-07-30T19:30:55.297Z The "Turn Off Help and Support Center Microsoft Knowledge Base Search" setting should be configured correctly. CM-6 CCE-3432-2 2009-07-30T19:30:55.327Z 2009-07-30T19:30:55.327Z The "Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com" setting should be configured correctly. CM-6 CCE-2697-1 2009-07-30T19:30:55.343Z 2009-07-30T19:30:55.343Z The "Turn Off Internet File Association Service" setting should be configured correctly. CM-6 CCE-3093-2 2009-07-30T19:30:55.377Z 2009-07-30T19:30:55.377Z The "Turn Off Registration if URL Connection is Referring to Microsoft.com" setting should be configured correctly. CM-6 CCE-3115-3 2009-07-30T19:30:55.407Z 2009-07-30T19:30:55.407Z The "Turn Off the 'Order Prints' Picture Task" setting should be configured correctly. CM-6 CCE-2477-8 2009-07-30T19:30:55.420Z 2009-07-30T19:30:55.420Z The "Turn off the 'Publish to Web' task for files and folders" setting should be configured correctly. CM-6 CCE-3403-3 2009-07-30T19:30:55.453Z 2009-07-30T19:30:55.453Z The "Turn Off Windows Movies Maker Automatic Codec Downloads" setting should be configured correctly. CM-6 CCE-3297-9 2009-07-30T19:30:55.467Z 2009-07-30T19:30:55.467Z The "Turn Off Windows Movie Maker Online Web Links" setting should be configured correctly. CM-6 CCE-3385-2 2009-07-30T19:30:55.500Z 2009-07-30T19:30:55.500Z The "Turn Off Windows Movie Maker Saving to Online Video Hosting Provider" setting should be configured correctly. CM-6 CCE-2781-3 2009-07-30T19:30:55.517Z 2009-07-30T19:30:55.517Z The "Don't Display the Getting Started Welcome Screen at Logon" setting should be configured correctly. CM-6 CCE-2922-3 2009-07-30T19:30:55.547Z 2009-07-30T19:30:55.547Z The "Turn off Windows Startup Sound" setting should be configured correctly. CM-6 CCE-2821-7 2009-07-30T19:30:55.563Z 2012-01-05T04:36:53.643Z The "Require a Password when a Computer Wakes (On Battery)" setting should be configured correctly. AC-3 CCE-3469-4 2009-07-30T19:30:55.577Z 2012-01-05T04:36:53.720Z The "Require a Password when a Computer Wakes (Plugged)" setting should be configured correctly. AC-3 CCE-2742-5 2009-07-30T19:30:55.610Z 2012-01-05T04:36:53.783Z The "Allow only Vista or later connections" setting should be configured correctly. CM-6 CCE-2887-8 2009-07-30T19:30:55.627Z 2012-01-05T04:36:53.847Z The "Customization Warning Messages" setting should be configured correctly. CM-6 CM-7 CCE-3407-4 2009-07-30T19:30:55.657Z 2012-01-05T04:36:53.923Z The "Turn on bandwidth optimization" setting should be configured correctly. CM-6 CCE-3271-4 2009-07-30T19:30:55.670Z 2012-01-05T04:36:54.017Z The "Turn on session logging" setting should be configured correctly. AU-2 CCE-3288-8 2009-07-30T19:30:55.703Z 2012-01-05T04:36:54.113Z The "Prevent IIS Installation" setting should be configured correctly. AC-6 CCE-3434-8 2009-07-30T19:30:55.717Z 2012-01-05T04:36:54.157Z The "Turn off Active Help" setting should be configured correctly. CM-6 CCE-3046-0 2009-07-30T19:30:55.750Z 2012-01-05T04:36:54.237Z The "Turn off Untrusted Content" setting should be configured correctly. SI-1 CCE-3477-7 2009-07-30T19:30:55.767Z 2012-01-05T04:36:54.317Z The "Turn off downloading of enclosures" setting should be configured correctly. CM-6 CCE-3376-1 2009-07-30T19:30:55.797Z 2012-01-05T04:36:54.393Z The "Allow indexing of encrypted files" setting should be configured correctly. CM-6 CCE-3143-5 2009-07-30T19:30:55.813Z 2012-01-05T04:36:54.487Z The "Prevent indexing uncached Exchange folders" setting should be configured correctly. CM-6 CCE-2914-0 2009-07-30T19:30:55.843Z 2012-01-05T04:36:54.567Z The "Turn off Windows Calendar" setting should be configured correctly. CM-6 CCE-3178-1 2009-07-30T19:30:55.860Z 2012-01-05T04:36:54.627Z The "Allow Corporate redirection of Customer Experience Improvement uploads" setting should be configured correctly. CM-6 CCE-3209-4 2009-07-30T19:30:55.890Z 2012-01-05T04:36:54.690Z The "Turn off Windows Defender" setting should be configured correctly. CM-6 CCE-2962-9 2009-07-30T19:30:55.907Z 2012-01-05T04:36:54.767Z The "Turn off Heap termination on corruption" setting should be configured correctly. CM-6 CCE-3125-2 2009-07-30T19:30:55.937Z 2012-01-05T04:36:54.847Z The "Turn off shell protocol protected mode" setting should be configured correctly. SC-5 SI-3 CCE-3398-5 2009-07-30T19:30:55.953Z 2012-01-05T04:36:54.970Z The "Prohibit non-administrators from applying vendor signed updates" setting should be configured correctly. AC-6 CM-5 CCE-3341-5 2009-07-30T19:30:55.983Z 2012-01-05T04:36:55.050Z The "Report Logon Server Not Available During User logon" setting should be configured correctly. CM-6 CCE-2521-3 2009-07-30T19:30:56.000Z 2012-01-05T04:36:55.127Z The "Turn off the communitication features" setting should be configured correctly. CM-6 CCE-2525-4 2009-07-30T19:30:56.030Z 2012-01-05T04:36:55.190Z The "Turn off Windows Mail application" setting should be configured correctly. CM-6 CCE-3486-8 2009-07-30T19:30:56.047Z 2012-01-05T04:36:55.267Z The "Prevent Windows Media DRM Internet Access" setting should be configured correctly. AC-4 CCE-2557-7 2009-07-30T19:30:56.077Z 2012-01-05T04:36:55.347Z The "Turn off Windows Meeting Space" setting should be configured correctly. CM-6 CCE-3328-2 2009-07-30T19:30:56.093Z 2012-01-05T04:36:55.440Z The "Turn on Windows Meeting Space audting" setting should be configured correctly. CM-6 CCE-3456-1 2009-07-30T19:30:56.127Z 2012-01-05T04:36:55.533Z The "Disable unpacking and installation of gadgets that are not digitally signed" setting should be configured correctly. CM-5 CM-6 CCE-3214-4 2009-07-30T19:30:56.140Z 2012-01-05T04:36:55.627Z The "Override the More Gadgets Link" setting should be configured correctly. CM-6 CCE-3500-6 2009-07-30T19:30:56.170Z 2012-01-05T04:36:55.707Z The "Turn Off User Installed Windows Sidebar Gadgets" setting should be configured correctly. CM-6 CCE-3482-7 2009-07-30T19:30:56.187Z 2009-07-30T19:30:56.187Z The "Do not allow Digital Locker to run" setting should be configured correctly. CM-6 CCE-2755-7 2009-07-30T19:30:56.217Z 2009-07-30T19:30:56.217Z The "Turn Off Downloading of Game Information" setting should be configured correctly. CM-6 CCE-2865-4 2009-07-30T19:30:56.233Z 2009-07-30T19:30:56.233Z The "IPv6 Block of Protocols 41" setting should be configured correctly. SC-7 CCE-3508-9 2009-07-30T19:30:56.267Z 2009-07-30T19:30:56.267Z The "IPv6 Block of UDP 3544" setting should be configured correctly. SC-7 CCE-4662-3 2009-07-30T19:30:56.297Z 2009-07-30T19:30:56.297Z The "Enforce user logon restrictions" policy should be set correctly. AC-3 CM-6 CCE-4666-4 2009-07-30T19:30:56.313Z 2009-07-30T19:30:56.313Z The "Maximum Service Ticket Litfetime" policy should be set correctly. AC-3 CM-6 CM-7 CCE-3936-2 2009-07-30T19:30:56.343Z 2009-07-30T19:30:56.343Z The "Maximum User Ticket Lifetime" policy should be set correctly. CM-6 CCE-4755-5 2009-07-30T19:30:56.377Z 2009-07-30T19:30:56.377Z The "Maximum User Renewal Lifetime" policy should be set correctly. CM-6 CCE-4702-7 2009-07-30T19:30:56.390Z 2009-07-30T19:30:56.390Z The "Maximum tolerance for computer clock synchronization" policy should be set correctly. AU-8 CCE-3949-5 2009-07-30T19:30:56.420Z 2009-07-30T19:30:56.420Z TCP/IP PMTU Discovery should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-4904-9 2009-07-30T19:30:56.453Z 2009-07-30T19:30:56.453Z Kerberos and RSVP Traffic Protected by IPSec should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-4781-1 2009-07-30T19:30:56.467Z 2009-07-30T19:30:56.467Z The "Remotely accessible registry paths and subpaths" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4922-1 2009-07-30T19:30:56.500Z 2012-01-05T04:36:56.330Z The "LAN Manager Authentication Level" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4940-3 2009-07-30T19:30:56.517Z 2012-01-05T04:36:56.393Z The "LDAP client signing requirements" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4583-1 2009-07-30T19:30:56.547Z 2012-01-05T04:36:56.470Z The "Minimum session security for NTLM SSP based clients" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4213-5 2009-07-30T19:30:56.577Z 2012-01-05T04:36:56.533Z The "Minimum session security for NTLM SSP based servers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4107-9 2009-07-30T19:30:56.610Z 2012-01-05T04:36:56.597Z The "Recovery Console: Allow Automatic Administrative Logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3953-7 2009-07-30T19:30:56.627Z 2012-01-05T04:36:56.690Z The "Recovery Console: Allow Floppy Copy and Access to All Drives and All Folders" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3954-5 2009-07-30T19:30:56.657Z 2012-01-05T04:36:56.753Z The "Allow System to be Shut Down Without Having to Log On" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3969-3 2009-07-30T19:30:56.670Z 2012-01-05T04:36:56.847Z The "Clear Virtual Memory Pagefile at shutdown" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4774-6 2009-07-30T19:30:56.703Z 2012-01-05T04:36:56.907Z The "Use FIPS compliant algorithms for encryption, hashing, and signing" policy should be set correctly. IA-5 SC-2 SC-9 CCE-4841-3 2009-07-30T19:30:56.717Z 2012-01-05T04:36:56.970Z The "Require Case Insensitivity for Non-Windows Sybsystems" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4011-3 2009-07-30T19:30:56.750Z 2012-01-05T04:36:57.050Z The "Strengthen Default Permissions of Global System Objects" policy should be set correctly. AC-3 CM-6 CCE-4955-1 2009-07-30T19:30:56.767Z 2009-07-30T19:30:56.767Z The "User Account Control: Admin Approval Mode for the Built-in Administrator account" setting should be configured correctly. AC-3 AC-6 CCE-4016-2 2009-07-30T19:30:56.797Z 2009-07-30T19:30:56.797Z The "Behavior of the elevation prompt for administrators in Admin Approval Mode" setting should be configured correctly. AC-3 AC-6 CCE-4969-2 2009-07-30T19:30:56.813Z 2009-07-30T19:30:56.813Z The "Behavior of the elevation prompt for standard users" setting should be configured correctly. AC-3 AC-6 CCE-4612-8 2009-07-30T19:30:56.843Z 2009-07-30T19:30:56.843Z The "User Account Control: Detect application installations and prompt for elevation" setting should be configured correctly. AC-3 AC-6 CCE-5004-7 2009-07-30T19:30:56.860Z 2009-07-30T19:30:56.860Z The "User Account Control: Only elevate executables that are signed and validated" setting should be configured correctly. AC-3 AC-6 CCE-4020-4 2009-07-30T19:30:56.890Z 2009-07-30T19:30:56.890Z The "User Account Control: Only elevate UIAccess applications that are installed in secure locations" setting should be configured correctly. AC-3 AC-6 CCE-4907-2 2009-07-30T19:30:56.907Z 2009-07-30T19:30:56.907Z The "User Account Control: Run all administrators in Admin Approval Mode" setting should be configured correctly. AC-3 AC-6 CCE-4925-4 2009-07-30T19:30:56.937Z 2009-07-30T19:30:56.937Z The "User Account Control: Switch to the secure desktop when prompting for elevation" setting should be configured correctly. AC-3 AC-6 CCE-4194-7 2009-07-30T19:30:56.953Z 2009-07-30T19:30:56.953Z The "User Account Control: Virtualize file and registry write failures to per-user locations" setting should be configured correctly. AC-3 AC-6 CCE-4334-9 2009-07-30T19:30:56.983Z 2009-07-30T19:30:56.983Z The "access this computer from the network" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4088-1 2009-07-30T19:30:57.000Z 2009-07-30T19:30:57.000Z The "act as part of the operating system" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4854-6 2009-07-30T19:30:57.030Z 2009-07-30T19:30:57.030Z The "adjust memory quotas for a process" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4872-8 2009-07-30T19:30:57.047Z 2009-07-30T19:30:57.047Z The "log on locally" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4264-8 2009-07-30T19:30:57.077Z 2009-07-30T19:30:57.077Z The "allow logon through Terminal Services" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4827-2 2009-07-30T19:30:57.093Z 2009-07-30T19:30:57.093Z The "back up files and directories" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4973-4 2009-07-30T19:30:57.127Z 2009-07-30T19:30:57.127Z The "bypass traverse checking" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4863-7 2009-07-30T19:30:57.140Z 2009-07-30T19:30:57.140Z The "change the system time" user right should be assigned to the correct accounts. AU-8 CM-7 CCE-5008-8 2009-07-30T19:30:57.170Z 2009-07-30T19:30:57.170Z The "Change the time zone" user right should be assigned to the appropriate accounts. AU-8 CM-7 CCE-4757-1 2009-07-30T19:30:57.187Z 2009-07-30T19:30:57.187Z The "create a pagefile" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4902-3 2009-07-30T19:30:57.217Z 2009-07-30T19:30:57.217Z The "Create a token object" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4792-8 2009-07-30T19:30:57.250Z 2009-07-30T19:30:57.250Z The "Create global objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4184-8 2009-07-30T19:30:57.267Z 2009-07-30T19:30:57.267Z The "create permanent shared objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4687-0 2009-07-30T19:30:57.297Z 2009-07-30T19:30:57.297Z The "debug programs" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4704-3 2009-07-30T19:30:57.313Z 2009-07-30T19:30:57.313Z The "deny access to this computer from the network" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4722-5 2009-07-30T19:30:57.343Z 2009-07-30T19:30:57.343Z The "deny logon as a batch job" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4867-8 2009-07-30T19:30:57.360Z 2009-07-30T19:30:57.360Z The "deny logon as a service" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4889-2 2009-07-30T19:30:57.390Z 2009-07-30T19:30:57.390Z The "deny logon locally" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4656-5 2009-07-30T19:30:57.407Z 2009-07-30T19:30:57.407Z The "deny logon through Terminal Services" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4673-0 2009-07-30T19:30:57.437Z 2009-07-30T19:30:57.437Z The "force shutdown from a remote system" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4488-3 2009-07-30T19:30:57.453Z 2009-07-30T19:30:57.453Z The "generate security audits" user right should be assigned to the correct accounts. AC-3 AU-9 CM-6 CCE-4382-8 2009-07-30T19:30:57.483Z 2012-01-05T04:36:58.363Z The "Impersonate a client after authentication" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4651-6 2009-07-30T19:30:57.500Z 2009-07-30T19:30:57.500Z The "Increase a Process Working Set" setting should be configured correctly. AC-3 CM-6 CCE-4796-9 2009-07-30T19:30:57.530Z 2009-07-30T19:30:57.530Z The "increase scheduling priority" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4034-5 2009-07-30T19:30:57.547Z 2009-07-30T19:30:57.547Z The "load and unload device drivers" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4317-4 2009-07-30T19:30:57.577Z 2009-07-30T19:30:57.577Z The "lock pages in memory" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4083-2 2009-07-30T19:30:57.593Z 2009-07-30T19:30:57.593Z The "log on as a batch job" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4038-6 2009-07-30T19:30:57.627Z 2009-07-30T19:30:57.627Z The "log on as a service" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4046-9 2009-07-30T19:30:57.640Z 2009-07-30T19:30:57.640Z The "manage auditing and security log" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4285-3 2009-07-30T19:30:57.670Z 2009-07-30T19:30:57.670Z The "Modify an object label" user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-4048-5 2009-07-30T19:30:57.687Z 2009-07-30T19:30:57.687Z The "modify firmware environment values" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4071-7 2009-07-30T19:30:57.717Z 2009-07-30T19:30:57.717Z The "perform volume maintenance tasks" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4962-7 2009-07-30T19:30:57.733Z 2009-07-30T19:30:57.733Z The "profile single process" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4618-5 2009-07-30T19:30:57.767Z 2009-07-30T19:30:57.767Z The "profile system performance" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4861-1 2009-07-30T19:30:57.797Z 2009-07-30T19:30:57.797Z The "remove computer from docking station" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4372-9 2009-07-30T19:30:57.813Z 2009-07-30T19:30:57.813Z The "replace a process-level token" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4948-6 2009-07-30T19:30:57.843Z 2009-07-30T19:30:57.843Z The "restore files and directories" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4569-0 2009-07-30T19:30:57.860Z 2009-07-30T19:30:57.860Z The "shut down the system" user right should be assigned to the correct accounts. AC-3 CM-6 CM-7 CCE-4970-0 2009-07-30T19:30:57.890Z 2009-07-30T19:30:57.890Z The "synchronize directory service data" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4988-2 2009-07-30T19:30:57.920Z 2009-07-30T19:30:57.920Z The "take ownership of files or other objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4627-6 2009-07-30T19:30:57.937Z 2012-01-05T04:36:59.157Z The required permissions for the WLAN AutoConfig service should be assigned. AC-1 CCE-4992-4 2009-07-30T19:30:57.967Z 2012-01-05T04:36:59.220Z Internet Explorer Processes (Zone Elevation Protection) CM-6 CCE-4077-4 2009-07-30T19:30:58.000Z 2009-07-30T19:30:58.000Z The "Turn on Responder (RSPNDR) driver" setting should be configured correctly for the domain profile. CM-6 CCE-4152-5 2009-07-30T19:30:58.017Z 2009-07-30T19:30:58.017Z Installation and Configuration of Network Bridge on the DNS Domain Network should be properly configured. CM-7 CCE-5020-3 2009-07-30T19:30:58.047Z 2009-07-30T19:30:58.047Z The "Prohibit use of Internet Connection Firewall on your DNS domain network" setting should be configured correctly. SC-7 CCE-4078-2 2009-07-30T19:30:58.063Z 2012-03-17T03:34:58.700Z The startup type of the Internet Connection Sharing service should be correct. SC-7 CCE-5061-7 2009-07-30T19:30:58.093Z 2009-07-30T19:30:58.093Z The "Configuration of wireless settings using Windows Connect Now" setting should be configured correctly for Wireless Connect Now over Ethernet (UPnP). CM-6 CCE-4081-6 2009-07-30T19:30:58.127Z 2009-07-30T19:30:58.127Z The "Internet Explorer Maintenance Policy Processing - Allow processing across a slow network connection" setting should be configured correctly. CM-6 CCE-4694-6 2009-07-30T19:30:58.157Z 2012-01-05T04:36:59.627Z The "Enable Error Reporting" policy should be set correctly. CM-6 CCE-4813-2 2009-07-30T19:30:58.170Z 2009-07-30T19:30:58.170Z Use Classic Logon should be properly configured. CM-6 CCE-4579-9 2009-07-30T19:30:58.203Z 2009-07-30T19:30:58.203Z The 'Approved Installation Sites for ActiveX Controls' security mechanism should be enabled or disabled as appropriate. CM-6 CM-7 SC-1 CCE-4086-5 2009-07-30T19:30:58.217Z 2009-07-30T19:30:58.217Z The setup log maximum size should be configured correctly. AU-4 CCE-4501-3 2009-07-30T19:30:58.250Z 2009-07-30T19:30:58.250Z The "Do not allow drive redirection" setting should be configured correctly for Terminal Services. CM-6 CCE-4866-0 2009-07-30T19:30:58.280Z 2009-07-30T19:30:58.280Z The "Set Client connection Encryption Level" policy should be set correctly for Terminal Services. SC-1 CCE-5007-0 2009-07-30T19:30:58.297Z 2009-07-30T19:30:58.297Z The "Set time limit for disconnected sessions" policy should be set correctly for Terminal Services. AC-1 AC-3 CM-6 CM-7 CCE-4267-1 2009-07-30T19:30:58.327Z 2009-07-30T19:30:58.327Z The "Set time limit for idle sessions" policy should be set correctly for Terminal Services. AC-1 AC-3 CM-6 CM-7 CCE-4761-3 2009-07-30T19:30:58.360Z 2009-07-30T19:30:58.360Z Computer-wide, rather than per-user, use of Microsoft Spynet Reporting for Windows Defender should be enabled or disabled as appropriate. CM-6 CCE-4915-5 2009-07-30T19:30:58.377Z 2009-07-30T19:30:58.377Z The "Disable Logging" setting should be configured correctly. AU-2 CCE-5034-4 2009-07-30T19:30:58.407Z 2009-07-30T19:30:58.407Z The "Disable Windows Error Reporting" setting should be configured correctly. SI-2 CCE-4919-7 2009-07-30T19:30:58.420Z 2009-07-30T19:30:58.420Z The "Display Error Notification" setting should be configured correctly. CM-6 CCE-4089-9 2009-07-30T19:30:58.453Z 2009-07-30T19:30:58.453Z The "Do not send additional data" setting should be configured correctly. CM-6 CCE-4991-6 2009-07-30T19:30:58.483Z 2009-07-30T19:30:58.483Z The "Set Safe for Scripting" policy should be set correctly. CM-6 CCE-4629-2 2009-07-30T19:30:58.500Z 2009-07-30T19:30:58.500Z The "Enable User Control Over Installs" policy should be set correctly. AC-6 CCE-4405-7 2009-07-30T19:30:58.530Z 2009-07-30T19:30:58.530Z The "Do Not Show First Use Dialog Boxes" setting for Windows Media Player should be configured correctly. CM-6 CCE-4898-3 2009-07-30T19:30:58.563Z 2009-07-30T19:30:58.563Z The "Disable Media Player for automatic updates" policy should be set correctly. SI-2 CCE-5052-6 2009-07-30T19:30:58.577Z 2009-07-30T19:30:58.577Z The "Prevent Desktop Shortcut Creation" setting for Windows Media Player should be configured correctly. CM-6 CM-7 CCE-4797-7 2009-07-30T19:30:58.610Z 2009-07-30T19:30:58.610Z The "Do Not Automatically Start Windows Messenger" policy should be set correctly. CM-6 CCE-4290-3 2009-07-30T19:30:58.627Z 2012-01-05T04:37:00.377Z The "Password protect the screen saver" setting should be configured correctly for the current user. AC-1 CM-6 IA-5 CCE-5070-8 2009-07-30T19:30:58.657Z 2009-07-30T19:30:58.657Z The "Prevent users from sharing files within their profile" setting should be configured correctly. AC-6 CCE-4938-7 2009-07-30T19:30:58.687Z 2009-07-30T19:30:58.687Z Auditing of "Account Management: Application Group Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-4700-1 2009-07-30T19:30:58.703Z 2009-07-30T19:30:58.703Z Auditing of "Account Management: Application Group Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4093-1 2009-07-30T19:30:58.733Z 2009-07-30T19:30:58.733Z Auditing of "Account Management: Computer Account Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-4228-3 2009-07-30T19:30:58.750Z 2009-07-30T19:30:58.750Z Auditing of "Account Management: Computer Account Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4115-2 2009-07-30T19:30:58.780Z 2009-07-30T19:30:58.780Z Auditing of "Account Management: Distribution Group Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-4140-0 2009-07-30T19:30:58.797Z 2009-07-30T19:30:58.797Z Auditing of "Account Management: Distribution Group Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4916-3 2009-07-30T19:30:58.827Z 2009-07-30T19:30:58.827Z Auditing of "Account Management: Other Account Management Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-4783-7 2009-07-30T19:30:58.843Z 2009-07-30T19:30:58.843Z Auditing of "Account Management: Other Account Management Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5048-4 2009-07-30T19:30:58.877Z 2009-07-30T19:30:58.877Z Auditing of "Account Management: Security Group Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-4142-6 2009-07-30T19:30:58.907Z 2009-07-30T19:30:58.907Z Auditing of "Account Management: Security Group Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4833-0 2009-07-30T19:30:58.920Z 2009-07-30T19:30:58.920Z Auditing of "Account Management: User Account Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-5097-1 2009-07-30T19:30:58.953Z 2009-07-30T19:30:58.953Z Auditing of "Account Management: User Account Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5000-5 2009-07-30T19:30:58.967Z 2009-07-30T19:30:58.967Z Auditing of "Detailed Tracking: DPAPI Activity" events on success should be enabled or disabled as appropriate. AU-2 CCE-4493-3 2009-07-30T19:30:59.000Z 2009-07-30T19:30:59.000Z Auditing of "Detailed Tracking: DPAPI Activity" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4166-5 2009-07-30T19:30:59.017Z 2009-07-30T19:30:59.017Z Auditing of "Detailed Tracking: Process Creation" events on success should be enabled or disabled as appropriate. AU-2 CCE-5094-8 2009-07-30T19:30:59.047Z 2009-07-30T19:30:59.047Z Auditing of "Detailed Tracking: Process Creation" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4869-4 2009-07-30T19:30:59.077Z 2009-07-30T19:30:59.077Z Auditing of "Detailed Tracking: Process Termination" events on success should be enabled or disabled as appropriate. AU-2 CCE-4363-8 2009-07-30T19:30:59.093Z 2009-07-30T19:30:59.093Z Auditing of "Detailed Tracking: Process Termination" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4891-8 2009-07-30T19:30:59.127Z 2009-07-30T19:30:59.127Z Auditing of "Detailed Tracking: RPC Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-4759-7 2009-07-30T19:30:59.157Z 2009-07-30T19:30:59.157Z Auditing of "Detailed Tracking: RPC Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5023-7 2009-07-30T19:30:59.170Z 2009-07-30T19:30:59.170Z Auditing of "DS Access: Detailed Directory Service Replication" events on success should be enabled or disabled as appropriate. AU-2 CCE-4658-1 2009-07-30T19:30:59.203Z 2009-07-30T19:30:59.203Z Auditing of "DS Access: Detailed Directory Service Replication" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5028-6 2009-07-30T19:30:59.217Z 2009-07-30T19:30:59.217Z Auditing of "DS Access: Directory Service Access" events on success should be enabled or disabled as appropriate. AU-2 CCE-4931-2 2009-07-30T19:30:59.250Z 2009-07-30T19:30:59.250Z Auditing of "DS Access: Directory Service Access" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5067-4 2009-07-30T19:30:59.267Z 2009-07-30T19:30:59.267Z Auditing of "DS Access: Directory Service Changes" events on success should be enabled or disabled as appropriate. AU-2 CCE-4808-2 2009-07-30T19:30:59.297Z 2009-07-30T19:30:59.297Z Auditing of "DS Access: Directory Service Changes" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5089-8 2009-07-30T19:30:59.313Z 2009-07-30T19:30:59.313Z Auditing of "DS Access: Directory Service Replication" events on success should be enabled or disabled as appropriate. AU-2 CCE-4176-4 2009-07-30T19:30:59.343Z 2009-07-30T19:30:59.343Z Auditing of "DS Access: Directory Service Replication" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4342-2 2009-07-30T19:30:59.377Z 2009-07-30T19:30:59.377Z Auditing of "Logon/Logoff: Account Lockout" events on success should be enabled or disabled as appropriate. AU-2 CCE-4857-9 2009-07-30T19:30:59.390Z 2009-07-30T19:30:59.390Z Auditing of "Logon/Logoff: Account Lockout" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5011-2 2009-07-30T19:30:59.420Z 2009-07-30T19:30:59.420Z Auditing of "Logon/Logoff: IPsec Extended Mode" events on success should be enabled or disabled as appropriate. AU-2 CCE-4505-4 2009-07-30T19:30:59.437Z 2009-07-30T19:30:59.437Z Auditing of "Logon/Logoff: IPsec Extended Mode" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5016-1 2009-07-30T19:30:59.467Z 2009-07-30T19:30:59.467Z Auditing of "Logon/Logoff: IPsec Main Mode" events on success should be enabled or disabled as appropriate. AU-2 CCE-4650-8 2009-07-30T19:30:59.500Z 2009-07-30T19:30:59.500Z Auditing of "Logon/Logoff: IPsec Main Mode" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5038-5 2009-07-30T19:30:59.517Z 2009-07-30T19:30:59.517Z Auditing of "Logon/Logoff: IPsec Quick Mode" events on success should be enabled or disabled as appropriate. AU-2 CCE-4928-8 2009-07-30T19:30:59.547Z 2009-07-30T19:30:59.547Z Auditing of "Logon/Logoff: IPsec Quick Mode" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4703-5 2009-07-30T19:30:59.577Z 2009-07-30T19:30:59.577Z Auditing of "Logon/Logoff: Logoff" events on success should be enabled or disabled as appropriate. AC-7 AU-2 CCE-4183-0 2009-07-30T19:30:59.593Z 2009-07-30T19:30:59.593Z Auditing of "Logon/Logoff: Logoff" events on failure should be enabled or disabled as appropriate. AC-7 AU-2 CCE-5018-7 2009-07-30T19:30:59.627Z 2009-07-30T19:30:59.627Z Auditing of "Logon/Logoff: Logon" events on success should be enabled or disabled as appropriate. AC-7 AU-2 CCE-4423-0 2009-07-30T19:30:59.657Z 2009-07-30T19:30:59.657Z Auditing of "Logon/Logoff: Logon" events on failure should be enabled or disabled as appropriate. AC-7 AU-2 CCE-5163-1 2009-07-30T19:30:59.670Z 2009-07-30T19:30:59.670Z Auditing of "Logon/Logoff: Other Logon/Logoff Events" events on success should be enabled or disabled as appropriate. AC-7 AU-2 CCE-5066-6 2009-07-30T19:30:59.703Z 2009-07-30T19:30:59.703Z Auditing of "Logon/Logoff: Other Logon/Logoff Events" events on failure should be enabled or disabled as appropriate. AC-7 AU-2 CCE-4956-9 2009-07-30T19:30:59.717Z 2009-07-30T19:30:59.717Z Auditing of "Logon/Logoff: Special Logon" events on success should be enabled or disabled as appropriate. AC-7 AU-2 CCE-4824-9 2009-07-30T19:30:59.750Z 2009-07-30T19:30:59.750Z Auditing of "Logon/Logoff: Special Logon" events on failure should be enabled or disabled as appropriate. AC-7 AU-2 CCE-5084-9 2009-07-30T19:30:59.780Z 2009-07-30T19:30:59.780Z Auditing of "Object Access: Application Generated" events on success should be enabled or disabled as appropriate. AU-2 CCE-4829-8 2009-07-30T19:30:59.797Z 2009-07-30T19:30:59.797Z Auditing of "Object Access: Application Generated" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4714-2 2009-07-30T19:30:59.827Z 2009-07-30T19:30:59.827Z Auditing of "Object Access: Certification Services" events on success should be enabled or disabled as appropriate. AU-2 CCE-4868-6 2009-07-30T19:30:59.843Z 2009-07-30T19:30:59.843Z Auditing of "Object Access: Certification Services" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4200-2 2009-07-30T19:30:59.877Z 2009-07-30T19:30:59.877Z Auditing of "Object Access: File Share" events on success should be enabled or disabled as appropriate. AU-2 CCE-5145-8 2009-07-30T19:30:59.890Z 2009-07-30T19:30:59.890Z Auditing of "Object Access: File Share" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4921-3 2009-07-30T19:30:59.920Z 2009-07-30T19:30:59.920Z Auditing of "Object Access: File System" events on success should be enabled or disabled as appropriate. AU-2 CCE-5039-3 2009-07-30T19:30:59.937Z 2009-07-30T19:30:59.937Z Auditing of "Object Access: File System" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4568-2 2009-07-30T19:30:59.967Z 2009-07-30T19:30:59.967Z Auditing of "Object Access: Filtering Platform Connection" events on success should be enabled or disabled as appropriate. AU-2 CCE-5079-9 2009-07-30T19:30:59.983Z 2009-07-30T19:30:59.983Z Auditing of "Object Access: Filtering Platform Connection" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4947-8 2009-07-30T19:31:00.017Z 2009-07-30T19:31:00.017Z Auditing of "Object Access: Filtering Platform Packet Drop" events on success should be enabled or disabled as appropriate. AU-2 CCE-4335-6 2009-07-30T19:31:00.047Z 2009-07-30T19:31:00.047Z Auditing of "Object Access: Filtering Platform Packet Drop" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4828-0 2009-07-30T19:31:00.063Z 2009-07-30T19:31:00.063Z Auditing of "Object Access: Handle Manipulation" events on success should be enabled or disabled as appropriate. AU-2 CCE-4965-0 2009-07-30T19:31:00.093Z 2009-07-30T19:31:00.093Z Auditing of "Object Access: Handle Manipulation" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4996-5 2009-07-30T19:31:00.110Z 2009-07-30T19:31:00.110Z Auditing of "Object Access: Kernel Object" events on success should be enabled or disabled as appropriate. AU-2 CCE-4885-0 2009-07-30T19:31:00.140Z 2009-07-30T19:31:00.140Z Auditing of "Object Access: Kernel Object" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5132-6 2009-07-30T19:31:00.170Z 2009-07-30T19:31:00.170Z Auditing of "Object Access: Other Object Access Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-4691-2 2009-07-30T19:31:00.187Z 2009-07-30T19:31:00.187Z Auditing of "Object Access: Other Object Access Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4594-8 2009-07-30T19:31:00.217Z 2009-07-30T19:31:00.217Z Auditing of "Object Access: Registry" events on success should be enabled or disabled as appropriate. AU-2 CCE-5087-2 2009-07-30T19:31:00.233Z 2009-07-30T19:31:00.233Z Auditing of "Object Access: Registry" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4616-9 2009-07-30T19:31:00.267Z 2009-07-30T19:31:00.267Z Auditing of "Object Access: SAM" events on success should be enabled or disabled as appropriate. AU-2 CCE-4982-5 2009-07-30T19:31:00.297Z 2009-07-30T19:31:00.297Z Auditing of "Object Access: SAM" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4201-0 2009-07-30T19:31:00.313Z 2009-07-30T19:31:00.313Z Auditing of "Policy Change: Audit Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-5137-5 2009-07-30T19:31:00.343Z 2009-07-30T19:31:00.343Z Auditing of "Policy Change: Audit Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4877-7 2009-07-30T19:31:00.360Z 2009-07-30T19:31:00.360Z Auditing of "Policy Change: Authentication Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-4516-1 2009-07-30T19:31:00.390Z 2009-07-30T19:31:00.390Z Auditing of "Policy Change: Authentication Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5172-2 2009-07-30T19:31:00.420Z 2009-07-30T19:31:00.420Z Auditing of "Policy Change: Authorization Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-5058-3 2009-07-30T19:31:00.437Z 2009-07-30T19:31:00.437Z Auditing of "Policy Change: Authorization Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5177-1 2009-07-30T19:31:00.467Z 2009-07-30T19:31:00.467Z Auditing of "Policy Change: Filtering Platform Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-4939-5 2009-07-30T19:31:00.483Z 2009-07-30T19:31:00.483Z Auditing of "Policy Change: Filtering Platform Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5181-3 2009-07-30T19:31:00.517Z 2009-07-30T19:31:00.517Z Auditing of "Policy Change: MPSSVC Rule-Level Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-4204-4 2009-07-30T19:31:00.530Z 2009-07-30T19:31:00.530Z Auditing of "Policy Change: MPSSVC Rule-Level Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-4479-2 2009-07-30T19:31:00.563Z 2009-07-30T19:31:00.563Z Auditing of "Policy Change: Other Policy Change Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-4995-7 2009-07-30T19:31:00.593Z 2009-07-30T19:31:00.593Z Auditing of "Policy Change: Other Policy Change Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-5114-4 2009-07-30T19:31:00.610Z 2009-07-30T19:31:00.610Z Auditing of "Privilege Use: Non Sensitive Privilege Use" events on success should be enabled or disabled as appropriate. AC-6 AU-2 CCE-4990-8 2009-07-30T19:31:00.640Z 2009-07-30T19:31:00.640Z Auditing of "Privilege Use: Non Sensitive Privilege Use" events on failure should be enabled or disabled as appropriate. AC-6 AU-2 CCE-5131-8 2009-07-30T19:31:00.657Z 2009-07-30T19:31:00.657Z Auditing of "Privilege Use: Other Privilege Use Events" events on success should be enabled or disabled as appropriate. AC-6 AU-2 CCE-4205-1 2009-07-30T19:31:00.687Z 2009-07-30T19:31:00.687Z Auditing of "Privilege Use: Privilege Use: Other Privilege Use Events" events on failure should be enabled or disabled as appropriate. AC-6 AU-2 CCE-4300-0 2009-07-30T19:31:00.703Z 2009-07-30T19:31:00.703Z Auditing of "Privilege Use: Sensitive Privilege Use" events on success should be enabled or disabled as appropriate. AC-6 AU-2 CCE-4734-0 2009-07-30T19:31:00.733Z 2009-07-30T19:31:00.733Z Auditing of "Privilege Use: Sensitive Privilege Use" events on failure should be enabled or disabled as appropriate. AC-6 AU-2 CCE-4976-7 2009-07-30T19:31:00.767Z 2009-07-30T19:31:00.767Z Auditing of "System: Ipsec Driver" events on success should be enabled or disabled as appropriate. SC-8 CCE-4879-3 2009-07-30T19:31:00.797Z 2009-07-30T19:31:00.797Z Auditing of "System: Ipsec Driver" events on failure should be enabled or disabled as appropriate. SC-8 CCE-4998-1 2009-07-30T19:31:00.813Z 2009-07-30T19:31:00.813Z Auditing of "System: Other System Events" events on success should be enabled or disabled as appropriate. CM-6 CCE-4883-5 2009-07-30T19:31:00.843Z 2009-07-30T19:31:00.843Z Auditing of "System: Other System Events" events on failure should be enabled or disabled as appropriate. CM-6 CCE-4535-1 2009-07-30T19:31:00.877Z 2009-07-30T19:31:00.877Z Auditing of "System: Security State Change" events on success should be enabled or disabled as appropriate. SI-6 CCE-5157-3 2009-07-30T19:31:00.890Z 2009-07-30T19:31:00.890Z Auditing of "System: Security State Change" events on failure should be enabled or disabled as appropriate. SI-6 CCE-5170-6 2009-07-30T19:31:00.920Z 2009-07-30T19:31:00.920Z Auditing of "System: Security System Extension" events on success should be enabled or disabled as appropriate. SI-6 CCE-4910-6 2009-07-30T19:31:00.953Z 2009-07-30T19:31:00.953Z Auditing of "System: Security System Extension" events on failure should be enabled or disabled as appropriate. SI-6 CCE-5047-6 2009-07-30T19:31:00.967Z 2009-07-30T19:31:00.967Z Auditing of "System: System Integrity" events on success should be enabled or disabled as appropriate. SI-7 CCE-4822-3 2009-07-30T19:31:01.000Z 2009-07-30T19:31:01.000Z Auditing of "System: System Integrity" events on failure should be enabled or disabled as appropriate. SI-7 CCE-4941-1 2009-07-30T19:31:01.030Z 2009-07-30T19:31:01.030Z User notifications when a program is blocked from receiving inbound connections by Windows Firewall should be enabled or disabled as appropriate for the Domain Profile. AC-8 SC-7 CCE-4597-1 2009-07-30T19:31:01.047Z 2012-01-05T04:37:04.237Z The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Private Profile. AU-2 SC-7 CCE-4963-5 2009-07-30T19:31:01.077Z 2012-01-05T04:37:04.300Z The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Private Profile. AU-2 SC-7 CCE-4206-9 2009-07-30T19:31:01.110Z 2012-01-05T04:37:04.363Z The log file path and name for the Windows Firewall should be configured correctly for the Private Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-4207-7 2009-07-30T19:31:01.140Z 2012-01-05T04:37:04.423Z The log file size limit for the Windows Firewall should be configured correctly for the Private Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-4507-0 2009-07-30T19:31:01.170Z 2012-01-05T04:37:04.503Z The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Public Profile. AU-2 SC-7 CCE-5128-4 2009-07-30T19:31:01.187Z 2012-01-05T04:37:04.580Z The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Public Profile. AU-2 SC-7 CCE-4639-1 2009-07-30T19:31:01.217Z 2012-01-05T04:37:04.643Z The log file path and name for the Windows Firewall should be configured correctly for the Public Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-4278-8 2009-07-30T19:31:01.233Z 2012-01-05T04:37:04.737Z The log file size limit for the Windows Firewall should be configured correctly for the Public Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-5146-6 2009-07-30T19:31:01.267Z 2009-07-30T19:31:01.267Z The ISATAP tunneling protocol for IPv6 should be enabled or disabled as appropriate. CM-7 CCE-5036-9 2009-07-30T19:31:01.297Z 2009-07-30T19:31:01.297Z The 6to4 tunneling protocol for IPv6 should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4811-6 2009-07-30T19:31:01.313Z 2009-07-30T19:31:01.313Z The Teredo tunneling protocol for IPv6 should be enabled or disabled as appropriate. CM-6 CM-7 CCE-5239-9 2009-07-30T19:31:01.343Z 2009-07-30T19:31:01.343Z The "Turn off Help Experience Improvement Program" setting should be configured correctly. CM-6 CCE-4851-2 2009-07-30T19:31:01.360Z 2009-07-30T19:31:01.360Z The "Turn off Help Ratings" setting should be configured correctly. CM-6 CCE-4294-5 2009-07-30T19:31:01.390Z 2009-07-30T19:31:01.390Z The "Create Symbolic Links" user right should be assigned to the appropriate accounts. CM-6 CM-7 CCE-5043-5 2009-07-30T19:31:01.420Z 2012-01-05T04:37:05.033Z The screen saver should be enabled or disabled as appropriate for the current user. AC-1 AC-3 CM-6 CM-7 CCE-5264-7 2009-07-30T19:31:01.437Z 2012-01-05T04:37:05.080Z The "Screen Saver Executable Name" setting should be configured correctly for the current user. AC-1 AC-3 CM-6 CM-7 CCE-5101-1 2009-07-30T19:31:01.467Z 2012-01-05T04:37:05.113Z IP Source Routing should be properly configured for IPv6. AC-3 CM-6 CM-7 SC-5 CCE-4271-3 2009-07-30T19:31:01.483Z 2012-01-05T04:37:05.143Z The "MSS: (TCPMaxDataRetransmissions) IPv6, how many times unacknowledged data is retransmitted (3 recommended, 5 is default)" setting should be configured correctly. AC-4 SC-5 CCE-4467-7 2009-07-30T19:31:01.517Z 2012-01-05T04:37:05.190Z The "User Account Control: Allow UIAccess applications to prompt for elevation" setting should be configured correctly. AC-3 AC-6 CCE-7716-4 2009-07-30T19:31:01.547Z 2009-07-30T19:31:01.547Z The time in seconds before the screen saver grace period expires (ScreenSaverGracePeriod) setting should be configured correctly. AC-1 AC-3 CM-6 CM-7 CCE-8458-2 2009-07-30T19:31:01.563Z 2009-07-30T19:31:01.563Z The "Access credential Manager as a trusted caller" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-7615-8 2009-07-30T19:31:01.593Z 2009-07-30T19:31:01.593Z The "add workstations to domain" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-8404-6 2009-07-30T19:31:01.627Z 2009-07-30T19:31:01.627Z The default behavior for AutoRun should be properly configured. AC-1 CCE-8387-3 2009-07-30T19:31:01.640Z 2012-01-05T04:37:05.377Z The "Unsigned Driver Installation Behavior" policy should be set correctly. AC-6 CM-5 IA-5 CCE-8501-9 2009-07-30T19:31:01.670Z 2012-01-05T04:37:05.423Z The "Do Not Allow Windows Messenger to be Run" policy should be set correctly. CM-6 CCE-8342-8 2009-07-30T19:31:01.703Z 2009-07-30T19:31:01.703Z The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-8095-2 2009-07-30T19:31:01.717Z 2012-01-05T04:37:05.503Z The Autoplay policy "Don't set the always do this checkbox" should be configured correctly. CM-6 CM-7 CCE-8034-1 2009-07-30T19:31:01.750Z 2009-07-30T19:31:01.750Z The "enable computer and user accounts to be trusted for delegation" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-8250-3 2009-07-30T19:31:01.767Z 2012-01-05T04:37:05.580Z Automatic Reboot After System Crash should be enabled or disabled as appropriate. CM-6 SC-2 CCE-8547-2 2009-07-30T19:31:01.797Z 2012-01-05T04:37:05.627Z Administrative Shares should be enabled or disabled as appropriate. CM-7 CCE-8389-9 2009-07-30T19:31:01.813Z 2009-07-30T19:31:01.813Z Disable saving of dial-up passwords should be properly configured. AC-1 IA-5 SC-7 CCE-8608-2 2009-07-30T19:31:01.843Z 2012-01-05T04:37:05.707Z CD Burning features in Windows Explorer should be enabled or disabled as appropriate. AC-1 CM-7 MP-4 CCE-7952-5 2009-07-30T19:31:01.877Z 2009-07-30T19:31:01.877Z The "Remove Security tab" setting should be configured correctly. CM-6 CM-7 CCE-7624-0 2009-07-30T19:31:01.890Z 2012-01-05T04:37:05.783Z The "System cryptography: Force strong key protection for user keys stored on the computer" policy should be enabled or disabled as appropriate. AC-6 IA-5 CCE-7621-6 2009-07-30T19:31:01.920Z 2012-01-05T04:37:05.830Z The "System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies" setting should be configured properly. AC-6 SC-7 CCE-8470-7 2009-07-30T19:31:01.937Z 2009-07-30T19:31:01.937Z The Windows Firewall "Allow ICMP exceptions" policy should be enabled or disabled as appropriate for the Domain Profile. AC-4 CM-6 CM-7 SC-7 CCE-7629-9 2009-07-30T19:31:01.967Z 2012-01-05T04:37:05.907Z The Windows Firewall "Define inbound program exceptions" policy should be enabled or disabled as appropriate for the Domain Profile. AC-4 CM-6 CM-7 SC-7 CCE-8516-7 2009-07-30T19:31:02.000Z 2012-01-05T04:37:05.940Z The Windows Firewall inbound program exceptions list should be set appropriately for the Domain Profile. AC-4 CM-6 CM-7 SC-7 CCE-8188-5 2009-07-30T19:31:02.017Z 2009-07-30T19:31:02.017Z The Windows Firewall "Allow ICMP exceptions" policy should be enabled or disabled as appropriate for the Standard Profile. AC-4 CM-6 CM-7 SC-7 CCE-3858-8 2009-07-30T19:31:02.047Z 2012-01-05T04:35:10.220Z The required auditing for %SystemDrive% directory should be enabled. AU-2 CCE-3748-1 2009-07-30T19:31:02.063Z 2012-01-05T04:35:10.317Z The required auditing for the registry key HKEY_LOCAL_MACHINE\SOFTWARE should be enabled. AU-2 CCE-3770-5 2009-07-30T19:31:02.093Z 2012-01-05T04:35:10.440Z The required auditing for the registry key HKEY_LOCAL_MACHINE\SYSTEM should be enabled. AU-2 CCE-3809-1 2009-07-30T19:31:02.127Z 2012-01-05T04:35:10.503Z The required permissions for the directory %ProgramFiles% should be assigned. AC-3 CM-6 CCE-3869-5 2009-07-30T19:31:02.140Z 2012-01-05T04:35:10.580Z The required permissions for the directory %ProgramFiles%\Resource Kit should be assigned. AC-3 CM-6 CCE-3785-3 2009-07-30T19:31:02.170Z 2012-01-05T04:35:10.643Z The required permissions for the directory %ProgramFiles%\Resource Pro Kit should be assigned. AC-3 CM-6 CCE-3807-5 2009-07-30T19:31:02.187Z 2012-01-05T04:35:10.707Z The required permissions for the directory %SystemDrive% should be assigned. AC-3 CM-6 CCE-2879-5 2009-07-30T19:31:02.217Z 2012-01-05T04:35:10.783Z The required permissions for the file %SystemDrive%\AUTOEXEC.BAT should be assigned. AC-3 CM-6 CCE-3344-9 2009-07-30T19:31:02.250Z 2012-01-05T04:35:10.847Z The required permissions for the file %SystemDrive%\BOOT.INI should be assigned. AC-3 CM-6 CCE-3864-6 2009-07-30T19:31:02.280Z 2012-01-05T04:35:10.907Z The required permissions for the file %SystemDrive%\CONFIG.SYS should be assigned. AC-3 CM-6 CCE-3080-9 2009-07-30T19:31:02.297Z 2012-01-05T04:35:10.970Z The required permissions for the file %SystemDrive%\Documents and Settings should be assigned. AC-3 CM-6 CCE-3873-7 2009-07-30T19:31:02.327Z 2012-01-05T04:35:11.033Z The required permissions for the directory %SystemDrive%\Documents and Settings\Administrator should be assigned. AC-3 CM-6 CCE-3419-9 2009-07-30T19:31:02.360Z 2012-01-05T04:35:11.097Z The required permissions for the directory %SystemDrive%\Documents and Settings\All Users should be assigned. AC-3 CM-6 CCE-3763-0 2009-07-30T19:31:02.377Z 2012-01-05T04:35:11.157Z The required permissions for the directory %SystemDrive%\Documents and Settings\All Users\Documents\DrWatson should be assigned. AC-3 CM-6 CCE-3657-4 2009-07-30T19:31:02.407Z 2012-01-05T04:35:11.220Z The required permissions for the file %SystemDrive%\Documents and Settings\All Users\Documents\DrWatson\drwtsn32.log should be assigned. AC-3 CM-6 CCE-3697-0 2009-07-30T19:31:02.437Z 2012-01-05T04:35:11.300Z The required permissions for the directory %SystemDrive%\Documents and Settings\Default User should be assigned. AC-3 CM-6 CCE-3789-5 2009-07-30T19:31:02.453Z 2012-01-05T04:35:11.363Z The required permissions for the file %SystemDrive%\IO.SYS should be assigned. AC-3 CM-6 CCE-3560-0 2009-07-30T19:31:02.483Z 2012-01-05T04:35:11.440Z The required permissions for the file %SystemDrive%\MSDOS.SYS should be assigned. AC-3 CM-6 CCE-3335-7 2009-07-30T19:31:02.517Z 2012-01-05T04:35:11.517Z The required permissions for the file %SystemDrive%\NTBOOTDD.SYS should be assigned. AC-3 CM-6 CCE-3749-9 2009-07-30T19:31:02.530Z 2012-01-05T04:35:11.613Z The required permissions for the file %SystemDrive%\NTDETECT.COM should be assigned. AC-3 CM-6 CCE-3771-3 2009-07-30T19:31:02.563Z 2012-01-05T04:35:11.673Z The required permissions for the file %SystemDrive%\NTLDR should be assigned. AC-3 CM-6 CCE-2895-1 2009-07-30T19:31:02.593Z 2012-01-05T04:35:11.737Z The required permissions for the directory %SystemDrive%\Temp should be assigned. AC-3 CM-6 CCE-3686-3 2009-07-30T19:31:02.610Z 2012-01-05T04:35:11.800Z The required permissions for the directory %SystemDrive%\My Download Files should be assigned. AC-3 CM-6 CCE-3083-3 2009-07-30T19:31:02.640Z 2012-01-05T04:35:11.863Z The required permissions for the file %SystemDrive%\System Volume Information should be assigned. AC-3 CM-6 CCE-3105-4 2009-07-30T19:31:02.657Z 2012-01-05T04:35:11.957Z The required permissions for the directory %SystemRoot% should be assigned. AC-3 CM-6 CCE-3876-0 2009-07-30T19:31:02.687Z 2012-01-05T04:35:12.033Z The required permissions for the directory %SystemRoot%\Driver Cache\I386\Driver.cab should be assigned. AC-3 CM-6 CCE-3519-6 2009-07-30T19:31:02.717Z 2012-01-05T04:35:12.097Z The required permissions for the directory %SystemRoot%\$NtServicePackUninstall$ should be assigned. AC-3 CM-6 CCE-3197-1 2009-07-30T19:31:02.750Z 2012-01-05T04:35:12.173Z The required permissions for the directory %SystemRoot%\$NtServicePackUninstall$ should be assigned. AC-3 CM-6 CCE-3342-3 2009-07-30T19:31:02.767Z 2012-01-05T04:35:12.237Z The required permissions for any of the %SystemRoot%\$NtUninstall* directories should be assigned. AC-3 CM-6 CCE-3505-5 2009-07-30T19:31:02.797Z 2012-01-05T04:35:12.300Z The required permissions for the directory %SystemRoot%\CSC should be assigned. AC-3 CM-6 CCE-3791-1 2009-07-30T19:31:02.813Z 2012-01-05T04:35:12.363Z The required permissions for the directory %SystemRoot%\Debug should be assigned. AC-3 CM-6 CCE-3192-2 2009-07-30T19:31:02.843Z 2012-01-05T04:35:12.423Z The required permissions for the directory %SystemRoot%\Debug\UserMode should be assigned. AC-3 CM-6 CCE-3836-4 2009-07-30T19:31:02.877Z 2012-01-05T04:35:12.487Z The required permissions for the file %SystemRoot%\regedit.exe should be assigned. AC-3 CM-6 CCE-3091-6 2009-07-30T19:31:02.907Z 2012-01-05T04:35:12.567Z The required permissions for the directory %SystemDrive%\NTDS should be assigned. AC-3 CM-6 CCE-3862-0 2009-07-30T19:31:02.937Z 2012-01-05T04:35:12.613Z The required permissions for the directory %SystemRoot%\Offline Web Pages should be assigned. AC-3 CM-6 CCE-3867-9 2009-07-30T19:31:02.953Z 2012-01-05T04:35:12.673Z The required permissions for the directory %SystemRoot%\Registration should be assigned. AC-3 CM-6 CCE-3404-1 2009-07-30T19:31:02.983Z 2012-01-05T04:35:12.753Z The required permissions for the directory %SystemRoot%\repair should be assigned. AC-3 CM-6 CCE-3052-8 2009-07-30T19:31:03.000Z 2012-01-05T04:35:12.817Z The required permissions for the directory %SystemRoot%\security should be assigned. AC-3 CM-6 CCE-3879-4 2009-07-30T19:31:03.030Z 2012-01-05T04:35:12.907Z The required permissions for the directory %SystemRoot%\SYSVOL should be assigned. AC-3 CM-6 CCE-3544-4 2009-07-30T19:31:03.063Z 2012-01-05T04:35:12.987Z The required permissions for the directory %SystemRoot%\SYSVOL\domain\Policies should be assigned. AC-3 CM-6 CCE-3408-2 2009-07-30T19:31:03.077Z 2012-01-05T04:35:13.050Z The required permissions for the directory %SystemRoot%\Temp should be assigned. AC-3 CM-6 CCE-3800-0 2009-07-30T19:31:03.110Z 2012-01-05T04:35:13.113Z The required permissions for the directory %SystemRoot%\System32 should be assigned. AC-3 CM-6 CCE-3571-7 2009-07-30T19:31:03.140Z 2012-01-05T04:35:13.173Z The required permissions for the directory %SystemRoot%\System32\arp.exe should be assigned. AC-3 CM-6 CCE-3712-7 2009-07-30T19:31:03.170Z 2012-01-05T04:35:13.253Z The required permissions for the file %SystemRoot%\System32\at.exe should be assigned. AC-3 CM-6 CCE-3716-8 2009-07-30T19:31:03.187Z 2012-01-05T04:35:13.363Z The required permissions for the file %SystemRoot%\System32\CONFIG should be assigned. AC-3 CM-6 CCE-3734-1 2009-07-30T19:31:03.217Z 2012-01-05T04:35:13.470Z The required permissions for the file %SystemRoot%\System32\CONFIG\AppEvent.evt should be assigned. AC-3 CM-6 CCE-3641-8 2009-07-30T19:31:03.250Z 2012-01-05T04:35:13.550Z The required permissions for the file %SystemRoot%\System32\CONFIG\*.evt should be assigned. AC-3 CM-6 CCE-3540-2 2009-07-30T19:31:03.267Z 2012-01-05T04:35:13.627Z The required permissions for the directory %SystemRoot%\System32\dllcache should be assigned. AC-3 CM-6 CCE-3831-5 2009-07-30T19:31:03.313Z 2012-01-05T04:35:13.707Z The required permissions for the directory %SystemRoot%\System32\DTCLog should be assigned. AC-3 CM-6 CCE-3745-7 2009-07-30T19:31:03.327Z 2012-01-05T04:35:13.767Z The required permissions for the directory %SystemRoot%\System32\GroupPolicy should be assigned. AC-3 CM-6 CCE-3890-1 2009-07-30T19:31:03.360Z 2012-01-05T04:35:13.847Z The required permissions for the directory %SystemRoot%\System32\ias should be assigned. AC-3 CM-6 CCE-3784-6 2009-07-30T19:31:03.390Z 2012-01-05T04:35:13.907Z The required permissions for the file %SystemRoot%\System32\Ntbackup.exe should be assigned. AC-3 CM-6 CCE-3793-7 2009-07-30T19:31:03.420Z 2012-01-05T04:35:13.970Z The required permissions for the directory %SystemRoot%\System32\NTMSData should be assigned. AC-3 CM-6 CCE-3815-8 2009-07-30T19:31:03.453Z 2012-01-05T04:35:14.033Z The required permissions for the file %SystemRoot%\System32\Rcp.exe should be assigned. AC-3 CM-6 CCE-3824-0 2009-07-30T19:31:03.483Z 2012-01-05T04:35:14.097Z The required permissions for the file %SystemRoot%\System32\Regedt32.exe should be assigned. AC-3 CM-6 CCE-3595-6 2009-07-30T19:31:03.500Z 2012-01-05T04:35:14.157Z The required permissions for the directory %SystemRoot%\system32\ReinstallBackups should be assigned. AC-3 CM-6 CCE-3516-2 2009-07-30T19:31:03.530Z 2012-01-05T04:35:14.220Z The required permissions for the file %SystemRoot%\System32\Rexec.exe should be assigned. AC-3 CM-6 CCE-3520-4 2009-07-30T19:31:03.563Z 2012-01-05T04:35:14.283Z The required permissions for the file %SystemRoot%\System32\Rsh.exe should be assigned. AC-3 CM-6 CCE-3776-2 2009-07-30T19:31:03.577Z 2012-01-05T04:35:14.347Z The required permissions for the file %SystemRoot%\System32\Secedit.exe should be assigned. AC-3 CM-6 CCE-3670-7 2009-07-30T19:31:03.610Z 2012-01-05T04:35:14.407Z The required permissions for the directory %SystemRoot%\System32\Setup should be assigned. AC-3 CM-6 CCE-3340-7 2009-07-30T19:31:03.640Z 2012-01-05T04:35:14.470Z The required permissions for the directory %SystemRoot%\System32\repl should be assigned. AC-3 CM-6 CCE-3780-4 2009-07-30T19:31:03.657Z 2012-01-05T04:35:14.533Z The required permissions for the directory %SystemRoot%\System32\repl\export should be assigned. AC-3 CM-6 CCE-3423-1 2009-07-30T19:31:03.687Z 2012-01-05T04:35:14.597Z The required permissions for the directory %SystemRoot%\System32\repl\import should be assigned. AC-3 CM-6 CCE-3802-6 2009-07-30T19:31:03.717Z 2012-01-05T04:35:14.657Z The required permissions for the directory %SystemRoot%\System32\spool\Printers should be assigned. AC-3 CM-6 CCE-3079-1 2009-07-30T19:31:03.750Z 2012-01-05T04:35:14.753Z The required permissions for the directory %SystemRoot%\Tasks should be assigned. AC-3 CM-6 CCE-3727-5 2009-07-30T19:31:03.767Z 2012-01-05T04:35:14.817Z The required permissions for the directory %ALL%\Program Files\MQSeries should be assigned. AC-3 CM-6 CCE-3493-4 2009-07-30T19:31:03.797Z 2012-01-05T04:35:14.877Z The required permissions for the directory %ALL%\Program Files\MQSeries\qmggr should be assigned. AC-3 CM-6 CCE-3872-9 2009-07-30T19:31:03.827Z 2012-01-05T04:35:14.923Z The required permissions for the directory %SystemDrive%\Documents and Settings\All Users\Application Data\Microsoft\HTML Help ACL should be assigned. AC-3 CM-6 CCE-3656-6 2009-07-30T19:31:03.860Z 2012-01-05T04:35:14.987Z The required permissions for the directory %SystemDrive%\WINNT\SECURITY\Database\SECEDIT.SDB ACL should be assigned. AC-3 CM-6 CCE-2929-8 2009-07-30T19:31:03.890Z 2012-01-05T04:35:15.050Z The required permissions for the registry key HKEY_CLASSES_ROOT should be assigned. AC-3 CM-6 CCE-3308-4 2009-07-30T19:31:03.907Z 2012-01-05T04:35:15.113Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE should be assigned. AC-3 CM-6 CCE-3723-4 2009-07-30T19:31:03.937Z 2012-01-05T04:35:15.173Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes should be assigned. AC-3 CM-6 CCE-3868-7 2009-07-30T19:31:03.967Z 2012-01-05T04:35:15.237Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Regfile\Shell\Open\Command should be assigned. AC-3 CM-6 CCE-3563-4 2009-07-30T19:31:04.000Z 2012-01-05T04:35:15.300Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetDDE should be assigned. AC-3 CM-6 CCE-3691-3 2009-07-30T19:31:04.030Z 2012-01-05T04:35:15.393Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OS/2 Subsystem for NT should be assigned. AC-3 CM-6 CCE-3735-8 2009-07-30T19:31:04.047Z 2012-01-05T04:35:15.457Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Asr\Commands should be assigned. AC-3 CM-6 CCE-3242-5 2009-07-30T19:31:04.077Z 2012-01-05T04:35:15.533Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib should be assigned. AC-3 CM-6 CCE-3374-6 2009-07-30T19:31:04.110Z 2012-01-05T04:35:15.627Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy should be assigned. AC-3 CM-6 CCE-3167-4 2009-07-30T19:31:04.140Z 2012-01-05T04:35:15.707Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer should be assigned. AC-3 CM-6 CCE-3533-7 2009-07-30T19:31:04.157Z 2012-01-05T04:35:15.767Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies should be assigned. AC-3 CM-6 CCE-2897-7 2009-07-30T19:31:04.187Z 2012-01-05T04:35:15.847Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM should be assigned. AC-3 CM-6 CCE-3839-8 2009-07-30T19:31:04.203Z 2012-01-05T04:35:15.907Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\clone should be assigned. AC-3 CM-6 CCE-3865-3 2009-07-30T19:31:04.233Z 2012-01-05T04:35:15.970Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset001 should be assigned. AC-3 CM-6 CCE-3513-9 2009-07-30T19:31:04.267Z 2012-01-05T04:35:16.033Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset002 should be assigned. AC-3 CM-6 CCE-3896-8 2009-07-30T19:31:04.297Z 2012-01-05T04:35:16.127Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset003 should be assigned. AC-3 CM-6 CCE-3838-0 2009-07-30T19:31:04.313Z 2012-01-05T04:35:16.190Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset004 should be assigned. AC-3 CM-6 CCE-3750-7 2009-07-30T19:31:04.343Z 2012-01-05T04:35:16.253Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset005 should be assigned. AC-3 CM-6 CCE-3384-5 2009-07-30T19:31:04.377Z 2012-01-05T04:35:16.317Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset006 should be assigned. AC-3 CM-6 CCE-3680-6 2009-07-30T19:31:04.390Z 2012-01-05T04:35:16.377Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset007 should be assigned. AC-3 CM-6 CCE-3816-6 2009-07-30T19:31:04.420Z 2012-01-05T04:35:16.487Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset008 should be assigned. AC-3 CM-6 CCE-3318-3 2009-07-30T19:31:04.453Z 2012-01-05T04:35:16.567Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset009 should be assigned. AC-3 CM-6 CCE-3882-8 2009-07-30T19:31:04.467Z 2012-01-05T04:35:16.627Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\controlset010 should be assigned. AC-3 CM-6 CCE-3521-2 2009-07-30T19:31:04.500Z 2012-01-05T04:35:16.690Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg should be assigned. AC-3 CM-6 CCE-2932-2 2009-07-30T19:31:04.517Z 2012-01-05T04:35:16.753Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Wmi\Security should be assigned. AC-3 CM-6 CCE-3651-7 2009-07-30T19:31:04.547Z 2012-01-05T04:35:16.817Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum should be assigned. AC-3 CM-6 CCE-3210-2 2009-07-30T19:31:04.577Z 2012-01-05T04:35:16.877Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles should be assigned. AC-3 CM-6 CCE-3466-0 2009-07-30T19:31:04.593Z 2012-01-05T04:35:16.957Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\PermittedManagers should be assigned. AC-3 CM-6 CCE-2978-5 2009-07-30T19:31:04.627Z 2012-01-05T04:35:17.033Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\ValidCommunities should be assigned. AC-3 CM-6 CCE-3957-8 2009-07-30T19:31:04.657Z 2012-01-05T04:35:17.127Z The required permissions for the registry key HKEY_USERS\.DEFAULT should be assigned. AC-3 CM-6 CCE-3961-0 2009-07-30T19:31:04.670Z 2012-01-05T04:35:17.237Z The required permissions for the registry key HKEY_USERS\.DEFAULT\Software\Microsoft\NetDDE should be assigned. AC-3 CM-6 CCE-3732-5 2009-07-30T19:31:04.703Z 2012-01-05T04:35:17.300Z The required permissions for the registry key HKEY_USERS\.DEFAULT\Software\Microsoft\Protected Storage System Provider should be assigned. AC-3 CM-6 CCE-3737-4 2009-07-30T19:31:04.733Z 2012-01-05T04:35:17.363Z The required permissions for the registry key HKEY_CLASSES_ROOT should be assigned. AC-3 CM-6 CCE-3503-0 2009-07-30T19:31:04.750Z 2009-07-30T19:31:04.750Z The "deny access to this computer from the network" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3917-2 2009-07-30T19:31:04.780Z 2009-07-30T19:31:04.780Z The "access this computer from the network" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3736-6 2009-07-30T19:31:04.797Z 2009-07-30T19:31:04.797Z The "act as part of the operating system" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3393-6 2009-07-30T19:31:04.827Z 2009-07-30T19:31:04.827Z The "back up files and directories" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3653-3 2009-07-30T19:31:04.860Z 2009-07-30T19:31:04.860Z The "bypass traverse checking" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3296-1 2009-07-30T19:31:04.890Z 2009-07-30T19:31:04.890Z The "change the system time" user right should be assigned to the correct accounts. AU-8 CM-7 CCE-3943-8 2009-07-30T19:31:04.907Z 2009-07-30T19:31:04.907Z The "create a pagefile" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3860-4 2009-07-30T19:31:04.937Z 2009-07-30T19:31:04.937Z The "Create a token object" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3767-1 2009-07-30T19:31:04.953Z 2009-07-30T19:31:04.953Z The "create permanent shared objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3772-1 2009-07-30T19:31:04.983Z 2009-07-30T19:31:04.983Z The "debug programs" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3904-0 2009-07-30T19:31:05.017Z 2009-07-30T19:31:05.017Z The "force shutdown from a remote system" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3811-7 2009-07-30T19:31:05.030Z 2009-07-30T19:31:05.030Z The "generate security audits" user right should be assigned to the correct accounts. AC-3 AU-9 CM-6 CCE-3688-9 2009-07-30T19:31:05.063Z 2009-07-30T19:31:05.063Z The "adjust memory quotas for a process" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3630-1 2009-07-30T19:31:05.093Z 2009-07-30T19:31:05.093Z The "increase scheduling priority" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3798-6 2009-07-30T19:31:05.110Z 2009-07-30T19:31:05.110Z The "load and unload device drivers" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3317-5 2009-07-30T19:31:05.140Z 2009-07-30T19:31:05.140Z The "lock pages in memory" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3965-1 2009-07-30T19:31:05.170Z 2009-07-30T19:31:05.170Z The "log on as a batch job" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3877-8 2009-07-30T19:31:05.187Z 2009-07-30T19:31:05.187Z The "log on as a service" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3238-3 2009-07-30T19:31:05.217Z 2009-07-30T19:31:05.217Z The "log on locally" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3507-1 2009-07-30T19:31:05.250Z 2009-07-30T19:31:05.250Z The "manage auditing and security log" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3903-2 2009-07-30T19:31:05.267Z 2009-07-30T19:31:05.267Z The "modify firmware environment values" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3926-3 2009-07-30T19:31:05.297Z 2009-07-30T19:31:05.297Z The "profile single process" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3445-4 2009-07-30T19:31:05.327Z 2009-07-30T19:31:05.327Z The "profile system performance" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3829-9 2009-07-30T19:31:05.360Z 2009-07-30T19:31:05.360Z The "remove computer from docking station" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3970-1 2009-07-30T19:31:05.377Z 2009-07-30T19:31:05.377Z The "replace a process-level token" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3912-3 2009-07-30T19:31:05.407Z 2009-07-30T19:31:05.407Z The "restore files and directories" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3934-7 2009-07-30T19:31:05.437Z 2009-07-30T19:31:05.437Z The "shut down the system" user right should be assigned to the correct accounts. AC-3 CM-6 CM-7 CCE-3471-0 2009-07-30T19:31:05.467Z 2009-07-30T19:31:05.467Z The "take ownership of files or other objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3850-5 2009-07-30T19:31:05.500Z 2009-07-30T19:31:05.500Z The "synchronize directory service data" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3489-2 2009-07-30T19:31:05.517Z 2009-07-30T19:31:05.517Z The "deny logon locally" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3282-1 2009-07-30T19:31:05.547Z 2009-07-30T19:31:05.547Z The "enable computer and user accounts to be trusted for delegation" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3542-8 2009-07-30T19:31:05.577Z 2009-07-30T19:31:05.577Z The "add workstations to domain" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3687-1 2009-07-30T19:31:05.610Z 2009-07-30T19:31:05.610Z The "reset account lockout counter after" policy should meet minimum requirements. AC-7 CM-6 CCE-3960-2 2009-07-30T19:31:05.627Z 2009-07-30T19:31:05.627Z The "account lockout duration" policy should meet minimum requirements. AC-7 CM-6 CCE-3229-2 2009-07-30T19:31:05.657Z 2009-07-30T19:31:05.657Z The "account lockout threshold" policy should meet minimum requirements. AC-7 CM-6 CCE-3859-6 2009-07-30T19:31:05.687Z 2009-07-30T19:31:05.687Z Auditing of "account logon" events on success should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3881-0 2009-07-30T19:31:05.717Z 2009-07-30T19:31:05.717Z Auditing of "account logon" events on failure should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3753-1 2009-07-30T19:31:05.750Z 2009-07-30T19:31:05.750Z Auditing of "account management" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3885-1 2009-07-30T19:31:05.780Z 2009-07-30T19:31:05.780Z Auditing of "account management" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3907-3 2009-07-30T19:31:05.797Z 2009-07-30T19:31:05.797Z Auditing of "logon" events on success should be enabled or disabled as appropriate.. AC-7 AU-2 CCE-3678-0 2009-07-30T19:31:05.827Z 2009-07-30T19:31:05.827Z Auditing of "logon" events on failure should be enabled or disabled as appropriate.. AC-7 AU-2 CCE-3313-4 2009-07-30T19:31:05.843Z 2009-07-30T19:31:05.843Z Auditing of "object access" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3846-3 2009-07-30T19:31:05.877Z 2009-07-30T19:31:05.877Z Auditing of "object access" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3366-2 2009-07-30T19:31:05.907Z 2009-07-30T19:31:05.907Z Auditing of "policy change" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2995-9 2009-07-30T19:31:05.920Z 2009-07-30T19:31:05.920Z Auditing of "policy change" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3779-6 2009-07-30T19:31:05.953Z 2009-07-30T19:31:05.953Z Auditing of "privilege use" events on success should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3925-5 2009-07-30T19:31:05.983Z 2009-07-30T19:31:05.983Z Auditing of "privilege use" events on failure should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3215-1 2009-07-30T19:31:06.000Z 2009-07-30T19:31:06.000Z Auditing of "process tracking" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3911-5 2009-07-30T19:31:06.030Z 2009-07-30T19:31:06.030Z Auditing of "process tracking" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3792-9 2009-07-30T19:31:06.063Z 2009-07-30T19:31:06.063Z Auditing of "system" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3937-0 2009-07-30T19:31:06.093Z 2009-07-30T19:31:06.093Z Auditing of "system" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3959-4 2009-07-30T19:31:06.110Z 2009-07-30T19:31:06.110Z The "Allow System to be Shut Down Without Having to Log On" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3470-2 2009-07-30T19:31:06.140Z 2009-07-30T19:31:06.140Z The "Decoy Admin Account Not Disabled" policy should be set correctly. AC-3 CM-6 CCE-3880-2 2009-07-30T19:31:06.170Z 2012-01-05T04:35:19.393Z The "restrict guest access to application log" policy should be set correctly. AU-4 CM-6 CCE-3775-4 2009-07-30T19:31:06.187Z 2012-01-05T04:35:19.457Z The application log maximum size should be configured correctly.. AU-4 AU-5 CM-6 CCE-3797-8 2009-07-30T19:31:06.217Z 2012-01-05T04:35:19.517Z The "when maximum log size is reached" property should be set correctly for the Application log. AU-4 AU-5 CM-6 CCE-3444-7 2009-07-30T19:31:06.250Z 2009-07-30T19:31:06.250Z If the Application log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-3964-4 2009-07-30T19:31:06.267Z 2012-01-05T04:35:19.643Z The "restrict guest access to security log" policy should be set correctly. AU-4 CM-6 CCE-3096-5 2009-07-30T19:31:06.297Z 2012-01-05T04:35:19.707Z The security log maximum size should be configured correctly.. AU-4 AU-6 AU-9 CCE-3589-9 2009-07-30T19:31:06.313Z 2012-01-05T04:35:19.767Z The "when maximum log size is reached" property should be set correctly for the Security log. AU-4 AU-5 CM-6 CCE-3968-5 2009-07-30T19:31:06.343Z 2009-07-30T19:31:06.343Z If the Security log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-3990-9 2009-07-30T19:31:06.377Z 2012-01-05T04:35:19.877Z The "restrict guest access to system log" policy should be set correctly. AU-4 CM-6 CCE-3889-3 2009-07-30T19:31:06.407Z 2012-01-05T04:35:19.987Z The system log maximum size should be configured correctly.. AU-4 AU-6 AU-9 CCE-3805-9 2009-07-30T19:31:06.420Z 2012-01-05T04:35:20.113Z The "when maximum log size is reached" property should be set correctly for the System log. AU-4 AU-5 CM-6 CCE-3823-2 2009-07-30T19:31:06.453Z 2009-07-30T19:31:06.453Z If the System log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-3827-3 2009-07-30T19:31:06.483Z 2009-07-30T19:31:06.483Z The "maximum password age" policy should meet minimum requirements. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-3224-3 2009-07-30T19:31:06.500Z 2009-07-30T19:31:06.500Z The "minimum password age" policy should meet minimum requirements. CM-6 IA-5 CCE-3228-4 2009-07-30T19:31:06.530Z 2009-07-30T19:31:06.530Z The "minimum password length" policy should meet minimum requirements. CM-6 IA-5 CCE-3986-7 2009-07-30T19:31:06.547Z 2012-01-05T04:35:20.347Z The correct password filtering DLL should be installed. AC-3 CM-6 CM-7 SC-5 CCE-3042-9 2009-07-30T19:31:06.577Z 2009-07-30T19:31:06.577Z The "password must meet complexity requirments" policy should be set correctly. CM-6 IA-5 CCE-3588-1 2009-07-30T19:31:06.610Z 2009-07-30T19:31:06.610Z The "enforce password history" policy should meet minimum requirements. CM-6 IA-5 CCE-3852-1 2009-07-30T19:31:06.627Z 2009-07-30T19:31:06.627Z The "store password using reversible encryption for all users in the domain" policy should be set correctly. CM-6 IA-5 CCE-3372-0 2009-07-30T19:31:06.657Z 2012-01-05T04:35:20.517Z The startup type of the Alerter service should be correct. CM-6 CCE-3892-7 2009-07-30T19:31:06.687Z 2012-01-05T04:35:20.580Z The startup type of the ClipBook service should be correct. CM-6 CCE-4041-0 2009-07-30T19:31:06.703Z 2012-01-05T04:35:20.673Z The startup type of the Computer Browser service should be correct. CM-6 CCE-3059-3 2009-07-30T19:31:06.733Z 2012-01-05T04:35:20.737Z The startup type of the Fax service should be correct. CM-6 CCE-3830-7 2009-07-30T19:31:06.767Z 2012-01-05T04:35:20.800Z The startup type of the FTP Publishing service should be correct. CM-6 CCE-3835-6 2009-07-30T19:31:06.797Z 2012-01-05T04:35:20.863Z The startup type of the IIS Admin service should be correct. CM-6 CCE-3738-2 2009-07-30T19:31:06.813Z 2012-01-05T04:35:20.940Z The startup type of the Messenger service should be correct. CM-6 CCE-4035-2 2009-07-30T19:31:06.843Z 2012-01-05T04:35:21.003Z The startup type of the NetMeeting Remote Desktop Sharing service should be correct. CM-6 CCE-3554-3 2009-07-30T19:31:06.877Z 2012-01-05T04:35:21.067Z The startup type of the Internet Connection Sharing service should be correct. CM-6 CCE-3572-5 2009-07-30T19:31:06.890Z 2012-01-05T04:35:21.127Z The startup type of the Remote Registry service should be correct. CM-6 CCE-3973-5 2009-07-30T19:31:06.920Z 2012-01-05T04:35:21.190Z The startup type of the Routing and Remote Access service should be correct. CM-6 CCE-3995-8 2009-07-30T19:31:06.953Z 2012-01-05T04:35:21.253Z The startup type of the Remote Shell service should be correct. CM-6 CCE-3515-4 2009-07-30T19:31:06.967Z 2012-01-05T04:35:21.317Z The startup type of the Simple TCP/IP service should be correct. CM-6 CCE-3643-4 2009-07-30T19:31:07.000Z 2012-01-05T04:35:21.377Z The startup type of the Simple Mail Transport Protocol (SMTP) service should be correct. CM-6 CCE-3524-6 2009-07-30T19:31:07.030Z 2012-01-05T04:35:21.457Z The startup type of the SNMP Service service should be correct. CM-6 CCE-3819-0 2009-07-30T19:31:07.063Z 2012-01-05T04:35:21.517Z The startup type of the SNMP Trap Service service should be correct. CM-6 CCE-3951-1 2009-07-30T19:31:07.093Z 2012-01-05T04:35:21.580Z The startup type of the Telnet service should be correct. CM-6 CCE-3722-6 2009-07-30T19:31:07.110Z 2012-01-05T04:35:21.643Z The startup type of the World Wide Web Publishing service should be correct. CM-6 CCE-3634-3 2009-07-30T19:31:07.140Z 2012-01-05T04:35:21.690Z The startup type of the Automatic Update service should be correct. CM-6 CCE-3721-8 2009-07-30T19:31:07.170Z 2012-01-05T04:35:21.753Z The startup type of the Background Intelligent Transfer Service (BITS) service should be correct. CM-6 CCE-3069-2 2009-07-30T19:31:07.203Z 2012-01-05T04:35:21.817Z The startup type of the Print Services for Unix service should be correct. CM-6 CCE-3898-4 2009-07-30T19:31:07.217Z 2012-01-05T04:35:21.863Z The correct service permissions for the Printer service should be assigned. AC-3 CM-6 CCE-3418-1 2009-07-30T19:31:07.250Z 2012-01-05T04:35:21.923Z The correct service permissions for the Task Scheduler service should be assigned. AC-3 CM-6 CCE-3938-8 2009-07-30T19:31:07.280Z 2009-07-30T19:31:07.280Z The "Additional restrictions for anonymous connections" policy should be set correctly. AC-3 CM-6 CCE-3837-2 2009-07-30T19:31:07.313Z 2012-01-05T04:35:22.017Z The behavior surrounding Anonymous users' abiliity to display lists of SAM accounts and shares should be correct. AC-3 CM-6 CM-7 SC-5 CCE-3982-6 2009-07-30T19:31:07.343Z 2012-01-05T04:35:22.080Z The "Anonymous access to the security event log" policy should be set correctly. AU-6 AU-9 CCE-4004-8 2009-07-30T19:31:07.360Z 2009-07-30T19:31:07.360Z The "Anonymous access to the registry" policy should be set correctly. CM-6 CM-7 CCE-3766-3 2009-07-30T19:31:07.390Z 2009-07-30T19:31:07.390Z Use of the built-in Guest account should be enabled or disabled as appropriate. AC-2 CM-7 IA-4 CCE-3669-9 2009-07-30T19:31:07.420Z 2012-01-05T04:35:22.220Z The "Message title for users attempting to log on" policy should be set correctly. AC-8 CM-6 CM-7 SC-5 CCE-4012-1 2009-07-30T19:31:07.453Z 2012-01-05T04:35:22.347Z The "Message text for users attempting to log on" policy should be set correctly. AC-8 CM-6 CM-7 SC-5 CCE-3893-5 2009-07-30T19:31:07.467Z 2009-07-30T19:31:07.467Z Administrative Shares should be enabled or disabled as appropriate. CM-7 CCE-4039-4 2009-07-30T19:31:07.500Z 2009-07-30T19:31:07.500Z Automatic Execution of the System Debugger should be properly configured. CM-6 CM-7 CCE-3559-2 2009-07-30T19:31:07.530Z 2009-07-30T19:31:07.530Z Automatic Logon should be properly configured. AC-3 CM-6 CM-7 IA-2 SC-5 CCE-4061-8 2009-07-30T19:31:07.547Z 2009-07-30T19:31:07.547Z Automatic Reboot After System Crash should be properly configured. CM-6 SC-2 CCE-3726-7 2009-07-30T19:31:07.577Z 2009-07-30T19:31:07.577Z Autoplay on all Drive Types should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3871-1 2009-07-30T19:31:07.610Z 2009-07-30T19:31:07.610Z Autoplay for Current User should be properly configured. CM-6 CM-7 CCE-3528-7 2009-07-30T19:31:07.627Z 2009-07-30T19:31:07.627Z Autoplay for Default User should be properly configured. CM-6 CM-7 CCE-3555-0 2009-07-30T19:31:07.657Z 2009-07-30T19:31:07.657Z CD-ROM Autorun should be properly configured. AC-1 CM-7 MP-4 CCE-3682-2 2009-07-30T19:31:07.687Z 2009-07-30T19:31:07.687Z Computer Browser ResetBrowser Frames should be properly configured. CM-6 CCE-3704-4 2009-07-30T19:31:07.703Z 2009-07-30T19:31:07.703Z ICMP Redirects should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3915-6 2009-07-30T19:31:07.733Z 2009-07-30T19:31:07.733Z IP Source Routing should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-4065-9 2009-07-30T19:31:07.767Z 2009-07-30T19:31:07.767Z IRDP should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3942-0 2009-07-30T19:31:07.797Z 2009-07-30T19:31:07.797Z Kerberos and RSVP Traffic Protected by IPSec should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3981-8 2009-07-30T19:31:07.813Z 2009-07-30T19:31:07.813Z Dr. Watson Crash Dumps should be properly configured. SC-7 CCE-3646-7 2009-07-30T19:31:07.843Z 2009-07-30T19:31:07.843Z Display Last User Name in Logon Screen should be properly configured. AC-3 AC-9 CM-6 CCE-3920-6 2009-07-30T19:31:07.877Z 2009-07-30T19:31:07.877Z File System Checker and Popups should be properly configured. CM-7 CCE-3095-7 2009-07-30T19:31:07.890Z 2009-07-30T19:31:07.890Z System File Checker should be properly configured. CM-7 CCE-3972-7 2009-07-30T19:31:07.920Z 2009-07-30T19:31:07.920Z System File Checker Progress Meter should be properly configured. CM-7 CCE-3620-2 2009-07-30T19:31:07.953Z 2009-07-30T19:31:07.953Z System availability to Master Browser should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3884-4 2009-07-30T19:31:07.983Z 2009-07-30T19:31:07.983Z TCP/IP Dead Gateway Detection should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3600-4 2009-07-30T19:31:08.000Z 2009-07-30T19:31:08.000Z The TCP/IP KeepAlive Time should be set correctly . AC-4 SC-5 SC-7 CCE-3878-6 2009-07-30T19:31:08.030Z 2009-07-30T19:31:08.030Z The permitted number of TCP/IP Maximum Half-open Sockets should be set correctly . AC-4 SC-5 SC-7 CCE-4027-9 2009-07-30T19:31:08.063Z 2009-07-30T19:31:08.063Z The permitted number of TCP/IP Maximum Retried Half-open Sockets should be set correctly . AC-4 SC-5 SC-7 CCE-3922-2 2009-07-30T19:31:08.093Z 2009-07-30T19:31:08.093Z TCP/IP NetBIOS Name Release on Request Prevented should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3939-6 2009-07-30T19:31:08.110Z 2009-07-30T19:31:08.110Z TCP/IP PMTU Discovery should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-4085-7 2009-07-30T19:31:08.140Z 2009-07-30T19:31:08.140Z TCP/IP SYN Flood Attack Protection should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3948-7 2009-07-30T19:31:08.170Z 2009-07-30T19:31:08.170Z Protect Kernel object attributes should be properly configured. CM-6 CM-7 CCE-3966-9 2009-07-30T19:31:08.187Z 2009-07-30T19:31:08.187Z Security Audit log warning level should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-4010-5 2009-07-30T19:31:08.217Z 2009-07-30T19:31:08.217Z Disable saving of dial-up passwords should be properly configured. AC-1 IA-5 SC-7 CCE-3900-8 2009-07-30T19:31:08.250Z 2012-01-05T04:35:23.470Z The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-4063-4 2009-07-30T19:31:08.267Z 2012-01-05T04:35:23.517Z The "Secure Channel: Digitally Sign Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-4005-5 2009-07-30T19:31:08.297Z 2009-07-30T19:31:08.297Z The "Allow Server Operators to Schedule Tasks" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3899-2 2009-07-30T19:31:08.327Z 2009-07-30T19:31:08.327Z The built-in Administrator account should be correctly named. AC-3 CM-6 CM-7 SC-5 CCE-4045-1 2009-07-30T19:31:08.343Z 2009-07-30T19:31:08.343Z The built-in Guest account should be correctly named. AC-3 CM-6 CM-7 SC-5 CCE-3921-4 2009-07-30T19:31:08.377Z 2012-01-05T04:35:23.690Z The amount of idle time required before disconnecting a session should be set correctly. AC-1 AC-3 CM-6 CM-7 CCE-4049-3 2009-07-30T19:31:08.407Z 2012-01-05T04:35:23.767Z The "Audit the access of global system objects" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3476-9 2009-07-30T19:31:08.437Z 2012-01-05T04:35:23.830Z The "Audit the use of backup and restore privilege" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3886-9 2009-07-30T19:31:08.467Z 2012-01-05T04:35:23.893Z The "Disable CTRL+ALT+Delete Requirement for Logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4014-7 2009-07-30T19:31:08.483Z 2012-01-05T04:35:23.940Z The "LAN Manager Authentication Level" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3908-1 2009-07-30T19:31:08.517Z 2012-01-05T04:35:24.003Z The "Send LanMan compatible password" setting should be configured correctly. CM-6 IA-5 CCE-3675-6 2009-07-30T19:31:08.547Z 2012-01-05T04:35:24.067Z The "Prevent Users from Installing Printer Drivers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4067-5 2009-07-30T19:31:08.577Z 2012-01-05T04:35:24.127Z The "Recovery Console: Allow Automatic Administrative Logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3463-7 2009-07-30T19:31:08.610Z 2012-01-05T04:35:24.190Z The "Recovery Console: Allow Floppy Copy and Access to All Drives and All Folders" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3529-5 2009-07-30T19:31:08.640Z 2012-01-05T04:35:24.253Z The "Restrict CD-ROM Access to Locally Logged-On User Only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3185-6 2009-07-30T19:31:08.657Z 2012-01-05T04:35:24.317Z The "Restrict Floppy Access to Locally Logged-On User Only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3956-0 2009-07-30T19:31:08.687Z 2012-01-05T04:35:24.377Z The "Strengthen Default Permissions of Global System Objects" policy should be set correctly. CM-6 CM-7 CCE-3978-4 2009-07-30T19:31:08.717Z 2012-01-05T04:35:24.440Z The "Secure Channel: Require Strong (Windows 2000 or later) Session Key" policy should be set correctly. CM-6 SC-2 CCE-3392-8 2009-07-30T19:31:08.750Z 2012-01-05T04:35:24.503Z The "Send Unencrypted Password to Connect to Third-Party SMB Servers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3648-3 2009-07-30T19:31:08.780Z 2012-01-05T04:35:24.567Z The "Unsigned Driver Installation Behavior" policy should be set correctly. AC-6 CM-5 IA-5 CCE-3401-7 2009-07-30T19:31:08.813Z 2009-07-30T19:31:08.813Z The "Unsigned Non-Driver Installation Behavior" policy should be set correctly. AC-6 CM-5 IA-5 CCE-3098-1 2009-07-30T19:31:08.827Z 2012-01-05T04:35:24.657Z The "Users Prompted to Change Password Before Expiration" policy should be set correctly. AC-3 CM-6 CM-7 IA-5 CCE-4070-9 2009-07-30T19:31:08.860Z 2012-01-05T04:35:24.720Z The "Shut Down system immediately if unable to log security audits" policy should be set correctly. AC-3 AU-5 CM-6 CM-7 SC-5 CCE-3629-3 2009-07-30T19:31:08.890Z 2012-01-05T04:35:24.783Z The "Allow System to be Shut Down Without Having to Log On" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3813-3 2009-07-30T19:31:08.920Z 2009-07-30T19:31:08.920Z The "Automatically Log Off Users When Logon Time Expires (local)" policy should be set correctly. SC-1 CCE-3333-2 2009-07-30T19:31:08.937Z 2012-01-05T04:35:24.893Z The "Clear Virtual Memory Pagefile at shutdown" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3747-3 2009-07-30T19:31:08.967Z 2012-01-05T04:35:24.940Z The "Digitally Sign Client Communication (Always)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3994-1 2009-07-30T19:31:09.000Z 2012-01-05T04:35:25.003Z The "Digitally Sign Client Communication (When Possible)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3783-8 2009-07-30T19:31:09.030Z 2012-01-05T04:35:25.067Z The "Digitally Sign Server Communication (Always)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3928-9 2009-07-30T19:31:09.063Z 2012-01-05T04:35:25.143Z The "Digitally Sign Server Communication (When Possible)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3545-1 2009-07-30T19:31:09.093Z 2012-01-05T04:35:25.207Z The "Number of Previous Logons to Cache" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4069-1 2009-07-30T19:31:09.127Z 2012-01-05T04:35:25.267Z The "Allowed to Format and Eject Removable NTFS Media" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3607-9 2009-07-30T19:31:09.140Z 2012-01-05T04:35:25.330Z The "Secure Channel: Digitally Encrypt or Sign Secure Channel Data (Always)" policy should be set correctly. CM-6 SC-2 CCE-3849-7 2009-07-30T19:31:09.170Z 2012-01-05T04:35:25.393Z The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-4025-3 2009-07-30T19:31:09.203Z 2012-01-05T04:35:25.457Z The "Secure Channel: Digitally Sign Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3596-4 2009-07-30T19:31:09.233Z 2012-01-05T04:35:25.517Z The "Smart Card Removal Behavior" policy should be set correctly. CM-6 CM-7 CCE-3145-0 2009-07-30T19:31:09.250Z 2012-01-05T04:35:25.580Z The "Prevent System Maintenance of Computer Account Password" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3947-9 2009-07-30T19:31:09.280Z 2009-07-30T19:31:09.280Z Local volumes should be formatted correctly. CM-7 CCE-3863-8 2009-07-30T19:31:09.313Z 2009-07-30T19:31:09.313Z Unused USB Ports should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4008-9 2009-07-30T19:31:09.327Z 2009-07-30T19:31:09.327Z The "Screen Saver Executable Name" setting should be configured correctly for the current user. AC-1 AC-3 CM-6 CM-7 CCE-4000-6 2009-07-30T19:31:09.360Z 2009-07-30T19:31:09.360Z The "Screen Saver Timeout" setting should be configured correctly for the current user. AC-1 AC-3 CM-6 CM-7 CCE-4145-9 2009-07-30T19:31:09.390Z 2012-01-05T04:35:25.830Z The "Password protect the screen saver" setting should be configured correctly for the current user. AC-1 CM-6 IA-5 CCE-3149-2 2009-07-30T19:31:09.420Z 2009-07-30T19:31:09.420Z The screen saver should be enabled or disabled as appropriate for the current user. AC-1 AC-3 CM-6 CM-7 CCE-3152-6 2009-07-30T19:31:09.437Z 2009-07-30T19:31:09.437Z The "Always Install with Elevated Privileges" policy should be set correctly. CM-6 CCE-4108-7 2009-07-30T19:31:09.467Z 2009-07-30T19:31:09.467Z The "Set Safe for Scripting" policy should be set correctly. CM-6 CCE-3861-2 2009-07-30T19:31:09.500Z 2009-07-30T19:31:09.500Z The "Enable User Control Over Installs" policy should be set correctly. AC-6 CCE-3931-3 2009-07-30T19:31:09.517Z 2009-07-30T19:31:09.517Z The "Enable User to Browser for Source While Elevated" policy should be set correctly. AC-6 CM-6 CCE-4094-9 2009-07-30T19:31:09.547Z 2009-07-30T19:31:09.547Z The "Enable User to Use Media Source While Elevated" policy should be set correctly. AC-6 CM-6 CCE-4116-0 2009-07-30T19:31:09.577Z 2009-07-30T19:31:09.577Z The "Allow Administrator to Install from Terminal Services Session" policy should be set correctly. CM-6 SI-8 CCE-3980-0 2009-07-30T19:31:09.610Z 2009-07-30T19:31:09.610Z The "Enable User to Patch Elevated Products" policy should be set correctly. AC-6 CM-2 CM-6 SI-2 CCE-4002-2 2009-07-30T19:31:09.640Z 2009-07-30T19:31:09.640Z The "Cache Transforms in Secure Location" policy should be set correctly. CM-7 CCE-4033-7 2009-07-30T19:31:09.657Z 2012-01-05T04:35:26.237Z Internet access for Windows Messenger should be configured correctly. CM-7 CCE-4055-0 2009-07-30T19:31:09.687Z 2009-07-30T19:31:09.687Z The "Hide Property Pages" policy should be set correctly for the Task Scheduler. CM-6 CM-7 CCE-3451-2 2009-07-30T19:31:09.717Z 2009-07-30T19:31:09.717Z The "Prohibit New Task Creation" policy should be set correctly for the Task Scheduler. AC-3 AC-5 CM-6 CCE-3971-9 2009-07-30T19:31:09.750Z 2012-01-05T04:35:26.363Z The "Security Zones: Use Only Machine Settings" setting should be configured correctly. CM-2 CM-6 CCE-4117-8 2009-07-30T19:31:09.767Z 2012-01-05T04:35:26.423Z The "Security Zones: Do Not Allow Users to Add/Delete Sites" setting should be configured correctly. AC-3 AC-6 CM-5 CCE-3874-5 2009-07-30T19:31:09.797Z 2012-01-05T04:35:26.487Z The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly. CM-6 SC-1 SI-2 CCE-3517-0 2009-07-30T19:31:09.827Z 2012-01-05T04:35:26.550Z The "Disable Software Update Shell Notifications on Program Launch" setting should be configured correctly. CM-5 CM-6 CCE-3962-8 2009-07-30T19:31:09.860Z 2012-01-05T04:35:26.613Z The "Disable Automatic Install of Internet Explorer Components" setting should be configured correctly. CM-5 SI-3 SI-7 SI-8 CCE-4125-1 2009-07-30T19:31:09.877Z 2012-01-05T04:35:26.673Z The "Make Proxy Settings Per-Machine (Rather Then Per-User)" setting should be configured correctly. CM-5 CCE-4019-6 2009-07-30T19:31:09.907Z 2012-01-05T04:35:26.737Z The "Security Zones: Do Not Allow Users to Change Policies" setting should be configured correctly. AC-3 AC-6 CM-5 CCE-4812-4 2009-07-30T19:31:09.937Z 2009-07-30T19:31:09.937Z DEPRECATED in favor of CCE-5236-5, CCE-4719-1. CCE-5236-5 2009-07-30T19:31:09.967Z 2009-07-30T19:31:09.967Z Auditing of "directory service access" events on success should be enabled or disabled as appropriate.. AU-2 CCE-4719-1 2009-07-30T19:31:10.000Z 2009-07-30T19:31:10.000Z Auditing of "directory service access" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-4874-4 2009-07-30T19:31:10.030Z 2012-01-05T04:35:26.877Z The Smart Card Helper service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4777-9 2009-07-30T19:31:10.047Z 2012-01-05T04:35:26.923Z The License Logging service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4156-6 2009-07-30T19:31:10.077Z 2009-07-30T19:31:10.077Z The "deny logon as a batch job" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4825-6 2009-07-30T19:31:10.110Z 2012-01-05T04:35:27.017Z The Application Management service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4720-9 2009-07-30T19:31:10.140Z 2012-01-05T04:35:27.080Z The Resultant Set of Policy (RSoP) Provider Service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4848-8 2009-07-30T19:31:10.170Z 2009-07-30T19:31:10.170Z Use of the Recycle Bin on file deletion should be enabled or disabled as appropriate. CM-7 CCE-4729-0 2009-07-30T19:31:10.203Z 2012-01-05T04:35:27.157Z The Network News Transport Protocol (NNTP) service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4495-8 2009-07-30T19:31:10.217Z 2012-01-05T04:35:27.220Z The Network Dynamic Data Exchange (DDE) service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4768-8 2009-07-30T19:31:10.250Z 2009-07-30T19:31:10.250Z The "Interactive logon: Requre smart card" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-4253-1 2009-07-30T19:31:10.280Z 2012-01-05T04:35:27.300Z The Distributed Link Tracking Server service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4539-3 2009-07-30T19:31:10.313Z 2012-01-05T04:35:27.363Z The startup type of the Remote Access Auto connection Manager service should be correct. CM-6 CCE-4786-0 2009-07-30T19:31:10.327Z 2012-01-05T04:35:27.423Z The "Disconnect clients when logon hours expire" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4447-9 2009-07-30T19:31:10.360Z 2012-01-05T04:35:27.487Z The Distributed Transaction Coordinator service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4332-3 2009-07-30T19:31:10.390Z 2012-01-05T04:35:27.533Z The "Impersonate a client after authentication" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4830-6 2009-07-30T19:31:10.420Z 2012-01-05T04:35:27.613Z The required permissions for the file %SystemRoot%\System32\runas.exe should be assigned. AC-3 CM-6 CCE-4751-4 2009-07-30T19:31:10.453Z 2012-01-05T04:35:27.673Z The Uninterruptable Power Supply service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4645-8 2009-07-30T19:31:10.467Z 2009-07-30T19:31:10.467Z The "Enforce user logon restrictions" policy should be set correctly. AC-3 CM-6 CCE-4750-6 2009-07-30T19:31:10.500Z 2009-07-30T19:31:10.500Z The "Maximum User Ticket Lifetime" policy should be set correctly. CM-6 CCE-4865-2 2009-07-30T19:31:10.530Z 2009-07-30T19:31:10.530Z The "Maximum Service Ticket Litfetime" policy should be set correctly. AC-3 CM-6 CM-7 CCE-4684-7 2009-07-30T19:31:10.547Z 2009-07-30T19:31:10.547Z The "Maximum User Renewal Lifetime" policy should be set correctly. CM-6 CCE-4715-9 2009-07-30T19:31:10.577Z 2009-07-30T19:31:10.577Z The "Maximum tolerance for computer clock synchronization" policy should be set correctly. AU-8 CCE-4790-2 2009-07-30T19:31:10.610Z 2009-07-30T19:31:10.610Z The "Create global objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4667-2 2009-07-30T19:31:10.640Z 2012-01-05T04:35:27.940Z The startup type of the Task Scheduler service should be correct. CM-6 CCE-4882-7 2009-07-30T19:31:10.657Z 2012-01-05T04:35:28.003Z The Telephony service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4799-3 2009-07-30T19:31:10.687Z 2009-07-30T19:31:10.687Z The "DCOM: Machine access Restrictions in Security Descriptor Definition Language (SDDL) syntax" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-4195-4 2009-07-30T19:31:10.717Z 2012-01-05T04:35:28.080Z The DHCP Server service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4235-8 2009-07-30T19:31:10.750Z 2009-07-30T19:31:10.750Z The "deny logon as a service" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-4244-0 2009-07-30T19:31:10.780Z 2012-01-05T04:35:28.173Z The Wireless Zero Configuration service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4764-7 2009-07-30T19:31:10.813Z 2012-01-05T04:35:28.237Z The startup type of the .NET Framework service should be correct. CM-6 CCE-4803-3 2009-07-30T19:31:10.843Z 2012-01-05T04:35:28.300Z The Distributed Link Tracking Client service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4794-4 2009-07-30T19:31:10.877Z 2012-01-05T04:35:28.363Z The startup type of the Indexing service should be correct. CM-6 CCE-4689-6 2009-07-30T19:31:10.890Z 2009-07-30T19:31:10.890Z The "DCOM: Machine Launch Restrictions in the Security Descriptor Definition Language (SDDL) syntax" security option should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-4779-5 2009-07-30T19:31:10.920Z 2012-01-05T04:35:28.457Z The Remote Access Connection Manager service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4801-7 2009-07-30T19:31:10.953Z 2012-01-05T04:35:28.503Z The Network DDE DDE Share Database Manager (DSDM) service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4453-7 2009-07-30T19:31:10.983Z 2009-07-30T19:31:10.983Z The Certificate Services service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4096-4 2009-07-30T19:31:11.000Z 2012-01-05T04:35:28.597Z The Smart Card service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-4003-0 2009-07-30T19:31:11.030Z 2009-07-30T19:31:11.030Z Membership in the Power Users group should be assigned to the appropriate accounts. AC-2 CM-6 CCE-4890-0 2009-07-30T19:31:11.063Z 2012-01-05T04:35:28.690Z The "Delete Cached Copies of Roaming Profiles" policy should be set correctly. CM-6 CM-7 MP-6 CCE-5141-7 2009-07-30T19:31:11.077Z 2009-07-30T19:31:11.077Z The "AutoBackupLogFiles" policy for security logs should be set correctly. AU-4 AU-5 CCE-4709-2 2009-07-30T19:31:11.110Z 2009-07-30T19:31:11.110Z The "AutoBackupLogFiles" policy for application logs should be set correctly. AU-4 AU-5 CCE-4986-6 2009-07-30T19:31:11.140Z 2009-07-30T19:31:11.140Z The "AutoBackupLogFiles" policy for system logs should be set correctly. AU-4 AU-5 CCE-4929-6 2009-07-30T19:31:11.170Z 2009-07-30T19:31:11.170Z The "Named Pipes that can be accessed anonymously" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-5282-9 2009-07-30T19:31:11.187Z 2009-07-30T19:31:11.187Z The time in seconds before the screen saver grace period expires (ScreenSaverGracePeriod) setting should be configured correctly. AC-1 AC-3 CM-6 CM-7 CCE-5153-2 2009-07-30T19:31:11.217Z 2009-07-30T19:31:11.217Z The setting determining the location of the key and password for the Syskey Encryption Key is correct. IA-5 CCE-5123-5 2009-07-30T19:31:11.250Z 2009-07-30T19:31:11.250Z The POSIX subsystem should be enabled or disabled as appropriate. CM-7 CCE-5139-1 2009-07-30T19:31:11.280Z 2009-07-30T19:31:11.280Z The OS/2 subsystem should be enabled or disabled as appropriate. CM-6 CM-7 CCE-5184-7 2009-07-30T19:31:11.313Z 2012-01-05T04:35:28.957Z The environment variable "Os2LibPath" should exist or not as appropriate. CM-6 CM-7 CCE-5176-3 2009-07-30T19:31:11.343Z 2012-01-05T04:35:29.003Z The path to the Microsoft OS/2 version 1.x library should be defined appropriately. CM-6 CM-7 CCE-4400-8 2009-07-30T19:31:11.377Z 2009-07-30T19:31:11.377Z Safe DLL search mode should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-4999-9 2009-07-30T19:31:11.407Z 2009-07-30T19:31:11.407Z The "Remotely accessible registry paths" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-5126-8 2009-07-30T19:31:11.437Z 2012-01-05T04:35:29.113Z The registry key HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\Os2 should exist or not as appropriate. CM-6 CM-7 CCE-4772-0 2009-07-30T19:31:11.467Z 2012-01-05T04:35:29.173Z The location of the OS/2 subsystem should be set correctly. CM-6 CM-7 CCE-4972-6 2009-07-30T19:31:11.500Z 2012-01-05T04:35:29.237Z The location of the POSIX subsystem should be set correctly. CM-6 CM-7 CCE-5100-3 2009-07-30T19:31:11.530Z 2009-07-30T19:31:11.530Z The "Shares that can be accessed anonymously" policy should be set correctly. AC-3 CM-6 CM-7 CCE-4946-0 2009-07-30T19:31:11.547Z 2009-07-30T19:31:11.547Z The registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AEDebug\Debugger should exist or not as appropriate. CM-6 CM-7 CCE-5382-7 2009-07-30T19:31:11.577Z 2009-07-30T19:31:11.577Z The path to the debugger used for Just-In-Time debugging should be set appropriately. CM-6 CCE-5281-1 2009-07-30T19:31:11.627Z 2012-01-05T04:35:29.393Z The Distributed Component Object Model (DCOM) should be enabled or disabled as appropriate. CM-6 CM-7 CCE-5073-2 2009-07-30T19:31:11.640Z 2009-07-30T19:31:11.640Z The automatic generation of 8.3 file names for NTFS should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-5148-2 2009-07-30T19:31:11.670Z 2012-01-05T04:35:29.470Z The "Refuse machine account password change" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-5045-0 2009-07-30T19:31:11.703Z 2009-07-30T19:31:11.703Z The encryption algorithm to be used by EFS should be properly chosen. CM-6 CM-7 SC-2 CCE-4736-5 2009-07-30T19:31:11.733Z 2009-07-30T19:31:11.733Z The TCPMaxPortsExhausted setting should be properly configured. AC-4 SC-5 SC-7 CCE-4961-9 2009-07-30T19:31:11.750Z 2009-07-30T19:31:11.750Z The TcpMaxDataRetransmissions setting should be properly configured. AC-4 SC-5 SC-7 CCE-4489-1 2009-07-30T19:31:11.780Z 2009-07-30T19:31:11.780Z TcpMaxConnectResponseRetransmissions should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-4555-9 2009-07-30T19:31:11.813Z 2012-01-05T04:35:29.627Z The startup type of the File Server For Macintosh service should be correct. CM-6 CCE-4771-2 2009-07-30T19:31:11.843Z 2012-01-05T04:35:29.673Z The startup type of the ATI hotkey poller service should be correct. CM-6 CCE-5062-5 2009-07-30T19:31:11.877Z 2012-01-05T04:35:29.737Z The startup type of the Interix Subsystem Startup service should be correct. CM-6 CCE-5150-8 2009-07-30T19:31:11.907Z 2012-01-05T04:35:29.783Z The startup type of the Cluster Service service should be correct. CM-6 CCE-5149-0 2009-07-30T19:31:11.920Z 2012-01-05T04:35:29.830Z The startup type of the IPSEC (IPsec Policy Agent) service should be correct. CM-6 CCE-4749-8 2009-07-30T19:31:11.953Z 2012-01-05T04:35:29.877Z The startup type of the IAS Jet Database Access service should be correct. CM-6 CCE-4964-3 2009-07-30T19:31:11.983Z 2012-01-05T04:35:29.940Z The startup type of the IAS service should be correct. CM-6 CCE-4601-1 2009-07-30T19:31:12.000Z 2012-01-05T04:35:30.003Z The startup type of the IP Version 6 Helper service should be correct. CM-6 CCE-4782-9 2009-07-30T19:31:12.030Z 2012-01-05T04:35:30.050Z The startup type of the Message Queuing service should be correct. CM-6 CCE-4821-5 2009-07-30T19:31:12.063Z 2012-01-05T04:35:30.097Z The startup type of the Message Queuing Down Level Clients service should be correct. CM-6 CCE-4685-4 2009-07-30T19:31:12.093Z 2012-01-05T04:35:30.143Z The startup type of the Message Queuing Triggers service should be correct. CM-6 CCE-5002-1 2009-07-30T19:31:12.110Z 2012-01-05T04:35:30.190Z The startup type of the Client Service for Netware service should be correct. CM-6 CCE-4653-2 2009-07-30T19:31:12.140Z 2012-01-05T04:35:30.237Z The startup type of the Windows Management Instrumentation Driver Extensions service should be correct. CM-6 CCE-5103-7 2009-07-30T19:31:12.170Z 2012-01-05T04:35:30.300Z The startup type of the TCP/IP NetBIOS Helper service should be correct. CM-6 CCE-5270-4 2009-07-30T19:31:12.203Z 2012-01-05T04:35:30.347Z The startup type of the Terminal service should be correct. CM-6 CCE-5098-9 2009-07-30T19:31:12.217Z 2012-01-05T04:35:30.393Z The startup type of the Utility Manager service should be correct. CM-6 CCE-5173-0 2009-07-30T19:31:12.250Z 2012-01-05T04:35:30.457Z The startup type of the Secondary Logon service should be correct. CM-6 CCE-4699-5 2009-07-30T19:31:12.280Z 2012-01-05T04:35:30.503Z The startup type of the Windows Management Instrumentation service should be correct. CM-6 CCE-5162-3 2009-07-30T19:31:12.313Z 2012-01-05T04:35:30.550Z The startup type of the SSDP Discovery service should be correct. CM-6 CCE-4307-5 2009-07-30T19:31:12.327Z 2012-01-05T04:35:30.597Z The startup type of the Workstation service should be correct. CM-6 CCE-4762-1 2009-07-30T19:31:12.360Z 2012-01-05T04:35:30.643Z The startup type of the Remote Administration Service service should be correct. CM-6 CCE-4974-2 2009-07-30T19:31:12.390Z 2012-01-05T04:35:30.707Z The startup type of the Microsoft POP3 Service service should be correct. CM-6 CCE-5251-4 2009-07-30T19:31:12.420Z 2012-01-05T04:35:30.767Z The startup type of the Windows Installer service should be correct. CM-6 CCE-4987-4 2009-07-30T19:31:12.453Z 2012-01-05T04:35:30.817Z The startup type of the Windows System Resource Manager (WSRM) service should be correct. CM-6 CCE-5299-3 2009-07-30T19:31:12.467Z 2012-01-05T04:35:30.863Z The startup type of the WinHTTP Web Proxy Auto-Discovery service should be correct. CM-6 CCE-4524-5 2009-07-30T19:31:12.500Z 2012-01-05T04:35:30.907Z The startup type of the Services for Unix Trivial FTP Daemon (TFTP) service should be correct. CM-6 CCE-5268-8 2009-07-30T19:31:12.530Z 2012-01-05T04:35:30.970Z The startup type of the Services for Unix Client for NFS service should be correct. CM-6 CCE-4894-2 2009-07-30T19:31:12.547Z 2012-01-05T04:35:31.033Z The startup type of the Services for Unix Server for PCNFS service should be correct. CM-6 CCE-5220-9 2009-07-30T19:31:12.593Z 2012-01-05T04:35:31.080Z The startup type of the Services for Unix Perl Socket service should be correct. CM-6 CCE-5127-6 2009-07-30T19:31:12.610Z 2012-01-05T04:35:31.127Z The startup type of the Services for Unix User Name Mapping service service should be correct. CM-6 CCE-5429-6 2009-07-30T19:31:12.640Z 2012-01-05T04:35:31.173Z The startup type of the Services for Unix Windows Cron service should be correct. CM-6 CCE-4686-2 2009-07-30T19:31:12.670Z 2012-01-05T04:35:31.220Z The startup type of the Print Server for Macintosh service should be correct. CM-6 CCE-4316-6 2009-07-30T19:31:12.703Z 2012-01-05T04:35:31.267Z The startup type of the Remote Installation Services (aka Boot Information Negotiation Layer or BNLSVC) service should be correct. CM-6 CCE-5050-0 2009-07-30T19:31:12.733Z 2012-01-05T04:35:31.330Z The startup type of the Remote Server Manager service should be correct. CM-6 CCE-5125-0 2009-07-30T19:31:12.767Z 2012-01-05T04:35:31.377Z The startup type of the Remote Server Monitor service should be correct. CM-6 CCE-4640-9 2009-07-30T19:31:12.797Z 2012-01-05T04:35:31.423Z The startup type of the Remote Storage Notification service should be correct. CM-6 CCE-4326-5 2009-07-30T19:31:12.827Z 2012-01-05T04:35:31.470Z The startup type of the Remote Storage Server service should be correct. CM-6 CCE-5218-3 2009-07-30T19:31:12.843Z 2012-01-05T04:35:31.517Z The startup type of the Windows Media Services service should be correct. CM-6 CCE-4632-6 2009-07-30T19:31:12.877Z 2012-01-05T04:35:31.567Z The startup type of the Services for Netware Service Advertising Protocol (SAP) Agent service should be correct. CM-6 CCE-5209-2 2009-07-30T19:31:12.907Z 2012-01-05T04:35:31.613Z The startup type of the Web Element Manager service should be correct. CM-6 CCE-5222-5 2009-07-30T19:31:12.937Z 2012-01-05T04:35:31.673Z The startup type of the Remote Installation Services Single Instance Storage (SIS) Groveler service should be correct. CM-6 CCE-4993-2 2009-07-30T19:31:12.967Z 2012-01-05T04:35:31.720Z The startup type of the TCP/IP Print Server (aka lpd print server or LPDSVC) service should be correct. CM-6 CCE-5165-6 2009-07-30T19:31:13.000Z 2012-01-05T04:35:31.767Z The startup type of the Terminal Services Licensing service should be correct. CM-6 CCE-5013-8 2009-07-30T19:31:13.030Z 2012-01-05T04:35:31.817Z The startup type of the client-side Domain Name Service cache (aka DNS Client) service should be correct. CM-6 CCE-5105-2 2009-07-30T19:31:13.063Z 2012-01-05T04:35:31.877Z The startup type of the COM+ Event System service should be correct. CM-6 CCE-4391-9 2009-07-30T19:31:13.093Z 2012-01-05T04:35:31.923Z The startup type of the Event Log service should be correct. CM-6 CCE-4735-7 2009-07-30T19:31:13.127Z 2012-01-05T04:35:31.970Z The startup type of the Infrared Monitor service service should be correct. CM-6 CCE-5295-1 2009-07-30T19:31:13.157Z 2012-01-05T04:35:32.017Z The startup type of the DHCP Client service should be correct. CM-6 CCE-4329-9 2009-07-30T19:31:13.187Z 2012-01-05T04:35:32.067Z The startup type of the Services for Unix Server for NFS service should be correct. CM-6 CCE-4328-1 2009-07-30T19:31:13.203Z 2012-01-05T04:35:32.127Z The startup type of the System Event Notification service should be correct. CM-6 CCE-4943-7 2009-07-30T19:31:13.233Z 2012-01-05T04:35:32.173Z The startup type of the NTLM Security Support Provider service should be correct. CM-6 CCE-4340-6 2009-07-30T19:31:13.267Z 2012-01-05T04:35:32.237Z The startup type of the Performance Logs and Alerts service should be correct. CM-6 CCE-4506-2 2009-07-30T19:31:13.297Z 2012-01-05T04:35:32.283Z The startup type of the Plug and Play service should be correct. CM-6 CCE-5033-6 2009-07-30T19:31:13.313Z 2012-01-05T04:35:32.330Z The startup type of the Protected Storage service should be correct. CM-6 CCE-5112-8 2009-07-30T19:31:13.343Z 2012-01-05T04:35:32.393Z The startup type of the QoS Admission Control (RSVP) service should be correct. CM-6 CCE-5064-1 2009-07-30T19:31:13.377Z 2012-01-05T04:35:32.457Z The startup type of the Remote Procedure Call (RPC) service should be correct. CM-6 CCE-5328-0 2009-07-30T19:31:13.407Z 2012-01-05T04:35:32.533Z The startup type of the Print Spooler service should be correct. CM-6 CCE-5174-8 2009-07-30T19:31:13.420Z 2012-01-05T04:35:32.580Z The startup type of the Removable Storage service should be correct. CM-6 CCE-5208-4 2009-07-30T19:31:13.453Z 2012-01-05T04:35:32.627Z The startup type of the Server service should be correct. CM-6 CCE-4343-0 2009-07-30T19:31:13.483Z 2012-01-05T04:35:32.673Z The startup type of the Security Accounts Manager service should be correct. CM-6 CCE-4740-7 2009-07-30T19:31:13.517Z 2012-01-05T04:35:32.720Z The startup type of the Network Connections service should be correct. CM-6 CCE-4349-7 2009-07-30T19:31:13.547Z 2012-01-05T04:35:32.767Z The startup type of the Logical Disk Manager service should be correct. CM-6 CCE-5248-0 2009-07-30T19:31:13.577Z 2012-01-05T04:35:32.817Z The startup type of the Logical Disk Manager Administrative service should be correct. CM-6 CCE-5155-7 2009-07-30T19:31:13.610Z 2012-01-05T04:35:32.863Z The startup type of the Net Logon service should be correct. CM-6 CCE-5124-3 2009-07-30T19:31:13.640Z 2012-01-05T04:35:32.907Z The startup type of the File Replication service should be correct. CM-6 CCE-5345-4 2009-07-30T19:31:13.657Z 2012-01-05T04:35:32.970Z The startup type of the Kerberos Key Distribution Center service should be correct. CM-6 CCE-4613-6 2009-07-30T19:31:13.687Z 2012-01-05T04:35:33.017Z The startup type of the Intersite Messaging service should be correct. CM-6 CCE-5186-2 2009-07-30T19:31:13.717Z 2012-01-05T04:35:33.080Z The startup type of the Remote Procedure Call (RPC) Locator service should be correct. CM-6 CCE-5331-4 2009-07-30T19:31:13.750Z 2012-01-05T04:35:33.127Z The startup type of the Distributed File System service should be correct. CM-6 CCE-5190-4 2009-07-30T19:31:13.780Z 2012-01-05T04:35:33.173Z The startup type of the Windows Internet Name Service (WINS) service should be correct. CM-6 CCE-5269-6 2009-07-30T19:31:13.813Z 2012-01-05T04:35:33.220Z The startup type of the Windows Time service should be correct. CM-6 CCE-5286-0 2009-07-30T19:31:13.827Z 2012-01-05T04:35:33.267Z The Terminal Services fDisableCdm setting should be set correctly. CM-6 CM-7 CCE-4864-5 2009-07-30T19:31:13.860Z 2012-01-05T04:35:33.317Z The Terminal Services fDisableClip setting should be set correctly. AC-1 CCE-4773-8 2009-07-30T19:31:13.890Z 2012-01-05T04:35:33.377Z Inheritance of the shadow setting on the terminal server for remote control from another source should be set correctly. AC-1 CCE-5113-6 2009-07-30T19:31:13.920Z 2012-01-05T04:35:33.423Z The Terminal Services remote control configuration is set correctly. AC-1 CCE-5298-5 2009-07-30T19:31:13.953Z 2012-01-05T04:35:33.470Z The Terminal Services fDisableCam setting should be set correctly. AC-1 CCE-4733-2 2009-07-30T19:31:13.983Z 2012-01-05T04:35:33.533Z The Terminal Services fDisableCcm setting should be set correctly. AC-1 CCE-5183-9 2009-07-30T19:31:14.000Z 2012-01-05T04:35:33.597Z The Terminal Services fDisableLPT setting should be set correctly. AC-1 CCE-5258-9 2009-07-30T19:31:14.030Z 2012-01-05T04:35:33.643Z The required permissions for the directory %SystemDrive%\perflogs should be assigned. AC-3 CM-6 CCE-5271-2 2009-07-30T19:31:14.063Z 2012-01-05T04:35:33.707Z The required permissions for the directory %SystemDrive%\i386 should be assigned. AC-3 CM-6 CCE-4357-0 2009-07-30T19:31:14.093Z 2012-01-05T04:35:33.753Z The required permissions for the directory %ProgramFiles%\Common Files\SpeechEngines\TTS should be assigned. AC-3 CM-6 CCE-5031-0 2009-07-30T19:31:14.127Z 2012-01-05T04:35:33.800Z The required permissions for the file %SystemRoot%\_default.plf should be assigned. AC-3 CM-6 CCE-4485-9 2009-07-30T19:31:14.140Z 2012-01-05T04:35:33.847Z The required permissions for the directory %SystemRoot%\addins should be assigned. AC-3 CM-6 CCE-5314-0 2009-07-30T19:31:14.170Z 2012-01-05T04:35:33.893Z The required permissions for the directory %SystemRoot%\appPatch should be assigned. AC-3 CM-6 CCE-5325-6 2009-07-30T19:31:14.203Z 2012-01-05T04:35:33.970Z The required permissions for the file %SystemRoot%\clock.avi should be assigned. AC-3 CM-6 CCE-4937-9 2009-07-30T19:31:14.233Z 2012-01-05T04:35:34.017Z The required permissions for the directory %SystemRoot%\Connection Wizard should be assigned. AC-3 CM-6 CCE-4954-4 2009-07-30T19:31:14.267Z 2012-01-05T04:35:34.067Z The required permissions for the file %SystemRoot%\Driver Cache should be assigned. AC-3 CM-6 CCE-4531-0 2009-07-30T19:31:14.297Z 2012-01-05T04:35:34.113Z The required permissions for the file %SystemRoot%\explorer.scf should be assigned. AC-3 CM-6 CCE-5237-3 2009-07-30T19:31:14.327Z 2012-01-05T04:35:34.173Z The required permissions for the file %SystemRoot%\explorer.exe should be assigned. AC-3 CM-6 CCE-5143-3 2009-07-30T19:31:14.360Z 2012-01-05T04:35:34.220Z The required permissions for the directory %SystemRoot%\Help should be assigned. AC-3 CM-6 CCE-4862-9 2009-07-30T19:31:14.377Z 2012-01-05T04:35:34.267Z The required permissions for the file %SystemRoot%\inf\unregmp2.exe should be assigned. AC-3 CM-6 CCE-4989-0 2009-07-30T19:31:14.407Z 2012-01-05T04:35:34.330Z The required permissions for the directory %SystemRoot%\Java should be assigned. AC-3 CM-6 CCE-5227-4 2009-07-30T19:31:14.437Z 2012-01-05T04:35:34.377Z The required permissions for the file %SystemRoot%\mib.bin should be assigned. AC-3 CM-6 CCE-5051-8 2009-07-30T19:31:14.467Z 2012-01-05T04:35:34.423Z The required permissions for the directory %SystemRoot%\msagent should be assigned. AC-3 CM-6 CCE-5207-6 2009-07-30T19:31:14.500Z 2012-01-05T04:35:34.470Z The required permissions for the file %SystemRoot%\msdfmap.ini should be assigned. AC-3 CM-6 CCE-4392-7 2009-07-30T19:31:14.530Z 2012-01-05T04:35:34.517Z The required permissions for the directory %SystemRoot%\mui should be assigned. AC-3 CM-6 CCE-5111-0 2009-07-30T19:31:14.563Z 2012-01-05T04:35:34.567Z The required permissions for the directory %SystemRoot%\security\templates should be assigned. AC-3 CM-6 CCE-4520-3 2009-07-30T19:31:14.593Z 2012-01-05T04:35:34.627Z The required permissions for the directory %SystemRoot%\speech should be assigned. AC-3 CM-6 CCE-5225-8 2009-07-30T19:31:14.610Z 2012-01-05T04:35:34.673Z The required permissions for the file %SystemRoot%\system.ini should be assigned. AC-3 CM-6 CCE-4374-5 2009-07-30T19:31:14.640Z 2012-01-05T04:35:34.720Z The required permissions for the file %SystemRoot%\system\setup.inf should be assigned. AC-3 CM-6 CCE-4585-6 2009-07-30T19:31:14.670Z 2012-01-05T04:35:34.767Z The required permissions for the file %SystemRoot%\system\stdole.tlb should be assigned. AC-3 CM-6 CCE-4823-1 2009-07-30T19:31:14.717Z 2012-01-05T04:35:34.830Z The required permissions for the directory %SystemRoot%\twain_32 should be assigned. AC-3 CM-6 CCE-5338-9 2009-07-30T19:31:14.750Z 2012-01-05T04:35:34.863Z The required permissions for the directory %SystemRoot%\System32\cacls.exe should be assigned. AC-3 CM-6 CCE-4668-0 2009-07-30T19:31:14.767Z 2012-01-05T04:35:34.923Z The required permissions for the directory %SystemRoot%\System32\attrib.exe should be assigned. AC-3 CM-6 CCE-5210-0 2009-07-30T19:31:14.797Z 2012-01-05T04:35:34.970Z The required permissions for the directory %SystemRoot%\System32\CatRoot should be assigned. AC-3 CM-6 CCE-4558-3 2009-07-30T19:31:14.827Z 2012-01-05T04:35:35.017Z The required permissions for the directory %SystemRoot%\System32\config\systemprofile should be assigned. AC-3 CM-6 CCE-4381-0 2009-07-30T19:31:14.860Z 2012-01-05T04:35:35.067Z The required permissions for the file %SystemRoot%\System32\debug.exe should be assigned. AC-3 CM-6 CCE-4908-0 2009-07-30T19:31:14.890Z 2012-01-05T04:35:35.113Z The required permissions for the directory %SystemRoot%\System32\dhcp should be assigned. AC-3 CM-6 CCE-5001-3 2009-07-30T19:31:14.920Z 2012-01-05T04:35:35.157Z The required permissions for the directory %SystemRoot%\System32\drivers should be assigned. AC-3 CM-6 CCE-4785-2 2009-07-30T19:31:14.937Z 2012-01-05T04:35:35.207Z The required permissions for the file %SystemRoot%\System32\eventtriggers.exe should be assigned. AC-3 CM-6 CCE-5379-3 2009-07-30T19:31:14.967Z 2012-01-05T04:35:35.253Z The required permissions for the file %SystemRoot%\System32\edlin.exe should be assigned. AC-3 CM-6 CCE-5318-1 2009-07-30T19:31:15.000Z 2012-01-05T04:35:35.300Z The required permissions for the file %SystemRoot%\System32\eventcreate.exe should be assigned. AC-3 CM-6 CCE-4850-4 2009-07-30T19:31:15.030Z 2012-01-05T04:35:35.347Z The required permissions for the directory %SystemRoot%\System32\Export should be assigned. AC-3 CM-6 CCE-4820-7 2009-07-30T19:31:15.063Z 2012-01-05T04:35:35.407Z The required permissions for the file %SystemRoot%\System32\ipconfig.exe should be assigned. AC-3 CM-6 CCE-5333-0 2009-07-30T19:31:15.077Z 2012-01-05T04:35:35.457Z The required permissions for the file %SystemRoot%\System32\nslookup.exee should be assigned. AC-3 CM-6 CCE-4787-8 2009-07-30T19:31:15.110Z 2012-01-05T04:35:35.517Z The required permissions for the file %SystemRoot%\System32\netstat.exe should be assigned. AC-3 CM-6 CCE-4985-8 2009-07-30T19:31:15.140Z 2012-01-05T04:35:35.580Z The required permissions for the file %SystemRoot%\System32\nbtstat.exe should be assigned. AC-3 CM-6 CCE-5037-7 2009-07-30T19:31:15.170Z 2012-01-05T04:35:35.627Z The required permissions for the file %SystemRoot%\System32\ftp.exe should be assigned. AC-3 CM-6 CCE-5104-5 2009-07-30T19:31:15.203Z 2012-01-05T04:35:35.673Z The required permissions for the directory %SystemRoot%\System32\LogFiles should be assigned. AC-3 CM-6 CCE-5196-1 2009-07-30T19:31:15.233Z 2012-01-05T04:35:35.720Z The required permissions for the file %SystemRoot%\System32\mshta.exe should be assigned. AC-3 CM-6 CCE-4460-2 2009-07-30T19:31:15.250Z 2012-01-05T04:35:35.767Z The required permissions for the directory %SystemRoot%\System32\mui should be assigned. AC-3 CM-6 CCE-4681-3 2009-07-30T19:31:15.280Z 2012-01-05T04:35:35.817Z The required permissions for the file %SystemRoot%\System32\net.exe should be assigned. AC-3 CM-6 CCE-5213-4 2009-07-30T19:31:15.313Z 2012-01-05T04:35:35.863Z The required permissions for the file %SystemRoot%\System32\netsh.exe should be assigned. AC-3 CM-6 CCE-4398-4 2009-07-30T19:31:15.343Z 2012-01-05T04:35:35.940Z The required permissions for the file %SystemRoot%\System32\net1.exe should be assigned. AC-3 CM-6 CCE-4619-3 2009-07-30T19:31:15.377Z 2012-01-05T04:35:36.003Z The required permissions for the file %SystemRoot%\System32\reg.exe should be assigned. AC-3 CM-6 CCE-5118-5 2009-07-30T19:31:15.407Z 2012-01-05T04:35:36.050Z The required permissions for the file %SystemRoot%\System32\regini.exe should be assigned. AC-3 CM-6 CCE-5211-8 2009-07-30T19:31:15.420Z 2012-01-05T04:35:36.097Z The required permissions for the file %SystemRoot%\System32\regsvr32.exe should be assigned. AC-3 CM-6 CCE-5308-2 2009-07-30T19:31:15.453Z 2012-01-05T04:35:36.143Z The required permissions for the file %SystemRoot%\System32\route.exe should be assigned. AC-3 CM-6 CCE-5202-7 2009-07-30T19:31:15.483Z 2012-01-05T04:35:36.207Z The required permissions for the file %SystemRoot%\System32\sc.exe should be assigned. AC-3 CM-6 CCE-4528-6 2009-07-30T19:31:15.517Z 2012-01-05T04:35:36.253Z The required permissions for the directory %SystemRoot%\System32\ShellExt should be assigned. AC-3 CM-6 CCE-4545-0 2009-07-30T19:31:15.547Z 2012-01-05T04:35:36.300Z The required permissions for the file %SystemRoot%\System32\subst.exe should be assigned. AC-3 CM-6 CCE-4906-4 2009-07-30T19:31:15.577Z 2012-01-05T04:35:36.347Z The required permissions for the file %SystemRoot%\System32\systeminfo.exe should be assigned. AC-3 CM-6 CCE-5232-4 2009-07-30T19:31:15.593Z 2012-01-05T04:35:36.393Z The required permissions for the file %SystemRoot%\System32\telnet.exe should be assigned. AC-3 CM-6 CCE-5133-4 2009-07-30T19:31:15.627Z 2012-01-05T04:35:36.440Z The required permissions for the file %SystemRoot%\System32\tftp.exe should be assigned. AC-3 CM-6 CCE-4697-9 2009-07-30T19:31:15.657Z 2012-01-05T04:35:36.487Z The required permissions for the directory %SystemRoot%\System32\wbem should be assigned. AC-3 CM-6 CCE-4860-3 2009-07-30T19:31:15.687Z 2012-01-05T04:35:36.533Z The required permissions for the file %SystemRoot%\System32\tlntsvr.exe should be assigned. AC-3 CM-6 CCE-4383-6 2009-07-30T19:31:15.717Z 2012-01-05T04:35:36.597Z The required permissions for the directory %SystemRoot%\System32\wbem\mof should be assigned. AC-3 CM-6 CCE-5267-0 2009-07-30T19:31:15.733Z 2012-01-05T04:35:36.643Z The required permissions for the directory %SystemRoot%\System32\wbem\repository should be assigned. AC-3 CM-6 CCE-5046-8 2009-07-30T19:31:15.780Z 2012-01-05T04:35:36.707Z The required permissions for the directory %SystemRoot%\System32\wbem\logs should be assigned. AC-3 CM-6 CCE-5373-6 2009-07-30T19:31:15.797Z 2012-01-05T04:35:36.753Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography should be assigned. AC-3 CM-6 CCE-4738-1 2009-07-30T19:31:15.827Z 2012-01-05T04:35:36.817Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.hlp should be assigned. AC-3 CM-6 CCE-4394-3 2009-07-30T19:31:15.860Z 2012-01-05T04:35:36.863Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\helpfile should be assigned. AC-3 CM-6 CCE-4590-6 2009-07-30T19:31:15.890Z 2012-01-05T04:35:36.907Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing should be assigned. AC-3 CM-6 CCE-5159-9 2009-07-30T19:31:15.920Z 2012-01-05T04:35:36.957Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Calais should be assigned. AC-3 CM-6 CCE-4859-5 2009-07-30T19:31:15.953Z 2012-01-05T04:35:37.017Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell should be assigned. AC-3 CM-6 CCE-5313-2 2009-07-30T19:31:15.983Z 2012-01-05T04:35:37.080Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony should be assigned. AC-3 CM-6 CCE-4414-9 2009-07-30T19:31:16.017Z 2012-01-05T04:35:37.127Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability should be assigned. AC-3 CM-6 CCE-4839-7 2009-07-30T19:31:16.047Z 2012-01-05T04:35:37.190Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell should be assigned. AC-3 CM-6 CCE-5354-6 2009-07-30T19:31:16.077Z 2012-01-05T04:35:37.237Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion should be assigned. AC-3 CM-6 CCE-5306-6 2009-07-30T19:31:16.110Z 2012-01-05T04:35:37.283Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech should be assigned. AC-3 CM-6 CCE-5006-2 2009-07-30T19:31:16.140Z 2012-01-05T04:35:37.330Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC should be assigned. AC-3 CM-6 CCE-5041-9 2009-07-30T19:31:16.170Z 2012-01-05T04:35:37.393Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem should be assigned. AC-3 CM-6 CCE-4636-7 2009-07-30T19:31:16.187Z 2012-01-05T04:35:37.440Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates should be assigned. AC-3 CM-6 CCE-4634-2 2009-07-30T19:31:16.217Z 2012-01-05T04:35:37.487Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports should be assigned. AC-3 CM-6 CCE-4977-5 2009-07-30T19:31:16.250Z 2012-01-05T04:35:37.533Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Driver Signing should be assigned. AC-3 CM-6 CCE-5321-5 2009-07-30T19:31:16.280Z 2012-01-05T04:35:37.580Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies should be assigned. AC-3 CM-6 CCE-4981-7 2009-07-30T19:31:16.313Z 2012-01-05T04:35:37.627Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor should be assigned. AC-3 CM-6 CCE-5413-0 2009-07-30T19:31:16.327Z 2012-01-05T04:35:37.673Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ads\Providers\WinNT should be assigned. AC-3 CM-6 CCE-5383-5 2009-07-30T19:31:16.360Z 2012-01-05T04:35:37.720Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ADs\Providers\NWCOMPAT should be assigned. AC-3 CM-6 CCE-4430-5 2009-07-30T19:31:16.390Z 2012-01-05T04:35:37.783Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ADs\Providers\NDS should be assigned. AC-3 CM-6 CCE-5262-1 2009-07-30T19:31:16.420Z 2012-01-05T04:35:37.830Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ADs\Providers\LDAP\Extensions should be assigned. AC-3 CM-6 CCE-4776-1 2009-07-30T19:31:16.453Z 2012-01-05T04:35:37.893Z The required permissions for the registry key HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root\ProtectedRoots should be assigned. AC-3 CM-6 CCE-5230-8 2009-07-30T19:31:16.483Z 2012-01-05T04:35:37.940Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager should be assigned. AC-3 CM-6 CCE-4966-8 2009-07-30T19:31:16.517Z 2012-01-05T04:35:37.987Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Help should be assigned. AC-3 CM-6 CCE-4457-8 2009-07-30T19:31:16.547Z 2012-01-05T04:35:38.033Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip should be assigned. AC-3 CM-6 CCE-4788-6 2009-07-30T19:31:16.563Z 2012-01-05T04:35:38.080Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Non-Driver Signing should be assigned. AC-3 CM-6 CCE-5179-7 2009-07-30T19:31:16.593Z 2012-01-05T04:35:38.127Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DeviceManager should be assigned. AC-3 CM-6 CCE-4646-6 2009-07-30T19:31:16.627Z 2012-01-05T04:35:38.190Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ClipSrv\Security should be assigned. AC-3 CM-6 CCE-5241-5 2009-07-30T19:31:16.657Z 2012-01-05T04:35:38.237Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCP should be assigned. AC-3 CM-6 CCE-4765-4 2009-07-30T19:31:16.687Z 2012-01-05T04:35:38.300Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent should be assigned. AC-3 CM-6 CCE-5109-4 2009-07-30T19:31:16.717Z 2012-01-05T04:35:38.347Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security should be assigned. AC-3 CM-6 CCE-4892-6 2009-07-30T19:31:16.733Z 2012-01-05T04:35:38.393Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMI\Security should be assigned. AC-3 CM-6 CCE-4446-1 2009-07-30T19:31:16.767Z 2012-01-05T04:35:38.470Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Security should be assigned. AC-3 CM-6 CCE-4688-8 2009-07-30T19:31:16.797Z 2012-01-05T04:35:38.550Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv\Security should be assigned. AC-3 CM-6 CCE-5201-9 2009-07-30T19:31:16.827Z 2012-01-05T04:35:38.613Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardSvr\Security should be assigned. AC-3 CM-6 CCE-5417-1 2009-07-30T19:31:16.860Z 2012-01-05T04:35:38.657Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Samss\Security should be assigned. AC-3 CM-6 CCE-5060-9 2009-07-30T19:31:16.890Z 2012-01-05T04:35:38.720Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Security should be assigned. AC-3 CM-6 CCE-4888-4 2009-07-30T19:31:16.907Z 2012-01-05T04:35:38.767Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetDDEdsdm\Security should be assigned. AC-3 CM-6 CCE-5214-2 2009-07-30T19:31:16.937Z 2012-01-05T04:35:38.817Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility should be assigned. AC-3 CM-6 CCE-4637-5 2009-07-30T19:31:16.967Z 2012-01-05T04:35:38.877Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kdc\Security should be assigned. AC-3 CM-6 CCE-5342-1 2009-07-30T19:31:17.000Z 2012-01-05T04:35:38.940Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt\Security should be assigned. AC-3 CM-6 CCE-5421-3 2009-07-30T19:31:17.030Z 2012-01-05T04:35:38.987Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services should be assigned. AC-3 CM-6 CCE-4936-1 2009-07-30T19:31:17.063Z 2012-01-05T04:35:39.033Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers should be assigned. AC-3 CM-6 CCE-5029-4 2009-07-30T19:31:17.093Z 2012-01-05T04:35:39.080Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network should be assigned. AC-3 CM-6 CCE-4853-8 2009-07-30T19:31:17.127Z 2012-01-05T04:35:39.127Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Data should be assigned. AC-3 CM-6 CCE-4804-1 2009-07-30T19:31:17.140Z 2012-01-05T04:35:39.173Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\GBG should be assigned. AC-3 CM-6 CCE-5293-6 2009-07-30T19:31:17.170Z 2012-01-05T04:35:39.283Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Skew1 should be assigned. AC-3 CM-6 CCE-4452-9 2009-07-30T19:31:17.203Z 2012-01-05T04:35:39.330Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\JD should be assigned. AC-3 CM-6 CCE-5405-6 2009-07-30T19:31:17.233Z 2012-01-05T04:35:39.377Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control should be assigned. AC-3 CM-6 CCE-5409-8 2009-07-30T19:31:17.267Z 2012-01-05T04:35:39.423Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\wbem should be assigned. AC-3 CM-6 CCE-5246-4 2009-07-30T19:31:17.297Z 2012-01-05T04:35:39.470Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetDDE\Security should be assigned. AC-3 CM-6 CCE-5096-3 2009-07-30T19:31:17.327Z 2012-01-05T04:35:39.517Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font should be assigned. AC-3 CM-6 CCE-5360-3 2009-07-30T19:31:17.360Z 2012-01-05T04:35:39.580Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog should be assigned. AC-3 CM-6 CCE-5065-8 2009-07-30T19:31:17.390Z 2012-01-05T04:35:39.643Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares should be assigned. AC-3 CM-6 CCE-5305-8 2009-07-30T19:31:17.420Z 2012-01-05T04:35:39.690Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Windows 3.1 Migration Status should be assigned. AC-3 CM-6 CCE-5168-0 2009-07-30T19:31:17.453Z 2012-01-05T04:35:39.737Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Secure should be assigned. AC-3 CM-6 CCE-5371-0 2009-07-30T19:31:17.483Z 2012-01-05T04:35:39.800Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups should be assigned. AC-3 CM-6 CCE-4886-8 2009-07-30T19:31:17.517Z 2012-01-05T04:35:39.847Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon should be assigned. AC-3 CM-6 CCE-4983-3 2009-07-30T19:31:17.547Z 2012-01-05T04:35:39.907Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones should be assigned. AC-3 CM-6 CCE-5370-2 2009-07-30T19:31:17.577Z 2012-01-05T04:35:39.957Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping should be assigned. AC-3 CM-6 CCE-5093-0 2009-07-30T19:31:17.610Z 2012-01-05T04:35:40.017Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPS should be assigned. AC-3 CM-6 CCE-4780-3 2009-07-30T19:31:17.627Z 2012-01-05T04:35:40.080Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontMapper should be assigned. AC-3 CM-6 CCE-4463-6 2009-07-30T19:31:17.657Z 2012-01-05T04:35:40.143Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility should be assigned. AC-3 CM-6 CCE-5416-3 2009-07-30T19:31:17.687Z 2012-01-05T04:35:40.190Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AEDebug should be assigned. AC-3 CM-6 CCE-5385-0 2009-07-30T19:31:17.717Z 2012-01-05T04:35:40.237Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx should be assigned. AC-3 CM-6 CCE-5256-3 2009-07-30T19:31:17.750Z 2012-01-05T04:35:40.300Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce should be assigned. AC-3 CM-6 CCE-5353-8 2009-07-30T19:31:17.780Z 2012-01-05T04:35:40.347Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run should be assigned. AC-3 CM-6 CCE-5387-6 2009-07-30T19:31:17.797Z 2012-01-05T04:35:40.393Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows should be assigned. AC-3 CM-6 CCE-5462-7 2009-07-30T19:31:17.827Z 2012-01-05T04:35:40.470Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Secure should be assigned. AC-3 CM-6 CCE-5167-2 2009-07-30T19:31:17.860Z 2012-01-05T04:35:40.517Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RPC should be assigned. AC-3 CM-6 CCE-5330-6 2009-07-30T19:31:17.890Z 2012-01-05T04:35:40.567Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options should be assigned. AC-3 CM-6 CCE-5422-1 2009-07-30T19:31:17.920Z 2012-01-05T04:35:40.627Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole should be assigned. AC-3 CM-6 CCE-5312-4 2009-07-30T19:31:17.953Z 2012-01-05T04:35:40.673Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions should be assigned. AC-3 CM-6 CCE-4469-3 2009-07-30T19:31:17.983Z 2012-01-05T04:35:40.720Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout should be assigned. AC-3 CM-6 CCE-5095-5 2009-07-30T19:31:18.017Z 2012-01-05T04:35:40.767Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ContentIndex should be assigned. AC-3 CM-6 CCE-4567-4 2009-07-30T19:31:18.047Z 2012-01-05T04:35:40.830Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName should be assigned. AC-3 CM-6 CCE-4496-6 2009-07-30T19:31:18.093Z 2012-01-05T04:35:40.877Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy should be assigned. AC-3 CM-6 CCE-5219-1 2009-07-30T19:31:18.127Z 2012-01-05T04:35:40.923Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule should be assigned. AC-3 CM-6 CCE-5285-2 2009-07-30T19:31:18.140Z 2012-01-05T04:35:40.970Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost should be assigned. AC-3 CM-6 CCE-4752-2 2009-07-30T19:31:18.187Z 2012-01-05T04:35:41.017Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit should be assigned. AC-3 CM-6 CCE-5408-0 2009-07-30T19:31:18.217Z 2012-01-05T04:35:41.080Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList should be assigned. AC-3 CM-6 CCE-5364-5 2009-07-30T19:31:18.250Z 2012-01-05T04:35:41.127Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS should be assigned. AC-3 CM-6 CCE-5390-0 2009-07-30T19:31:18.280Z 2012-01-05T04:35:41.173Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32 should be assigned. AC-3 CM-6 CCE-4504-7 2009-07-30T19:31:18.313Z 2012-01-05T04:35:41.220Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Classes should be assigned. AC-3 CM-6 CCE-5411-4 2009-07-30T19:31:18.343Z 2012-01-05T04:35:41.267Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion should be assigned. AC-3 CM-6 CCE-4949-4 2009-07-30T19:31:18.377Z 2012-01-05T04:35:41.330Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates should be assigned. AC-3 CM-6 CCE-5151-6 2009-07-30T19:31:18.407Z 2012-01-05T04:35:41.377Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows should be assigned. AC-3 CM-6 CCE-5501-2 2009-07-30T19:31:18.437Z 2012-01-05T04:35:41.423Z The required permissions for the directory %SystemRoot%\Web should be assigned. AC-3 CM-6 CCE-5294-4 2009-07-30T19:31:18.467Z 2012-01-05T04:35:41.503Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole should be assigned. AC-3 CM-6 CCE-5069-0 2009-07-30T19:31:18.500Z 2012-01-05T04:35:41.567Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers should be assigned. AC-3 CM-6 CCE-4897-5 2009-07-30T19:31:18.517Z 2012-01-05T04:35:41.613Z The required permissions for the registry key HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies should be assigned. AC-3 CM-6 CCE-3062-7 2009-07-30T19:31:18.547Z 2012-01-05T04:36:22.317Z The "deny access to this computer from the network" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3322-5 2009-07-30T19:31:18.577Z 2012-01-05T04:36:22.393Z The "access this computer from the network" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3490-0 2009-07-30T19:31:18.610Z 2012-01-05T04:36:22.487Z The "act as part of the operating system" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2869-6 2009-07-30T19:31:18.640Z 2012-01-05T04:36:22.567Z The "back up files and directories" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3375-3 2009-07-30T19:31:18.670Z 2012-01-05T04:36:22.643Z The "bypass traverse checking" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3397-7 2009-07-30T19:31:18.703Z 2012-01-05T04:36:22.753Z The "change the system time" user right should be assigned to the correct accounts. AU-8 CM-7 CCE-3538-6 2009-07-30T19:31:18.750Z 2012-01-05T04:36:22.817Z The "create a pagefile" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3498-3 2009-07-30T19:31:18.780Z 2012-01-05T04:36:22.877Z The "Create a token object" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3269-8 2009-07-30T19:31:18.813Z 2012-01-05T04:36:22.957Z The "create permanent shared objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2576-7 2009-07-30T19:31:18.843Z 2012-01-05T04:36:23.017Z The "debug programs" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3359-7 2009-07-30T19:31:18.877Z 2012-01-05T04:36:23.080Z The "force shutdown from a remote system" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3491-8 2009-07-30T19:31:18.907Z 2012-01-05T04:36:23.143Z The "generate security audits" user right should be assigned to the correct accounts. AC-3 AU-9 CM-6 CCE-3147-6 2009-07-30T19:31:18.937Z 2012-01-05T04:36:23.220Z The "adjust memory quotas for a process" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3539-4 2009-07-30T19:31:18.967Z 2012-01-05T04:36:23.300Z The "increase scheduling priority" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3293-8 2009-07-30T19:31:19.000Z 2012-01-05T04:36:23.377Z The "load and unload device drivers" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2936-3 2009-07-30T19:31:19.030Z 2012-01-05T04:36:23.440Z The "lock pages in memory" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3191-4 2009-07-30T19:31:19.063Z 2012-01-05T04:36:23.517Z The "log on as a batch job" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3332-4 2009-07-30T19:31:19.093Z 2012-01-05T04:36:23.580Z The "log on as a service" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3557-6 2009-07-30T19:31:19.127Z 2012-01-05T04:36:23.657Z The "log on locally" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3575-8 2009-07-30T19:31:19.157Z 2012-01-05T04:36:23.783Z The "manage auditing and security log" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3218-5 2009-07-30T19:31:19.170Z 2012-01-05T04:36:23.863Z The "modify firmware environment values" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2861-3 2009-07-30T19:31:19.203Z 2012-01-05T04:36:23.940Z The "profile single process" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3002-3 2009-07-30T19:31:19.233Z 2012-01-05T04:36:24.017Z The "profile system performance" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2663-3 2009-07-30T19:31:19.267Z 2012-01-05T04:36:24.113Z The "remove computer from docking station" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3447-0 2009-07-30T19:31:19.297Z 2012-01-05T04:36:24.207Z The "replace a process-level token" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3465-2 2009-07-30T19:31:19.327Z 2012-01-05T04:36:24.283Z The "restore files and directories" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3346-4 2009-07-30T19:31:19.360Z 2012-01-05T04:36:24.363Z The "shut down the system" user right should be assigned to the correct accounts. AC-3 CM-6 CM-7 CCE-2848-0 2009-07-30T19:31:19.390Z 2012-01-05T04:36:24.440Z The "take ownership of files or other objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3368-8 2009-07-30T19:31:19.420Z 2012-01-05T04:36:24.503Z The "synchronize directory service data" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3531-1 2009-07-30T19:31:19.453Z 2012-01-05T04:36:24.580Z The "deny logon locally" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3473-6 2009-07-30T19:31:19.483Z 2012-01-05T04:36:24.657Z The "enable computer and user accounts to be trusted for delegation" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3354-8 2009-07-30T19:31:19.500Z 2012-01-05T04:36:24.737Z The "add workstations to domain" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3499-1 2009-07-30T19:31:19.530Z 2012-01-05T04:36:24.830Z The "allow logon through Terminal Services" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2649-2 2009-07-30T19:31:19.563Z 2012-01-05T04:36:24.923Z The "deny logon as a batch job" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3543-6 2009-07-30T19:31:19.593Z 2012-01-05T04:36:24.987Z The "deny logon as a service" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3438-9 2009-07-30T19:31:19.627Z 2012-01-05T04:36:25.067Z The "deny logon through Terminal Services" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3319-1 2009-07-30T19:31:19.657Z 2012-01-05T04:36:25.157Z The "perform volume maintenance tasks" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3574-1 2009-07-30T19:31:19.687Z 2009-07-30T19:31:19.687Z The "reset account lockout counter after" policy should meet minimum requirements. AC-7 CM-6 CCE-2627-8 2009-07-30T19:31:19.717Z 2009-07-30T19:31:19.717Z The "account lockout duration" policy should meet minimum requirements. AC-7 CM-6 CCE-3551-9 2009-07-30T19:31:19.733Z 2009-07-30T19:31:19.733Z The "account lockout threshold" policy should meet minimum requirements. AC-7 CM-6 CCE-3321-7 2009-07-30T19:31:19.767Z 2009-07-30T19:31:19.767Z Auditing of "account logon" events on success should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3467-8 2009-07-30T19:31:19.797Z 2009-07-30T19:31:19.797Z Auditing of "account logon" events on failure should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3427-2 2009-07-30T19:31:19.827Z 2009-07-30T19:31:19.827Z Auditing of "account management" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3449-6 2009-07-30T19:31:19.860Z 2009-07-30T19:31:19.860Z Auditing of "account management" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2827-4 2009-07-30T19:31:19.890Z 2009-07-30T19:31:19.890Z Auditing of "directory service access" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3101-3 2009-07-30T19:31:19.920Z 2009-07-30T19:31:19.920Z Auditing of "directory service access" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3603-8 2009-07-30T19:31:19.937Z 2009-07-30T19:31:19.937Z Auditing of "logon" events on success should be enabled or disabled as appropriate.. AC-7 AU-2 CCE-3391-0 2009-07-30T19:31:19.967Z 2009-07-30T19:31:19.967Z Auditing of "logon" events on failure should be enabled or disabled as appropriate.. AC-7 AU-2 CCE-3286-2 2009-07-30T19:31:20.000Z 2009-07-30T19:31:20.000Z Auditing of "object access" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3290-4 2009-07-30T19:31:20.030Z 2009-07-30T19:31:20.030Z Auditing of "object access" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3546-9 2009-07-30T19:31:20.077Z 2009-07-30T19:31:20.077Z Auditing of "policy change" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3312-6 2009-07-30T19:31:20.110Z 2009-07-30T19:31:20.110Z Auditing of "policy change" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3211-0 2009-07-30T19:31:20.140Z 2009-07-30T19:31:20.140Z Auditing of "privilege use" events on success should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3383-7 2009-07-30T19:31:20.170Z 2009-07-30T19:31:20.170Z Auditing of "privilege use" events on failure should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3510-5 2009-07-30T19:31:20.203Z 2009-07-30T19:31:20.203Z Auditing of "process tracking" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3453-8 2009-07-30T19:31:20.233Z 2009-07-30T19:31:20.233Z Auditing of "process tracking" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-3594-9 2009-07-30T19:31:20.267Z 2009-07-30T19:31:20.267Z Auditing of "system" events on success should be enabled or disabled as appropriate.. AU-2 CCE-3611-1 2009-07-30T19:31:20.297Z 2009-07-30T19:31:20.297Z Auditing of "system" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2884-5 2009-07-30T19:31:20.327Z 2009-07-30T19:31:20.327Z The "Allow System to be Shut Down Without Having to Log On" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3281-3 2009-07-30T19:31:20.360Z 2012-01-05T04:36:26.300Z The "restrict guest access to application log" policy should be set correctly. AU-4 CM-6 CCE-3550-1 2009-07-30T19:31:20.390Z 2012-01-05T04:36:26.393Z The application log maximum size should be configured correctly.. AU-4 AU-5 CM-6 CCE-3567-5 2009-07-30T19:31:20.420Z 2009-07-30T19:31:20.420Z If the Application log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-2946-2 2009-07-30T19:31:20.453Z 2012-01-05T04:36:26.517Z The "restrict guest access to security log" policy should be set correctly. AU-4 CM-6 CCE-3343-1 2009-07-30T19:31:20.483Z 2012-01-05T04:36:26.597Z The security log maximum size should be configured correctly.. AU-4 AU-6 AU-9 CCE-3484-3 2009-07-30T19:31:20.517Z 2012-01-05T04:36:26.657Z The "when maximum log size is reached" property should be set correctly for the Security log. AU-4 AU-5 CM-6 CCE-3127-8 2009-07-30T19:31:20.547Z 2009-07-30T19:31:20.547Z If the Security log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-3488-4 2009-07-30T19:31:20.577Z 2012-01-05T04:36:26.800Z The "restrict guest access to system log" policy should be set correctly. AU-4 CM-6 CCE-3506-3 2009-07-30T19:31:20.610Z 2012-01-05T04:36:26.877Z The system log maximum size should be configured correctly.. AU-4 AU-6 AU-9 CCE-3422-3 2009-07-30T19:31:20.640Z 2012-01-05T04:36:26.923Z The "when maximum log size is reached" property should be set correctly for the System log. AU-4 AU-5 CM-6 CCE-3512-1 2009-07-30T19:31:20.670Z 2009-07-30T19:31:20.670Z If the System log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-3530-3 2009-07-30T19:31:20.687Z 2009-07-30T19:31:20.687Z The "maximum password age" policy should meet minimum requirements. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-3548-5 2009-07-30T19:31:20.717Z 2009-07-30T19:31:20.717Z The "minimum password age" policy should meet minimum requirements. CM-6 IA-5 CCE-3424-9 2009-07-30T19:31:20.750Z 2009-07-30T19:31:20.750Z The "minimum password length" policy should meet minimum requirements. CM-6 IA-5 CCE-3442-1 2009-07-30T19:31:20.780Z 2012-01-05T04:36:27.207Z The "password must meet complexity requirments" policy should be set correctly. CM-6 IA-5 CCE-3446-2 2009-07-30T19:31:20.813Z 2009-07-30T19:31:20.813Z The "enforce password history" policy should meet minimum requirements. CM-6 IA-5 CCE-2644-3 2009-07-30T19:31:20.843Z 2009-07-30T19:31:20.843Z The "store password using reversible encryption for all users in the domain" policy should be set correctly. CM-6 IA-5 CCE-3635-0 2009-07-30T19:31:20.877Z 2012-01-05T04:36:27.347Z The startup type of the Alerter service should be correct. CM-6 CCE-2671-6 2009-07-30T19:31:20.907Z 2012-01-05T04:36:27.407Z The startup type of the Automatic Update service should be correct. CM-6 CCE-3200-3 2009-07-30T19:31:20.937Z 2012-01-05T04:36:27.470Z The startup type of the Background Intelligent Transfer Service (BITS) service should be correct. CM-6 CCE-3350-6 2009-07-30T19:31:20.967Z 2012-01-05T04:36:27.550Z The startup type of the ClipBook service should be correct. CM-6 CCE-3565-9 2009-07-30T19:31:21.000Z 2012-01-05T04:36:27.613Z The startup type of the Fax service should be correct. CM-6 CCE-3582-4 2009-07-30T19:31:21.030Z 2012-01-05T04:36:27.690Z The startup type of the FTP Publishing service should be correct. CM-6 CCE-3353-0 2009-07-30T19:31:21.063Z 2012-01-05T04:36:27.753Z The startup type of the IIS Admin service should be correct. CM-6 CCE-3618-6 2009-07-30T19:31:21.093Z 2012-01-05T04:36:27.817Z The startup type of the Indexing service should be correct. CM-6 CCE-3494-2 2009-07-30T19:31:21.127Z 2012-01-05T04:36:27.893Z The startup type of the Messenger service should be correct. CM-6 CCE-3640-0 2009-07-30T19:31:21.157Z 2012-01-05T04:36:27.957Z The startup type of the .NET Framework service should be correct. CM-6 CCE-2909-0 2009-07-30T19:31:21.170Z 2012-01-05T04:36:28.017Z The startup type of the NetMeeting Remote Desktop Sharing service should be correct. CM-6 CCE-3552-7 2009-07-30T19:31:21.217Z 2012-01-05T04:36:28.080Z The startup type of the Print Services for Unix service should be correct. CM-6 CCE-3428-0 2009-07-30T19:31:21.250Z 2012-01-05T04:36:28.143Z The startup type of the Remote Access Auto connection Manager service should be correct. CM-6 CCE-3556-8 2009-07-30T19:31:21.267Z 2012-01-05T04:36:28.207Z The startup type of the Remote Desktop Help Session Manager service should be correct. CM-6 CCE-2678-1 2009-07-30T19:31:21.297Z 2012-01-05T04:36:28.267Z The startup type of the Internet Connection Sharing service should be correct. CM-6 CCE-3612-9 2009-07-30T19:31:21.327Z 2012-01-05T04:36:28.347Z The startup type of the Remote Registry service should be correct. CM-6 CCE-3621-0 2009-07-30T19:31:21.360Z 2012-01-05T04:36:28.407Z The startup type of the Routing and Remote Access service should be correct. CM-6 CCE-3602-0 2009-07-30T19:31:21.390Z 2012-01-05T04:36:28.457Z The startup type of the Remote Shell service should be correct. CM-6 CCE-3497-5 2009-07-30T19:31:21.420Z 2012-01-05T04:36:28.533Z The startup type of the Simple TCP/IP service should be correct. CM-6 CCE-3386-0 2009-07-30T19:31:21.453Z 2012-01-05T04:36:28.627Z The startup type of the Simple Mail Transport Protocol (SMTP) service should be correct. CM-6 CCE-3532-9 2009-07-30T19:31:21.483Z 2012-01-05T04:36:28.720Z The startup type of the SNMP Service service should be correct. CM-6 CCE-3536-0 2009-07-30T19:31:21.517Z 2012-01-05T04:36:28.783Z The startup type of the SNMP Trap Service service should be correct. CM-6 CCE-3541-0 2009-07-30T19:31:21.547Z 2012-01-05T04:36:28.847Z The startup type of the SSDP Discovery service should be correct. CM-6 CCE-3558-4 2009-07-30T19:31:21.563Z 2012-01-05T04:36:28.907Z The startup type of the Task Scheduler service should be correct. CM-6 CCE-3078-3 2009-07-30T19:31:21.610Z 2012-01-05T04:36:28.970Z The startup type of the Telnet service should be correct. CM-6 CCE-2832-4 2009-07-30T19:31:21.640Z 2012-01-05T04:36:29.050Z The startup type of the Terminal Services service should be correct. CM-6 CCE-3475-1 2009-07-30T19:31:21.670Z 2012-01-05T04:36:29.113Z The startup type of the Universal Plug and Play Device Host (UPnP) service should be correct. CM-6 CCE-3492-6 2009-07-30T19:31:21.703Z 2012-01-05T04:36:29.173Z The startup type of the World Wide Web Publishing service should be correct. CM-6 CCE-3633-5 2009-07-30T19:31:21.733Z 2009-07-30T19:31:21.733Z DEPRECATED in favor of CCE-2671-6. CCE-3638-4 2009-07-30T19:31:21.767Z 2012-01-05T04:36:29.253Z The startup type of the Background Intelligent Transfer Service (BITS) service should be correct. CM-6 CCE-3175-7 2009-07-30T19:31:21.797Z 2012-01-05T04:36:29.317Z The startup type of the Print Services for Unix service should be correct. CM-6 CCE-2695-5 2009-07-30T19:31:21.827Z 2012-01-05T04:36:29.377Z The correct service permissions for the Alerter service should be assigned. AC-3 CM-6 CCE-3637-6 2009-07-30T19:31:21.860Z 2012-01-05T04:36:29.423Z The correct service permissions for the Automatic Updates service should be assigned. AC-3 CM-6 CCE-3642-6 2009-07-30T19:31:21.890Z 2012-01-05T04:36:29.487Z The correct service permissions for the ClipBook service should be assigned. AC-3 CM-6 CCE-3664-0 2009-07-30T19:31:21.920Z 2012-01-05T04:36:29.533Z The correct service permissions for the Fax service should be assigned. AC-3 CM-6 CCE-3435-5 2009-07-30T19:31:21.953Z 2012-01-05T04:36:29.613Z The correct service permissions for the FTP Publishing service should be assigned. AC-3 CM-6 CCE-3580-8 2009-07-30T19:31:21.983Z 2012-01-05T04:36:29.657Z The correct service permissions for the IIS Admin service should be assigned. AC-3 CM-6 CCE-3474-4 2009-07-30T19:31:22.017Z 2012-01-05T04:36:29.737Z The correct service permissions for the Indexing service should be assigned. AC-3 CM-6 CCE-3496-7 2009-07-30T19:31:22.047Z 2012-01-05T04:36:29.800Z The correct service permissions for the Messenger service should be assigned. AC-3 CM-6 CCE-3483-5 2009-07-30T19:31:22.077Z 2012-01-05T04:36:29.863Z The correct service permissions for the NetMeeting service should be assigned. AC-3 CM-6 CCE-3254-0 2009-07-30T19:31:22.110Z 2012-01-05T04:36:29.923Z The correct service permissions for the Printer service should be assigned. AC-3 CM-6 CCE-3523-8 2009-07-30T19:31:22.140Z 2012-01-05T04:36:29.987Z The startup type of the Remote Access Auto connection Manager service should be correct. CM-6 CCE-3673-1 2009-07-30T19:31:22.170Z 2012-01-05T04:36:30.050Z The correct service permissions for the Remote Desktop Help Session Manager service should be assigned. AC-3 CM-6 CCE-3193-0 2009-07-30T19:31:22.187Z 2012-01-05T04:36:30.127Z The correct service permissions for the Remote Registry service should be assigned. AC-3 CM-6 CCE-3461-1 2009-07-30T19:31:22.217Z 2012-01-05T04:36:30.173Z The correct service permissions for the SMTP service should be assigned. AC-3 CM-6 CCE-3355-5 2009-07-30T19:31:22.250Z 2012-01-05T04:36:30.220Z The correct service permissions for the SNMP service should be assigned. AC-3 CM-6 CCE-2687-2 2009-07-30T19:31:22.280Z 2012-01-05T04:36:30.283Z The correct service permissions for the SNMP Trap service should be assigned. AC-3 CM-6 CCE-3583-2 2009-07-30T19:31:22.313Z 2012-01-05T04:36:30.347Z The correct service permissions for the Telnet service should be assigned. AC-3 CM-6 CCE-3226-8 2009-07-30T19:31:22.343Z 2012-01-05T04:36:30.407Z The correct service permissions for the Terminal Services service should be assigned. AC-3 CM-6 CCE-3569-1 2009-07-30T19:31:22.377Z 2012-01-05T04:36:30.470Z The correct service permissions for the WWW Publishing service should be assigned. AC-3 CM-6 CCE-3591-5 2009-07-30T19:31:22.407Z 2012-01-05T04:36:30.550Z The behavior surrounding Anonymous users' abiliity to display lists of SAM accounts and shares should be correct. AC-3 CM-6 CM-7 SC-5 CCE-3631-9 2009-07-30T19:31:22.437Z 2012-01-05T04:36:30.627Z The behavior surrounding Anonymous users' abiliity to display lists of SAM accounts should be correct. AC-3 CM-6 CM-7 SC-5 CCE-3402-5 2009-07-30T19:31:22.467Z 2012-01-05T04:36:30.707Z The behavior surrounding Anonymous SID/Name translation should be correct. AC-3 CM-6 CM-7 SC-5 CCE-3525-3 2009-07-30T19:31:22.500Z 2012-01-05T04:36:30.767Z The "Anonymous access to the security event log" policy should be set correctly. AU-6 AU-9 CCE-2908-2 2009-07-30T19:31:22.530Z 2012-01-05T04:36:30.830Z Use of the built-in Guest account should be enabled or disabled as appropriate. AC-2 CM-7 IA-4 CCE-2790-4 2009-07-30T19:31:22.563Z 2012-01-05T04:36:30.923Z The "Message title for users attempting to log on" policy should be set correctly. AC-8 CM-6 CM-7 SC-5 CCE-3672-3 2009-07-30T19:31:22.593Z 2012-01-05T04:36:31.017Z The "Message text for users attempting to log on" policy should be set correctly. AC-8 CM-6 CM-7 SC-5 CCE-3690-5 2009-07-30T19:31:22.627Z 2009-07-30T19:31:22.627Z Automatic Logon should be properly configured. AC-3 CM-6 CM-7 IA-2 SC-5 CCE-3597-2 2009-07-30T19:31:22.640Z 2009-07-30T19:31:22.640Z Autoplay on all Drive Types should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3725-9 2009-07-30T19:31:22.670Z 2009-07-30T19:31:22.670Z ICMP Redirects should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3227-6 2009-07-30T19:31:22.703Z 2009-07-30T19:31:22.703Z IP Source Routing should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3509-7 2009-07-30T19:31:22.733Z 2009-07-30T19:31:22.733Z IRDP should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3527-9 2009-07-30T19:31:22.767Z 2012-01-05T04:36:31.330Z Display Last User Name in Logon Screen should be properly configured. AC-3 AC-9 CM-6 CCE-2919-9 2009-07-30T19:31:22.797Z 2009-07-30T19:31:22.797Z TCP/IP Dead Gateway Detection should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2812-6 2009-07-30T19:31:22.827Z 2009-07-30T19:31:22.827Z The TCP/IP KeepAlive Time should be set correctly . AC-4 SC-5 SC-7 CCE-2817-5 2009-07-30T19:31:22.860Z 2009-07-30T19:31:22.860Z TCP/IP NetBIOS Name Release on Request Prevented should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3739-0 2009-07-30T19:31:22.890Z 2009-07-30T19:31:22.890Z TCP/IP PMTU Discovery should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3616-0 2009-07-30T19:31:22.920Z 2009-07-30T19:31:22.920Z TCP/IP SYN Flood Attack Protection should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3757-2 2009-07-30T19:31:22.953Z 2009-07-30T19:31:22.953Z Disable saving of dial-up passwords should be properly configured. AC-1 IA-5 SC-7 CCE-3796-0 2009-07-30T19:31:22.983Z 2012-01-05T04:36:31.707Z The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3514-7 2009-07-30T19:31:23.017Z 2012-01-05T04:36:31.783Z The "Secure Channel: Digitally Sign Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3778-8 2009-07-30T19:31:23.047Z 2009-07-30T19:31:23.047Z Safe DLL Search Mode should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3549-3 2009-07-30T19:31:23.077Z 2009-07-30T19:31:23.077Z Always Wait for the Network at Computer Startup and Logon should be properly configured. CM-6 IA-2 CCE-3298-7 2009-07-30T19:31:23.110Z 2009-07-30T19:31:23.110Z Background Refresh of Group Policy should be properly configured. AC-3 CM-6 CCE-3443-9 2009-07-30T19:31:23.140Z 2009-07-30T19:31:23.140Z Installation and Configuration of Network Bridge on the DNS Domain Network should be properly configured. CM-7 CCE-3708-5 2009-07-30T19:31:23.170Z 2009-07-30T19:31:23.170Z Disallow Installation of Printers Using Kernel-mode Drivers should be properly configured. CM-6 CM-7 CCE-3479-3 2009-07-30T19:31:23.203Z 2009-07-30T19:31:23.203Z The "Allow Server Operators to Schedule Tasks" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2853-0 2009-07-30T19:31:23.233Z 2009-07-30T19:31:23.233Z The built-in Administrator account should be correctly named. AC-3 CM-6 CM-7 SC-5 CCE-3743-2 2009-07-30T19:31:23.267Z 2009-07-30T19:31:23.267Z The built-in Guest account should be correctly named. AC-3 CM-6 CM-7 SC-5 CCE-3761-4 2009-07-30T19:31:23.297Z 2012-01-05T04:36:32.393Z The amount of idle time required before disconnecting a session should be set correctly. AC-1 AC-3 CM-6 CM-7 CCE-3774-7 2009-07-30T19:31:23.327Z 2012-01-05T04:36:32.487Z The "Audit the access of global system objects" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3814-1 2009-07-30T19:31:23.360Z 2012-01-05T04:36:32.580Z The "Audit the use of backup and restore privilege" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3060-1 2009-07-30T19:31:23.390Z 2012-01-05T04:36:32.673Z The "Disable CTRL+ALT+Delete Requirement for Logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3703-6 2009-07-30T19:31:23.420Z 2012-01-05T04:36:32.767Z The "LAN Manager Authentication Level" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3769-7 2009-07-30T19:31:23.453Z 2012-01-05T04:36:32.863Z The "Prevent Users from Installing Printer Drivers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3659-0 2009-07-30T19:31:23.483Z 2012-01-05T04:36:32.970Z The "Recovery Console: Allow Automatic Administrative Logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3676-4 2009-07-30T19:31:23.517Z 2012-01-05T04:36:33.097Z The "Recovery Console: Allow Floppy Copy and Access to All Drives and All Folders" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3694-7 2009-07-30T19:31:23.547Z 2012-01-05T04:36:33.173Z The "Restrict CD-ROM Access to Locally Logged-On User Only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2822-5 2009-07-30T19:31:23.577Z 2012-01-05T04:36:33.283Z The "Restrict Floppy Access to Locally Logged-On User Only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2963-7 2009-07-30T19:31:23.610Z 2012-01-05T04:36:33.377Z The "Strengthen Default Permissions of Global System Objects" policy should be set correctly. CM-6 CM-7 CCE-3478-5 2009-07-30T19:31:23.640Z 2010-10-04T15:51:10.703Z The "Require Strong (Windows 2000 or later) Session Key" policy should be set correctly. CM-6 SC-2 CCE-2870-4 2009-07-30T19:31:23.670Z 2012-01-05T04:36:33.533Z The "Send Unencrypted Password to Connect to Third-Party SMB Servers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3787-9 2009-07-30T19:31:23.703Z 2012-01-05T04:36:33.613Z The "Unsigned Driver Installation Behavior" policy should be set correctly. AC-6 CM-5 IA-5 CCE-3804-2 2009-07-30T19:31:23.733Z 2012-01-05T04:36:33.707Z The "Users Prompted to Change Password Before Expiration" policy should be set correctly. AC-3 CM-6 CM-7 IA-5 CCE-3430-6 2009-07-30T19:31:23.767Z 2012-01-05T04:36:33.800Z The "Shut Down system immediately if unable to log security audits" policy should be set correctly. AC-3 AU-5 CM-6 CM-7 SC-5 CCE-3448-8 2009-07-30T19:31:23.797Z 2012-01-05T04:36:33.923Z The "Allow System to be Shut Down Without Having to Log On" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3593-1 2009-07-30T19:31:23.827Z 2012-01-05T04:36:34.033Z The "Clear Virtual Memory Pagefile at shutdown" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3652-5 2009-07-30T19:31:23.860Z 2012-01-05T04:36:34.113Z The "Digitally Sign Client Communication (Always)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3295-3 2009-07-30T19:31:23.890Z 2012-01-05T04:36:34.173Z The "Digitally Sign Server Communication (Always)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3189-8 2009-07-30T19:31:23.920Z 2012-01-05T04:36:34.267Z The "Digitally Sign Server Communication (When Possible)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3709-3 2009-07-30T19:31:23.937Z 2012-01-05T04:36:34.347Z The "Number of Previous Logons to Cache" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3586-5 2009-07-30T19:31:23.967Z 2012-01-05T04:36:34.440Z The "Allowed to Format and Eject Removable NTFS Media" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3731-7 2009-07-30T19:31:24.000Z 2012-01-05T04:36:34.533Z The "Secure Channel: Digitally Encrypt or Sign Secure Channel Data (Always)" policy should be set correctly. CM-6 SC-2 CCE-3370-4 2009-07-30T19:31:24.030Z 2012-01-05T04:36:34.627Z The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3511-3 2009-07-30T19:31:24.063Z 2012-01-05T04:36:34.737Z The "Secure Channel: Digitally Sign Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3674-9 2009-07-30T19:31:24.093Z 2012-01-05T04:36:34.830Z The "Smart Card Removal Behavior" policy should be set correctly. CM-6 CM-7 CCE-3441-3 2009-07-30T19:31:24.127Z 2012-01-05T04:36:34.923Z The "Use FIPS compliant algorithms for encryption, hashing, and signing" policy should be set correctly. IA-5 IA-7 SC-2 SC-9 CCE-2947-0 2009-07-30T19:31:24.157Z 2012-01-05T04:36:35.003Z The "Default owner for objects created by members of the Administrators group" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3714-3 2009-07-30T19:31:24.187Z 2012-01-05T04:36:35.097Z The "Require Case Insensitivity for Non-Windows Sybsystems" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3357-1 2009-07-30T19:31:24.217Z 2012-01-05T04:36:35.157Z The "Limit local account user of blank passwords to console logon only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3613-7 2009-07-30T19:31:24.250Z 2012-01-05T04:36:35.253Z The "Allow undock without having to logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3801-8 2009-07-30T19:31:24.280Z 2009-07-30T19:31:24.280Z The "LDAP server signing requirements" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2819-1 2009-07-30T19:31:24.313Z 2012-01-05T04:36:35.407Z The "LDAP client signing requirements" policy should be set correctly. CM-6 CM-7 SC-5 CCE-3605-3 2009-07-30T19:31:24.343Z 2012-01-05T04:36:35.503Z The "Refuse machine account password change" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2984-3 2009-07-30T19:31:24.377Z 2012-01-05T04:36:35.613Z The "Maximum machine account password age" policy should be set correctly. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-3504-8 2009-07-30T19:31:24.407Z 2012-01-05T04:36:35.707Z The "Require Domain Controller authentication to unlock workstation" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3773-9 2009-07-30T19:31:24.437Z 2012-01-05T04:36:35.783Z The "Disconnect clients when logon hours expire" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3420-7 2009-07-30T19:31:24.467Z 2012-01-05T04:36:35.893Z The "Do not allow storage of credentials or .NET Passports" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3817-4 2009-07-30T19:31:24.500Z 2012-01-05T04:36:35.970Z The "Let Everyone permissions apply to anonymous users" policy should be set correctly. AC-3 CM-6 CCE-3711-9 2009-07-30T19:31:24.530Z 2012-01-05T04:36:36.067Z The "Named Pipes that can be accessed anonymously" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3729-1 2009-07-30T19:31:24.563Z 2012-01-05T04:36:36.143Z The "Remotely accessible registry paths" policy should be set correctly. CM-6 CM-7 SC-5 CCE-3592-3 2009-07-30T19:31:24.593Z 2012-01-05T04:36:36.237Z The "Shares that can be accessed anonymously" policy should be set correctly. AC-3 CM-6 CM-7 CCE-3112-0 2009-07-30T19:31:24.640Z 2012-01-05T04:36:36.330Z The "Sharing and security model for local accounts" policy should be set correctly. AC-3 CM-6 CM-7 CCE-3632-7 2009-07-30T19:31:24.670Z 2012-01-05T04:36:36.407Z The "Do not store LAN Manager hash value on next password change" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3719-2 2009-07-30T19:31:24.703Z 2012-01-05T04:36:36.503Z The "Force logoff when logon hours expire" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3614-5 2009-07-30T19:31:24.733Z 2012-01-05T04:36:36.597Z The "Minimum session security for NTLM SSP based clients" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3759-8 2009-07-30T19:31:24.767Z 2012-01-05T04:36:36.673Z The "Minimum session security for NTLM SSP based servers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3526-1 2009-07-30T19:31:24.797Z 2009-07-30T19:31:24.797Z The "Screensaver Executable Name" setting should be configured correctly for the current user. AC-1 AC-3 CM-6 CM-7 CCE-3764-8 2009-07-30T19:31:24.827Z 2009-07-30T19:31:24.827Z The "screensaver timeout" policy should be set correctly for the current user. AC-1 AC-3 CM-6 CM-7 CCE-3781-2 2009-07-30T19:31:24.860Z 2009-07-30T19:31:24.860Z DEPRECATED in favor of CCE-3182-3. CCE-3799-4 2009-07-30T19:31:24.890Z 2009-07-30T19:31:24.890Z The screensaver should be enabled or disabled as appropriate for the current user. AC-1 AC-3 CM-6 CM-7 CCE-3693-9 2009-07-30T19:31:24.920Z 2009-07-30T19:31:24.920Z The "screensaver timeout" policy should be set correctly for the default user. AC-1 AC-3 CM-6 CM-7 CCE-3698-8 2009-07-30T19:31:24.953Z 2009-07-30T19:31:24.953Z The "Password protect the screensaver" setting should be set correctly for the default user. AC-1 CM-6 IA-5 CCE-3715-0 2009-07-30T19:31:24.983Z 2009-07-30T19:31:24.983Z The screensaver should be enabled or disabled as appropriate for the default user. AC-1 AC-3 CM-6 CM-7 CCE-3609-5 2009-07-30T19:31:25.017Z 2009-07-30T19:31:25.017Z DEPRECATED in favor of CCE-3526-1. CCE-3253-2 2009-07-30T19:31:25.047Z 2009-07-30T19:31:25.047Z DEPRECATED in favor of CCE-3764-8. CCE-2900-9 2009-07-30T19:31:25.077Z 2009-07-30T19:31:25.077Z DEPRECATED in favor of CCE-3182-3. CCE-3671-5 2009-07-30T19:31:25.110Z 2009-07-30T19:31:25.110Z DEPRECATED in favor of CCE-3799-4. CCE-3182-3 2009-07-30T19:31:25.140Z 2012-01-05T04:36:37.067Z The "Password protect the screen saver" setting should be configured correctly for the current user. AC-1 CM-6 IA-5 CCE-3534-5 2009-07-30T19:31:25.170Z 2009-07-30T19:31:25.170Z DEPRECATED in favor of CCE-3764-8, CCE-3693-9. CCE-3794-5 2009-07-30T19:31:25.203Z 2009-07-30T19:31:25.203Z The "Always Install with Elevated Privileges" policy should be set correctly. CM-6 CCE-3547-7 2009-07-30T19:31:25.233Z 2009-07-30T19:31:25.233Z The "Enable User Control Over Installs" policy should be set correctly. AC-6 CCE-3190-6 2009-07-30T19:31:25.267Z 2009-07-30T19:31:25.267Z The "Enable User to Browser for Source While Elevated" policy should be set correctly. AC-6 CM-6 CCE-3587-3 2009-07-30T19:31:25.297Z 2009-07-30T19:31:25.297Z The "Enable User to Use Media Source While Elevated" policy should be set correctly. AC-6 CM-6 CCE-2837-3 2009-07-30T19:31:25.327Z 2009-07-30T19:31:25.327Z The "Allow Administrator to Install from Terminal Services Session" policy should be set correctly. CM-6 SI-8 CCE-3803-4 2009-07-30T19:31:25.360Z 2009-07-30T19:31:25.360Z The "Enable User to Patch Elevated Products" policy should be set correctly. AC-6 CM-2 CM-6 SI-2 CCE-3702-8 2009-07-30T19:31:25.390Z 2009-07-30T19:31:25.390Z The "Cache Transforms in Secure Location" policy should be set correctly. CM-7 CCE-3720-0 2009-07-30T19:31:25.407Z 2009-07-30T19:31:25.407Z The "Disable Media Player for automatic updates" policy should be set correctly. SI-2 CCE-2863-9 2009-07-30T19:31:25.437Z 2009-07-30T19:31:25.437Z The "Prevent Codec Download" policy should be set correctly for Windows MediaPlayer. AC-6 CM-6 SI-3 CCE-3636-8 2009-07-30T19:31:25.467Z 2012-01-05T04:36:37.457Z Internet access for Windows Messenger should be configured correctly. CM-7 CCE-3658-2 2009-07-30T19:31:25.500Z 2009-07-30T19:31:25.500Z The "Do Not Allow Windows Messenger to be Run" policy should be set correctly. CM-6 CCE-3306-8 2009-07-30T19:31:25.530Z 2009-07-30T19:31:25.530Z The "Do Not Automatically Start Windows Messenger" policy should be set correctly. CM-6 CCE-3728-3 2009-07-30T19:31:25.563Z 2009-07-30T19:31:25.563Z The "Hide Property Pages" policy should be set correctly for the Task Scheduler. CM-6 CM-7 CCE-3746-5 2009-07-30T19:31:25.610Z 2009-07-30T19:31:25.610Z The "Prohibit New Task Creation" policy should be set correctly for the Task Scheduler. AC-3 AC-5 CM-6 CCE-3654-1 2009-07-30T19:31:25.640Z 2012-01-05T04:36:37.643Z The "Limit Users to One Remote Session" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3786-1 2009-07-30T19:31:25.657Z 2012-01-05T04:36:37.690Z The "Limit Number of Connections" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3790-3 2009-07-30T19:31:25.687Z 2012-01-05T04:36:37.753Z The "Do Not Allow New Client Connections" policy should be set correctly for Terminal Services. CM-6 CCE-3808-3 2009-07-30T19:31:25.717Z 2012-01-05T04:36:37.800Z The "Do Not Allow Local Administrators to Customize Permissions" policy should be set correctly for Terminal Services. CM-5 CM-6 CCE-3848-9 2009-07-30T19:31:25.750Z 2012-01-05T04:36:37.863Z The "Remote Control Settings" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3666-5 2009-07-30T19:31:25.780Z 2012-01-05T04:36:37.907Z The "Always Prompt Client for Password upon Connection" policy should be set correctly for Terminal Services. IA-2 CCE-3812-5 2009-07-30T19:31:25.813Z 2012-01-05T04:36:37.987Z The "Set Client connection Encryption Level" policy should be set correctly for Terminal Services. SC-1 CCE-3710-1 2009-07-30T19:31:25.843Z 2009-07-30T19:31:25.843Z The "Do not Use Temp folders per Session" policy should be set correctly for Terminal Services. CM-6 CM-7 CCE-3627-7 2009-07-30T19:31:25.890Z 2009-07-30T19:31:25.890Z The "Do not Delete Temp folder on exit" policy should be set correctly for Terminal Services. CM-6 CCE-2875-3 2009-07-30T19:31:25.920Z 2009-07-30T19:31:25.920Z The "Set time limit for disconnected sessions" policy should be set correctly for Terminal Services. AC-1 AC-3 CM-6 CM-7 CCE-3665-7 2009-07-30T19:31:25.953Z 2009-07-30T19:31:25.953Z The "Set time limit for idle sessions" policy should be set correctly for Terminal Services. AC-1 AC-3 CM-6 CM-7 CCE-3683-0 2009-07-30T19:31:25.983Z 2012-01-05T04:36:38.173Z The "Allow Reconnection from Original Client Only" policy should be set correctly for Terminal Services. CM-6 CCE-3577-4 2009-07-30T19:31:26.017Z 2009-07-30T19:31:26.017Z The "Terminate session when time limits are reached" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3828-1 2009-07-30T19:31:26.047Z 2012-01-05T04:36:38.253Z The "Enable Keep-Alive Messages" policy should be set correctly for Terminal Services. CM-6 CCE-3599-8 2009-07-30T19:31:26.093Z 2012-01-05T04:36:38.317Z The "Allow Solicited Remote Assistance" policy should be set correctly for Terminal Services. CM-6 CCE-3617-8 2009-07-30T19:31:26.127Z 2012-01-05T04:36:38.363Z The "Allow Unsolicited Remote Assistance" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3758-0 2009-07-30T19:31:26.157Z 2012-01-05T04:36:38.440Z The "Enable Error Reporting" policy should be set correctly. CM-6 CCE-3700-2 2009-07-30T19:31:26.187Z 2009-07-30T19:31:26.187Z The "Enforce user logon restrictions" policy should be set correctly. AC-3 CM-6 CCE-3237-5 2009-07-30T19:31:26.233Z 2009-07-30T19:31:26.233Z The "Maximum Service Ticket Litfetime" policy should be set correctly. AC-3 CM-6 CM-7 CCE-3625-1 2009-07-30T19:31:26.267Z 2009-07-30T19:31:26.267Z The "Maximum User Ticket Lifetime" policy should be set correctly. CM-6 CCE-3396-9 2009-07-30T19:31:26.297Z 2009-07-30T19:31:26.297Z The "Maximum tolerance for computer clock synchronization" policy should be set correctly. AU-8 CCE-3788-7 2009-07-30T19:31:26.327Z 2010-10-04T15:51:17.467Z The startup type of the Removable Storage service should be correct. AC-3 CM-6 CCE-3806-7 2009-07-30T19:31:26.360Z 2010-10-04T15:51:17.547Z The "Allow automatic updates immediate installation" setting should be enabled or disabled as appropriate. CM-6 SI-2 SI-8 CCE-3608-7 2009-07-30T19:31:26.390Z 2010-10-04T15:51:17.640Z The "Automatic Updates detection frequency" should be set correctly. CM-2 CM-6 CCE-3740-8 2009-07-30T19:31:26.420Z 2010-10-04T15:51:17.717Z Automatic updates should be enabled or disabled as appropriate. CM-2 CM-6 CCE-3277-1 2009-07-30T19:31:26.453Z 2010-10-04T15:51:17.797Z The "No auto-restart with logged on users for scheduled automatic updates installations" setting should be enabled or disabled as appropriate. CM-2 CM-6 SI-2 CCE-3661-6 2009-07-30T19:31:26.483Z 2010-10-04T15:51:17.877Z The "Reschedule Automatic Updates scheduled installations" setting should be enabled or disabled as appropriate. CM-6 SI-2 CCE-3730-9 2009-07-30T19:31:26.517Z 2010-10-04T15:51:17.953Z The "Specify intranet Microsoft update service location" setting should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3250-8 2009-07-30T19:31:26.547Z 2009-07-30T19:31:26.547Z The TCPMaxPortsExhausted setting should be properly configured. AC-4 SC-5 SC-7 CCE-3413-2 2009-07-30T19:31:26.577Z 2012-01-05T04:36:38.923Z The "Security Zones: Use Only Machine Settings" setting should be configured correctly. CM-2 CM-6 CCE-3039-5 2009-07-30T19:31:26.610Z 2012-01-05T04:36:38.970Z The "Security Zones: Do Not Allow Users to Add/Delete Sites" setting should be configured correctly. AC-3 AC-6 CM-5 CCE-3810-9 2009-07-30T19:31:26.640Z 2012-01-05T04:36:39.033Z The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly. CM-6 SC-1 SI-2 CCE-3832-3 2009-07-30T19:31:26.670Z 2012-01-05T04:36:39.097Z The "Disable Software Update Shell Notifications on Program Launch" setting should be configured correctly. CM-5 CM-6 CCE-3598-0 2009-07-30T19:31:26.703Z 2012-01-05T04:36:39.143Z The "Disable Automatic Install of Internet Explorer Components" setting should be configured correctly. CM-5 SI-3 SI-7 SI-8 CCE-3713-5 2009-07-30T19:31:26.733Z 2012-01-05T04:36:39.207Z The "Make Proxy Settings Per-Machine (Rather Then Per-User)" setting should be configured correctly. CM-5 CCE-3480-1 2009-07-30T19:31:26.767Z 2012-01-05T04:36:39.267Z The "Security Zones: Do Not Allow Users to Change Policies" setting should be configured correctly. AC-3 AC-6 CM-5 CCE-5026-0 2009-07-30T19:31:26.797Z 2012-01-05T04:36:39.330Z Administrative Shares should be enabled or disabled as appropriate. CM-7 CCE-8544-9 2009-07-30T19:31:26.827Z 2009-07-30T19:31:26.827Z The time in seconds before the screen saver grace period expires (ScreenSaverGracePeriod) setting should be configured correctly. AC-1 AC-3 CM-6 CM-7 CCE-8049-9 2009-07-30T19:31:26.860Z 2009-07-30T19:31:26.860Z Use of the built-in Administrator account should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-7604-2 2009-07-30T19:31:26.890Z 2009-07-30T19:31:26.890Z The "Create global objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-7773-5 2009-07-30T19:31:26.920Z 2009-07-30T19:31:26.920Z The "DCOM: Machine access Restrictions in Security Descriptor Definition Language (SDDL) syntax" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-8561-3 2009-07-30T19:31:26.953Z 2009-07-30T19:31:26.953Z The "DCOM: Machine Launch Restrictions in the Security Descriptor Definition Language (SDDL) syntax" security option should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-8592-8 2009-07-30T19:31:26.983Z 2009-07-30T19:31:26.983Z The "Prevent System Maintenance of Computer Account Password" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-8013-5 2009-07-30T19:31:27.017Z 2012-01-05T04:36:39.597Z The "Impersonate a client after authentication" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-8542-3 2009-07-30T19:31:27.047Z 2009-07-30T19:31:27.047Z The "Interactive logon: Requre smart card" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-7606-7 2009-07-30T19:31:27.077Z 2009-07-30T19:31:27.077Z The "Maximum User Renewal Lifetime" policy should be set correctly. CM-6 CCE-8534-0 2009-07-30T19:31:27.110Z 2009-07-30T19:31:27.110Z The "Digitally Sign Client Communication (When Possible)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-7611-7 2009-07-30T19:31:27.140Z 2012-01-05T04:36:39.767Z Automatic Reboot After System Crash should be enabled or disabled as appropriate. CM-6 SC-2 CCE-8380-8 2009-07-30T19:31:27.170Z 2012-01-05T04:36:39.817Z System availability to Master Browser should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-8601-7 2009-07-30T19:31:27.203Z 2012-01-05T04:36:39.877Z Kerberos and RSVP Traffic Protected by IPSec should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-8508-4 2009-07-30T19:31:27.233Z 2012-01-05T04:36:39.940Z The automatic generation of 8.3 file names for NTFS should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-8472-3 2009-07-30T19:31:27.267Z 2012-01-05T04:36:40.003Z The number of SYN-ACK retransmissions sent when attempting to respond to a SYN request should be configured correctly. AC-4 AC-6 SC-5 CCE-7613-3 2009-07-30T19:31:27.297Z 2012-01-05T04:36:40.097Z The number of retransmissions sent of TCP data segments before the connection is dropped should be set correctly. AC-4 AC-6 SC-5 CCE-8479-8 2009-07-30T19:31:27.327Z 2012-01-05T04:36:40.157Z The Security Audit log warning level should be properly configured. AU-4 AU-6 AU-9 CCE-8325-3 2009-07-30T19:31:27.360Z 2012-01-05T04:36:40.207Z The "Remotely accessible registry paths and subpaths" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-8091-1 2009-07-30T19:31:27.390Z 2012-01-05T04:36:40.283Z Anonymous access to Named Pipes and Shares via the network should be enabled or disabled as appropriate. CM-7 CCE-8043-2 2009-07-30T19:31:27.420Z 2012-01-05T04:36:40.330Z The "Registry policy processing" policy should be enabled or disabled as appropriate. CM-7 CCE-8527-4 2009-07-30T19:31:27.453Z 2012-01-05T04:36:40.377Z Authentication requirements for RPC clients should be configured appropriately. AC-1 CCE-8151-3 2009-07-30T19:31:27.500Z 2012-01-05T04:36:40.423Z RPC Endpoint Mapper Client Authentication should be enabled or disabled as appropriate. IA-2 CCE-8462-4 2009-07-30T19:31:27.530Z 2012-01-05T04:36:40.487Z The "System cryptography: Force strong key protection for user keys stored on the computer" policy should be enabled or disabled as appropriate. AC-6 IA-5 CCE-7936-8 2009-07-30T19:31:27.563Z 2012-01-05T04:36:40.533Z The "System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies" setting should be configured properly. AC-6 SC-7 CCE-1841-6 2009-07-30T19:31:27.593Z 2009-07-30T19:31:27.593Z Auditing of "Security System Extension" events on success should be enabled or disabled as appropriate. AU-2 CCE-2348-1 2009-07-30T19:31:27.627Z 2009-07-30T19:31:27.627Z Auditing of "System Integrity" events on success should be enabled or disabled as appropriate. AU-2 CCE-2608-8 2009-07-30T19:31:27.657Z 2009-07-30T19:31:27.657Z Auditing of "IPsec Driver" events on success should be enabled or disabled as appropriate. AU-2 CCE-2022-2 2009-07-30T19:31:27.687Z 2009-07-30T19:31:27.687Z Auditing of "Other System Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-2414-1 2009-07-30T19:31:27.717Z 2009-07-30T19:31:27.717Z Auditing of "Security State Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-2441-4 2009-07-30T19:31:27.750Z 2009-07-30T19:31:27.750Z Auditing of "Logon" events on success should be enabled or disabled as appropriate. AC-7 AU-2 CCE-2569-2 2009-07-30T19:31:27.780Z 2009-07-30T19:31:27.780Z Auditing of "Logoff" events on success should be enabled or disabled as appropriate. AC-7 AU-2 CCE-2110-5 2009-07-30T19:31:27.827Z 2009-07-30T19:31:27.827Z Auditing of "Account Lockout" events on success should be enabled or disabled as appropriate. AU-2 CCE-2260-8 2009-07-30T19:31:27.860Z 2009-07-30T19:31:27.860Z Auditing of "IPsec Main Mode" events on success should be enabled or disabled as appropriate. AU-2 CCE-2064-4 2009-07-30T19:31:27.890Z 2009-07-30T19:31:27.890Z Auditing of "IPsec Quick Mode" events on success should be enabled or disabled as appropriate. AU-2 CCE-2350-7 2009-07-30T19:31:27.920Z 2009-07-30T19:31:27.920Z Auditing of "IPsec Extended Mode" events on success should be enabled or disabled as appropriate. AU-2 CCE-2610-4 2009-07-30T19:31:27.953Z 2009-07-30T19:31:27.953Z Auditing of "Special Logon" events on success should be enabled or disabled as appropriate. AU-2 CCE-2615-3 2009-07-30T19:31:27.983Z 2009-07-30T19:31:27.983Z Auditing of "Other Logon/Logoff Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-2373-9 2009-07-30T19:31:28.017Z 2012-01-05T04:37:07.190Z Auditing of "Network Policy Server" events on success should be enabled or disabled as appropriate. AU-2 CCE-2531-2 2009-07-30T19:31:28.047Z 2009-07-30T19:31:28.047Z Auditing of "File System" events on success should be enabled or disabled as appropriate. AU-2 CCE-2553-6 2009-07-30T19:31:28.077Z 2009-07-30T19:31:28.077Z Auditing of "Registry" events on success should be enabled or disabled as appropriate. AU-2 CCE-2417-4 2009-07-30T19:31:28.110Z 2009-07-30T19:31:28.110Z Auditing of "Kernel Object" events on success should be enabled or disabled as appropriate. AU-2 CCE-2465-3 2009-07-30T19:31:28.140Z 2009-07-30T19:31:28.140Z Auditing of "SAM" events on success should be enabled or disabled as appropriate. AU-2 CCE-2095-8 2009-07-30T19:31:28.170Z 2009-07-30T19:31:28.170Z Auditing of "Certification Services" events on success should be enabled or disabled as appropriate. AU-2 CCE-2368-9 2009-07-30T19:31:28.203Z 2009-07-30T19:31:28.203Z Auditing of "Application Generated" events on success should be enabled or disabled as appropriate. AU-2 CCE-2408-3 2009-07-30T19:31:28.233Z 2009-07-30T19:31:28.233Z Auditing of "Handle Manipulation" events on success should be enabled or disabled as appropriate. AU-2 CCE-2601-3 2009-07-30T19:31:28.267Z 2009-07-30T19:31:28.267Z Auditing of "File Share" events on success should be enabled or disabled as appropriate. AU-2 CCE-2482-8 2009-07-30T19:31:28.297Z 2009-07-30T19:31:28.297Z Auditing of "Filtering Platform Packet Drop" events on success should be enabled or disabled as appropriate. AU-2 CCE-2504-9 2009-07-30T19:31:28.327Z 2009-07-30T19:31:28.327Z Auditing of "Filtering Platform Connection" events on success should be enabled or disabled as appropriate. AU-2 CCE-2033-9 2009-07-30T19:31:28.360Z 2009-07-30T19:31:28.360Z Auditing of "Other Object Access Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-2205-3 2009-07-30T19:31:28.390Z 2009-07-30T19:31:28.390Z Auditing of "Sensitive Privilege Use" events on success should be enabled or disabled as appropriate. AU-2 CCE-2104-8 2009-07-30T19:31:28.420Z 2009-07-30T19:31:28.420Z Auditing of "Non Sensitive Privilege Use" events on success should be enabled or disabled as appropriate. AU-2 CCE-2386-1 2009-07-30T19:31:28.453Z 2009-07-30T19:31:28.453Z Auditing of "Other Privilege Use Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-2518-9 2009-07-30T19:31:28.483Z 2009-07-30T19:31:28.483Z Auditing of "Process Termination" events on success should be enabled or disabled as appropriate. AU-2 CCE-2522-1 2009-07-30T19:31:28.517Z 2009-07-30T19:31:28.517Z Auditing of "DPAPI Activity" events on success should be enabled or disabled as appropriate. AU-2 CCE-2544-5 2009-07-30T19:31:28.547Z 2009-07-30T19:31:28.547Z Auditing of "RPC Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-2002-4 2009-07-30T19:31:28.577Z 2009-07-30T19:31:28.577Z Auditing of "Process Creation" events on success should be enabled or disabled as appropriate. AU-2 CCE-2433-1 2009-07-30T19:31:28.610Z 2009-07-30T19:31:28.610Z Auditing of "Audit Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-2566-8 2009-07-30T19:31:28.640Z 2009-07-30T19:31:28.640Z Auditing of "Authentication Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-2570-0 2009-07-30T19:31:28.670Z 2009-07-30T19:31:28.670Z Auditing of "Authorization Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-2464-6 2009-07-30T19:31:28.703Z 2009-07-30T19:31:28.703Z Auditing of "MPSSVC Rule-Level Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-2614-6 2009-07-30T19:31:28.733Z 2009-07-30T19:31:28.733Z Auditing of "Filtering Platform Policy Change" events on success should be enabled or disabled as appropriate. AU-2 CCE-2385-3 2009-07-30T19:31:28.767Z 2009-07-30T19:31:28.767Z Auditing of "Other Policy Change Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-2394-5 2009-07-30T19:31:28.797Z 2009-07-30T19:31:28.797Z Auditing of "User Account Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-2288-9 2009-07-30T19:31:28.827Z 2009-07-30T19:31:28.827Z Auditing of "Computer Account Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-2443-0 2009-07-30T19:31:28.860Z 2009-07-30T19:31:28.860Z Auditing of "Security Group Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-1642-8 2009-07-30T19:31:28.890Z 2009-07-30T19:31:28.890Z Auditing of "Distribution Group Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-2468-7 2009-07-30T19:31:28.920Z 2009-07-30T19:31:28.920Z Auditing of "Application Group Management" events on success should be enabled or disabled as appropriate. AU-2 CCE-2485-1 2009-07-30T19:31:28.953Z 2009-07-30T19:31:28.953Z Auditing of "Other Account Management Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-2367-1 2009-07-30T19:31:28.983Z 2009-07-30T19:31:28.983Z Auditing of "Directory Service Access" events on success should be enabled or disabled as appropriate. AU-2 CCE-2635-1 2009-07-30T19:31:29.017Z 2009-07-30T19:31:29.017Z Auditing of "Directory Service Changes" events on success should be enabled or disabled as appropriate. AU-2 CCE-2534-6 2009-07-30T19:31:29.047Z 2009-07-30T19:31:29.047Z Auditing of "Directory Service Replication" events on success should be enabled or disabled as appropriate. AU-2 CCE-2556-9 2009-07-30T19:31:29.077Z 2009-07-30T19:31:29.077Z Auditing of "Detailed Directory Service Replication" events on success should be enabled or disabled as appropriate. AU-2 CCE-2586-6 2009-07-30T19:31:29.110Z 2009-07-30T19:31:29.110Z Auditing of "Kerberos Authentication Service" events on success should be enabled or disabled as appropriate. AU-2 CCE-2463-8 2009-07-30T19:31:29.140Z 2009-07-30T19:31:29.140Z Auditing of "  Credential Validation" events on success should be enabled or disabled as appropriate. AU-2 CCE-2405-9 2009-07-30T19:31:29.187Z 2009-07-30T19:31:29.187Z Auditing of "Kerberos Service Ticket Operations" events on success should be enabled or disabled as appropriate. AU-2 CCE-1678-2 2009-07-30T19:31:29.233Z 2009-07-30T19:31:29.233Z Auditing of "Other Account Logon Events" events on success should be enabled or disabled as appropriate. AU-2 CCE-2545-2 2009-07-30T19:31:29.267Z 2009-07-30T19:31:29.267Z Auditing of "Security System Extension" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2440-6 2009-07-30T19:31:29.297Z 2009-07-30T19:31:29.297Z Auditing of "System Integrity" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2351-5 2009-07-30T19:31:29.327Z 2009-07-30T19:31:29.327Z Auditing of "IPsec Driver" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2193-1 2009-07-30T19:31:29.360Z 2009-07-30T19:31:29.360Z Auditing of "Other System Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2448-9 2009-07-30T19:31:29.390Z 2009-07-30T19:31:29.390Z Auditing of "Security State Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2470-3 2009-07-30T19:31:29.420Z 2009-07-30T19:31:29.420Z Auditing of "Logon" events on failure should be enabled or disabled as appropriate. AC-7 AU-2 CCE-2616-1 2009-07-30T19:31:29.453Z 2009-07-30T19:31:29.453Z Auditing of "Logoff" events on failure should be enabled or disabled as appropriate. AC-7 AU-2 CCE-1889-5 2009-07-30T19:31:29.483Z 2009-07-30T19:31:29.483Z Auditing of "Account Lockout" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2409-1 2009-07-30T19:31:29.517Z 2009-07-30T19:31:29.517Z Auditing of "IPsec Main Mode" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2536-1 2009-07-30T19:31:29.563Z 2009-07-30T19:31:29.563Z Auditing of "IPsec Quick Mode" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2267-3 2009-07-30T19:31:29.593Z 2009-07-30T19:31:29.593Z Auditing of "IPsec Extended Mode" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2558-5 2009-07-30T19:31:29.627Z 2009-07-30T19:31:29.627Z Auditing of "Special Logon" events on failure should be enabled or disabled as appropriate. AU-2 CCE-1968-7 2009-07-30T19:31:29.657Z 2009-07-30T19:31:29.657Z Auditing of "Other Logon/Logoff Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2575-9 2009-07-30T19:31:29.687Z 2012-01-05T04:37:08.863Z Auditing of "Network Policy Server" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2488-5 2009-07-30T19:31:29.717Z 2009-07-30T19:31:29.717Z Auditing of "File System" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2505-6 2009-07-30T19:31:29.750Z 2009-07-30T19:31:29.750Z Auditing of "Registry" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2195-6 2009-07-30T19:31:29.780Z 2009-07-30T19:31:29.780Z Auditing of "Kernel Object" events on failure should be enabled or disabled as appropriate. AU-2 CCE-1961-2 2009-07-30T19:31:29.813Z 2009-07-30T19:31:29.813Z Auditing of "SAM" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2358-0 2009-07-30T19:31:29.843Z 2009-07-30T19:31:29.843Z Auditing of "Certification Services" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2622-9 2009-07-30T19:31:29.877Z 2009-07-30T19:31:29.877Z Auditing of "Application Generated" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2503-1 2009-07-30T19:31:29.907Z 2009-07-30T19:31:29.907Z Auditing of "Handle Manipulation" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2402-6 2009-07-30T19:31:29.937Z 2009-07-30T19:31:29.937Z Auditing of "File Share" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2292-1 2009-07-30T19:31:29.967Z 2009-07-30T19:31:29.967Z Auditing of "Filtering Platform Packet Drop" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2437-2 2009-07-30T19:31:30.000Z 2009-07-30T19:31:30.000Z Auditing of "Filtering Platform Connection" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2583-3 2009-07-30T19:31:30.063Z 2009-07-30T19:31:30.063Z Auditing of "Other Object Access Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2349-9 2009-07-30T19:31:30.093Z 2009-07-30T19:31:30.093Z Auditing of "Sensitive Privilege Use" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2605-4 2009-07-30T19:31:30.127Z 2009-07-30T19:31:30.127Z Auditing of "Non Sensitive Privilege Use" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2371-3 2009-07-30T19:31:30.157Z 2009-07-30T19:31:30.157Z Auditing of "Other Privilege Use Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2389-5 2009-07-30T19:31:30.187Z 2009-07-30T19:31:30.187Z Auditing of "Process Termination" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2604-7 2009-07-30T19:31:30.217Z 2009-07-30T19:31:30.217Z Auditing of "DPAPI Activity" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2498-4 2009-07-30T19:31:30.250Z 2009-07-30T19:31:30.250Z Auditing of "RPC Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2375-4 2009-07-30T19:31:30.280Z 2009-07-30T19:31:30.280Z Auditing of "Process Creation" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2269-9 2009-07-30T19:31:30.313Z 2009-07-30T19:31:30.313Z Auditing of "Audit Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2151-9 2009-07-30T19:31:30.343Z 2009-07-30T19:31:30.343Z Auditing of "Authentication Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2459-6 2009-07-30T19:31:30.377Z 2009-07-30T19:31:30.377Z Auditing of "Authorization Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2353-1 2009-07-30T19:31:30.407Z 2009-07-30T19:31:30.407Z Auditing of "MPSSVC Rule-Level Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2490-1 2009-07-30T19:31:30.437Z 2009-07-30T19:31:30.437Z Auditing of "Filtering Platform Policy Change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-1759-0 2009-07-30T19:31:30.483Z 2009-07-30T19:31:30.483Z Auditing of "Other Policy Change Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2411-7 2009-07-30T19:31:30.517Z 2009-07-30T19:31:30.517Z Auditing of "User Account Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2415-8 2009-07-30T19:31:30.547Z 2009-07-30T19:31:30.547Z Auditing of "Computer Account Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2560-1 2009-07-30T19:31:30.593Z 2009-07-30T19:31:30.593Z Auditing of "Security Group Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2273-1 2009-07-30T19:31:30.627Z 2009-07-30T19:31:30.627Z Auditing of "Distribution Group Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2542-9 2009-07-30T19:31:30.657Z 2009-07-30T19:31:30.657Z Auditing of "Application Group Management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2062-8 2009-07-30T19:31:30.687Z 2009-07-30T19:31:30.687Z Auditing of "Other Account Management Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-1926-5 2009-07-30T19:31:30.717Z 2009-07-30T19:31:30.717Z Auditing of "Directory Service Access" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2445-5 2009-07-30T19:31:30.750Z 2009-07-30T19:31:30.750Z Auditing of "Directory Service Changes" events on failure should be enabled or disabled as appropriate. AU-2 CCE-1718-6 2009-07-30T19:31:30.797Z 2009-07-30T19:31:30.797Z Auditing of "Directory Service Replication" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2489-3 2009-07-30T19:31:30.827Z 2009-07-30T19:31:30.827Z Auditing of "Detailed Directory Service Replication" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2511-4 2009-07-30T19:31:30.860Z 2009-07-30T19:31:30.860Z Auditing of "Kerberos Authentication Service" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2516-3 2009-07-30T19:31:30.890Z 2009-07-30T19:31:30.890Z Auditing of "  Credential Validation" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2291-3 2009-07-30T19:31:30.920Z 2009-07-30T19:31:30.920Z Auditing of "Kerberos Service Ticket Operations" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2564-3 2009-07-30T19:31:30.953Z 2009-07-30T19:31:30.953Z Auditing of "Other Account Logon Events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2251-7 2009-07-30T19:31:30.983Z 2009-07-30T19:31:30.983Z Auditing of "Audit account logon events" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-2211-1 2009-07-30T19:31:31.017Z 2009-07-30T19:31:31.017Z Auditing of "Audit account management" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-2215-2 2009-07-30T19:31:31.047Z 2009-07-30T19:31:31.047Z Auditing of "Audit directory service access" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-2242-6 2009-07-30T19:31:31.077Z 2009-07-30T19:31:31.077Z Auditing of "Audit logon events" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-2136-0 2009-07-30T19:31:31.127Z 2009-07-30T19:31:31.127Z Auditing of "Audit object access" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-2268-1 2009-07-30T19:31:31.157Z 2009-07-30T19:31:31.157Z Auditing of "Audit policy change" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-2035-4 2009-07-30T19:31:31.187Z 2009-07-30T19:31:31.187Z Auditing of "Audit privilege use" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-2295-4 2009-07-30T19:31:31.217Z 2009-07-30T19:31:31.217Z Auditing of "Audit process tracking" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-1837-4 2009-07-30T19:31:31.250Z 2009-07-30T19:31:31.250Z Auditing of "Audit system events" events on sucess should be enabled or disabled as appropriate. AU-2 CCE-1779-8 2009-07-30T19:31:31.280Z 2009-07-30T19:31:31.280Z Auditing of "Audit account logon events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2538-7 2009-07-30T19:31:31.313Z 2009-07-30T19:31:31.313Z Auditing of "Audit account management" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2582-5 2009-07-30T19:31:31.343Z 2009-07-30T19:31:31.343Z Auditing of "Audit directory service access" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2574-2 2009-07-30T19:31:31.377Z 2009-07-30T19:31:31.377Z Auditing of "Audit logon events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2217-8 2009-07-30T19:31:31.407Z 2009-07-30T19:31:31.407Z Auditing of "Audit object access" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2512-2 2009-07-30T19:31:31.437Z 2009-07-30T19:31:31.437Z Auditing of "Audit policy change" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2265-7 2009-07-30T19:31:31.467Z 2009-07-30T19:31:31.467Z Auditing of "Audit privilege use" events on failure should be enabled or disabled as appropriate. AU-2 CCE-1895-2 2009-07-30T19:31:31.500Z 2009-07-30T19:31:31.500Z Auditing of "Audit process tracking" events on failure should be enabled or disabled as appropriate. AU-2 CCE-1939-8 2009-07-30T19:31:31.530Z 2009-07-30T19:31:31.530Z Auditing of "Audit system events" events on failure should be enabled or disabled as appropriate. AU-2 CCE-2026-3 2009-07-30T19:31:31.563Z 2009-07-30T19:31:31.563Z The "Access credential Manager as a trusted caller" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2075-0 2009-07-30T19:31:31.593Z 2009-07-30T19:31:31.593Z The "Access this computer from the network (SeNetworkLogonRight)" setting should be configured correctly. AC-3 CM-6 CCE-2079-2 2009-07-30T19:31:31.627Z 2009-07-30T19:31:31.627Z The "Act as part of the operating system (SeTcbPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-2246-7 2009-07-30T19:31:31.657Z 2009-07-30T19:31:31.657Z The "Add workstations to domain" setting should be configured correctly. CM-6 SC-3 CCE-2004-0 2009-07-30T19:31:31.687Z 2009-07-30T19:31:31.687Z The "Adjust memory quotas for a process (SeIncreaseQuotaPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-2286-3 2009-07-30T19:31:31.733Z 2009-07-30T19:31:31.733Z The "Allow log on locally" setting should be configured correctly. AC-3 CM-6 CCE-2308-5 2009-07-30T19:31:31.767Z 2009-07-30T19:31:31.767Z The "Allow log on through Terminal Services (SeRemoteInteractiveLogonRight)" setting should be configured correctly. AC-3 CM-6 CCE-1321-9 2009-07-30T19:31:31.797Z 2009-07-30T19:31:31.797Z The "Back up files and directories (SeBackupPrivilege)" setting should be configured correctly. CM-6 CM-7 CCE-2285-5 2009-07-30T19:31:31.827Z 2009-07-30T19:31:31.827Z The "Bypass traverse checking (SeChangeNotifyPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-2290-5 2009-07-30T19:31:31.860Z 2009-07-30T19:31:31.860Z The "Change the system time (SeSystemTimePrivilege)" setting should be configured correctly. AU-8 CM-7 CCE-2171-7 2009-07-30T19:31:31.890Z 2009-07-30T19:31:31.890Z The "Change the time zone" setting should be configured correctly. AU-8 CM-7 CCE-1328-4 2009-07-30T19:31:31.920Z 2009-07-30T19:31:31.920Z The "Create a pagefile (SeCreatePagefilePrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-1491-0 2009-07-30T19:31:31.953Z 2009-07-30T19:31:31.953Z The "Create a token object (SeCreateTokenPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-2226-9 2009-07-30T19:31:31.983Z 2009-07-30T19:31:31.983Z The "Create global objects (SeCreateGlobalPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-1341-7 2009-07-30T19:31:32.017Z 2009-07-30T19:31:32.017Z The "Create permanent shared objects" setting should be configured correctly. AC-3 CM-6 CCE-2305-1 2009-07-30T19:31:32.047Z 2009-07-30T19:31:32.047Z The "Create symbolic links" setting should be configured correctly. CM-6 CM-7 CCE-2310-1 2009-07-30T19:31:32.077Z 2009-07-30T19:31:32.077Z The "Debug programs (SeDebugPrivilege)" setting should be configured correctly. CM-6 CM-7 CCE-2314-3 2009-07-30T19:31:32.127Z 2009-07-30T19:31:32.127Z The "Deny access to this computer from the network (SeDenyNetworkLogonRight)" setting should be configured correctly. AC-3 CM-6 CCE-1834-1 2009-07-30T19:31:32.157Z 2009-07-30T19:31:32.157Z The "Deny log on as a batch job (SeDenyBatchLogonRight)" setting should be configured correctly. CM-6 CM-7 SC-1 SI-3 CCE-2296-2 2009-07-30T19:31:32.203Z 2009-07-30T19:31:32.203Z The "Deny log on locally (SeDenyInteractiveLogonRight)" setting should be configured correctly. AC-3 CM-6 CCE-1944-8 2009-07-30T19:31:32.233Z 2012-01-05T04:37:11.157Z The "Deny log on as a service (SeDenyServiceLogonRight)" setting should be configured correctly. AC-3 CM-6 CCE-2102-2 2009-07-30T19:31:32.267Z 2009-07-30T19:31:32.267Z The "Deny log on through Terminal Services (SeDenyRemoteInteractiveLogonRight)" setting should be configured correctly. AC-3 CM-6 CCE-1481-1 2009-07-30T19:31:32.297Z 2009-07-30T19:31:32.297Z The "Enable computer and user accounts to be trusted for delegation (SeEnableDelegationPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-1750-9 2009-07-30T19:31:32.343Z 2009-07-30T19:31:32.343Z The "Force shutdown from a remote system (SeRemoteShutdownPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-2129-5 2009-07-30T19:31:32.377Z 2009-07-30T19:31:32.377Z The "Generate security audits (SeAuditPrivilege)" setting should be configured correctly. AU-2 CCE-1346-6 2009-07-30T19:31:32.407Z 2009-07-30T19:31:32.407Z The "Impersonate a client after authentication" setting should be configured correctly. AC-3 CM-6 CCE-2306-9 2009-07-30T19:31:32.453Z 2009-07-30T19:31:32.453Z The "Increase a process working set" setting should be configured correctly. AC-3 CM-6 CCE-2328-3 2009-07-30T19:31:32.483Z 2009-07-30T19:31:32.483Z The "Increase scheduling priority (SeIncreaseBasePriorityPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-1455-5 2009-07-30T19:31:32.517Z 2009-07-30T19:31:32.517Z The "Load and unload device drivers (SeLoadDriverPrivilege)" setting should be configured correctly. CM-5 CM-6 CCE-2332-5 2009-07-30T19:31:32.547Z 2009-07-30T19:31:32.547Z The "Lock pages in memory (SeLockMemoryPrivilege)" setting should be configured correctly. CM-6 CCE-1975-2 2009-07-30T19:31:32.577Z 2009-07-30T19:31:32.577Z The "Log on as a batch job (SeBatchLogonRight)" setting should be configured correctly. AC-3 CM-6 CCE-2270-7 2009-07-30T19:31:32.610Z 2009-07-30T19:31:32.610Z The "Log on as a service (SeServiceLogonRight)" setting should be configured correctly. AC-3 CM-6 CCE-1843-2 2009-07-30T19:31:32.640Z 2009-07-30T19:31:32.640Z The "Manage auditing and security log (SeSecurityPrivilege)" setting should be configured correctly. AU-2 CCE-2142-8 2009-07-30T19:31:32.670Z 2009-07-30T19:31:32.670Z The "Modify an object label" setting should be configured correctly. AC-3 CM-6 CCE-2257-4 2009-07-30T19:31:32.703Z 2009-07-30T19:31:32.703Z The "Modify firmware environment values (SeSystemEnvironmentPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-1383-9 2009-07-30T19:31:32.733Z 2009-07-30T19:31:32.733Z The "Perform volume maintenance tasks (SeManageVolumePrivilege)" setting should be configured correctly. CM-6 CCE-2360-6 2009-07-30T19:31:32.767Z 2009-07-30T19:31:32.767Z The "Profile single process (SeProfileSingleProcessPrivilege)" setting should be configured correctly. AC-5 CM-6 CM-7 CCE-2113-9 2009-07-30T19:31:32.797Z 2009-07-30T19:31:32.797Z The "Profile system performance (SeSystemProfilePrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-2382-0 2009-07-30T19:31:32.827Z 2009-07-30T19:31:32.827Z The "Remove computer from docking station (SeUndockPrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-1527-1 2009-07-30T19:31:32.860Z 2009-07-30T19:31:32.860Z The "Replace a process level token (SeAssignPrimaryTokenPrivilege)" setting should be configured correctly. CM-6 CM-7 CCE-2294-7 2009-07-30T19:31:32.890Z 2009-07-30T19:31:32.890Z The "Restore files and directories (SeRestorePrivilege)" setting should be configured correctly. AC-3 CM-6 CCE-2078-4 2009-07-30T19:31:32.937Z 2009-07-30T19:31:32.937Z The "Shut down the system (SeShutdownPrivilege)" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2137-8 2009-07-30T19:31:32.967Z 2009-07-30T19:31:32.967Z The "Synchronize directory service data" setting should be configured correctly. CM-7 CCE-2506-4 2009-07-30T19:31:33.000Z 2009-07-30T19:31:33.000Z The "Take ownership of files or other objects (SeTakeOwnershipPrivilege)" setting should be configured correctly. CM-6 CM-7 CCE-2337-4 2009-07-30T19:31:33.030Z 2009-07-30T19:31:33.030Z The "Accounts: Administrator account status" setting should be configured correctly. AC-7 CM-6 CCE-2342-4 2009-07-30T19:31:33.063Z 2009-07-30T19:31:33.063Z The "Accounts: Guest account status" setting should be configured correctly. AC-7 CM-6 CCE-2364-8 2009-07-30T19:31:33.093Z 2012-01-05T04:37:12.003Z The "Accounts: Limit local account use of blank passwords to console logon only" setting should be configured correctly. AC-7 CM-6 CCE-2227-7 2009-07-30T19:31:33.127Z 2009-07-30T19:31:33.127Z The "Accounts: Rename administrator account" setting should be configured correctly. AC-7 CM-6 CCE-2372-1 2009-07-30T19:31:33.157Z 2009-07-30T19:31:33.157Z The "Accounts: Rename guest account" setting should be configured correctly. AC-7 CM-6 CCE-1751-7 2009-07-30T19:31:33.187Z 2012-01-05T04:37:12.113Z The "Audit: Audit the access of global system objects" setting should be configured correctly. AU-2 CCE-1773-1 2009-07-30T19:31:33.217Z 2012-01-05T04:37:12.157Z The "Audit: Audit the use of Backup and Restore privilege" setting should be configured correctly. AU-2 CCE-2276-4 2009-07-30T19:31:33.250Z 2012-01-05T04:37:12.207Z The "Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings" setting should be configured correctly. AU-2 CCE-2315-0 2009-07-30T19:31:33.280Z 2012-01-05T04:37:12.253Z The "Audit: Shut down system immediately if unable to log security audits" setting should be configured correctly. AU-5 CCE-2196-4 2009-07-30T19:31:33.313Z 2009-07-30T19:31:33.313Z The "DCOM: Machine access restrictions in Security Descriptor Definition Language (SDDL) syntax" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-2201-2 2009-07-30T19:31:33.343Z 2009-07-30T19:31:33.343Z The "DCOM: Machine launch restrictions in Security Descriptor Definition Language (SDDL) syntax" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-2249-1 2009-07-30T19:31:33.390Z 2012-01-05T04:37:12.363Z The "Devices: Allow undock without having to log on" setting should be configured correctly. CM-6 CCE-2377-0 2009-07-30T19:31:33.420Z 2012-01-05T04:37:12.440Z The "Devices: Allowed to format and eject removable media" setting should be configured correctly. CM-6 CCE-2152-7 2009-07-30T19:31:33.453Z 2012-01-05T04:37:12.487Z The "Devices: Prevent users from installing printer drivers" setting should be configured correctly. CM-5 CM-6 CCE-1390-4 2009-07-30T19:31:33.483Z 2012-01-05T04:37:12.533Z The "Devices: Restrict CD-ROM access to locally logged-on user only" setting should be configured correctly. AC-3 CM-6 CCE-2383-8 2009-07-30T19:31:33.517Z 2012-01-05T04:37:12.580Z The "Devices: Restrict floppy access to locally logged-on user only" setting should be configured correctly. AC-3 CM-6 CCE-2049-5 2009-07-30T19:31:33.547Z 2009-07-30T19:31:33.547Z The "Domain Controller: Allow server operators to schedule tasks" setting should be configured correctly. AC-3 AC-5 CCE-2317-6 2009-07-30T19:31:33.593Z 2009-07-30T19:31:33.593Z The "Domain Controller: LDAP server signing requirements" setting should be configured correctly. CM-6 CM-7 CCE-1934-9 2009-07-30T19:31:33.627Z 2009-07-30T19:31:33.627Z The "Domain Controller: Refuse machine account password changes" setting should be configured correctly. CM-6 IA-5 CCE-2203-8 2009-07-30T19:31:33.657Z 2012-01-05T04:37:12.707Z The "Domain member: Digitally encrypt or sign secure channel data (always)" setting should be configured correctly. SC-9 CCE-1868-9 2009-07-30T19:31:33.703Z 2012-01-05T04:37:12.767Z The "Domain member: Digitally encrypt secure channel data (when possible)" setting should be configured correctly. SC-9 CCE-2362-2 2009-07-30T19:31:33.733Z 2012-01-05T04:37:12.817Z The "Domain member: Digitally sign secure channel data (when possible)" setting should be configured correctly. SC-9 CCE-2256-6 2009-07-30T19:31:33.767Z 2012-01-05T04:37:12.863Z The "Domain member: Disable machine account password changes" setting should be configured correctly. CM-6 IA-5 CCE-2278-0 2009-07-30T19:31:33.797Z 2012-01-05T04:37:12.907Z The "Domain member: Maximum machine account password age" setting should be configured correctly. CM-6 IA-5 CCE-1802-8 2009-07-30T19:31:33.843Z 2012-01-05T04:37:12.957Z The "Domain member: Require strong (Windows 2000 or later) session key" setting should be configured correctly. CM-6 IA-5 CCE-2199-8 2009-07-30T19:31:33.877Z 2012-01-05T04:37:13.003Z The "Interactive logon: Do not display last user name" setting should be configured correctly. AC-9 CM-6 CCE-2331-7 2009-07-30T19:31:33.907Z 2012-01-05T04:37:13.050Z The "Interactive logon: Do not require CTRL+ALT+DEL" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2225-1 2009-07-30T19:31:33.953Z 2012-01-05T04:37:13.097Z The "Interactive logon: Message text for users attempting to log on" setting should be configured correctly. AC-8 CM-6 CCE-2037-0 2009-07-30T19:31:33.983Z 2012-01-05T04:37:13.143Z The "Interactive logon: Message title for users attempting to log on" setting should be configured correctly. AC-8 CM-6 CCE-2297-0 2009-07-30T19:31:34.017Z 2012-01-05T04:37:13.190Z The "Interactive logon: Number of previous logons to cache (in case domain controller is not available)" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2324-2 2009-07-30T19:31:34.047Z 2012-01-05T04:37:13.237Z The "Interactive logon: Prompt user to change password before expiration" setting should be configured correctly. AC-3 CM-6 IA-5 CCE-2346-5 2009-07-30T19:31:34.077Z 2012-01-05T04:37:13.317Z The "Interactive logon: Require Domain Controller authentication to unlock workstation" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2223-6 2009-07-30T19:31:34.110Z 2009-07-30T19:31:34.110Z The "Interactive logon: Require smart card" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-1448-0 2009-07-30T19:31:34.140Z 2012-01-05T04:37:13.423Z The "Interactive logon: Smart card removal behavior" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-2356-4 2009-07-30T19:31:34.187Z 2012-01-05T04:37:13.470Z The "Microsoft network client: Digitally sign communications (always)" setting should be configured correctly. CM-6 SC-9 CCE-2378-8 2009-07-30T19:31:34.217Z 2012-01-05T04:37:13.517Z The "Microsoft network client: Digitally sign communications (if server agrees)" setting should be configured correctly. CM-6 SC-9 CCE-2272-3 2009-07-30T19:31:34.250Z 2012-01-05T04:37:13.567Z The "Microsoft network client: Send unencrypted password to third-party SMB servers" setting should be configured correctly. IA-5 CCE-2236-8 2009-07-30T19:31:34.280Z 2012-01-05T04:37:13.613Z The "Microsoft network server: Amount of idle time required before suspending session" setting should be configured correctly. AC-1 CM-6 IA-5 CCE-2381-2 2009-07-30T19:31:34.313Z 2012-01-05T04:37:13.657Z The "Microsoft network server: Digitally sign communications (always)" setting should be configured correctly. CM-6 SC-9 CCE-2263-2 2009-07-30T19:31:34.343Z 2012-01-05T04:37:13.720Z The "Microsoft network server: Digitally sign communications (if client agrees)" setting should be configured correctly. CM-6 SC-9 CCE-2029-7 2009-07-30T19:31:34.377Z 2012-01-05T04:37:13.767Z The "Microsoft network server: Disconnect clients when logon hours expire" setting should be configured correctly. AC-1 CM-6 IA-5 CCE-2307-7 2009-07-30T19:31:34.407Z 2012-01-05T04:37:13.817Z The "MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)" setting should be configured correctly. AC-3 CM-6 CCE-1826-7 2009-07-30T19:31:34.437Z 2012-01-05T04:37:13.863Z The "MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)" setting should be configured correctly. AC-4 SC-5 CCE-1967-9 2009-07-30T19:31:34.467Z 2012-01-05T04:37:13.907Z The "MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)" setting should be configured correctly. AC-4 SC-5 CCE-1470-4 2009-07-30T19:31:34.500Z 2012-01-05T04:37:13.957Z The "MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes" setting should be configured correctly. AC-4 SC-5 CCE-2241-8 2009-07-30T19:31:34.530Z 2012-01-05T04:37:14.003Z The "MSS: (Hidden) Hide Computer From the Browse List (not recommended except for highly secure environments)" setting should be configured correctly. AC-4 SC-5 CCE-2399-4 2009-07-30T19:31:34.563Z 2012-01-05T04:37:14.050Z The "MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds" setting should be configured correctly. AC-4 SC-5 CCE-2404-2 2009-07-30T19:31:34.610Z 2012-01-05T04:37:14.097Z The "MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic." setting should be configured correctly. AC-4 SC-5 CCE-2298-8 2009-07-30T19:31:34.640Z 2012-01-05T04:37:14.143Z The "MSS: (NoDriveTypeAutoRun) Disable Autorun for all drives (recommended)" setting should be configured correctly. AC-1 AC-4 SC-5 CCE-2320-0 2009-07-30T19:31:34.670Z 2012-01-05T04:37:14.190Z The "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting should be configured correctly. AC-4 SC-5 CCE-2156-8 2009-07-30T19:31:34.703Z 2012-01-05T04:37:14.253Z The automatic generation of 8.3 file names for NTFS should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-1800-2 2009-07-30T19:31:34.733Z 2012-01-05T04:37:14.300Z The "MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)" setting should be configured correctly. AC-4 SC-5 CCE-2447-1 2009-07-30T19:31:34.767Z 2012-01-05T04:37:14.347Z The "MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)" setting should be configured correctly. AC-4 SC-5 CCE-2183-2 2009-07-30T19:31:34.797Z 2012-01-05T04:37:14.393Z The "MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)" setting should be configured correctly. AC-1 AC-3 CM-6 CM-7 CCE-1460-5 2009-07-30T19:31:34.827Z 2012-01-05T04:37:14.440Z The "MSS: (SynAttackProtect) Syn attack protection level (protects against DoS)" setting should be configured correctly. AC-4 SC-5 CCE-2384-6 2009-07-30T19:31:34.860Z 2012-01-05T04:37:14.487Z The "MSS: (TCPMaxConnectResponseRetransmissions) SYN-ACK retransmissions when a connection request is not acknowledged" setting should be configured correctly. AC-4 SC-5 CCE-2424-0 2009-07-30T19:31:34.907Z 2012-01-05T04:37:14.533Z The "MSS: (TCPMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)" setting should be configured correctly. AC-4 SC-5 CCE-2442-2 2009-07-30T19:31:34.937Z 2012-01-05T04:37:14.580Z The "MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning" setting should be configured correctly. AC-4 AU-9 SC-5 CCE-2318-4 2009-07-30T19:31:34.967Z 2009-07-30T19:31:34.967Z The "Network access: Allow anonymous SID/Name translation" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1962-0 2009-07-30T19:31:35.000Z 2012-01-05T04:37:14.657Z The "Network access: Do not allow anonymous enumeration of SAM accounts" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2340-8 2009-07-30T19:31:35.047Z 2012-01-05T04:37:14.707Z The "Network access: Do not allow anonymous enumeration of SAM accounts and shares" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2111-3 2009-07-30T19:31:35.077Z 2012-01-05T04:37:14.753Z The "Network access: Do not allow storage of credentials or .NET Passports for network authentication" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-1824-2 2009-07-30T19:31:35.110Z 2012-01-05T04:37:14.800Z The "Network access: Let Everyone permissions apply to anonymous users" setting should be configured correctly. AC-3 CM-6 CCE-2089-1 2009-07-30T19:31:35.140Z 2012-01-05T04:37:14.847Z The "Network access: Named Pipes that can be accessed anonymously" setting should be configured correctly. AC-3 CM-6 CCE-1521-4 2009-07-30T19:31:35.187Z 2012-01-05T04:37:14.893Z The "Network access: Remotely accessible registry paths" setting should be configured correctly. AC-3 CM-6 CCE-2357-2 2009-07-30T19:31:35.217Z 2012-01-05T04:37:14.940Z The "Network access: Remotely accessible registry paths and sub paths" setting should be configured correctly. AC-3 CM-6 CCE-2361-4 2009-07-30T19:31:35.267Z 2012-01-05T04:37:14.970Z The "Network access: Restrict anonymous access to Named Pipes and Shares" setting should be configured correctly. AC-3 CM-6 CCE-2507-2 2009-07-30T19:31:35.297Z 2012-01-05T04:37:15.017Z The "Network access: Shares that can be accessed anonymously" setting should be configured correctly. AC-3 CM-6 CCE-2406-7 2009-07-30T19:31:35.327Z 2012-01-05T04:37:15.067Z The "Network access: Sharing and security model for local accounts" setting should be configured correctly. AC-3 CM-6 CCE-2304-4 2009-07-30T19:31:35.360Z 2012-01-05T04:37:15.113Z The "Network security: Do not store LAN Manager hash value on next password change" setting should be configured correctly. AC-3 CM-6 CCE-2432-3 2009-07-30T19:31:35.407Z 2009-07-30T19:31:35.407Z The "Network security: Force logoff when logon hours expire" setting should be configured correctly. AC-1 AC-3 CM-6 CCE-2454-7 2009-07-30T19:31:35.437Z 2012-01-05T04:37:15.173Z The "Network security: LAN Manager authentication level" setting should be configured correctly. AC-3 CM-6 CCE-2327-5 2009-07-30T19:31:35.467Z 2012-01-05T04:37:15.220Z The "Network security: LDAP client signing requirements" setting should be configured correctly. AC-3 CM-6 CCE-1767-3 2009-07-30T19:31:35.500Z 2012-01-05T04:37:15.267Z The "Network security: Minimum session security for NTLM SSP based (including secure RPC) clients" setting should be configured correctly. AC-3 CM-6 CCE-2410-9 2009-07-30T19:31:35.530Z 2012-01-05T04:37:15.330Z The "Network security: Minimum session security for NTLM SSP based (including secure RPC) servers" setting should be configured correctly. AC-3 CM-6 CCE-2309-3 2009-07-30T19:31:35.563Z 2012-01-05T04:37:15.377Z The "Recovery console: Allow automatic administrative logon" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-1553-7 2009-07-30T19:31:35.610Z 2012-01-05T04:37:15.423Z The "Recovery console: Allow floppy copy and access to all drives and all folders" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-2403-4 2009-07-30T19:31:35.640Z 2012-01-05T04:37:15.487Z The "Shutdown: Allow system to be shut down without having to log on" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2416-6 2009-07-30T19:31:35.670Z 2012-01-05T04:37:15.550Z The "Shutdown: Clear virtual memory pagefile" setting should be configured correctly. AC-3 CM-6 CM-7 CCE-2319-2 2009-07-30T19:31:35.703Z 2009-07-30T19:31:35.703Z The "System cryptography: Force strong key protection for user keys stored on the computer" setting should be configured correctly. AC-6 IA-5 CCE-2261-6 2009-07-30T19:31:35.733Z 2012-01-05T04:37:15.627Z The "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" setting should be configured correctly. SC-2 CCE-2429-9 2009-07-30T19:31:35.767Z 2012-01-05T04:37:15.673Z The "System objects: Require case insensitivity for non-Windows subsystems" setting should be configured correctly. AC-6 IA-5 CCE-2451-3 2009-07-30T19:31:35.813Z 2012-01-05T04:37:15.720Z The "System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)" setting should be configured correctly. AC-6 IA-5 CCE-1598-2 2009-07-30T19:31:35.843Z 2009-07-30T19:31:35.843Z DEPRECATED. CCE-2421-6 2009-07-30T19:31:35.877Z 2009-07-30T19:31:35.877Z The "System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies" setting should be configured correctly. AC-6 SC-7 CCE-2302-8 2009-07-30T19:31:35.907Z 2012-01-05T04:37:15.817Z The "User Account Control: Admin Approval Mode for the Built-in Administrator account" setting should be configured correctly. AC-3 AC-6 CCE-2434-9 2009-07-30T19:31:35.937Z 2012-01-05T04:37:15.847Z The "User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop" setting should be configured correctly. AC-3 AC-6 CCE-2474-5 2009-07-30T19:31:35.967Z 2012-01-05T04:37:15.893Z The "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" setting should be configured correctly. AC-3 AC-6 CCE-2355-6 2009-07-30T19:31:36.000Z 2012-01-05T04:37:15.940Z The "User Account Control: Behavior of the elevation prompt for standard users" setting should be configured correctly. AC-3 AC-6 CCE-2487-7 2009-07-30T19:31:36.030Z 2012-01-05T04:37:15.987Z The "User Account Control: Detect application installations and prompt for elevation" setting should be configured correctly. AC-3 AC-6 CCE-2509-8 2009-07-30T19:31:36.063Z 2012-01-05T04:37:16.033Z The "User Account Control: Only elevate executables that are signed and validated" setting should be configured correctly. AC-3 AC-6 CCE-2473-7 2009-07-30T19:31:36.093Z 2012-01-05T04:37:16.080Z The "User Account Control: Only elevate UIAccess applications that are installed in secure locations" setting should be configured correctly. AC-3 AC-6 CCE-2478-6 2009-07-30T19:31:36.140Z 2012-01-05T04:37:16.127Z The "User Account Control: Run all administrators in Admin Approval Mode" setting should be configured correctly. AC-3 AC-6 CCE-2500-7 2009-07-30T19:31:36.170Z 2012-01-05T04:37:16.173Z The "User Account Control: Switch to the secure desktop when prompting for elevation" setting should be configured correctly. AC-3 AC-6 CCE-2266-5 2009-07-30T19:31:36.203Z 2012-01-05T04:37:16.220Z The "User Account Control: Virtualize file and registry write failures to per-user locations" setting should be configured correctly. AC-3 AC-6 CCE-2539-5 2009-07-30T19:31:36.233Z 2012-03-17T03:35:13.467Z The application log maximum size should be configured correctly. AU-4 AU-5 CM-6 CCE-2244-2 2009-07-30T19:31:36.267Z 2012-03-17T03:35:13.513Z The security log maximum size should be configured correctly. AU-4 AU-6 AU-9 CCE-2262-4 2009-07-30T19:31:36.297Z 2012-03-17T03:35:13.560Z The system log maximum size should be configured correctly. AU-4 AU-6 AU-9 CCE-1622-0 2009-07-30T19:31:36.327Z 2012-01-05T04:37:16.423Z The "Prevent local guests group from accessing application log" setting should be configured correctly. AU-9 CCE-2189-9 2009-07-30T19:31:36.360Z 2012-01-05T04:37:16.470Z The "Prevent local guests group from accessing system log" setting should be configured correctly. AU-9 CCE-2149-3 2009-07-30T19:31:36.407Z 2012-01-05T04:37:16.517Z The "Prevent local guests group from accessing security log" setting should be configured correctly. AU-9 CCE-2541-1 2009-07-30T19:31:36.437Z 2012-01-05T04:37:16.567Z The "Retain old events" setting should be configured correctly for the application log. AU-4 CM-6 CCE-2435-6 2009-07-30T19:31:36.467Z 2012-01-05T04:37:16.613Z The "Retain old events" setting should be configured correctly for the security log. AU-4 CM-6 CCE-2581-7 2009-07-30T19:31:36.500Z 2012-01-05T04:37:16.657Z The "Retain old events" setting should be configured correctly for the system log. AU-4 CM-6 CCE-1819-2 2009-07-30T19:31:36.547Z 2009-07-30T19:31:36.547Z The "Retention method for application log" setting should be configured correctly. AU-4 CM-6 CCE-1836-6 2009-07-30T19:31:36.577Z 2009-07-30T19:31:36.577Z The "Retention method for security log" setting should be configured correctly. AU-4 CM-6 CCE-2607-0 2009-07-30T19:31:36.610Z 2009-07-30T19:31:36.610Z The "Retention method for system log" setting should be configured correctly. AU-4 CM-6 CCE-2237-6 2009-07-30T19:31:36.640Z 2009-07-30T19:31:36.640Z The "Enforce password history" setting should be configured correctly. CM-6 IA-5 CCE-2200-4 2009-07-30T19:31:36.687Z 2009-07-30T19:31:36.687Z The "Maximum password age" setting should be configured correctly. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-1861-4 2009-07-30T19:31:36.717Z 2009-07-30T19:31:36.717Z The "Minimum password age" setting should be configured correctly. CM-6 IA-5 CCE-2240-0 2009-07-30T19:31:36.750Z 2009-07-30T19:31:36.750Z The "Minimum password length" setting should be configured correctly. CM-6 IA-5 CCE-2126-1 2009-07-30T19:31:36.780Z 2009-07-30T19:31:36.780Z The "Password must meet complexity requirements" setting should be configured correctly. CM-6 IA-5 CCE-2289-7 2009-07-30T19:31:36.813Z 2009-07-30T19:31:36.813Z The "Store passwords using reversible encryption" setting should be configured correctly. CM-6 IA-5 CCE-1317-7 2009-07-30T19:31:36.843Z 2009-07-30T19:31:36.843Z The "Account lockout duration" setting should be configured correctly. AC-7 CM-6 CCE-1872-1 2009-07-30T19:31:36.890Z 2009-07-30T19:31:36.890Z The "Account lockout threshold" setting should be configured correctly. AC-7 CM-6 CCE-2311-9 2009-07-30T19:31:36.920Z 2009-07-30T19:31:36.920Z The "Reset account lockout counter after" setting should be configured correctly. AC-7 CM-6 CCE-5229-0 2009-07-30T19:31:36.953Z 2012-01-05T04:37:17.097Z The "MSS: (DisableIPSourceRouting) IPv6 source routing protection level (protects against packet spoofing)" setting should be configured correctly. AC-4 SC-5 CCE-5263-9 2009-07-30T19:31:36.983Z 2012-01-05T04:37:17.143Z The "MSS: (TCPMaxDataRetransmissions) IPv6, how many times unacknowledged data is retransmitted (3 recommended, 5 is default)" setting should be configured correctly. AC-4 SC-5 CCE-7636-4 2009-07-30T19:31:37.017Z 2012-01-05T04:37:17.190Z The "Always Prompt Client for Password upon Connection" policy should be set correctly for Terminal Services. IA-2 CCE-8478-0 2009-07-30T19:31:37.063Z 2012-01-05T04:37:17.220Z The "Configure Automatic Updates" setting should be enabled or disabled as appropriate. CM-2 CM-6 CCE-7639-8 2009-07-30T19:31:37.093Z 2009-07-30T19:31:37.093Z The default behavior for AutoRun should be properly configured. AC-1 CCE-8125-7 2009-07-30T19:31:37.127Z 2012-01-05T04:37:17.283Z The "Unsigned Driver Installation Behavior" policy should be set correctly. AC-6 CM-5 IA-5 CCE-8178-6 2009-07-30T19:31:37.157Z 2009-07-30T19:31:37.157Z The "Disable remote Desktop Sharing" setting should be enabled or disabled as appropriate. AC-1 CM-7 CCE-8504-3 2009-07-30T19:31:37.187Z 2012-03-17T03:35:14.483Z The startup type of the NetMeeting Remote Desktop Sharing service should be correct. CM-6 CCE-8596-9 2009-07-30T19:31:37.217Z 2012-01-05T04:37:17.393Z The "Do Not Allow Windows Messenger to be Run" policy should be set correctly. CM-6 CCE-8594-4 2009-07-30T19:31:37.250Z 2009-07-30T19:31:37.250Z The "Enforce user logon restrictions" policy should be set correctly. AC-3 CM-6 CCE-8568-8 2009-07-30T19:31:37.280Z 2012-01-05T04:37:17.470Z The "Enumerate administrator accounts on elevation" setting should be enabled or disabled as appropriate. AC-3 CM-6 CCE-8585-2 2009-07-30T19:31:37.313Z 2009-07-30T19:31:37.313Z The maximum lifetime for Kerberos service tickets should be set appropriately. CM-6 CM-7 CCE-8409-5 2009-07-30T19:31:37.343Z 2009-07-30T19:31:37.343Z The maximum lifetime for Kerberos user tickets should be set appropriately. CM-6 CM-7 CCE-8000-2 2009-07-30T19:31:37.390Z 2009-07-30T19:31:37.390Z The maximum lifetime for Kerberos user ticket renewal should be set appropriately. CM-6 CM-7 CCE-8268-5 2009-07-30T19:31:37.420Z 2009-07-30T19:31:37.420Z The maximum tolerance for computer clock synchronization for Kerberos should be set appropriately. AU-8 CCE-8378-2 2009-07-30T19:31:37.453Z 2012-01-05T04:37:17.613Z Automatic Reboot After System Crash should be enabled or disabled as appropriate. CM-6 SC-2 CCE-7893-1 2009-07-30T19:31:37.483Z 2009-07-30T19:31:37.483Z Disable saving of dial-up passwords should be properly configured. AC-1 IA-5 SC-7 CCE-8598-5 2009-07-30T19:31:37.517Z 2009-07-30T19:31:37.517Z The "No auto-restart for scheduled Automatic Updates installations" policy should be set correctly. CM-2 CM-6 SI-2 CCE-7643-0 2009-07-30T19:31:37.547Z 2009-07-30T19:31:37.547Z The "Allow Unsolicited Remote Assistance" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-8492-1 2009-07-30T19:31:37.577Z 2012-01-05T04:37:17.737Z The "Registry policy processing" policy should be enabled or disabled as appropriate. CM-7 CCE-7646-3 2009-07-30T19:31:37.610Z 2009-07-30T19:31:37.610Z The "Reschedule Automatic Updates scheduled installations" setting should be enabled or disabled as appropriate. CM-6 SI-2 CCE-7658-8 2009-07-30T19:31:37.657Z 2012-01-05T04:37:17.800Z Authentication requirements for RPC clients should be configured appropriately. AC-1 CCE-8572-0 2009-07-30T19:31:37.703Z 2012-01-05T04:37:17.830Z RPC Endpoint Mapper Client Authentication should be enabled or disabled as appropriate. IA-2 CCE-7667-9 2009-07-30T19:31:37.733Z 2009-07-30T19:31:37.733Z The "Set Client connection Encryption Level" policy should be set correctly for Terminal Services. SC-1 CCE-8634-8 2009-07-30T19:31:37.767Z 2009-07-30T19:31:37.767Z The "Turn off Autoplay" policy should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2682-3 2009-07-30T19:31:37.797Z 2012-01-05T04:35:41.673Z The required auditing for %SystemDrive% directory should be enabled. AU-2 CCE-2796-1 2009-07-30T19:31:37.827Z 2012-01-05T04:35:41.767Z The required auditing for the registry key HKEY_LOCAL_MACHINE\SOFTWARE should be enabled. AU-2 CCE-1840-8 2009-07-30T19:31:37.877Z 2012-01-05T04:35:41.847Z The required auditing for the registry key HKEY_LOCAL_MACHINE\SYSTEM should be enabled. AU-2 CCE-2483-6 2009-07-30T19:31:37.907Z 2012-01-05T04:35:41.893Z The required permissions for the directory %ALL% should be assigned. AC-3 CM-6 CCE-1849-9 2009-07-30T19:31:37.937Z 2012-01-05T04:35:41.957Z The required permissions for the directory %AllUsersProfile% should be assigned. AC-3 CM-6 CCE-2620-3 2009-07-30T19:31:37.967Z 2012-01-05T04:35:42.017Z The required permissions for the directory %AllUsersProfile%\Application Data should be assigned. AC-3 CM-6 CCE-2787-0 2009-07-30T19:31:38.017Z 2012-01-05T04:35:42.080Z The required permissions for the directory %AllUsersProfile%\Application Data\Microsoft should be assigned. AC-3 CM-6 CCE-2673-2 2009-07-30T19:31:38.047Z 2012-01-05T04:35:42.127Z The required permissions for the directory %AllUsersProfile%\Application Data\Microsoft\Crypto\DSSHKLMKeys should be assigned. AC-3 CM-6 CCE-2782-1 2009-07-30T19:31:38.077Z 2012-01-05T04:35:42.190Z The required permissions for the directory %AllUsersProfile%\Application Data\Microsoft\Crypto\RSAHKLMKeys should be assigned. AC-3 CM-6 CCE-2676-5 2009-07-30T19:31:38.127Z 2012-01-05T04:35:42.253Z The required permissions for the directory %AllUsersProfile%\Application Data\Microsoft\Dr Watson should be assigned. AC-3 CM-6 CCE-1815-0 2009-07-30T19:31:38.157Z 2012-01-05T04:35:42.317Z The required permissions for the directory %AllUsersProfile%\Application Data\Microsoft\Dr Watson\drwtsn32.log should be assigned. AC-3 CM-6 CCE-2728-4 2009-07-30T19:31:38.187Z 2012-01-05T04:35:42.393Z The required permissions for the directory %AllUsersProfile%\Application Data\Microsoft\HTML Help should be assigned. AC-3 CM-6 CCE-2763-1 2009-07-30T19:31:38.233Z 2012-01-05T04:35:42.457Z The required permissions for the directory %AllUsersProfile%\Application Data\Microsoft\MediaIndex should be assigned. AC-3 CM-6 CCE-2768-0 2009-07-30T19:31:38.267Z 2012-01-05T04:35:42.503Z The required permissions for the directory %AllUsersProfile%\Documents\desktop.ini should be assigned. AC-3 CM-6 CCE-2561-9 2009-07-30T19:31:38.313Z 2012-01-05T04:35:42.567Z The required permissions for the directory %AllUsersProfile%\DRM should be assigned. AC-3 CM-6 CCE-2706-0 2009-07-30T19:31:38.360Z 2012-01-05T04:35:42.627Z The required permissions for the directory %ProgramFiles% should be assigned. AC-3 CM-6 CCE-2085-9 2009-07-30T19:31:38.390Z 2012-01-05T04:35:42.707Z The required permissions for the directory %SystemDrive% should be assigned. AC-3 CM-6 CCE-2702-9 2009-07-30T19:31:38.420Z 2012-01-05T04:35:42.767Z The required permissions for the file %SystemDrive%\AUTOEXEC.BAT should be assigned. AC-3 CM-6 CCE-2623-7 2009-07-30T19:31:38.467Z 2012-01-05T04:35:42.817Z The required permissions for the file %SystemDrive%\CONFIG.SYS should be assigned. AC-3 CM-6 CCE-2565-0 2009-07-30T19:31:38.500Z 2012-01-05T04:35:42.877Z The required permissions for the file %SystemDrive%\Documents and Settings should be assigned. AC-3 CM-6 CCE-2115-4 2009-07-30T19:31:38.530Z 2012-01-05T04:35:42.970Z The required permissions for the directory %SystemDrive%\Documents and Settings\Administrator should be assigned. AC-3 CM-6 CCE-2741-7 2009-07-30T19:31:38.577Z 2012-01-05T04:35:43.033Z The required permissions for the directory %SystemDrive%\Documents and Settings\Default User should be assigned. AC-3 CM-6 CCE-2745-8 2009-07-30T19:31:38.610Z 2012-01-05T04:35:43.097Z The required permissions for the file %SystemDrive%\IO.SYS should be assigned. AC-3 CM-6 CCE-2287-1 2009-07-30T19:31:38.640Z 2012-01-05T04:35:43.143Z The required permissions for the file %SystemDrive%\MSDOS.SYS should be assigned. AC-3 CM-6 CCE-2798-7 2009-07-30T19:31:38.670Z 2012-01-05T04:35:43.207Z The required permissions for the file %SystemDrive%\NTBOOTDD.SYS should be assigned. AC-3 CM-6 CCE-2578-3 2009-07-30T19:31:38.703Z 2012-01-05T04:35:43.267Z The required permissions for the file %SystemDrive%\NTDETECT.COM should be assigned. AC-3 CM-6 CCE-2234-3 2009-07-30T19:31:38.733Z 2012-01-05T04:35:43.317Z The required permissions for the file %SystemDrive%\NTLDR should be assigned. AC-3 CM-6 CCE-2750-8 2009-07-30T19:31:38.780Z 2012-01-05T04:35:43.377Z The required permissions for the file %SystemDrive%\System Volume Information should be assigned. AC-3 CM-6 CCE-2160-0 2009-07-30T19:31:38.813Z 2012-01-05T04:35:43.440Z The required permissions for the directory %SystemRoot% should be assigned. AC-3 CM-6 CCE-2475-2 2009-07-30T19:31:38.843Z 2012-01-05T04:35:43.487Z The required permissions for the directory %SystemRoot%\Driver Cache\I386\Driver.cab should be assigned. AC-3 CM-6 CCE-2387-9 2009-07-30T19:31:38.877Z 2012-01-05T04:35:43.550Z The required permissions for the directory %SystemRoot%\$NtServicePackUninstall$ should be assigned. AC-3 CM-6 CCE-2647-6 2009-07-30T19:31:38.920Z 2012-01-05T04:35:43.613Z The required permissions for the directory %SystemRoot%\CSC should be assigned. AC-3 CM-6 CCE-2418-2 2009-07-30T19:31:38.953Z 2012-01-05T04:35:43.657Z The required permissions for the directory %SystemRoot%\Debug should be assigned. AC-3 CM-6 CCE-2329-1 2009-07-30T19:31:38.983Z 2012-01-05T04:35:43.720Z The required permissions for the directory %SystemRoot%\Debug\UserMode should be assigned. AC-3 CM-6 CCE-2105-5 2009-07-30T19:31:39.017Z 2012-01-05T04:35:43.783Z The required permissions for the directory %SystemRoot%\Debug\UserMode\userenv.log should be assigned. AC-3 CM-6 CCE-2752-4 2009-07-30T19:31:39.047Z 2012-01-05T04:35:43.847Z The required permissions for the file %SystemRoot%\Installer should be assigned. AC-3 CM-6 CCE-2757-3 2009-07-30T19:31:39.077Z 2012-01-05T04:35:43.907Z The required permissions for the file %SystemRoot%\Offline Web Pages should be assigned. AC-3 CM-6 CCE-2264-0 2009-07-30T19:31:39.127Z 2012-01-05T04:35:43.957Z The required permissions for the file %SystemRoot%\Prefetch should be assigned. AC-3 CM-6 CCE-2175-8 2009-07-30T19:31:39.157Z 2012-01-05T04:35:44.080Z The required permissions for the file %SystemRoot%\regedit.exe should be assigned. AC-3 CM-6 CCE-2325-9 2009-07-30T19:31:39.187Z 2012-01-05T04:35:44.143Z The required permissions for the directory %SystemRoot%\Registration should be assigned. AC-3 CM-6 CCE-1833-3 2009-07-30T19:31:39.217Z 2012-01-05T04:35:44.207Z The required permissions for the directory %SystemRoot%\Registration\CRMLog should be assigned. AC-3 CM-6 CCE-2805-0 2009-07-30T19:31:39.267Z 2012-01-05T04:35:44.267Z The required permissions for the directory %SystemRoot%\repair should be assigned. AC-3 CM-6 CCE-2739-1 2009-07-30T19:31:39.297Z 2012-01-05T04:35:44.330Z The required permissions for the directory %SystemRoot%\security should be assigned. AC-3 CM-6 CCE-2638-5 2009-07-30T19:31:39.327Z 2012-01-05T04:35:44.423Z The required permissions for the directory %SystemRoot%\Temp should be assigned. AC-3 CM-6 CCE-2660-9 2009-07-30T19:31:39.377Z 2012-01-05T04:35:44.487Z The required permissions for the directory %SystemRoot%\System32 should be assigned. AC-3 CM-6 CCE-2052-9 2009-07-30T19:31:39.420Z 2012-01-05T04:35:44.597Z The required permissions for the directory %SystemRoot%\System32\arp.exe should be assigned. AC-3 CM-6 CCE-2184-0 2009-07-30T19:31:39.453Z 2012-01-05T04:35:44.707Z The required permissions for the file %SystemRoot%\System32\at.exe should be assigned. AC-3 CM-6 CCE-2312-7 2009-07-30T19:31:39.483Z 2012-01-05T04:35:44.817Z The required permissions for the file %SystemRoot%\System32\attrib.exe should be assigned. AC-3 CM-6 CCE-2726-8 2009-07-30T19:31:39.517Z 2012-01-05T04:35:44.907Z The required permissions for the file %SystemRoot%\System32\cacls.exe should be assigned. AC-3 CM-6 CCE-2250-9 2009-07-30T19:31:39.563Z 2012-01-05T04:35:44.970Z The required permissions for the file %SystemRoot%\System32\ciadv.msc should be assigned. AC-3 CM-6 CCE-1924-0 2009-07-30T19:31:39.593Z 2012-01-05T04:35:45.033Z The required permissions for the file %SystemRoot%\System32\Com\comexp.msc should be assigned. AC-3 CM-6 CCE-2598-1 2009-07-30T19:31:39.627Z 2012-01-05T04:35:45.080Z The required permissions for the file %SystemRoot%\System32\compmgmt.msc should be assigned. AC-3 CM-6 CCE-1842-4 2009-07-30T19:31:39.657Z 2012-01-05T04:35:45.127Z The required permissions for the file %SystemRoot%\System32\CONFIG should be assigned. AC-3 CM-6 CCE-1846-5 2009-07-30T19:31:39.687Z 2012-01-05T04:35:45.190Z The required permissions for the file %SystemRoot%\System32\CONFIG\AppEvent.evt should be assigned. AC-3 CM-6 CCE-2800-1 2009-07-30T19:31:39.717Z 2012-01-05T04:35:45.267Z The required permissions for the file %SystemRoot%\System32\CONFIG\*.evt should be assigned. AC-3 CM-6 CCE-2699-7 2009-07-30T19:31:39.767Z 2012-01-05T04:35:45.377Z The required permissions for the file %SystemRoot%\System32\debug.exe should be assigned. AC-3 CM-6 CCE-2844-9 2009-07-30T19:31:39.797Z 2012-01-05T04:35:45.423Z The required permissions for the file %SystemRoot%\System32\devmgmt.msc should be assigned. AC-3 CM-6 CCE-2109-7 2009-07-30T19:31:39.827Z 2012-01-05T04:35:45.487Z The required permissions for the file %SystemRoot%\System32\dfrg.msc should be assigned. AC-3 CM-6 CCE-2514-8 2009-07-30T19:31:39.877Z 2012-01-05T04:35:45.550Z The required permissions for the file %SystemRoot%\System32\diskmgmt.msc should be assigned. AC-3 CM-6 CCE-1863-0 2009-07-30T19:31:39.907Z 2012-01-05T04:35:45.613Z The required permissions for the directory %SystemRoot%\System32\dllcache should be assigned. AC-3 CM-6 CCE-2760-7 2009-07-30T19:31:39.937Z 2012-01-05T04:35:45.657Z The required permissions for the file %SystemRoot%\System32\drwatson.exe should be assigned. AC-3 CM-6 CCE-2425-7 2009-07-30T19:31:39.967Z 2012-01-05T04:35:45.737Z The required permissions for the file %SystemRoot%\System32\drwtsn32.exe should be assigned. AC-3 CM-6 CCE-1909-1 2009-07-30T19:31:40.000Z 2012-01-05T04:35:45.847Z The required permissions for the file %SystemRoot%\System32\edlin.exe should be assigned. AC-3 CM-6 CCE-2145-1 2009-07-30T19:31:40.030Z 2012-01-05T04:35:45.970Z The required permissions for the file %SystemRoot%\System32\eventcreate.exe should be assigned. AC-3 CM-6 CCE-2436-4 2009-07-30T19:31:40.063Z 2012-01-05T04:35:46.067Z The required permissions for the file %SystemRoot%\System32\eventtriggers.exe should be assigned. AC-3 CM-6 CCE-2704-5 2009-07-30T19:31:40.110Z 2012-01-05T04:35:46.127Z The required permissions for the file %SystemRoot%\System32\eventvwr.msc should be assigned. AC-3 CM-6 CCE-2334-1 2009-07-30T19:31:40.140Z 2012-01-05T04:35:46.190Z The required permissions for the file %SystemRoot%\System32\fsmgmt.msc should be assigned. AC-3 CM-6 CCE-2229-3 2009-07-30T19:31:40.170Z 2012-01-05T04:35:46.283Z The required permissions for the file %SystemRoot%\System32\ftp.exe should be assigned. AC-3 CM-6 CCE-2621-1 2009-07-30T19:31:40.203Z 2012-01-05T04:35:46.363Z The required permissions for the file %SystemRoot%\System32\gpedit.msc should be assigned. AC-3 CM-6 CCE-2876-1 2009-07-30T19:31:40.233Z 2012-01-05T04:35:46.423Z The required permissions for the directory %SystemRoot%\System32\GroupPolicy should be assigned. AC-3 CM-6 CCE-2813-4 2009-07-30T19:31:40.280Z 2012-01-05T04:35:46.487Z The required permissions for the directory %SystemRoot%\System32\ias should be assigned. AC-3 CM-6 CCE-2597-3 2009-07-30T19:31:40.313Z 2012-01-05T04:35:46.550Z The required permissions for the directory %SystemRoot%\System32\lusrmgr.msg should be assigned. AC-3 CM-6 CCE-2747-4 2009-07-30T19:31:40.343Z 2012-01-05T04:35:46.597Z The required permissions for the directory %SystemRoot%\System32\MSDTC should be assigned. AC-3 CM-6 CCE-2139-4 2009-07-30T19:31:40.377Z 2012-01-05T04:35:46.690Z The required permissions for the file %SystemRoot%\System32\nbstat.exe should be assigned. AC-3 CM-6 CCE-2178-2 2009-07-30T19:31:40.407Z 2012-01-05T04:35:46.800Z The required permissions for the file %SystemRoot%\System32\net.exe should be assigned. AC-3 CM-6 CCE-2672-4 2009-07-30T19:31:40.437Z 2012-01-05T04:35:46.907Z The required permissions for the file %SystemRoot%\System32\net1.exe should be assigned. AC-3 CM-6 CCE-1916-6 2009-07-30T19:31:40.483Z 2012-01-05T04:35:47.033Z The required permissions for the file %SystemRoot%\System32\netsh.exe should be assigned. AC-3 CM-6 CCE-2732-6 2009-07-30T19:31:40.517Z 2012-01-05T04:35:47.127Z The required permissions for the file %SystemRoot%\System32\netstat.exe should be assigned. AC-3 CM-6 CCE-2613-8 2009-07-30T19:31:40.547Z 2012-01-05T04:35:47.253Z The required permissions for the file %SystemRoot%\System32\nslookup.exe should be assigned. AC-3 CM-6 CCE-2903-3 2009-07-30T19:31:40.577Z 2012-01-05T04:35:47.363Z The required permissions for the file %SystemRoot%\System32\Ntbackup.exe should be assigned. AC-3 CM-6 CCE-1925-7 2009-07-30T19:31:40.627Z 2012-01-05T04:35:47.423Z The required permissions for the directory %SystemRoot%\System32\NTMSData should be assigned. AC-3 CM-6 CCE-2727-6 2009-07-30T19:31:40.657Z 2012-01-05T04:35:47.517Z The required permissions for the file %SystemRoot%\System32\ntmsoprq.msc should be assigned. AC-3 CM-6 CCE-2749-0 2009-07-30T19:31:40.687Z 2012-01-05T04:35:47.597Z The required permissions for the file %SystemRoot%\System32\ntmsmgr.msc should be assigned. AC-3 CM-6 CCE-2912-4 2009-07-30T19:31:40.717Z 2012-01-05T04:35:47.657Z The required permissions for the file %SystemRoot%\System32\perfmon.msc should be assigned. AC-3 CM-6 CCE-2784-7 2009-07-30T19:31:40.767Z 2012-01-05T04:35:47.783Z The required permissions for the file %SystemRoot%\System32\Rcp.exe should be assigned. AC-3 CM-6 CCE-2220-2 2009-07-30T19:31:40.797Z 2012-01-05T04:35:47.893Z The required permissions for the file %SystemRoot%\System32\reg.exe should be assigned. AC-3 CM-6 CCE-2833-2 2009-07-30T19:31:40.827Z 2012-01-05T04:35:48.017Z The required permissions for the file %SystemRoot%\System32\Regedt32.exe should be assigned. AC-3 CM-6 CCE-2855-5 2009-07-30T19:31:40.877Z 2012-01-05T04:35:48.127Z The required permissions for the file %SystemRoot%\System32\regini.exe should be assigned. AC-3 CM-6 CCE-2894-4 2009-07-30T19:31:40.907Z 2012-01-05T04:35:48.237Z The required permissions for the file %SystemRoot%\System32\regsvr32.exe should be assigned. AC-3 CM-6 CCE-2899-3 2009-07-30T19:31:40.937Z 2012-01-05T04:35:48.347Z The required permissions for the file %SystemRoot%\System32\Rexec.exe should be assigned. AC-3 CM-6 CCE-2546-0 2009-07-30T19:31:40.983Z 2012-01-05T04:35:48.457Z The required permissions for the file %SystemRoot%\System32\route.exe should be assigned. AC-3 CM-6 CCE-2674-0 2009-07-30T19:31:41.017Z 2012-01-05T04:35:48.567Z The required permissions for the file %SystemRoot%\System32\Rsh.exe should be assigned. AC-3 CM-6 CCE-2070-1 2009-07-30T19:31:41.047Z 2012-01-05T04:35:48.627Z The required permissions for the file %SystemRoot%\System32\RSoP.msc should be assigned. AC-3 CM-6 CCE-2762-3 2009-07-30T19:31:41.093Z 2012-01-05T04:35:48.707Z The required permissions for the file %SystemRoot%\System32\runas.exe should be assigned. AC-3 CM-6 CCE-2176-6 2009-07-30T19:31:41.127Z 2012-01-05T04:35:48.817Z The required permissions for the file %SystemRoot%\System32\sc.exe should be assigned. AC-3 CM-6 CCE-2198-0 2009-07-30T19:31:41.157Z 2012-01-05T04:35:48.957Z The required permissions for the file %SystemRoot%\System32\Secedit.exe should be assigned. AC-3 CM-6 CCE-2185-7 2009-07-30T19:31:41.187Z 2012-01-05T04:35:49.017Z The required permissions for the file %SystemRoot%\System32\secpol.msc should be assigned. AC-3 CM-6 CCE-2458-8 2009-07-30T19:31:41.233Z 2012-01-05T04:35:49.080Z The required permissions for the file %SystemRoot%\System32\services.msc should be assigned. AC-3 CM-6 CCE-2872-0 2009-07-30T19:31:41.267Z 2012-01-05T04:35:49.127Z The required permissions for the directory %SystemRoot%\System32\Setup should be assigned. AC-3 CM-6 CCE-2753-2 2009-07-30T19:31:41.297Z 2012-01-05T04:35:49.190Z The required permissions for the directory %SystemRoot%\System32\spool\Printers should be assigned. AC-3 CM-6 CCE-2788-8 2009-07-30T19:31:41.343Z 2012-01-05T04:35:49.300Z The required permissions for the file %SystemRoot%\System32\subst.exe should be assigned. AC-3 CM-6 CCE-2797-9 2009-07-30T19:31:41.377Z 2012-01-05T04:35:49.393Z The required permissions for the file %SystemRoot%\System32\systeminfo.exe should be assigned. AC-3 CM-6 CCE-2691-4 2009-07-30T19:31:41.407Z 2012-01-05T04:35:49.487Z The required permissions for the file %SystemRoot%\System32\telnet.exe should be assigned. AC-3 CM-6 CCE-2731-8 2009-07-30T19:31:41.437Z 2012-01-05T04:35:49.597Z The required permissions for the file %SystemRoot%\System32\tftp.exe should be assigned. AC-3 CM-6 CCE-1937-2 2009-07-30T19:31:41.500Z 2012-01-05T04:35:49.707Z The required permissions for the file %SystemRoot%\System32\tlntsvr.exe should be assigned. AC-3 CM-6 CCE-2857-1 2009-07-30T19:31:41.530Z 2012-01-05T04:35:49.753Z The required permissions for the file %SystemRoot%\System32\wmimgmt.msc should be assigned. AC-3 CM-6 CCE-2738-3 2009-07-30T19:31:41.563Z 2012-01-05T04:35:49.817Z The required permissions for the directory %SystemRoot%\Tasks should be assigned. AC-3 CM-6 CCE-2619-5 2009-07-30T19:31:41.593Z 2012-01-05T04:35:49.877Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE should be assigned. AC-3 CM-6 CCE-2284-8 2009-07-30T19:31:41.640Z 2012-01-05T04:35:49.940Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography/Calais should be assigned. AC-3 CM-6 CCE-2809-2 2009-07-30T19:31:41.670Z 2012-01-05T04:35:50.003Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC should be assigned. AC-3 CM-6 CCE-1943-0 2009-07-30T19:31:41.703Z 2012-01-05T04:35:50.080Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\XAKey should be assigned. AC-3 CM-6 CCE-2612-0 2009-07-30T19:31:41.733Z 2012-01-05T04:35:50.157Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetDDE should be assigned. AC-3 CM-6 CCE-2758-1 2009-07-30T19:31:41.767Z 2012-01-05T04:35:50.220Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\UPnP Device Host should be assigned. AC-3 CM-6 CCE-2401-8 2009-07-30T19:31:41.813Z 2012-01-05T04:35:50.283Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Asr\Commands should be assigned. AC-3 CM-6 CCE-2921-5 2009-07-30T19:31:41.843Z 2012-01-05T04:35:50.347Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib should be assigned. AC-3 CM-6 CCE-2392-9 2009-07-30T19:31:41.877Z 2012-01-05T04:35:50.407Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SeCEdit should be assigned. AC-3 CM-6 CCE-2771-4 2009-07-30T19:31:41.907Z 2012-01-05T04:35:50.457Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy should be assigned. AC-3 CM-6 CCE-2793-8 2009-07-30T19:31:41.937Z 2012-01-05T04:35:50.517Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer should be assigned. AC-3 CM-6 CCE-2207-9 2009-07-30T19:31:41.967Z 2012-01-05T04:35:50.580Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies should be assigned. AC-3 CM-6 CCE-2625-2 2009-07-30T19:31:42.017Z 2012-01-05T04:35:50.657Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ratings should be assigned. AC-3 CM-6 CCE-2736-7 2009-07-30T19:31:42.047Z 2012-01-05T04:35:50.707Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony should be assigned. AC-3 CM-6 CCE-2630-2 2009-07-30T19:31:42.093Z 2012-01-05T04:35:50.783Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM should be assigned. AC-3 CM-6 CCE-2775-5 2009-07-30T19:31:42.127Z 2012-01-05T04:35:50.847Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\clone should be assigned. AC-3 CM-6 CCE-2300-2 2009-07-30T19:31:42.157Z 2012-01-05T04:35:50.907Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class should be assigned. AC-3 CM-6 CCE-2172-5 2009-07-30T19:31:42.203Z 2012-01-05T04:35:50.970Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network should be assigned. AC-3 CM-6 CCE-1960-4 2009-07-30T19:31:42.233Z 2012-01-05T04:35:51.033Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg should be assigned. AC-3 CM-6 CCE-2859-7 2009-07-30T19:31:42.267Z 2012-01-05T04:35:51.097Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Wmi\Security should be assigned. AC-3 CM-6 CCE-2938-9 2009-07-30T19:31:42.313Z 2012-01-05T04:35:51.157Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum should be assigned. AC-3 CM-6 CCE-2850-6 2009-07-30T19:31:42.343Z 2012-01-05T04:35:51.207Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles should be assigned. AC-3 CM-6 CCE-2590-8 2009-07-30T19:31:42.377Z 2012-01-05T04:35:51.300Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt\Security should be assigned. AC-3 CM-6 CCE-2484-4 2009-07-30T19:31:42.420Z 2012-01-05T04:35:51.363Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ClipSrv\Security should be assigned. AC-3 CM-6 CCE-2524-7 2009-07-30T19:31:42.453Z 2012-01-05T04:35:51.407Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Security should be assigned. AC-3 CM-6 CCE-2907-4 2009-07-30T19:31:42.500Z 2012-01-05T04:35:51.470Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNSCache should be assigned. AC-3 CM-6 CCE-2911-6 2009-07-30T19:31:42.530Z 2012-01-05T04:35:51.533Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ersvc\Security should be assigned. AC-3 CM-6 CCE-2555-1 2009-07-30T19:31:42.577Z 2012-01-05T04:35:51.597Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security should be assigned. AC-3 CM-6 CCE-2202-0 2009-07-30T19:31:42.610Z 2012-01-05T04:35:51.657Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRENUM\Security should be assigned. AC-3 CM-6 CCE-2352-3 2009-07-30T19:31:42.640Z 2012-01-05T04:35:51.720Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt should be assigned. AC-3 CM-6 CCE-2634-4 2009-07-30T19:31:42.670Z 2012-01-05T04:35:51.767Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netdd\Security should be assigned. AC-3 CM-6 CCE-1973-7 2009-07-30T19:31:42.703Z 2012-01-05T04:35:51.830Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netddedsdm\Security should be assigned. AC-3 CM-6 CCE-2603-9 2009-07-30T19:31:42.733Z 2012-01-05T04:35:51.893Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess should be assigned. AC-3 CM-6 CCE-2871-2 2009-07-30T19:31:42.780Z 2012-01-05T04:35:51.987Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Rpcss\Security should be assigned. AC-3 CM-6 CCE-2396-0 2009-07-30T19:31:42.813Z 2012-01-05T04:35:52.050Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Samss\Security should be assigned. AC-3 CM-6 CCE-1966-1 2009-07-30T19:31:42.860Z 2012-01-05T04:35:52.113Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Scarddrv\Security should be assigned. AC-3 CM-6 CCE-2696-3 2009-07-30T19:31:42.890Z 2012-01-05T04:35:52.173Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Scardsvr\Security should be assigned. AC-3 CM-6 CCE-2595-7 2009-07-30T19:31:42.937Z 2012-01-05T04:35:52.237Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\PermittedManagers should be assigned. AC-3 CM-6 CCE-2238-4 2009-07-30T19:31:42.967Z 2012-01-05T04:35:52.317Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\ValidCommunities should be assigned. AC-3 CM-6 CCE-2881-1 2009-07-30T19:31:43.000Z 2012-01-05T04:35:52.377Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Stisvc\Security should be assigned. AC-3 CM-6 CCE-2780-5 2009-07-30T19:31:43.047Z 2012-01-05T04:35:52.440Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysmonLog\Log Queries should be assigned. AC-3 CM-6 CCE-2428-1 2009-07-30T19:31:43.077Z 2012-01-05T04:35:52.487Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tapisrv\Security should be assigned. AC-3 CM-6 CCE-2885-2 2009-07-30T19:31:43.110Z 2012-01-05T04:35:52.550Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip should be assigned. AC-3 CM-6 CCE-2537-9 2009-07-30T19:31:43.157Z 2012-01-05T04:35:52.597Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32time\Security should be assigned. AC-3 CM-6 CCE-2057-8 2009-07-30T19:31:43.187Z 2012-01-05T04:35:52.657Z The required permissions for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wmi\Security should be assigned. AC-3 CM-6 CCE-2951-2 2009-07-30T19:31:43.217Z 2012-01-05T04:35:52.767Z The required permissions for the registry key HKEY_USERS\.DEFAULT should be assigned. AC-3 CM-6 CCE-2845-6 2009-07-30T19:31:43.250Z 2012-01-05T04:35:52.863Z The required permissions for the registry key HKEY_USERS\.DEFAULT\Software\Microsoft\NetDDE should be assigned. AC-3 CM-6 CCE-2740-9 2009-07-30T19:31:43.297Z 2012-01-05T04:35:52.923Z The required permissions for the registry key HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root\ProtectedRoots should be assigned. AC-3 CM-6 CCE-1978-6 2009-07-30T19:31:43.327Z 2009-07-30T19:31:43.327Z The "deny access to this computer from the network" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2379-6 2009-07-30T19:31:43.360Z 2009-07-30T19:31:43.360Z The "access this computer from the network" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2167-5 2009-07-30T19:31:43.390Z 2009-07-30T19:31:43.390Z The "act as part of the operating system" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2299-6 2009-07-30T19:31:43.437Z 2009-07-30T19:31:43.437Z The "back up files and directories" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2806-8 2009-07-30T19:31:43.467Z 2009-07-30T19:31:43.467Z The "bypass traverse checking" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2846-4 2009-07-30T19:31:43.500Z 2009-07-30T19:31:43.500Z The "change the system time" user right should be assigned to the correct accounts. AU-8 CM-7 CCE-2786-2 2009-07-30T19:31:43.530Z 2009-07-30T19:31:43.530Z The "create a pagefile" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2791-2 2009-07-30T19:31:43.577Z 2009-07-30T19:31:43.577Z The "Create a token object" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-1969-5 2009-07-30T19:31:43.627Z 2009-07-30T19:31:43.627Z The "create permanent shared objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2864-7 2009-07-30T19:31:43.657Z 2012-01-05T04:35:53.657Z The "debug programs" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2886-0 2009-07-30T19:31:43.687Z 2009-07-30T19:31:43.687Z The "force shutdown from a remote system" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2767-2 2009-07-30T19:31:43.733Z 2009-07-30T19:31:43.733Z The "generate security audits" user right should be assigned to the correct accounts. AC-3 AU-9 CM-6 CCE-2547-8 2009-07-30T19:31:43.767Z 2009-07-30T19:31:43.767Z The "adjust memory quotas for a process" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2944-7 2009-07-30T19:31:43.797Z 2009-07-30T19:31:43.797Z The "increase scheduling priority" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2446-3 2009-07-30T19:31:43.843Z 2009-07-30T19:31:43.843Z The "load and unload device drivers" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2609-6 2009-07-30T19:31:43.890Z 2009-07-30T19:31:43.890Z The "lock pages in memory" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2882-9 2009-07-30T19:31:43.920Z 2009-07-30T19:31:43.920Z The "log on as a batch job" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2948-8 2009-07-30T19:31:43.953Z 2009-07-30T19:31:43.953Z The "log on as a service" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2829-0 2009-07-30T19:31:44.000Z 2009-07-30T19:31:44.000Z The "log on locally" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2247-5 2009-07-30T19:31:44.030Z 2009-07-30T19:31:44.030Z The "manage auditing and security log" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2657-5 2009-07-30T19:31:44.063Z 2009-07-30T19:31:44.063Z The "modify firmware environment values" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2807-6 2009-07-30T19:31:44.093Z 2009-07-30T19:31:44.093Z The "profile single process" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2675-7 2009-07-30T19:31:44.127Z 2009-07-30T19:31:44.127Z The "profile system performance" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2335-8 2009-07-30T19:31:44.170Z 2009-07-30T19:31:44.170Z The "remove computer from docking station" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2860-5 2009-07-30T19:31:44.203Z 2009-07-30T19:31:44.203Z The "replace a process-level token" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2847-2 2009-07-30T19:31:44.233Z 2009-07-30T19:31:44.233Z The "restore files and directories" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2366-3 2009-07-30T19:31:44.267Z 2009-07-30T19:31:44.267Z The "shut down the system" user right should be assigned to the correct accounts. AC-3 CM-6 CM-7 CCE-2021-4 2009-07-30T19:31:44.313Z 2009-07-30T19:31:44.313Z The "take ownership of files or other objects" user right should be assigned to the correct accounts. AC-3 CCE-2810-0 2009-07-30T19:31:44.343Z 2009-07-30T19:31:44.343Z The "synchronize directory service data" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2700-3 2009-07-30T19:31:44.377Z 2009-07-30T19:31:44.377Z The "deny logon locally" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2982-7 2009-07-30T19:31:44.407Z 2009-07-30T19:31:44.407Z The "enable computer and user accounts to be trusted for delegation" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2374-7 2009-07-30T19:31:44.453Z 2012-01-05T04:35:55.190Z The "add workstations to domain" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3004-9 2009-07-30T19:31:44.483Z 2009-07-30T19:31:44.483Z The "allow logon through Terminal Services" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2898-5 2009-07-30T19:31:44.517Z 2009-07-30T19:31:44.517Z The "deny logon as a batch job" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2792-0 2009-07-30T19:31:44.563Z 2009-07-30T19:31:44.563Z The "deny logon as a service" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2814-2 2009-07-30T19:31:44.593Z 2009-07-30T19:31:44.593Z The "deny logon through Terminal Services" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2960-3 2009-07-30T19:31:44.640Z 2009-07-30T19:31:44.640Z The "perform volume maintenance tasks" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2466-1 2009-07-30T19:31:44.670Z 2009-07-30T19:31:44.670Z The "reset account lockout counter after" policy should meet minimum requirements. AC-7 CM-6 CCE-2928-0 2009-07-30T19:31:44.703Z 2009-07-30T19:31:44.703Z The "account lockout duration" policy should meet minimum requirements. AC-7 CM-6 CCE-2986-8 2009-07-30T19:31:44.750Z 2009-07-30T19:31:44.750Z The "account lockout threshold" policy should meet minimum requirements. AC-7 CM-6 CCE-2867-0 2009-07-30T19:31:44.780Z 2009-07-30T19:31:44.780Z Auditing of "account logon" events on success should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-3008-0 2009-07-30T19:31:44.827Z 2009-07-30T19:31:44.827Z Auditing of "account logon" events on failure should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-2902-5 2009-07-30T19:31:44.860Z 2009-07-30T19:31:44.860Z Auditing of "account management" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2906-6 2009-07-30T19:31:44.890Z 2009-07-30T19:31:44.890Z Auditing of "account management" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2933-0 2009-07-30T19:31:44.920Z 2009-07-30T19:31:44.920Z Auditing of "directory service access" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2206-1 2009-07-30T19:31:44.967Z 2009-07-30T19:31:44.967Z Auditing of "directory service access" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2100-6 2009-07-30T19:31:45.000Z 2009-07-30T19:31:45.000Z Auditing of "logon" events on success should be enabled or disabled as appropriate.. AC-7 AU-2 CCE-2343-2 2009-07-30T19:31:45.030Z 2009-07-30T19:31:45.030Z Auditing of "logon" events on failure should be enabled or disabled as appropriate.. AC-7 AU-2 CCE-2259-0 2009-07-30T19:31:45.063Z 2009-07-30T19:31:45.063Z Auditing of "object access" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2766-4 2009-07-30T19:31:45.110Z 2009-07-30T19:31:45.110Z Auditing of "object access" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2971-0 2009-07-30T19:31:45.157Z 2009-07-30T19:31:45.157Z Auditing of "policy change" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2759-9 2009-07-30T19:31:45.187Z 2009-07-30T19:31:45.187Z Auditing of "policy change" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2913-2 2009-07-30T19:31:45.217Z 2009-07-30T19:31:45.217Z Auditing of "privilege use" events on success should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-2918-1 2009-07-30T19:31:45.267Z 2009-07-30T19:31:45.267Z Auditing of "privilege use" events on failure should be enabled or disabled as appropriate.. AC-6 AU-2 CCE-2816-7 2009-07-30T19:31:45.297Z 2009-07-30T19:31:45.297Z Auditing of "process tracking" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2939-7 2009-07-30T19:31:45.327Z 2009-07-30T19:31:45.327Z Auditing of "process tracking" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2878-7 2009-07-30T19:31:45.377Z 2009-07-30T19:31:45.377Z Auditing of "system" events on success should be enabled or disabled as appropriate.. AU-2 CCE-2843-1 2009-07-30T19:31:45.407Z 2009-07-30T19:31:45.407Z Auditing of "system" events on failure should be enabled or disabled as appropriate.. AU-2 CCE-2116-2 2009-07-30T19:31:45.437Z 2012-01-05T04:35:57.033Z The "restrict guest access to application log" policy should be set correctly. AU-4 CM-6 CCE-2904-1 2009-07-30T19:31:45.467Z 2012-01-05T04:35:57.190Z The application log maximum size should be configured correctly.. AU-4 AU-5 CM-6 CCE-3014-8 2009-07-30T19:31:45.500Z 2012-01-05T04:35:57.283Z The "when maximum log size is reached" property should be set correctly for the Application log. AU-4 AU-5 CM-6 CCE-3019-7 2009-07-30T19:31:45.547Z 2009-07-30T19:31:45.547Z If the Application log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-2794-6 2009-07-30T19:31:45.577Z 2012-01-05T04:35:57.457Z The "restrict guest access to security log" policy should be set correctly. AU-4 CM-6 CCE-2693-0 2009-07-30T19:31:45.610Z 2012-01-05T04:35:57.580Z The security log maximum size should be configured correctly.. AU-4 AU-6 AU-9 CCE-2336-6 2009-07-30T19:31:45.657Z 2012-01-05T04:35:57.737Z The "when maximum log size is reached" property should be set correctly for the Security log. AU-4 AU-5 CM-6 CCE-2966-0 2009-07-30T19:31:45.687Z 2009-07-30T19:31:45.687Z If the Security log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-2345-7 2009-07-30T19:31:45.717Z 2012-01-05T04:35:57.970Z The "restrict guest access to system log" policy should be set correctly. AU-4 CM-6 CCE-3006-4 2009-07-30T19:31:45.767Z 2012-01-05T04:35:58.080Z The system log maximum size should be configured correctly.. AU-4 AU-6 AU-9 CCE-2777-1 2009-07-30T19:31:45.797Z 2012-01-05T04:35:58.190Z The "when maximum log size is reached" property should be set correctly for the System log. AU-4 AU-5 CM-6 CCE-2050-3 2009-07-30T19:31:45.827Z 2009-07-30T19:31:45.827Z If the System log's retention method is set to "Overwrite events by days," an appropriate value should be set for the number of days' logs to keep. AU-1 CM-6 CCE-2920-7 2009-07-30T19:31:45.877Z 2009-07-30T19:31:45.877Z The "maximum password age" policy should meet minimum requirements. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-2439-8 2009-07-30T19:31:45.907Z 2009-07-30T19:31:45.907Z The "minimum password age" policy should meet minimum requirements. CM-6 IA-5 CCE-2981-9 2009-07-30T19:31:45.937Z 2009-07-30T19:31:45.937Z The "minimum password length" policy should meet minimum requirements. CM-6 IA-5 CCE-2735-9 2009-07-30T19:31:45.983Z 2009-07-30T19:31:45.983Z The "password must meet complexity requirments" policy should be set correctly. CM-6 IA-5 CCE-2994-2 2009-07-30T19:31:46.017Z 2009-07-30T19:31:46.017Z The "enforce password history" policy should meet minimum requirements. CM-6 IA-5 CCE-2889-4 2009-07-30T19:31:46.047Z 2009-07-30T19:31:46.047Z The "store password using reversible encryption for all users in the domain" policy should be set correctly. CM-6 IA-5 CCE-3034-6 2009-07-30T19:31:46.093Z 2012-01-05T04:35:58.720Z The startup type of the Alerter service should be correct. CM-6 CCE-2937-1 2009-07-30T19:31:46.127Z 2012-01-05T04:35:58.817Z The startup type of the Automatic Update service should be correct. CM-6 CCE-2818-3 2009-07-30T19:31:46.157Z 2012-01-05T04:35:58.907Z The startup type of the Background Intelligent Transfer Service (BITS) service should be correct. CM-6 CCE-2713-6 2009-07-30T19:31:46.187Z 2012-01-05T04:35:59.033Z The startup type of the ClipBook service should be correct. CM-6 CCE-2880-3 2009-07-30T19:31:46.233Z 2012-01-05T04:35:59.173Z The startup type of the Computer Browser service should be correct. CM-6 CCE-2950-4 2009-07-30T19:31:46.267Z 2012-01-05T04:35:59.267Z The startup type of the Fast User Switching service should be correct. CM-6 CCE-2849-8 2009-07-30T19:31:46.313Z 2012-01-05T04:35:59.393Z The startup type of the Fax service should be correct. CM-6 CM-7 CCE-2888-6 2009-07-30T19:31:46.343Z 2012-01-05T04:35:59.487Z The startup type of the FTP Publishing service should be correct. CM-6 CM-7 CCE-3016-3 2009-07-30T19:31:46.377Z 2012-01-05T04:35:59.580Z The startup type of the IIS Admin service should be correct. CM-6 CCE-2910-8 2009-07-30T19:31:46.407Z 2012-01-05T04:35:59.690Z The startup type of the Indexing service should be correct. CM-6 CM-7 CCE-2915-7 2009-07-30T19:31:46.453Z 2012-01-05T04:35:59.830Z The startup type of the Messenger service should be correct. CM-6 CM-7 CCE-2053-7 2009-07-30T19:31:46.483Z 2012-01-05T04:35:59.907Z The startup type of the .NET Framework service should be correct. CM-6 CCE-2071-9 2009-07-30T19:31:46.530Z 2012-01-05T04:35:59.987Z The startup type of the Net Logon service should be correct. CM-6 CCE-2896-9 2009-07-30T19:31:46.563Z 2012-01-05T04:36:00.080Z The startup type of the NetMeeting Remote Desktop Sharing service should be correct. AC-1 CM-6 CM-7 CCE-2280-6 2009-07-30T19:31:46.593Z 2012-01-05T04:36:00.143Z The startup type of the Print Services for Unix service should be correct. CM-6 CCE-2940-5 2009-07-30T19:31:46.640Z 2012-01-05T04:36:00.207Z The startup type of the Remote Access Auto connection Manager service should be correct. CM-6 CCE-2255-8 2009-07-30T19:31:46.670Z 2012-01-05T04:36:00.300Z The startup type of the Remote Desktop Help Session Manager service should be correct. CM-6 CCE-3026-2 2009-07-30T19:31:46.717Z 2012-01-05T04:36:00.363Z The startup type of the Internet Connection Sharing service should be correct. CM-7 CCE-3030-4 2009-07-30T19:31:46.767Z 2012-01-05T04:36:00.440Z The startup type of the Remote Registry service should be correct. CM-6 CCE-3035-3 2009-07-30T19:31:46.797Z 2012-01-05T04:36:00.597Z The startup type of the Routing and Remote Access service should be correct. CM-6 CM-7 CCE-2427-3 2009-07-30T19:31:46.827Z 2012-01-05T04:36:00.720Z The startup type of the Remote Shell service should be correct. CM-6 CCE-2449-7 2009-07-30T19:31:46.877Z 2012-01-05T04:36:00.800Z The startup type of the Simple TCP/IP service should be correct. CM-6 CCE-2233-5 2009-07-30T19:31:46.907Z 2012-01-05T04:36:00.923Z The startup type of the Simple Mail Transport Protocol (SMTP) service should be correct. CM-6 CCE-2779-7 2009-07-30T19:31:46.937Z 2012-01-05T04:36:01.017Z The startup type of the SNMP Service service should be correct. CM-6 CCE-2520-5 2009-07-30T19:31:46.967Z 2012-01-05T04:36:01.127Z The startup type of the SNMP Trap Service service should be correct. CM-6 CCE-2661-7 2009-07-30T19:31:47.017Z 2012-01-05T04:36:01.207Z The startup type of the SSDP Discovery service should be correct. CM-6 CM-7 CCE-2934-8 2009-07-30T19:31:47.047Z 2012-01-05T04:36:01.347Z The startup type of the Task Scheduler service should be correct. CM-6 CM-7 CCE-2326-7 2009-07-30T19:31:47.077Z 2012-01-05T04:36:01.487Z The startup type of the Telnet service should be correct. CM-6 CM-7 CCE-3043-7 2009-07-30T19:31:47.110Z 2012-01-05T04:36:01.613Z The startup type of the Terminal Services service should be correct. CM-6 CM-7 CCE-3048-6 2009-07-30T19:31:47.157Z 2012-01-05T04:36:01.707Z The startup type of the Universal Plug and Play Device Host (UPnP) service should be correct. CM-6 CM-7 CCE-2942-1 2009-07-30T19:31:47.187Z 2012-01-05T04:36:01.817Z The startup type of the World Wide Web Publishing service should be correct. CM-6 CCE-2076-8 2009-07-30T19:31:47.217Z 2012-01-05T04:36:01.863Z The correct service permissions for the Alerter service should be assigned. AC-3 CM-6 CCE-2626-0 2009-07-30T19:31:47.250Z 2012-01-05T04:36:01.923Z The correct service permissions for the Automatic Updates service should be assigned. AC-3 CM-6 CCE-3022-1 2009-07-30T19:31:47.297Z 2012-01-05T04:36:01.987Z The correct service permissions for the Background Intelligent Transfer service should be assigned. AC-3 CM-6 CCE-2815-9 2009-07-30T19:31:47.327Z 2012-01-05T04:36:02.033Z The correct service permissions for the ClipBook service should be assigned. AC-3 CM-6 CCE-2568-4 2009-07-30T19:31:47.360Z 2012-01-05T04:36:02.097Z The correct service permissions for the Computer Browser service should be assigned. AC-3 CM-6 CCE-3071-8 2009-07-30T19:31:47.390Z 2012-01-05T04:36:02.173Z The correct service permissions for the Fax service should be assigned. AC-3 CM-6 CCE-2969-4 2009-07-30T19:31:47.437Z 2012-01-05T04:36:02.237Z The correct service permissions for the File Shares service should be assigned. AC-3 CM-6 CCE-3057-7 2009-07-30T19:31:47.467Z 2012-01-05T04:36:02.300Z The correct service permissions for the FTP Publishing service should be assigned. AC-3 CM-6 CCE-2563-5 2009-07-30T19:31:47.500Z 2012-01-05T04:36:02.347Z The correct service permissions for the IIS Admin service should be assigned. AC-3 CM-6 CCE-2836-5 2009-07-30T19:31:47.547Z 2012-01-05T04:36:02.407Z The correct service permissions for the Indexing service should be assigned. AC-3 CM-6 CCE-2480-2 2009-07-30T19:31:47.577Z 2012-01-05T04:36:02.457Z The correct service permissions for the Messenger service should be assigned. AC-3 CM-6 CCE-2502-3 2009-07-30T19:31:47.610Z 2012-01-05T04:36:02.503Z The correct service permissions for the Net Logon service should be assigned. AC-3 CM-6 CCE-2119-6 2009-07-30T19:31:47.640Z 2012-01-05T04:36:02.567Z The correct service permissions for the NetMeeting service should be assigned. AC-3 CM-6 CCE-2976-9 2009-07-30T19:31:47.687Z 2012-01-05T04:36:02.613Z The correct service permissions for the Printer service should be assigned. AC-3 CM-6 CCE-2990-0 2009-07-30T19:31:47.733Z 2012-01-05T04:36:02.673Z The correct service permissions for the Remote Desktop Help Session Manager service should be assigned. AC-3 CM-6 CCE-3021-3 2009-07-30T19:31:47.767Z 2012-01-05T04:36:02.737Z The correct service permissions for the Remote Registry service should be assigned. AC-3 CM-6 CCE-2141-0 2009-07-30T19:31:47.797Z 2012-01-05T04:36:02.800Z The correct service permissions for the Routing and Remote Access service should be assigned. AC-3 CM-6 CCE-2773-0 2009-07-30T19:31:47.860Z 2012-01-05T04:36:02.863Z The correct service permissions for the SMTP service should be assigned. AC-3 CM-6 CCE-2941-3 2009-07-30T19:31:47.890Z 2012-01-05T04:36:02.907Z The correct service permissions for the SNMP service should be assigned. AC-3 CM-6 CCE-2945-4 2009-07-30T19:31:47.967Z 2012-01-05T04:36:02.970Z The correct service permissions for the SNMP Trap service should be assigned. AC-3 CM-6 CCE-3077-5 2009-07-30T19:31:48.000Z 2012-01-05T04:36:03.033Z The correct service permissions for the Task Scheduler service should be assigned. AC-3 CM-6 CCE-3108-8 2009-07-30T19:31:48.047Z 2012-01-05T04:36:03.080Z The correct service permissions for the Telnet service should be assigned. AC-3 CM-6 CCE-3130-2 2009-07-30T19:31:48.077Z 2012-01-05T04:36:03.143Z The correct service permissions for the Terminal Services service should be assigned. AC-3 CM-6 CCE-3029-6 2009-07-30T19:31:48.127Z 2012-01-05T04:36:03.220Z The correct service permissions for the Universal Plug and Play service should be assigned. AC-3 CM-6 CCE-3051-0 2009-07-30T19:31:48.157Z 2012-01-05T04:36:03.283Z The correct service permissions for the WWW Publishing service should be assigned. AC-3 CM-6 CCE-2804-3 2009-07-30T19:31:48.203Z 2012-01-05T04:36:03.393Z The behavior surrounding Anonymous users' abiliity to display lists of SAM accounts and shares should be correct. AC-3 CM-6 CM-7 SC-5 CCE-2147-7 2009-07-30T19:31:48.250Z 2012-01-05T04:36:03.487Z The behavior surrounding Anonymous users' abiliity to display lists of SAM accounts should be correct. AC-3 CM-6 CM-7 SC-5 CCE-2973-6 2009-07-30T19:31:48.280Z 2012-01-05T04:36:03.580Z The behavior surrounding Anonymous SID/Name translation should be correct. AC-3 CM-6 CM-7 SC-5 CCE-3119-5 2009-07-30T19:31:48.313Z 2012-01-05T04:36:03.627Z The "Anonymous access to the application event log" policy should be set correctly. AU-6 AU-9 CCE-2890-2 2009-07-30T19:31:48.360Z 2012-01-05T04:36:03.690Z The "Anonymous access to the system event log" policy should be set correctly. AU-6 AU-9 CCE-2643-5 2009-07-30T19:31:48.390Z 2012-01-05T04:36:03.767Z The "Anonymous access to the security event log" policy should be set correctly. AU-6 AU-9 CCE-3040-3 2009-07-30T19:31:48.420Z 2009-07-30T19:31:48.420Z Use of the built-in Guest account should be enabled or disabled as appropriate. AC-2 CM-7 IA-4 CCE-2943-9 2009-07-30T19:31:48.467Z 2009-07-30T19:31:48.467Z Use of the built-in Administrator account should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-2573-4 2009-07-30T19:31:48.500Z 2012-01-05T04:36:03.987Z The "Message title for users attempting to log on" policy should be set correctly. AC-8 CM-6 CM-7 SC-5 CCE-2472-9 2009-07-30T19:31:48.530Z 2012-01-05T04:36:04.097Z The "Message text for users attempting to log on" policy should be set correctly. AC-8 CM-6 CM-7 SC-5 CCE-3137-7 2009-07-30T19:31:48.577Z 2009-07-30T19:31:48.577Z Administrative Shares should be enabled or disabled as appropriate. CM-7 CCE-3031-2 2009-07-30T19:31:48.610Z 2009-07-30T19:31:48.610Z Automatic Execution of the System Debugger should be properly configured. CM-6 CM-7 CCE-2776-3 2009-07-30T19:31:48.640Z 2009-07-30T19:31:48.640Z Automatic Logon should be properly configured. AC-3 CM-6 CM-7 IA-2 SC-5 CCE-2419-0 2009-07-30T19:31:48.670Z 2009-07-30T19:31:48.670Z Automatic Reboot After System Crash should be properly configured. CM-6 SC-2 CCE-2710-2 2009-07-30T19:31:48.717Z 2009-07-30T19:31:48.717Z Autoplay on all Drive Types should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2154-3 2009-07-30T19:31:48.750Z 2009-07-30T19:31:48.750Z Autoplay for Current User should be properly configured. CM-6 CM-7 CCE-2423-2 2009-07-30T19:31:48.780Z 2009-07-30T19:31:48.780Z Autoplay for Default User should be properly configured. CM-6 CM-7 CCE-2925-6 2009-07-30T19:31:48.827Z 2009-07-30T19:31:48.827Z CD-ROM Autorun should be properly configured. AC-1 CM-7 MP-4 CCE-3070-0 2009-07-30T19:31:48.860Z 2009-07-30T19:31:48.860Z Computer Browser ResetBrowser Frames should be properly configured. CM-6 CCE-2824-1 2009-07-30T19:31:48.890Z 2009-07-30T19:31:48.890Z ICMP Redirects should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3132-8 2009-07-30T19:31:48.937Z 2009-07-30T19:31:48.937Z IP Source Routing should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2652-6 2009-07-30T19:31:48.967Z 2009-07-30T19:31:48.967Z IRDP should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3044-5 2009-07-30T19:31:49.000Z 2009-07-30T19:31:49.000Z Kerberos and RSVP Traffic Protected by IPSec should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3066-8 2009-07-30T19:31:49.030Z 2009-07-30T19:31:49.030Z Dr. Watson Crash Dumps should be properly configured. SC-7 CCE-2930-6 2009-07-30T19:31:49.077Z 2009-07-30T19:31:49.077Z Display Last User Name in Logon Screen should be properly configured. AC-3 AC-9 CM-6 CCE-2952-0 2009-07-30T19:31:49.110Z 2009-07-30T19:31:49.110Z System availability to Master Browser should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2718-5 2009-07-30T19:31:49.140Z 2009-07-30T19:31:49.140Z TCP/IP Dead Gateway Detection should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2559-3 2009-07-30T19:31:49.187Z 2009-07-30T19:31:49.187Z The TCP/IP KeepAlive Time should be set correctly . AC-4 SC-5 SC-7 CCE-2453-9 2009-07-30T19:31:49.217Z 2009-07-30T19:31:49.217Z The permitted number of TCP/IP Maximum Half-open Sockets should be set correctly . AC-4 SC-5 SC-7 CCE-3114-6 2009-07-30T19:31:49.267Z 2009-07-30T19:31:49.267Z The permitted number of TCP/IP Maximum Retried Half-open Sockets should be set correctly . AC-4 SC-5 SC-7 CCE-3118-7 2009-07-30T19:31:49.297Z 2009-07-30T19:31:49.297Z TCP/IP NetBIOS Name Release on Request Prevented should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3017-1 2009-07-30T19:31:49.343Z 2009-07-30T19:31:49.343Z TCP/IP PMTU Discovery should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2916-5 2009-07-30T19:31:49.377Z 2009-07-30T19:31:49.377Z TCP/IP SYN Flood Attack Protection should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3061-9 2009-07-30T19:31:49.420Z 2009-07-30T19:31:49.420Z Security Audit log warning level should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-2444-8 2009-07-30T19:31:49.453Z 2009-07-30T19:31:49.453Z Disable saving of dial-up passwords should be properly configured. AC-1 IA-5 SC-7 CCE-2841-5 2009-07-30T19:31:49.500Z 2009-07-30T19:31:49.500Z Safe DLL Search Mode should be properly configured. AC-3 CM-6 CM-7 SC-5 CCE-3092-4 2009-07-30T19:31:49.530Z 2009-07-30T19:31:49.530Z Always Wait for the Network at Computer Startup and Logon should be properly configured. CM-6 IA-2 CCE-3013-0 2009-07-30T19:31:49.563Z 2009-07-30T19:31:49.563Z The "Delete Cached Copies of Roaming Profiles" policy should be set correctly. CM-6 CM-7 MP-6 CCE-3100-5 2009-07-30T19:31:49.610Z 2009-07-30T19:31:49.610Z Use Classic Logon should be properly configured. CM-6 CCE-2893-6 2009-07-30T19:31:49.657Z 2009-07-30T19:31:49.657Z Background Refresh of Group Policy should be properly configured. AC-3 CM-6 CCE-2774-8 2009-07-30T19:31:49.687Z 2009-07-30T19:31:49.687Z Show Shared Internet Connection Access UI should be properly configured. CM-6 CCE-2173-3 2009-07-30T19:31:49.750Z 2009-07-30T19:31:49.750Z Installation and Configuration of Network Bridge on the DNS Domain Network should be properly configured. CM-7 CCE-3087-4 2009-07-30T19:31:49.797Z 2009-07-30T19:31:49.797Z Disallow Installation of Printers Using Kernel-mode Drivers should be properly configured. CM-6 CM-7 CCE-2968-6 2009-07-30T19:31:49.827Z 2009-07-30T19:31:49.827Z The "Allow Server Operators to Schedule Tasks" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3135-1 2009-07-30T19:31:49.890Z 2009-07-30T19:31:49.890Z The built-in Administrator account should be correctly named. AC-3 CM-6 CM-7 SC-5 CCE-3025-4 2009-07-30T19:31:49.920Z 2009-07-30T19:31:49.920Z The built-in Guest account should be correctly named. AC-3 CM-6 CM-7 SC-5 CCE-3157-5 2009-07-30T19:31:49.953Z 2012-01-05T04:36:06.033Z The amount of idle time required before disconnecting a session should be set correctly. AC-1 AC-3 CM-6 CM-7 CCE-3162-5 2009-07-30T19:31:50.000Z 2012-01-05T04:36:06.143Z The "Audit the access of global system objects" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2955-3 2009-07-30T19:31:50.030Z 2012-01-05T04:36:06.237Z The "Audit the use of backup and restore privilege" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2891-0 2009-07-30T19:31:50.063Z 2012-01-05T04:36:06.330Z The "Disable CTRL+ALT+Delete Requirement for Logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2926-4 2009-07-30T19:31:50.110Z 2012-01-05T04:36:06.440Z The "LAN Manager Authentication Level" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2789-6 2009-07-30T19:31:50.140Z 2012-01-05T04:36:06.567Z The "Prevent Users from Installing Printer Drivers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2935-5 2009-07-30T19:31:50.170Z 2012-01-05T04:36:06.673Z The "Recovery Console: Allow Automatic Administrative Logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2957-9 2009-07-30T19:31:50.217Z 2012-01-05T04:36:06.783Z The "Recovery Console: Allow Floppy Copy and Access to All Drives and All Folders" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2974-4 2009-07-30T19:31:50.250Z 2012-01-05T04:36:06.970Z The "Restrict CD-ROM Access to Locally Logged-On User Only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2873-8 2009-07-30T19:31:50.280Z 2012-01-05T04:36:07.143Z The "Restrict Floppy Access to Locally Logged-On User Only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3005-6 2009-07-30T19:31:50.327Z 2012-01-05T04:36:07.253Z The "Strengthen Default Permissions of Global System Objects" policy should be set correctly. CM-6 CCE-3151-8 2009-07-30T19:31:50.360Z 2012-01-05T04:36:07.363Z The "Secure Channel: Require Strong (Windows 2000 or later) Session Key" policy should be set correctly. CM-6 SC-2 CCE-3049-4 2009-07-30T19:31:50.390Z 2012-01-05T04:36:07.470Z The "Send Unencrypted Password to Connect to Third-Party SMB Servers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3085-8 2009-07-30T19:31:50.437Z 2012-01-05T04:36:07.597Z The "Unsigned Driver Installation Behavior" policy should be set correctly. AC-6 CM-5 IA-5 CCE-2701-1 2009-07-30T19:31:50.467Z 2012-01-05T04:36:07.707Z The "Users Prompted to Change Password Before Expiration" policy should be set correctly. AC-3 CM-6 CM-7 IA-5 CCE-2851-4 2009-07-30T19:31:50.500Z 2012-01-05T04:36:07.800Z The "Shut Down system immediately if unable to log security audits" policy should be set correctly. AC-3 AU-5 CM-6 CM-7 SC-5 CCE-2983-5 2009-07-30T19:31:50.547Z 2012-01-05T04:36:07.923Z The "Allow System to be Shut Down Without Having to Log On" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3128-6 2009-07-30T19:31:50.577Z 2012-01-05T04:36:08.050Z The "Clear Virtual Memory Pagefile at shutdown" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3027-0 2009-07-30T19:31:50.610Z 2012-01-05T04:36:08.143Z The "Digitally Sign Client Communication (Always)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2802-7 2009-07-30T19:31:50.640Z 2012-01-05T04:36:08.253Z The "Digitally Sign Client Communication (When Possible)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3053-6 2009-07-30T19:31:50.687Z 2012-01-05T04:36:08.363Z The "Digitally Sign Server Communication (Always)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2688-0 2009-07-30T19:31:50.717Z 2012-01-05T04:36:08.457Z The "Digitally Sign Server Communication (When Possible)" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3106-2 2009-07-30T19:31:50.750Z 2012-01-05T04:36:08.597Z The "Number of Previous Logons to Cache" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3111-2 2009-07-30T19:31:50.797Z 2012-01-05T04:36:08.690Z The "Allowed to Format and Eject Removable NTFS Media" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3097-3 2009-07-30T19:31:50.827Z 2012-01-05T04:36:08.830Z The "Secure Channel: Digitally Encrypt or Sign Secure Channel Data (Always)" policy should be set correctly. CM-6 SC-2 CCE-2996-7 2009-07-30T19:31:50.877Z 2012-01-05T04:36:08.957Z The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3000-7 2009-07-30T19:31:50.920Z 2012-01-05T04:36:09.080Z The "Secure Channel: Digitally Sign Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-3133-6 2009-07-30T19:31:50.953Z 2012-01-05T04:36:09.173Z The "Smart Card Removal Behavior" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2313-5 2009-07-30T19:31:51.000Z 2012-01-05T04:36:09.317Z The "Prevent System Maintenance of Computer Account Password" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3084-1 2009-07-30T19:31:51.030Z 2012-01-05T04:36:09.440Z The "Use FIPS compliant algorithms for encryption, hashing, and signing" policy should be set correctly. IA-5 IA-7 SC-2 SC-9 CCE-2842-3 2009-07-30T19:31:51.077Z 2012-01-05T04:36:09.550Z The "Default owner for objects created by members of the Administrators group" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2987-6 2009-07-30T19:31:51.110Z 2012-01-05T04:36:09.657Z The "Require Case Insensitivity for Non-Windows Sybsystems" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2344-0 2009-07-30T19:31:51.157Z 2012-01-05T04:36:09.783Z The "Limit local account user of blank passwords to console logon only" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3009-8 2009-07-30T19:31:51.187Z 2012-01-05T04:36:09.893Z The "Allow undock without having to logon" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2551-0 2009-07-30T19:31:51.233Z 2012-01-05T04:36:09.987Z The "LDAP server signing requirements" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2991-8 2009-07-30T19:31:51.280Z 2012-01-05T04:36:10.157Z The "LDAP client signing requirements" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3123-7 2009-07-30T19:31:51.327Z 2012-01-05T04:36:10.253Z The "Refuse machine account password change" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3018-9 2009-07-30T19:31:51.390Z 2012-01-05T04:36:10.393Z The "Maximum machine account password age" policy should be set correctly. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-3172-4 2009-07-30T19:31:51.420Z 2012-01-05T04:36:10.503Z The "Require Domain Controller authentication to unlock workstation" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2692-2 2009-07-30T19:31:51.483Z 2012-01-05T04:36:10.613Z The "Disconnect clients when logon hours expire" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3088-2 2009-07-30T19:31:51.517Z 2012-01-05T04:36:10.737Z The "Do not allow storage of credentials or .NET Passports" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3110-4 2009-07-30T19:31:51.547Z 2012-01-05T04:36:10.863Z The "Let Everyone permissions apply to anonymous users" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3150-0 2009-07-30T19:31:51.593Z 2012-01-05T04:36:10.970Z The "Named Pipes that can be accessed anonymously" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3155-9 2009-07-30T19:31:51.627Z 2012-01-05T04:36:11.067Z The "Remotely accessible registry paths" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3036-1 2009-07-30T19:31:51.670Z 2012-01-05T04:36:11.173Z The "Shares that can be accessed anonymously" policy should be set correctly. AC-3 CM-6 CM-7 CCE-3058-5 2009-07-30T19:31:51.703Z 2012-01-05T04:36:11.283Z The "Sharing and security model for local accounts" policy should be set correctly. AC-3 CM-6 CM-7 CCE-2993-4 2009-07-30T19:31:51.733Z 2012-01-05T04:36:11.407Z The "Do not store LAN Manager hash value on next password change" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3139-3 2009-07-30T19:31:51.780Z 2009-07-30T19:31:51.780Z The "Force logoff when logon hours expire" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-3156-7 2009-07-30T19:31:51.827Z 2012-01-05T04:36:11.580Z The "Minimum session security for NTLM SSP based clients" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2799-5 2009-07-30T19:31:51.860Z 2012-01-05T04:36:11.707Z The "Minimum session security for NTLM SSP based servers" policy should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2795-3 2009-07-30T19:31:51.890Z 2009-07-30T19:31:51.890Z Local volumes should be formatted correctly. CM-7 CCE-2980-1 2009-07-30T19:31:51.937Z 2012-01-05T04:36:11.863Z The "Screen Saver Timeout" setting should be configured correctly for the current user. AC-1 AC-3 CM-6 CM-7 CCE-3099-9 2009-07-30T19:31:52.000Z 2009-07-30T19:31:52.000Z The "Screen Saver Executable Name" setting should be configured correctly for the default user. AC-1 AC-3 CM-6 CM-7 CCE-2764-9 2009-07-30T19:31:52.063Z 2009-07-30T19:31:52.063Z The "Screen Saver Timeout" setting should be configured correctly for the default user. AC-1 AC-3 CM-6 CM-7 CCE-3161-7 2009-07-30T19:31:52.093Z 2009-07-30T19:31:52.093Z The "Password protect the screen saver" setting should be configured correctly for the default user. AC-1 CM-6 IA-5 CCE-2901-7 2009-07-30T19:31:52.140Z 2009-07-30T19:31:52.140Z The screen saver should be enabled or disabled as appropriate for the default user. AC-1 AC-3 CM-6 CM-7 CCE-3170-8 2009-07-30T19:31:52.170Z 2012-01-05T04:36:12.050Z The "Screen Saver Executable Name" setting should be configured correctly for the current user. AC-1 AC-3 CM-6 CM-7 CCE-3064-3 2009-07-30T19:31:52.203Z 2009-07-30T19:31:52.203Z DEPRECATED in favor of CCE-2980-1. CCE-2526-2 2009-07-30T19:31:52.250Z 2009-07-30T19:31:52.250Z DEPRECATED in favor of CCE-4500-5. CCE-2174-1 2009-07-30T19:31:52.280Z 2012-01-05T04:36:12.220Z The screen saver should be enabled or disabled as appropriate for the current user. AC-1 AC-3 CM-6 CM-7 CCE-2552-8 2009-07-30T19:31:52.313Z 2009-07-30T19:31:52.313Z The "Always Install with Elevated Privileges" policy should be set correctly. CM-6 CCE-2830-8 2009-07-30T19:31:52.360Z 2009-07-30T19:31:52.360Z The "Set Safe for Scripting" policy should be set correctly. CM-6 CCE-3094-0 2009-07-30T19:31:52.390Z 2009-07-30T19:31:52.390Z The "Enable User Control Over Installs" policy should be set correctly. AC-6 CCE-3011-4 2009-07-30T19:31:52.437Z 2009-07-30T19:31:52.437Z The "Enable User to Use Media Source While Elevated" policy should be set correctly. AC-6 CM-6 CCE-3020-5 2009-07-30T19:31:52.467Z 2009-07-30T19:31:52.467Z The "Allow Administrator to Install from Terminal Services Session" policy should be set correctly. CM-6 SI-8 CCE-2293-9 2009-07-30T19:31:52.517Z 2009-07-30T19:31:52.517Z The "Enable User to Patch Elevated Products" policy should be set correctly. AC-6 CM-2 CM-6 SI-2 CCE-3068-4 2009-07-30T19:31:52.547Z 2009-07-30T19:31:52.547Z The "Cache Transforms in Secure Location" policy should be set correctly. CM-7 CCE-2826-6 2009-07-30T19:31:52.593Z 2009-07-30T19:31:52.593Z The "Disable Media Player for automatic updates" policy should be set correctly. SI-2 CCE-3117-9 2009-07-30T19:31:52.627Z 2009-07-30T19:31:52.627Z The "Prevent Codec Download" policy should be set correctly for Windows MediaPlayer. AC-6 CM-6 SI-3 CCE-2684-9 2009-07-30T19:31:52.670Z 2009-07-30T19:31:52.670Z The "Do Not Allow Windows Messenger to be Run" policy should be set correctly. CM-6 CCE-2455-4 2009-07-30T19:31:52.703Z 2009-07-30T19:31:52.703Z The "Do Not Automatically Start Windows Messenger" policy should be set correctly. CM-6 CCE-2711-0 2009-07-30T19:31:52.750Z 2009-07-30T19:31:52.750Z The "Prohibit New Task Creation" policy should be set correctly for the Task Scheduler. AC-3 AC-5 CCE-2354-9 2009-07-30T19:31:52.780Z 2012-01-05T04:36:12.753Z The "Limit Users to One Remote Session" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3129-4 2009-07-30T19:31:52.827Z 2012-01-05T04:36:12.817Z The "Limit Number of Connections" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3028-8 2009-07-30T19:31:52.877Z 2012-01-05T04:36:12.863Z The "Do Not Allow New Client Connections" policy should be set correctly for Terminal Services. CM-6 CCE-2407-5 2009-07-30T19:31:52.907Z 2012-01-05T04:36:12.923Z The "Do Not Allow Local Administrators to Customize Permissions" policy should be set correctly for Terminal Services. CM-5 CM-6 CCE-2808-4 2009-07-30T19:31:52.967Z 2012-01-05T04:36:12.987Z The "Remote Control Settings" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-2949-6 2009-07-30T19:31:53.000Z 2012-01-05T04:36:13.050Z The "Always Prompt Client for Password upon Connection" policy should be set correctly for Terminal Services. IA-2 CCE-3116-1 2009-07-30T19:31:53.047Z 2009-07-30T19:31:53.047Z The "Set Client connection Encryption Level" policy should be set correctly for Terminal Services. SC-1 CCE-2997-5 2009-07-30T19:31:53.093Z 2009-07-30T19:31:53.093Z The "Do not Use Temp folders per Session" policy should be set correctly for Terminal Services. CM-6 CM-7 CCE-2892-8 2009-07-30T19:31:53.127Z 2009-07-30T19:31:53.127Z The "Do not Delete Temp folder on exit" policy should be set correctly for Terminal Services. CM-6 CCE-2961-1 2009-07-30T19:31:53.157Z 2009-07-30T19:31:53.157Z The "Set time limit for disconnected sessions" policy should be set correctly for Terminal Services. AC-1 AC-3 CM-6 CM-7 CCE-3124-5 2009-07-30T19:31:53.203Z 2009-07-30T19:31:53.203Z The "Set time limit for idle sessions" policy should be set correctly for Terminal Services. AC-1 AC-3 CM-6 CM-7 CCE-2210-3 2009-07-30T19:31:53.233Z 2012-01-05T04:36:13.363Z The "Allow Reconnection from Original Client Only" policy should be set correctly for Terminal Services. CM-6 CCE-2959-5 2009-07-30T19:31:53.267Z 2009-07-30T19:31:53.267Z The "Terminate session when time limits are reached" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3109-6 2009-07-30T19:31:53.313Z 2012-01-05T04:36:13.457Z The "Enable Keep-Alive Messages" policy should be set correctly for Terminal Services. CM-6 CCE-3007-2 2009-07-30T19:31:53.343Z 2012-01-05T04:36:13.517Z The "Allow Solicited Remote Assistance" policy should be set correctly for Terminal Services. CM-6 CCE-3012-2 2009-07-30T19:31:53.377Z 2012-01-05T04:36:13.580Z The "Allow Unsolicited Remote Assistance" policy should be set correctly for Terminal Services. AC-1 CM-6 CCE-3038-7 2009-07-30T19:31:53.420Z 2012-01-05T04:36:13.657Z The "Enable Error Reporting" policy should be set correctly. CM-6 CCE-3188-0 2009-07-30T19:31:53.453Z 2009-07-30T19:31:53.453Z The "Enforce user logon restrictions" policy should be set correctly. AC-3 CM-6 CCE-2708-6 2009-07-30T19:31:53.483Z 2009-07-30T19:31:53.483Z The "Maximum Service Ticket Litfetime" policy should be set correctly. CM-6 CCE-2803-5 2009-07-30T19:31:53.530Z 2009-07-30T19:31:53.530Z The "Maximum User Ticket Lifetime" policy should be set correctly. CM-6 CCE-3063-5 2009-07-30T19:31:53.563Z 2009-07-30T19:31:53.563Z The "Maximum User Renewal Lifetime" policy should be set correctly. CM-6 CCE-3208-6 2009-07-30T19:31:53.610Z 2009-07-30T19:31:53.610Z The "Maximum tolerance for computer clock synchronization" policy should be set correctly. AU-8 CCE-3107-0 2009-07-30T19:31:53.657Z 2009-07-30T19:31:53.657Z The "Create global objects" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-2737-5 2009-07-30T19:31:53.687Z 2012-01-05T04:36:13.970Z The "Impersonate a client after authentication" user right should be assigned to the correct accounts. AC-3 CM-6 CCE-3010-6 2009-07-30T19:31:53.717Z 2009-07-30T19:31:53.717Z The "DCOM: Machine access Restrictions in Security Descriptor Definition Language (SDDL) syntax" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-2662-5 2009-07-30T19:31:53.767Z 2009-07-30T19:31:53.767Z The "DCOM: Machine Launch Restrictions in the Security Descriptor Definition Language (SDDL) syntax" security option should be set correctly. AC-3 CM-6 CM-7 SC-5 CCE-2917-3 2009-07-30T19:31:53.797Z 2009-07-30T19:31:53.797Z The "Display user information when the session is locked" setting should be configured correctly. AC-3 CM-6 CCE-3186-4 2009-07-30T19:31:53.827Z 2009-07-30T19:31:53.827Z The "Interactive logon: Requre smart card" setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-2834-0 2009-07-30T19:31:53.877Z 2009-07-30T19:31:53.877Z The "Network access: Restrict anonymous access to named pipes and shares" setting should be configured correctly. AC-3 CM-6 CCE-2992-6 2009-07-30T19:31:53.907Z 2009-07-30T19:31:53.907Z The "System cryptography: Force strong key protection for user keys stored on the computer" setting should be configured correctly. AC-6 IA-5 CCE-2705-2 2009-07-30T19:31:53.953Z 2009-07-30T19:31:53.953Z DEPRECATED in favor of CCE-5407-2, CCE-5441-1. CCE-2723-5 2009-07-30T19:31:53.983Z 2009-07-30T19:31:53.983Z the "System settings: Use Certificate Rules on Windows Executables for Software Restriction Polices" setting should be configured correctly. AC-6 SC-7 CCE-2213-7 2009-07-30T19:31:54.030Z 2009-07-30T19:31:54.030Z MSS:(TCPMaxConnectResponseRetransmission) SYN-ACK retansmissions when a connection request is not acknowledged AC-3 CM-6 CM-7 SC-5 CCE-2239-2 2009-07-30T19:31:54.063Z 2009-07-30T19:31:54.063Z MSS:(TCPMaxDataRetransmissions) How many times unacknowledged data is retransmitted AC-3 CM-6 CM-7 SC-5 CCE-2690-6 2009-07-30T19:31:54.110Z 2009-07-30T19:31:54.110Z Membership in the Backup Operators group should be assigned to the appropriate accounts. AC-2 CM-6 CCE-2862-1 2009-07-30T19:31:54.140Z 2009-07-30T19:31:54.140Z Membership in the Power Users group should be assigned to the appropriate accounts. AC-2 CM-6 CCE-3136-9 2009-07-30T19:31:54.187Z 2009-07-30T19:31:54.187Z Membership in the Remote Desktop Users group should be assigned to the appropriate accounts. AC-2 CM-6 CCE-3171-6 2009-07-30T19:31:54.217Z 2012-01-05T04:36:14.533Z The Application Layer Gateway Service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3047-8 2009-07-30T19:31:54.267Z 2012-01-05T04:36:14.580Z The Application Management service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3113-8 2009-07-30T19:31:54.297Z 2012-01-05T04:36:14.643Z The Cryptographic Services service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2756-5 2009-07-30T19:31:54.327Z 2012-01-05T04:36:14.707Z The DHCP Client service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3153-4 2009-07-30T19:31:54.377Z 2012-01-05T04:36:14.783Z The Distributed Link Tracking Client service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3184-9 2009-07-30T19:31:54.407Z 2012-01-05T04:36:14.863Z The Distributed Transaction Coordinator service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2985-0 2009-07-30T19:31:54.437Z 2012-01-05T04:36:14.940Z The startup type of the client-side Domain Name Service cache (aka DNS Client) service should be correct. CM-6 CCE-3236-7 2009-07-30T19:31:54.483Z 2012-01-05T04:36:15.017Z The Error Reporting Service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3140-1 2009-07-30T19:31:54.517Z 2012-01-05T04:36:15.067Z The Event Log service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2301-0 2009-07-30T19:31:54.563Z 2012-01-05T04:36:15.113Z The Help and Support service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3003-1 2009-07-30T19:31:54.593Z 2012-01-05T04:36:15.173Z The Human Interface Device Access service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2716-9 2009-07-30T19:31:54.627Z 2012-01-05T04:36:15.220Z The IMAPI CD-Burning COM Service should be enabled or disabled as appropriate. CM-6 CM-7 MP-2 CCE-3223-5 2009-07-30T19:31:54.670Z 2012-01-05T04:36:15.283Z The Infrared Monitor service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3245-8 2009-07-30T19:31:54.703Z 2012-01-05T04:36:15.330Z The IPSEC Services service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3294-6 2009-07-30T19:31:54.733Z 2012-01-05T04:36:15.393Z The Logical Disk Manager service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3073-4 2009-07-30T19:31:54.780Z 2012-01-05T04:36:15.440Z The Logical Disk Manager Administrative Service should be enabled or disabled as appropriate. CM-7 CCE-3065-0 2009-07-30T19:31:54.813Z 2012-01-05T04:36:15.503Z The MS Software Shadow Copy Provider service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2840-7 2009-07-30T19:31:54.860Z 2012-01-05T04:36:15.597Z The Network Connections service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3131-0 2009-07-30T19:31:54.890Z 2012-01-05T04:36:15.690Z The Network Dynamic Data Exchange (DDE) service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3122-9 2009-07-30T19:31:54.920Z 2012-01-05T04:36:15.767Z The Network DDE DDE Share Database Manager (DSDM) service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3267-2 2009-07-30T19:31:54.967Z 2012-01-05T04:36:15.830Z The Network Location Awareness (NLA) service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3056-9 2009-07-30T19:31:55.000Z 2012-01-05T04:36:15.877Z The startup type of the NTLM Security Support Provider service should be correct. CM-6 CCE-3144-3 2009-07-30T19:31:55.030Z 2012-01-05T04:36:15.923Z The Performance Logs and Alerts service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3289-6 2009-07-30T19:31:55.077Z 2012-01-05T04:36:16.003Z The Portable Media Serial Number Service service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3205-2 2009-07-30T19:31:55.110Z 2012-01-05T04:36:16.067Z The Protected Storage service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3206-0 2009-07-30T19:31:55.140Z 2012-01-05T04:36:16.113Z The QoS RSVP service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3104-7 2009-07-30T19:31:55.187Z 2012-01-05T04:36:16.190Z The Remote Access Connection Manager service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3126-0 2009-07-30T19:31:55.217Z 2012-01-05T04:36:16.253Z The Remote Procedure Call (RPC) service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3148-4 2009-07-30T19:31:55.267Z 2012-01-05T04:36:16.300Z The Remote Procedure Call (RPC) Locator service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2567-6 2009-07-30T19:31:55.297Z 2012-01-05T04:36:16.363Z The Removable Storage service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2823-3 2009-07-30T19:31:55.343Z 2012-01-05T04:36:16.440Z The Secondary Logon service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3074-2 2009-07-30T19:31:55.377Z 2012-01-05T04:36:16.503Z The Security Accounts Manager service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3219-3 2009-07-30T19:31:55.420Z 2012-01-05T04:36:16.550Z The Server service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3241-7 2009-07-30T19:31:55.453Z 2012-01-05T04:36:16.627Z The Smart Card service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2831-6 2009-07-30T19:31:55.500Z 2012-01-05T04:36:16.673Z The Smart Card Helper service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2835-7 2009-07-30T19:31:55.547Z 2012-01-05T04:36:16.737Z The System Event Notification service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2321-8 2009-07-30T19:31:55.577Z 2012-01-05T04:36:16.800Z The System Restore Service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3274-8 2009-07-30T19:31:55.627Z 2012-01-05T04:36:16.847Z The TCP/IP NetBIOS Helper service should be enabled or disabled as appropriate. AC-4 SC-5 SC-7 CCE-2811-8 2009-07-30T19:31:55.657Z 2012-01-05T04:36:16.907Z The Telephony service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3195-5 2009-07-30T19:31:55.703Z 2012-01-05T04:36:16.957Z The Themes service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3221-9 2009-07-30T19:31:55.733Z 2012-01-05T04:36:17.017Z The Uninterruptable Power Supply service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2988-4 2009-07-30T19:31:55.797Z 2012-01-05T04:36:17.067Z The Upload Manager service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3146-8 2009-07-30T19:31:55.827Z 2012-01-05T04:36:17.127Z The Volume Shadow Copy service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3291-2 2009-07-30T19:31:55.877Z 2012-01-05T04:36:17.207Z The WebClient service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3256-5 2009-07-30T19:31:55.907Z 2012-01-05T04:36:17.267Z The Windows Audio service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2639-3 2009-07-30T19:31:55.967Z 2012-01-05T04:36:17.317Z The Windows Image Acquisition (WIA) service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3159-1 2009-07-30T19:31:56.000Z 2012-01-05T04:36:17.377Z The Windows Installer service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3163-3 2009-07-30T19:31:56.047Z 2012-01-05T04:36:17.423Z The Windows Management Instrumentation service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3203-7 2009-07-30T19:31:56.077Z 2012-01-05T04:36:17.487Z The Windows Management Instrumentation Driver Extensions service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2599-9 2009-07-30T19:31:56.110Z 2012-01-05T04:36:17.533Z The Windows Time service should be enabled or disabled as appropriate. AU-8 CM-6 CM-7 CCE-2494-3 2009-07-30T19:31:56.157Z 2012-01-05T04:36:17.597Z The Wireless Zero Configuration service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-3265-6 2009-07-30T19:31:56.187Z 2012-01-05T04:36:17.673Z The WMI Performance Adapter service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2397-8 2009-07-30T19:31:56.217Z 2009-07-30T19:31:56.217Z The Workstation service should be enabled or disabled as appropriate. CM-6 CM-7 CCE-2683-1 2009-07-30T19:31:56.267Z 2009-07-30T19:31:56.267Z The automatic generation of 8.3 file names for NTFS should be enabled or disabled as appropriate. AC-3 CM-6 CM-7 SC-5 CCE-2956-1 2009-07-30T19:31:56.297Z 2012-01-05T04:36:17.817Z RPC Endpiont Mapper Client Authentication (SP2 only) IA-2 CCE-3273-0 2009-07-30T19:31:56.343Z 2009-07-30T19:31:56.343Z Restrictions for Unauthenticated RPC clients (SP2 only) IA-2 CCE-3154-2 2009-07-30T19:31:56.377Z 2009-07-30T19:31:56.377Z Domain Profile: Protect all network connections (SP2 only) AC-1 SC-7 CCE-3194-8 2009-07-30T19:31:56.420Z 2009-07-30T19:31:56.420Z Domain Profile: Do not allow exceptions (SP2 only) SC-7 CCE-2828-2 2009-07-30T19:31:56.453Z 2009-07-30T19:31:56.453Z Domain Profile: Allow local program exceptions SC-7 CCE-2476-0 2009-07-30T19:31:56.500Z 2012-01-05T04:36:18.067Z Domain Profile: Allow remote administration AC-1 SC-7 CCE-3247-4 2009-07-30T19:31:56.530Z 2009-07-30T19:31:56.530Z Domain Profile: Allow file and printer sharing exception (SP2 only) SC-7 CCE-3141-9 2009-07-30T19:31:56.563Z 2009-07-30T19:31:56.563Z Domain Profile: Allow ICMP exceptions (SP2 only) SC-7 CCE-3304-3 2009-07-30T19:31:56.610Z 2012-01-05T04:36:18.220Z Domain Profile: Allow Remote Desktop exception (SP2 only) AC-1 SC-7 CCE-3176-5 2009-07-30T19:31:56.640Z 2009-07-30T19:31:56.640Z Domain Profile: Allow UPnP framework exception (SP2 only) SC-7 CCE-3198-9 2009-07-30T19:31:56.687Z 2009-07-30T19:31:56.687Z The "Windows Firewall: Prohibit notifications" setting should be configured correctly for the Domain Profile. AC-4 SC-7 CCE-2965-2 2009-07-30T19:31:56.717Z 2012-01-05T04:36:18.393Z The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-2923-1 2009-07-30T19:31:56.767Z 2012-01-05T04:36:18.533Z The log file path and name for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-2958-7 2009-07-30T19:31:56.813Z 2012-01-05T04:36:18.613Z The log file size limit for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-3090-8 2009-07-30T19:31:56.843Z 2012-01-05T04:36:18.690Z The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-2972-8 2009-07-30T19:31:56.890Z 2009-07-30T19:31:56.890Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Domain Profile. SC-5 SC-7 CCE-2866-2 2009-07-30T19:31:56.937Z 2009-07-30T19:31:56.937Z Domain Profile: Define port exceptions (SP2 only) SC-7 CCE-3258-1 2009-07-30T19:31:56.983Z 2009-07-30T19:31:56.983Z Domain Profile: Allow local port exceptions (SP2 only) SC-7 CCE-3284-7 2009-07-30T19:31:57.017Z 2009-07-30T19:31:57.017Z Standard Profile: Protect all network connections (SP2 only) AC-1 SC-7 CCE-3179-9 2009-07-30T19:31:57.063Z 2009-07-30T19:31:57.063Z Standard Profile: Do not allow exceptions (SP2 only) AC-1 SC-7 CCE-3183-1 2009-07-30T19:31:57.093Z 2009-07-30T19:31:57.093Z Standard Profile: Allow local program exceptions (SP2 only) CM-7 CCE-2954-6 2009-07-30T19:31:57.140Z 2009-07-30T19:31:57.140Z Standard Profile: Allow remote administration exception (SP2 only) AC-1 SC-7 CCE-3262-3 2009-07-30T19:31:57.170Z 2009-07-30T19:31:57.170Z Standard Profile: Allow file and printer sharing exception (SP2 only) CM-7 CCE-3081-7 2009-07-30T19:31:57.217Z 2009-07-30T19:31:57.217Z Standard Profile: Allow ICMP exceptions (SP2 only) CM-7 CCE-3213-6 2009-07-30T19:31:57.250Z 2009-07-30T19:31:57.250Z Standard Profile: Allow Remote Desktop exception (SP2 only) AC-1 SC-7 CCE-3235-9 2009-07-30T19:31:57.280Z 2009-07-30T19:31:57.280Z Standard Profile: Allow UPnP framework exception (SP2 only) CM-7 CCE-3134-4 2009-07-30T19:31:57.327Z 2009-07-30T19:31:57.327Z The "Windows Firewall: Prohibit notifications" setting should be configured correctly for the Standard Profile. AC-4 SC-7 CCE-3280-5 2009-07-30T19:31:57.360Z 2012-01-05T04:36:19.267Z The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Standard Profile. AU-2 SC-7 CCE-3174-0 2009-07-30T19:31:57.407Z 2009-07-30T19:31:57.407Z The log file path and name for the Windows Firewall should be configured correctly for the Standard Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-3055-1 2009-07-30T19:31:57.437Z 2009-07-30T19:31:57.437Z The log file size limit for the Windows Firewall should be configured correctly for the Standard Profile. AU-2 AU-3 AU-4 AU-8 SC-7 CCE-2707-8 2009-07-30T19:31:57.483Z 2009-07-30T19:31:57.483Z The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Standard Profile. AU-2 SC-7 CCE-3103-9 2009-07-30T19:31:57.517Z 2009-07-30T19:31:57.517Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Standard Profile. SC-5 SC-7 CCE-3231-8 2009-07-30T19:31:57.547Z 2009-07-30T19:31:57.547Z Standard Profile: Define port exceptions (SP2 only) AC-1 SC-7 CCE-2989-2 2009-07-30T19:31:57.593Z 2009-07-30T19:31:57.593Z Standard Profile: Allow local port exceptions (SP2 only) CM-7 CCE-3037-9 2009-07-30T19:31:57.627Z 2009-07-30T19:31:57.627Z The startup type of the Internet Connection Firewall service should be correct. CM-6 CCE-2856-3 2009-07-30T19:31:57.670Z 2009-07-30T19:31:57.670Z Restricted Groups have been set on the system AC-3 CM-6 CCE-4952-8 2009-07-30T19:31:57.703Z 2012-01-05T04:36:19.627Z The required permissions for the file %SystemRoot%\System32\mshta.exe should be assigned. AC-3 CM-6 CCE-5194-6 2009-07-30T19:31:57.733Z 2009-07-30T19:31:57.733Z The startup type of Microsoft Peer-to-Peer Networking Services should be configured correctly. CM-6 CM-7 CCE-5022-9 2009-07-30T19:31:57.780Z 2009-07-30T19:31:57.780Z The "Prohibit use of Internet Connection Firewall on your DNS domain network" setting should be configured correctly. CM-7 CCE-5136-7 2009-07-30T19:31:57.813Z 2009-07-30T19:31:57.813Z The "Display Error Notification" setting should be configured correctly. CM-6 CCE-4665-6 2009-07-30T19:31:57.860Z 2009-07-30T19:31:57.860Z The "Internet Explorer Maintenance Policy Processing - Allow processing across a slow network connection" setting should be configured correctly. CM-6 CCE-5053-4 2009-07-30T19:31:57.890Z 2012-03-17T03:34:28.497Z Group Policy - Registry policy processing CM-6 CCE-5054-2 2009-07-30T19:31:57.920Z 2009-07-30T19:31:57.920Z The "Turn Off Automatic Root Certificates Update" setting should be configured correctly. CM-6 CCE-5200-1 2009-07-30T19:31:57.967Z 2012-03-17T03:34:28.607Z Turn off downloading of print drivers over HTTP CM-6 CCE-4953-6 2009-07-30T19:31:58.000Z 2009-07-30T19:31:58.000Z The "Turn Off Event Views 'Events.asp' Links" setting should be configured correctly. CM-6 CCE-4707-6 2009-07-30T19:31:58.047Z 2009-07-30T19:31:58.047Z The "Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com" setting should be configured correctly. CM-6 CCE-5099-7 2009-07-30T19:31:58.077Z 2012-03-17T03:34:28.780Z Turn off Internet download for Web publishing and online ordering wizards CM-6 CCE-5121-9 2009-07-30T19:31:58.110Z 2009-07-30T19:31:58.110Z The "Turn Off Internet File Association Service" setting should be configured correctly. CM-6 CCE-4513-8 2009-07-30T19:31:58.157Z 2012-03-17T03:34:28.887Z Turn off printing over HTTP CM-6 CCE-4641-7 2009-07-30T19:31:58.203Z 2009-07-30T19:31:58.203Z The "Turn Off Registration if URL Connection is Referring to Microsoft.com" setting should be configured correctly. CM-6 CCE-5055-9 2009-07-30T19:31:58.233Z 2012-03-17T03:34:29.013Z Turn off Search Companion content file updates CM-5 CM-6 CCE-5072-4 2009-07-30T19:31:58.280Z 2009-07-30T19:31:58.280Z The "Turn Off the 'Order Prints' Picture Task" setting should be configured correctly. CM-6 CCE-4887-6 2009-07-30T19:31:58.313Z 2009-07-30T19:31:58.313Z The "Turn off the 'Publish to Web' task for files and folders" setting should be configured correctly. CM-6 CCE-4224-2 2009-07-30T19:31:58.360Z 2012-03-17T03:34:29.170Z Turn off the Windows Messenger Customer Experience Improvement Program CM-6 CCE-4242-4 2009-07-30T19:31:58.390Z 2009-07-30T19:31:58.390Z The "Turn Off Windows Movies Maker Automatic Codec Downloads" setting should be configured correctly. CM-6 CCE-4732-4 2009-07-30T19:31:58.437Z 2009-07-30T19:31:58.437Z The "Turn Off Windows Movie Maker Online Web Links" setting should be configured correctly. CM-6 CCE-4997-3 2009-07-30T19:31:58.467Z 2009-07-30T19:31:58.467Z The "Turn Off Windows Movie Maker Saving to Online Video Hosting Provider" setting should be configured correctly. CM-6 CCE-5014-6 2009-07-30T19:31:58.517Z 2012-03-17T03:34:29.450Z Turn off Windows Update device driver searching CM-2 CM-6 CCE-5032-8 2009-07-30T19:31:58.547Z 2012-01-05T04:36:20.657Z Logon - Do not process the run once list AC-2 CM-6 CCE-5160-7 2009-07-30T19:31:58.593Z 2009-07-30T19:31:58.593Z The "Don't Display the Getting Started Welcome Screen at Logon" setting should be configured correctly. CM-6 CCE-4262-2 2009-07-30T19:31:58.627Z 2009-07-30T19:31:58.627Z The "Prevent IIS Installation" setting should be configured correctly. AC-6 CCE-4581-5 2009-07-30T19:31:58.670Z 2009-07-30T19:31:58.670Z The "Turn off downloading of enclosures" setting should be configured correctly. CM-6 CCE-4849-6 2009-07-30T19:31:58.703Z 2012-01-05T04:36:20.830Z The "Do not allow passwords to be saved" setting should be configured correctly for Terminal Services. IA-2 IA-5 CCE-4270-5 2009-07-30T19:31:58.750Z 2009-07-30T19:31:58.750Z The "Turn off shell protocol protected mode" setting should be configured correctly. SC-5 SI-3 CCE-5025-2 2009-07-30T19:31:58.780Z 2009-07-30T19:31:58.780Z The "Prohibit non-administrators from applying vendor signed updates" setting should be configured correctly. AC-6 CM-5 CCE-4791-0 2009-07-30T19:31:58.827Z 2009-07-30T19:31:58.827Z The "Do Not Show First Use Dialog Boxes" setting for Windows Media Player should be configured correctly. CM-6 CCE-4482-6 2009-07-30T19:31:58.860Z 2009-07-30T19:31:58.860Z The "Prevent Desktop Shortcut Creation" setting for Windows Media Player should be configured correctly. CM-6 CM-7 CCE-4500-5 2009-07-30T19:31:58.907Z 2012-01-05T04:36:21.050Z The "Password protect the screen saver" setting should be configured correctly for the current user. AC-1 CM-6 IA-5 CCE-4390-1 2009-07-30T19:31:58.937Z 2012-01-05T04:36:21.127Z Prompt for password on resume from hibernate/suspend should be set correctly. AC-1 CCE-4412-3 2009-07-30T19:31:58.983Z 2012-01-05T04:36:21.190Z Do not preserve zone information in file attachments should be set correcly. CM-6 CCE-5042-7 2009-07-30T19:31:59.047Z 2012-01-05T04:36:21.253Z Hide mechanisms to remove zone information should be set correcly. CM-6 CCE-5059-1 2009-07-30T19:31:59.077Z 2012-01-05T04:36:21.317Z Notify antivirus programs when opening attachments should be set correcly. SI-3 CCE-4838-9 2009-07-30T19:31:59.127Z 2009-07-30T19:31:59.127Z The time in seconds before the screen saver grace period expires (ScreenSaverGracePeriod) setting should be configured correctly. AC-1 AC-3 CM-6 CM-7 CCE-5407-2 2009-07-30T19:31:59.157Z 2012-05-14T03:47:24.197Z DEPRECATED. [Was: The POSIX subsystem should be enabled or disabled as appropriate. Per Microsoft KB308259, the POSIX subsystem is not supported in Windows XP.] CM-7 CCE-5441-1 2009-07-30T19:31:59.203Z 2012-05-14T03:47:24.260Z DEPRECATED. [Was: The OS/2 subsystem should be enabled or disabled as appropriate. Per Microsoft KB308259, the POSIX subsystem is not supported in Windows XP.] CM-6 CM-7 CCE-7528-3 2009-07-30T19:31:59.233Z 2012-01-05T04:36:21.503Z The "Configure Automatic Updates" setting should be configured correctly. CM-2 CM-6 CCE-8574-6 2009-07-30T19:31:59.267Z 2012-01-05T04:36:21.550Z The "Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box" setting should be configured correctly. CM-6 CCE-8261-0 2009-07-30T19:31:59.313Z 2012-01-05T04:36:21.597Z The "Do not allow drive redirection" setting should be configured correctly for Terminal Services. CM-6 CCE-8400-4 2009-07-30T19:31:59.343Z 2012-01-05T04:36:21.643Z The "Do not display 'Install Updates and Shut Down' option in the Shut Down Windows dialog box" setting should be configured correctly. CM-6 SI-2 CCE-8364-2 2009-07-30T19:31:59.390Z 2012-01-05T04:36:21.690Z Processing of the legacy run list on logon should be enabled or disabled as appropriate. SC-7 CCE-7598-6 2009-07-30T19:31:59.420Z 2009-07-30T19:31:59.420Z The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly. CM-6 SC-2 CCE-8375-8 2009-07-30T19:31:59.453Z 2009-07-30T19:31:59.453Z The "No auto-restart for scheduled Automatic Updates installations" policy should be set correctly. CM-2 CM-6 SI-2 CCE-8445-9 2009-07-30T19:31:59.500Z 2009-07-30T19:31:59.500Z Access to registry editing tools should be set correctly. AC-4 CCE-8374-1 2009-07-30T19:31:59.530Z 2009-07-30T19:31:59.530Z CD Burning features in Windows Explorer should be enabled or disabled as appropriate. AC-1 CM-7 MP-4 CCE-8326-1 2009-07-30T19:31:59.577Z 2009-07-30T19:31:59.577Z The "Remove Security tab" setting should be configured correctly. CM-6 CM-7 CCE-8406-1 2009-07-30T19:31:59.610Z 2009-07-30T19:31:59.610Z The "Reschedule Automatic Updates scheduled installations" setting should be enabled or disabled as appropriate. CM-6 SI-2 CCE-8440-0 2009-07-30T19:31:59.640Z 2009-07-30T19:31:59.640Z The "Windows Firewall: Apply local firewall rules" policy should be configured correctly for the Domain profile. AC-4 SC-7 CCE-8515-9 2009-07-30T19:31:59.687Z 2009-07-30T19:31:59.687Z The "Windows Firewall: Define program exceptions" policy should be configured correctly for the Domain Profile. AC-4 SC-7 CCE-8147-1 2009-07-30T19:31:59.717Z 2012-01-05T04:36:22.017Z The "Windows Firewall: Inbound connections" policy should be configured correctly for the Domain Profile. AC-4 SC-7 CCE-7583-8 2009-07-30T19:31:59.767Z 2009-07-30T19:31:59.767Z The "Windows Firewall: Outbound connections" policy should be configured correctly for the Domain profile. AC-4 SC-7 CCE-4280-4 2010-03-19T17:01:52.670Z 2010-10-04T15:45:28.437Z The "Allow Active X One Off Forms" setting should be configured correctly for Outlook 2007. CM-6 CCE-10597-3 2010-09-24T16:38:55.043Z 2012-01-05T04:30:46.237Z The "Java permissions" machine setting should be configured correctly for the Locked-Down Internet Zone. SC-1 CCE-10630-2 2010-09-24T16:38:55.057Z 2012-01-05T04:30:45.597Z The "Allow Scriptlets" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-10744-1 2010-09-24T16:38:55.057Z 2012-01-05T04:30:46.627Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-10360-6 2010-09-24T16:38:55.057Z 2012-01-05T04:30:40.487Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-10200-4 2010-09-24T16:38:55.057Z 2012-01-05T04:30:47.847Z The "Userdata persistence" machine setting should be configured correctly for the Internet Zone. SC-4 CCE-9750-1 2010-09-24T16:38:55.057Z 2012-01-05T04:30:44.157Z The "Allow status bar updates via script" machine setting should be configured correctly for the Internet Zone. SC-8 SI-3 CCE-10646-8 2010-09-24T16:38:55.057Z 2012-01-05T04:30:45.940Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Internet Zone. SC-2 CCE-9982-0 2010-09-24T16:38:55.057Z 2012-01-05T04:30:45.267Z The "Allow font downloads" machine setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-10037-0 2010-09-24T16:38:55.057Z 2012-01-05T04:30:39.220Z The "Security Zones: Do not allow users to change policies" machine setting should be configured correctly. AC-3 AC-6 CM-5 CCE-10554-4 2010-09-24T16:38:55.057Z 2012-01-05T04:30:42.317Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-10347-3 2010-09-24T16:38:55.073Z 2012-01-05T04:30:40.393Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-10033-9 2010-09-24T16:38:55.073Z 2012-01-05T04:30:39.157Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Internet Zone. SC-4 CCE-10651-8 2010-09-24T16:38:55.073Z 2012-01-05T04:30:43.300Z The "Logon options" machine setting should be configured correctly for the Restricted Sites Zone. CM-6 IA-2 CCE-10466-1 2010-09-24T16:38:55.073Z 2012-01-05T04:30:41.657Z The "Allow file downloads" machine setting should be configured correctly for the Restricted Sites Zone. CM-3 CCE-10389-5 2010-09-24T16:38:55.073Z 2012-01-05T04:30:40.817Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-10472-9 2010-09-24T16:38:55.073Z 2012-01-05T04:30:41.817Z The "Logon options" machine setting should be configured correctly for the Internet Zone. CM-6 IA-2 CCE-9973-9 2010-09-24T16:38:55.073Z 2012-01-05T04:30:47.503Z The "Turn off Managing SmartScreen Filter" machine setting should be configured correctly. CM-7 SI-3 CCE-10638-5 2010-09-24T16:38:55.073Z 2012-01-05T04:30:43.173Z The "Disable changing Automatic Configuration settings" machine setting should be configured correctly. CM-5 CCE-10470-3 2010-09-24T16:38:55.073Z 2012-01-05T04:30:41.753Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-9669-3 2010-09-24T16:38:55.073Z 2012-01-05T04:30:44.017Z The "Software channel permissions" machine setting should be configured correctly for the Restricted Sites Zone. CM-5 CCE-10561-9 2010-09-24T16:38:55.073Z 2012-01-05T04:30:42.377Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Internet Zone. SC-1 CCE-10642-7 2010-09-24T16:38:55.073Z 2012-01-05T04:30:43.237Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Restricted Sites Zone. AC-4 CCE-10403-4 2010-09-24T16:38:55.073Z 2012-01-05T04:30:41.127Z The "Allow font downloads" machine setting should be configured correctly for the Internet Zone. CM-3 CCE-10672-4 2010-09-24T16:38:55.090Z 2012-01-05T04:30:46.673Z The "Loose XAML files" machine setting should be configured correctly for the Internet Zone. SC-1 CCE-10265-7 2010-09-24T16:38:55.090Z 2012-01-05T04:30:40.190Z The "MK Protocol Security Restriction: Internet Explorer Processes" machine setting should be configured correctly. CM-6 CCE-10654-2 2010-09-24T16:38:55.090Z 2012-01-05T04:30:46.423Z The "Java permissions" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. SC-1 CCE-10434-9 2010-09-24T16:38:55.090Z 2012-01-05T04:30:47.283Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Internet Zone. CM-3 CCE-9814-5 2010-09-24T16:38:55.090Z 2012-01-05T04:30:44.567Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-10590-8 2010-09-24T16:38:55.090Z 2012-01-05T04:30:45.707Z The "Configure Delete Browsing History on exit" current user setting should be configured correctly. AU-9 CCE-10486-9 2010-09-24T16:38:55.090Z 2012-01-05T04:30:41.940Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Internet Zone. SI-3 CCE-10095-8 2010-09-24T16:38:55.090Z 2012-01-05T04:30:45.830Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Locked-Down Internet Zone. SC-1 SI-3 CCE-10138-6 2010-09-24T16:38:55.090Z 2012-01-05T04:30:39.767Z The "Consistent Mime Handling: Internet Explorer Processes" machine setting should be configured correctly. CM-6 CCE-10650-0 2010-09-24T16:38:55.090Z 2012-01-05T04:30:46.567Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-10603-9 2010-09-24T16:38:55.090Z 2012-01-05T04:30:46.080Z The "Include updated Web site lists from Microsoft" machine setting should be configured correctly. AC-6 CCE-9760-0 2010-09-24T16:38:55.090Z 2012-01-05T04:30:47.907Z The "Userdata persistence" machine setting should be configured correctly for the Restricted Sites Zone. CM-6 CM-7 CCE-10566-8 2010-09-24T16:38:55.090Z 2012-01-05T04:30:46.127Z The "Java permissions" machine setting should be configured correctly for the Intranet Zone. SC-1 CCE-10604-7 2010-09-24T16:38:55.107Z 2012-01-05T04:30:42.673Z The "Scripted Window Security Restrictions: Internet Explorer Processes" machine setting should be configured correctly. CM-6 CCE-10277-2 2010-09-24T16:38:55.107Z 2012-01-05T04:30:40.253Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-10641-9 2010-09-24T16:38:55.107Z 2012-01-05T04:30:46.940Z The "Prevent performance of First Run Customize settings" machine setting should be configured correctly. CM-3 SI-3 CCE-10074-3 2010-09-24T16:38:55.107Z 2012-01-05T04:30:39.440Z The "Check for server certificate revocation" machine setting should be configured correctly. IA-5 SC-1 CCE-10547-8 2010-09-24T16:38:55.107Z 2012-01-05T04:30:42.190Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-9870-7 2010-09-24T16:38:55.107Z 2012-01-05T04:30:46.767Z The "Make proxy settings per-machine (rather than per-user)" machine setting should be configured correctly. AC-4 CCE-10609-6 2010-09-24T16:38:55.107Z 2012-01-05T04:30:42.877Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Restricted Sites Zone. CM-7 SI-3 CCE-10052-9 2010-09-24T16:38:55.107Z 2012-01-05T04:30:39.317Z The "Allow software to run or install even if the signature is invalid" machine setting should be configured correctly. CM-5 SC-1 SI-7 CCE-10405-9 2010-09-24T16:38:55.107Z 2012-01-05T04:30:41.190Z The "Restrict ActiveX Install: Internet Explorer Processes" machine setting should be configured correctly. CM-6 CCE-10387-9 2010-09-24T16:38:55.107Z 2012-01-05T04:30:40.673Z The "Disable "Configuring History"" machine setting should be configured correctly. CM-6 CCE-9959-8 2010-09-24T16:38:55.107Z 2012-01-05T04:30:45.207Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-10676-5 2010-09-24T16:38:55.107Z 2012-01-05T04:30:47.673Z The "Turn on Protected Mode" machine setting should be configured correctly for the Internet Zone. CM-6 CM-7 CCE-10539-5 2010-09-24T16:38:55.107Z 2012-01-05T04:30:42.127Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-10393-7 2010-09-24T16:38:55.120Z 2012-01-05T04:30:40.877Z The "Allow active scripting" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-10275-6 2010-09-24T16:38:55.120Z 2012-01-05T04:30:46.377Z The "Java permissions" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. SC-1 CCE-10342-4 2010-09-24T16:38:55.120Z 2012-01-05T04:30:46.283Z The "Java permissions" machine setting should be configured correctly for the Locked-Down Intranet Zone. SC-1 CCE-9882-2 2010-09-24T16:38:55.120Z 2012-01-05T04:30:44.940Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-10110-5 2010-09-24T16:38:55.120Z 2012-01-05T04:30:46.847Z The "Prevent Deleting Web sites that the User has Visited" machine setting should be configured correctly. AU-9 CM-6 CCE-10319-2 2010-09-24T16:38:55.120Z 2012-01-05T04:30:46.190Z The "Java permissions" machine setting should be configured correctly for the Local Machine Zone. SC-1 CCE-10055-2 2010-09-24T16:38:55.120Z 2012-01-05T04:30:45.643Z The "Check for signatures on downloaded programs" machine setting should be configured correctly. IA-5 SC-1 CCE-9660-2 2010-09-24T16:38:55.120Z 2012-01-05T04:30:43.893Z The "Intranet Sites: Include all network paths (UNCs)" machine setting should be configured correctly. AC-4 CCE-10293-9 2010-09-24T16:38:55.120Z 2012-01-05T04:30:45.330Z The "Allow active content from CDs to run on user machines" machine setting should be configured correctly. CM-5 MP-2 SI-7 CCE-10515-5 2010-09-24T16:38:55.120Z 2012-01-05T04:30:47.003Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Internet Zone. CM-7 SI-3 CCE-10535-3 2010-09-24T16:38:55.120Z 2012-01-05T04:30:46.330Z The "Java permissions" machine setting should be configured correctly for the Locked-Down Local Machine Zone. SC-1 CCE-10380-4 2010-09-24T16:38:55.120Z 2012-01-05T04:30:40.613Z The "Access data sources across domains" machine setting should be configured correctly for the Internet Zone. AC-4 CCE-10581-7 2010-09-24T16:38:55.120Z 2012-01-05T04:30:42.550Z The "Automatically check for Internet Explorer updates" machine setting should be configured correctly. SI-2 CCE-10725-0 2010-09-24T16:38:55.120Z 2012-01-05T04:30:45.470Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Restricted Sites Zone. CM-6 CCE-9885-5 2010-09-24T16:38:55.137Z 2012-01-05T04:30:47.407Z The "Turn off InPrivate Browsing" machine setting should be configured correctly. AU-9 SI-4 CCE-10475-2 2010-09-24T16:38:55.137Z 2012-01-05T04:30:41.877Z The "Allow installation of desktop items" machine setting should be configured correctly for the Restricted Sites Zone. CM-3 CCE-10635-1 2010-09-24T16:38:55.137Z 2012-01-05T04:30:43.113Z The "Mime Sniffing Safety Feature: Internet Explorer Processes" machine setting should be configured correctly. CM-6 CCE-10094-1 2010-09-24T16:38:55.137Z 2012-01-05T04:30:39.567Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-9865-7 2010-09-24T16:38:55.137Z 2012-01-05T04:30:44.767Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Internet Zone. AC-4 CCE-9905-1 2010-09-24T16:38:55.137Z 2012-01-05T04:30:45.877Z The "Allow third-party browser extensions" machine setting should be configured correctly. CM-5 SI-3 CCE-9945-7 2010-09-24T16:38:55.137Z 2012-01-05T04:30:47.753Z The "Turn on Protected Mode" machine setting should be configured correctly for the Restricted Sites Zone. CM-6 CM-7 CCE-10685-6 2010-09-24T16:38:55.137Z 2012-01-05T04:30:45.533Z The "Allow Scriptlets" machine setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-10002-4 2010-09-24T16:38:55.137Z 2012-01-05T04:30:39.033Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Internet Zone. SC-4 CCE-10607-0 2010-09-24T16:38:55.137Z 2012-01-05T04:30:42.817Z The "Turn off the Security Settings Check feature" machine setting should be configured correctly. CM-6 CCE-10664-1 2010-09-24T16:38:55.137Z 2012-01-05T04:30:43.363Z The "Allow META REFRESH" machine setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-10235-0 2010-09-24T16:38:55.137Z 2012-01-05T04:30:40.067Z The "Do not allow users to enable or disable add-ons" machine setting should be configured correctly. CM-5 CM-7 CCE-10433-1 2010-09-24T16:38:55.137Z 2012-01-05T04:30:41.393Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-10096-6 2010-09-24T16:38:55.137Z 2012-01-05T04:30:39.643Z The "Security Zones: Use only machine settings" machine setting should be configured correctly. CM-2 CM-6 CCE-9793-1 2010-09-24T16:38:55.153Z 2012-01-05T04:30:44.503Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Internet Zone. SC-1 CCE-9917-6 2010-09-24T16:38:55.153Z 2012-01-05T04:30:45.127Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-10083-4 2010-09-24T16:38:55.153Z 2012-01-05T04:30:39.503Z The "Scripting of Java applets" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-10620-3 2010-09-24T16:38:55.153Z 2012-01-05T04:30:42.970Z The "Java permissions" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-9781-6 2010-09-24T16:38:55.153Z 2012-01-05T04:30:46.003Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Restricted Sites Zone. CM-6 CCE-10574-2 2010-09-24T16:38:55.153Z 2012-01-05T04:30:42.440Z The "Protection From Zone Elevation: Internet Explorer Processes" machine setting should be configured correctly. CM-6 CCE-9667-7 2010-09-24T16:38:55.153Z 2012-01-05T04:30:43.957Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-9792-3 2010-09-24T16:38:55.153Z 2012-01-05T04:30:44.407Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-9776-6 2010-09-24T16:38:55.153Z 2012-01-05T04:30:47.207Z The "Turn off configuring the update check interval (in days)" machine setting should be configured correctly. CM-6 SI-2 CCE-10622-9 2010-09-24T16:38:55.153Z 2012-01-05T04:30:43.050Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Internet Zone. CM-7 SI-3 CCE-10420-8 2010-09-24T16:38:55.153Z 2012-01-05T04:30:47.330Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Restricted Sites Zone. CM-3 CCE-10625-2 2010-09-24T16:38:55.153Z 2012-01-05T04:30:47.067Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Internet Zone. CM-7 SI-3 CCE-9673-5 2010-09-24T16:38:55.153Z 2012-01-05T04:30:44.080Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-10578-3 2010-09-24T16:38:55.153Z 2012-01-05T04:30:42.487Z The "Restrict File Download: Internet Explorer Processes" machine setting should be configured correctly. CM-6 CCE-9779-0 2010-09-24T16:38:55.167Z 2012-01-05T04:30:45.393Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Internet Zone. CM-7 SI-3 CCE-10425-7 2010-09-24T16:38:55.167Z 2012-01-05T04:30:47.113Z The "Software channel permissions" machine setting should be configured correctly for the Internet Zone. CCE-10594-0 2010-09-24T16:38:55.167Z 2012-01-05T04:30:42.613Z The "Turn off Crash Detection" machine setting should be configured correctly. CM-4 CCE-9790-7 2010-09-24T16:38:55.167Z 2012-01-05T04:30:44.330Z The "Allow installation of desktop items" machine setting should be configured correctly for the Internet Zone. SI-3 CCE-10178-2 2010-09-24T16:38:55.167Z 2012-01-05T04:30:46.720Z The "Loose XAML files" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-10276-4 2010-09-24T16:38:55.167Z 2012-01-05T04:30:47.567Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-10525-4 2010-09-24T16:38:55.167Z 2012-01-05T04:30:42.067Z The "Access data sources across domains" machine setting should be configured correctly for the Restricted Sites Zone. AC-4 CCE-10394-5 2010-09-24T16:38:55.167Z 2012-01-05T04:30:40.957Z The "Security Zones: Do not allow users to add/delete sites" machine setting should be configured correctly. AC-3 AC-6 CM-5 CCE-10461-2 2010-09-24T16:38:55.167Z 2012-01-05T04:30:41.517Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-10105-5 2010-09-24T16:38:55.167Z 2012-01-05T04:30:47.627Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 SI-3 CCE-10696-3 2010-09-24T16:38:55.167Z 2012-01-05T04:30:46.487Z The "Java permissions" machine setting should be configured correctly for the Trusted Sites Zone. SC-1 CCE-10431-5 2010-09-24T16:38:55.167Z 2012-01-05T04:30:41.330Z The "Allow status bar updates via script" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-9821-0 2010-09-24T16:38:55.167Z 2012-01-05T04:30:44.627Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Internet Zone. SC-1 SI-3 CCE-10522-1 2010-09-24T16:38:55.167Z 2012-01-05T04:30:46.893Z The "Prevent participation in the Customer Experience Improvement Program" machine setting should be configured correctly. SC-7 CCE-9898-8 2010-09-24T16:38:55.183Z 2012-01-05T04:30:45.067Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Restricted Sites Zone. SI-3 CCE-10107-1 2010-09-24T16:38:55.183Z 2012-01-05T04:30:39.707Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Internet Zone. SI-3 CCE-10182-4 2010-09-24T16:38:55.183Z 2012-01-05T04:30:39.957Z The "Java permissions" machine setting should be configured correctly for the Internet Zone. SC-1 CCE-10595-7 2010-09-24T16:38:55.183Z 2012-01-05T04:30:47.157Z The "Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools" machine setting should be configured correctly. SI-3 CCE-9832-7 2010-09-24T16:38:55.183Z 2012-01-05T04:30:44.707Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Restricted Sites Zone. SC-1 CCE-9725-3 2010-09-24T16:44:34.510Z 2010-10-04T15:53:11.577Z Auditing of 'Account Logon: Credential Validation' events on success should be enabled or disabled as appropriate. AU-2 CCE-9526-5 2010-09-24T16:44:34.510Z 2012-01-05T04:37:41.237Z Auditing of 'DS Access: Detailed Directory Service Replication' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9545-5 2010-09-24T16:44:34.510Z 2010-10-04T15:53:07.390Z Auditing of 'Object Access: Other Object Access Events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-8822-9 2010-09-24T16:44:34.527Z 2010-10-04T15:52:39.907Z Auditing of 'Account Management: Application Group Management' events on success should be enabled or disabled as appropriate. AU-2 CCE-9058-9 2010-09-24T16:44:34.527Z 2010-10-04T15:52:45.437Z Auditing of 'Logon-Logoff: Logoff' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10438-0 2010-09-24T16:44:34.527Z 2010-10-04T15:53:19.140Z The startup type of Microsoft Peer-to-Peer Networking Services should be configured correctly. CM-3 CM-7 CCE-10103-0 2010-09-24T16:44:34.527Z 2012-01-05T04:37:19.067Z The 'Always prompt for password upon connection' setting should be configured correctly. AC-1 CM-6 CM-7 CCE-9222-1 2010-09-24T16:44:34.527Z 2012-01-05T04:37:33.190Z The 'Shutdown: Clear virtual memory pagefile' setting should be configured correctly. CM-7 CCE-9223-9 2010-09-24T16:44:34.527Z 2012-01-05T04:37:33.267Z The 'Manage auditing and security log' user right should be assigned to the appropriate accounts. AU-2 CCE-9608-1 2010-09-24T16:44:34.527Z 2010-10-04T15:53:08.610Z Auditing of 'Account Management: Computer Account Management' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9506-7 2010-09-24T16:44:34.527Z 2012-01-05T04:37:40.720Z User-intiated solicitations for remote assistance (aka the 'Solicited Remote Assistance' setting) should be enabled or disabled as appropriate. CM-6 CCE-9418-5 2010-09-24T16:44:34.527Z 2012-01-05T04:37:38.847Z The 'Accounts: Limit local account use of blank passwords to console logon only' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9850-9 2010-09-24T16:44:34.527Z 2010-10-04T15:53:15.157Z Auditing of 'System: Security State Change' events on success should be enabled or disabled as appropriate. AU-2 CCE-9395-5 2010-09-24T16:44:34.527Z 2012-01-05T04:37:37.957Z The 'User Account Control: Switch to the secure desktop when prompting for elevation' setting should be configured correctly. AC-3 AC-6 CCE-9389-8 2010-09-24T16:44:34.527Z 2012-01-05T04:37:37.877Z The 'Back up files and directories' user right should be assigned to the appropriate accounts. CP-9 CCE-9218-9 2010-09-24T16:44:34.527Z 2012-01-05T04:37:32.957Z The 'Network access: Named Pipes that can be accessed anonymously' setting should be configured correctly. AC-2 IA-2 CCE-9056-3 2010-09-24T16:44:34.527Z 2010-10-04T15:52:45.280Z Auditing of 'Account Management: Security Group Management' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9396-3 2010-09-24T16:44:34.527Z 2012-01-05T04:37:38.033Z The 'Restrictions for Unauthenticated RPC clients' setting should be configured correctly. CM-6 CCE-10049-5 2010-09-24T16:44:34.543Z 2010-10-04T15:52:30.313Z Auditing of 'Policy Change: Other Policy Change Events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9326-0 2010-09-24T16:44:34.543Z 2012-01-05T04:37:35.923Z The 'Remove computer from docking station' user right should be assigned to the appropriate accounts. PE-3 CCE-9148-8 2010-09-24T16:44:34.543Z 2010-10-04T15:52:49.983Z Auditing of 'Account Logon: Kerberos Service Ticket Operations' events on success should be enabled or disabled as appropriate. AU-2 CCE-10140-2 2010-09-24T16:44:34.543Z 2012-01-05T04:37:19.330Z The 'Turn off Search Companion content file updates' setting should be configured correctly. CM-5 CM-6 CCE-8460-8 2010-09-24T16:44:34.543Z 2012-01-05T04:37:21.347Z The 'Create symbolic links' user right should be assigned to the appropriate accounts. CM-6 CM-7 CCE-8912-8 2010-09-24T16:44:34.543Z 2012-01-05T04:37:26.597Z The "enforce password history" policy should meet minimum requirements. CM-6 IA-5 CCE-9866-5 2010-09-24T16:44:34.543Z 2010-10-04T15:53:25.063Z The "Prevent indexing uncached Exchange folders" setting should be configured correctly. CM-6 CCE-9803-8 2010-09-24T16:44:34.543Z 2010-10-04T15:53:14.280Z Auditing of 'Object Access: Kernel Object' events on success should be enabled or disabled as appropriate. AU-2 CCE-9266-8 2010-09-24T16:44:34.543Z 2012-01-05T04:37:34.690Z The 'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' setting should be configured correctly. SC-9 CCE-10011-5 2010-09-24T16:44:34.543Z 2010-10-04T15:53:19.813Z The "Teredo State" setting should be configured correctly. SC-8 CCE-9672-7 2010-09-24T16:44:34.543Z 2012-01-05T04:37:43.533Z The 'No auto-restart with logged on users for scheduled automatic updates installations' setting should be configured correctly. IA-2 CCE-9960-6 2010-09-24T16:44:34.543Z 2012-01-05T04:37:46.957Z Unsolicited offers of remote assistance (aka the 'Offer Remote Assistance' setting) should be automatically rejected or passed to the logged-on user for confirmation as appropriate. AC-1 CCE-8817-9 2010-09-24T16:44:34.543Z 2012-01-05T04:37:25.407Z The 'User Account Control: Virtualize file and registry write failures to per-user locations' setting should be configured correctly. AC-3 AC-6 CCE-10148-5 2010-09-24T16:44:34.543Z 2012-01-05T04:37:19.470Z The 'Screen Saver timeout' setting should be configured correctly. AC-1 CCE-9487-0 2010-09-24T16:44:34.557Z 2012-01-05T04:37:40.097Z The 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9336-9 2010-09-24T16:44:34.557Z 2012-01-05T04:37:36.237Z The 'Force shutdown from a remote system' user right should be assigned to the appropriate accounts. AC-1 CCE-10076-8 2010-09-24T16:44:34.557Z 2012-01-05T04:37:18.470Z The 'Notify antivirus programs when opening attachments' setting should be configured correctly. SI-3 CCE-10266-5 2010-09-24T16:44:34.557Z 2010-10-04T15:53:19.627Z The "6to4 State" setting should be configured correctly. SC-7 CCE-9868-1 2010-09-24T16:44:34.557Z 2010-10-04T15:53:25.250Z The "Configure Microsoft SpyNet Reporting" setting should be configured correctly. CM-6 CCE-9670-1 2010-09-24T16:44:34.557Z 2012-01-05T04:37:43.407Z The 'Require a Password When a Computer Wakes (Plugged In)' setting should be configured correctly. IA-5 CCE-9856-6 2010-09-24T16:44:34.557Z 2010-10-04T15:53:15.250Z Auditing of 'Object Access: SAM' events on success should be enabled or disabled as appropriate. AU-2 CCE-9858-2 2010-09-24T16:44:34.557Z 2010-10-04T15:53:24.483Z The "Set time limit for disconnected sessions" policy should be set correctly for Terminal Services. AC-1 CCE-10769-8 2010-09-24T16:44:34.557Z 2010-10-04T15:53:20.877Z The "Allow remote access to the PnP interface" setting should be configured correctly. AC-1 AC-3 CM-6 CCE-9919-2 2010-09-24T16:44:34.557Z 2010-10-04T15:53:21.267Z The "Specify Search Order for device driver source locations" setting should be configured correctly. CM-6 CCE-9301-3 2010-09-24T16:44:34.557Z 2012-01-05T04:37:35.157Z The 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' setting should be configured correctly. AC-3 AC-6 CCE-9818-6 2010-09-24T16:44:34.557Z 2010-10-04T15:53:14.860Z Auditing of 'Detailed Tracking: Process Termination' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9674-3 2010-09-24T16:44:34.557Z 2012-01-05T04:37:43.613Z The 'Turn off Internet download for Web publishing and online ordering wizards' setting should be configured correctly. CM-3 CCE-9764-2 2010-09-24T16:44:34.557Z 2012-01-05T04:37:45.207Z The Remote Desktop Services 'Set client connection encryption level' setting should be enabled or disabled as appropriate. SC-9 CCE-10606-2 2010-09-24T16:44:34.557Z 2010-10-04T15:53:22.717Z The "Troubleshooting: Allow user to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via Windows Online Troubleshooting Service - WOTS)" setting should be configured correctly. CM-6 SC-2 CCE-9901-0 2010-09-24T16:44:34.573Z 2010-10-04T15:53:20.967Z The "Do not send a Windows Error Report when a generic driver is installed on a device" setting should be configured correctly. SI-1 SI-2 CCE-10130-3 2010-09-24T16:44:34.573Z 2010-10-04T15:53:19.717Z The "ISATAP State" setting for IPv6 should be configured correctly. CM-6 CM-7 SC-9 SI-4 CCE-9864-0 2010-09-24T16:44:34.573Z 2010-10-04T15:53:24.673Z The "Do not use temporary folders per session" setting should be configured correctly. CM-6 CCE-10359-8 2010-09-24T16:44:34.573Z 2010-10-04T15:53:19.423Z The "Require domain users to elevate when setting a network's location" setting should be configured correctly. AC-2 CCE-9449-0 2010-09-24T16:44:34.573Z 2012-01-05T04:37:39.393Z The 'Interactive logon: Do not display last user name' setting should be configured correctly. AC-2 CCE-8789-0 2010-09-24T16:44:34.573Z 2012-01-05T04:37:24.877Z The 'Audit: Audit the use of Backup and Restore privilege' setting should be configured correctly. AU-2 CCE-9407-8 2010-09-24T16:44:34.573Z 2012-01-05T04:37:38.550Z The 'Act as part of the operating system' user right should be assigned to the appropriate accounts. AC-1 IA-2 CCE-8958-1 2010-09-24T16:44:34.573Z 2012-01-05T04:37:27.113Z The 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' setting should be configured correctly. AC-2 IA-2 CCE-9902-8 2010-09-24T16:44:34.573Z 2010-10-04T15:53:15.627Z Auditing of 'Policy Change: Filtering Platform Policy Change' events on success should be enabled or disabled as appropriate. AU-2 CCE-10730-0 2010-09-24T16:44:34.573Z 2010-10-04T15:53:24.767Z The "Turn off downloading of enclosures" setting should be configured correctly. CM-3 CCE-9179-3 2010-09-24T16:44:34.573Z 2010-10-04T15:52:51.453Z Auditing of 'System: Security State Change' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9213-0 2010-09-24T16:44:34.573Z 2010-10-04T15:52:53.703Z Auditing of 'Logon-Logoff: Logon' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9531-5 2010-09-24T16:44:34.573Z 2012-01-05T04:37:41.407Z The 'Network access: Allow anonymous SID/Name translation' setting should be configured correctly. AC-3 CM-6 CM-7 CCE-10759-9 2010-09-24T16:44:34.573Z 2010-10-04T15:53:30.047Z The "Do not allow Digital Locker to run" setting should be configured correctly. CM-6 CM-7 CCE-9591-9 2010-09-24T16:44:34.590Z 2010-10-04T15:53:08.140Z Auditing of 'Account Management: Application Group Management' events on failure should be enabled or disabled as appropriate. AU-2 CCE-8861-7 2010-09-24T16:44:34.590Z 2010-10-04T15:52:41.063Z Auditing of 'Object Access: Detailed File Share' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9502-6 2010-09-24T16:44:34.590Z 2010-10-04T15:53:05.267Z Auditing of 'Account Logon: Kerberos Authentication Service' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9800-4 2010-09-24T16:44:34.590Z 2010-10-04T15:53:14.017Z Auditing of 'Account Management: User Account Management' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9403-7 2010-09-24T16:44:34.590Z 2012-01-05T04:37:38.207Z Automatic Updates should be enabled or disabled as appropriate. CM-3 SI-2 CCE-10764-9 2010-09-24T16:44:34.590Z 2010-10-04T15:53:19.907Z The "IP HTTPS" state setting should be configured correctly. CM-6 CCE-9239-5 2010-09-24T16:44:34.590Z 2012-01-05T04:37:33.707Z The 'Deny log on locally' user right should be assigned to the appropriate accounts. IA-2 CCE-10543-7 2010-09-24T16:44:34.590Z 2012-01-05T04:37:51.017Z The startup type of the Homegroup Listener service should be correct. CA-3 CCE-9498-7 2010-09-24T16:44:34.590Z 2010-10-04T15:53:05.000Z Auditing of 'Account Management: Computer Account Management' events on success should be enabled or disabled as appropriate. AU-2 CCE-9768-3 2010-09-24T16:44:34.590Z 2012-01-05T04:37:45.393Z The 'Network security: LDAP client signing requirements' setting should be configured correctly. CM-7 CCE-8431-9 2010-09-24T16:44:34.590Z 2012-01-05T04:37:21.267Z The 'Create global objects' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-11252-4 2010-09-24T16:44:34.590Z 2010-10-04T15:53:30.233Z The "Turn off the communitication features" setting should be configured correctly. (sic) CM-6 CCE-9501-8 2010-09-24T16:44:34.590Z 2012-01-05T04:37:40.487Z The 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' setting should be configured correctly. AC-4 AU-9 SC-5 CCE-10602-1 2010-09-24T16:44:34.590Z 2010-10-04T15:53:26.467Z The "Disable Media Player for automatic updates" policy should be set correctly. CM-2 CM-6 SI-2 CCE-9150-4 2010-09-24T16:44:34.590Z 2012-01-05T04:37:31.127Z The 'Audit: Audit the access of global system objects' setting should be configured correctly. AU-2 CCE-9400-3 2010-09-24T16:44:34.590Z 2012-01-05T04:37:38.113Z The 'Reset account lockout counter after' setting should be configured correctly. AC-7 CCE-9770-9 2010-09-24T16:44:34.607Z 2012-01-05T04:37:45.457Z The 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' setting should be configured correctly. CM-7 IA-2 CCE-9596-8 2010-09-24T16:44:34.607Z 2010-10-04T15:53:08.327Z Auditing of 'Policy Change: Other Policy Change Events' events on success should be enabled or disabled as appropriate. AU-2 CCE-9159-5 2010-09-24T16:44:34.607Z 2010-10-04T15:52:50.627Z Auditing of 'Privilege Use: Non Sensitive Privilege Use' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9730-3 2010-09-24T16:44:34.607Z 2012-01-05T04:37:44.393Z The 'Password protect the screen saver' setting should be configured correctly. AC-1 CM-6 IA-5 CCE-9153-8 2010-09-24T16:44:34.607Z 2010-10-04T15:52:50.377Z Auditing of 'Policy Change: MPSSVC Rule-Level Policy Change' events on success should be enabled or disabled as appropriate. AU-2 CCE-10205-3 2010-09-24T16:44:34.607Z 2012-01-05T04:37:20.097Z The 'Reschedule Automatic Updates scheduled installations' setting should be enabled or disabled as appropriate. SI-2 CCE-9913-5 2010-09-24T16:44:34.607Z 2010-10-04T15:53:15.717Z Auditing of 'Policy Change: MPSSVC Rule-Level Policy Change' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9417-7 2010-09-24T16:44:34.607Z 2012-01-05T04:37:38.753Z The 'Modify firmware environment values' user right should be assigned to the appropriate accounts. CM-3 CCE-10156-8 2010-09-24T16:44:34.607Z 2012-01-05T04:37:19.643Z The 'Maximum Log Size (KB)' setting should be configured correctly for the system log. AU-2 CCE-9661-0 2010-09-24T16:44:34.607Z 2010-10-04T15:53:09.827Z Auditing of 'Logon-Logoff: IPsec Extended Mode' events on success should be enabled or disabled as appropriate. AU-2 CCE-10154-3 2010-09-24T16:44:34.607Z 2012-01-05T04:37:19.567Z The 'Do not process the run once list' setting should be configured correctly. AC-2 CM-6 CCE-8414-5 2010-09-24T16:44:34.607Z 2012-01-05T04:37:20.940Z The 'Bypass traverse checking' user right should be assigned to the appropriate accounts. AC-3 CCE-10344-0 2010-09-24T16:44:34.607Z 2010-10-04T15:53:22.500Z The "Turn on session logging" setting should be configured correctly. AU-2 CCE-9156-1 2010-09-24T16:44:34.620Z 2012-01-05T04:37:31.237Z The 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' setting should be configured correctly. AC-3 CM-6 CM-7 CCE-8513-4 2010-09-24T16:44:34.620Z 2012-01-05T04:37:22.017Z The 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9217-1 2010-09-24T16:44:34.620Z 2010-10-04T15:52:54.187Z Auditing of 'Object Access: File System' events on success should be enabled or disabled as appropriate. AU-2 CCE-9067-0 2010-09-24T16:44:34.620Z 2012-01-05T04:37:28.800Z The 'Interactive logon: Smart card removal behavior' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9419-3 2010-09-24T16:44:34.620Z 2012-01-05T04:37:38.923Z The 'Profile system performance' user right should be assigned to the appropriate accounts. CM-6 CCE-9388-0 2010-09-24T16:44:34.620Z 2012-01-05T04:37:37.800Z The 'Profile single process' user right should be assigned to the appropriate accounts. CM-6 CCE-9985-3 2010-09-24T16:44:34.620Z 2012-01-05T04:37:47.237Z The 'Allow users to connect remotely using Remote Desktop Services' setting should be configured correctly. AC-1 AC-3 CM-6 CCE-9191-8 2010-09-24T16:44:34.620Z 2012-01-05T04:37:32.050Z The 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' setting should be configured correctly. CM-6 CCE-10183-2 2010-09-24T16:44:34.620Z 2012-01-05T04:37:20.017Z The 'Prevent the computer from joining a homegroup' setting should be configured correctly. CM-6 CM-7 CCE-10219-4 2010-09-24T16:44:34.620Z 2010-10-04T15:53:22.797Z The "Enable/Disable PerfTrack" setting should be configured correctly. CM-6 CM-7 CCE-10527-0 2010-09-24T16:44:34.620Z 2010-10-04T15:53:23.640Z The default behavior for AutoRun should be properly configured. AC-1 CM-7 CCE-8560-5 2010-09-24T16:44:34.620Z 2012-01-05T04:37:22.673Z The 'MSS: (Hidden) Hide Computer From the Browse List (not recommended except for highly secure environments)' setting should be configured correctly. AC-4 SC-5 CCE-9254-4 2010-09-24T16:44:34.637Z 2012-01-05T04:37:34.267Z The 'Create permanent shared objects' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-9253-6 2010-09-24T16:44:34.637Z 2012-01-05T04:37:34.190Z The 'Access this computer from the network' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-9345-0 2010-09-24T16:44:34.637Z 2012-01-05T04:37:36.643Z The 'Allow log on locally' user right should be assigned to the appropriate accounts. AC-3 CCE-10699-7 2010-09-24T16:44:34.637Z 2012-01-05T04:37:51.127Z The startup type of the Media Center Extenders service should be correct. CM-6 CCE-9488-8 2010-09-24T16:44:34.637Z 2012-01-05T04:37:40.157Z Auditing of 'Object Access: Certification Services' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10661-7 2010-09-24T16:44:34.637Z 2012-01-05T04:37:50.893Z The startup type of the Bluetooth service should be correct. AC-1 AC-6 CM-7 CCE-10157-6 2010-09-24T16:44:34.637Z 2010-10-04T15:53:25.343Z The Windows Error Reporting "Disable Logging" setting should be configured correctly. AU-2 CCE-9121-5 2010-09-24T16:44:34.637Z 2012-01-05T04:37:30.050Z The 'Network access: Remotely accessible registry paths' setting should be configured correctly. AC-3 CM-6 CCE-9026-6 2010-09-24T16:44:34.637Z 2012-01-05T04:37:28.113Z The 'Devices: Prevent users from installing printer drivers' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9464-9 2010-09-24T16:44:34.637Z 2012-01-05T04:37:39.893Z The 'Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box' setting should be configured correctly. CM-6 SI-2 CCE-9021-7 2010-09-24T16:44:34.637Z 2012-01-05T04:37:27.970Z The 'User Account Control: Only elevate executables that are signed and validated' setting should be configured correctly. AC-3 AC-6 CCE-9671-9 2010-09-24T16:44:34.637Z 2010-10-04T15:53:10.203Z Auditing of 'Logon-Logoff: IPsec Quick Mode' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10295-4 2010-09-24T16:44:34.637Z 2010-10-04T15:53:30.717Z The "Turn off Help Ratings" setting should be configured correctly. CM-6 CCE-10882-9 2010-09-24T16:44:34.637Z 2010-10-04T15:53:30.327Z The "Turn off Windows Mail application" setting should be configured correctly. CM-6 CCE-9720-4 2010-09-24T16:44:34.653Z 2010-10-04T15:53:11.483Z Auditing of 'Object Access: Detailed File Share' events on success should be enabled or disabled as appropriate. AU-2 CCE-9888-9 2010-09-24T16:44:34.653Z 2010-10-04T15:53:26.093Z The "Prohibit non-administrators from applying vendor signed updates" setting should be configured correctly. SI-3 CCE-9364-1 2010-09-24T16:44:34.653Z 2010-10-04T15:53:00.797Z Auditing of 'Detailed Tracking: RPC Events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9631-3 2010-09-24T16:44:34.653Z 2010-10-04T15:53:09.187Z Auditing of 'Logon-Logoff: Other Logon/Logoff Events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9199-1 2010-09-24T16:44:34.653Z 2010-10-04T15:52:53.140Z The 'Accounts: Administrator account status' setting should be configured correctly. AC-3 AC-6 CCE-9616-4 2010-09-24T16:44:34.653Z 2012-01-05T04:37:42.643Z The 'User Account Control: Detect application installations and prompt for elevation' setting should be configured correctly. AC-3 AC-6 CCE-9251-0 2010-09-24T16:44:34.653Z 2012-01-05T04:37:34.127Z The 'Domain member: Digitally encrypt secure channel data (when possible)' setting should be configured correctly. SC-9 CCE-8806-2 2010-09-24T16:44:34.653Z 2012-01-05T04:37:25.080Z The 'Network security: LAN Manager authentication level' setting should be configured correctly. AC-3 CM-6 CCE-9023-3 2010-09-24T16:44:34.653Z 2012-01-05T04:37:28.033Z Auditing of 'Logon-Logoff: Account Lockout' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9811-1 2010-09-24T16:44:34.653Z 2010-10-04T15:53:14.577Z Auditing of 'Object Access: File System' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9857-4 2010-09-24T16:44:34.653Z 2010-10-04T15:53:23.827Z The "Override the More Gadgets Link" setting should be configured correctly. CM-3 CM-6 CCE-9317-9 2010-09-24T16:44:34.653Z 2012-01-05T04:37:35.613Z The 'Interactive logon: Do not require CTRL+ALT+DEL' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9765-9 2010-09-24T16:44:34.653Z 2010-10-04T15:53:13.250Z Auditing of 'DS Access: Directory Service Access' events on success should be enabled or disabled as appropriate. AU-2 CCE-9819-4 2010-09-24T16:44:34.653Z 2010-10-04T15:53:21.547Z The "Turn Off Event Views "Events.asp" Links" setting should be configured correctly. CM-3 CCE-9783-2 2010-09-24T16:44:34.667Z 2010-10-04T15:53:18.377Z The "Turn on Mapper I/O (LLTDIO) Driver" setting should be configured correctly. CM-6 CM-7 CCE-9755-0 2010-09-24T16:44:34.667Z 2010-10-04T15:53:12.877Z Auditing of 'DS Access: Directory Service Replication' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9195-9 2010-09-24T16:44:34.667Z 2012-01-05T04:37:32.253Z The 'Turn off downloading of print drivers over HTTP' setting should be configured correctly. CM-3 CCE-9863-2 2010-09-24T16:44:34.667Z 2010-10-04T15:53:15.343Z Auditing of 'System: Security System Extension' events on success should be enabled or disabled as appropriate. AU-2 CCE-10714-4 2010-09-24T16:44:34.667Z 2010-10-04T15:53:24.110Z The setup log maximum size should be configured correctly. AU-4 AU-5 CM-6 CCE-9196-7 2010-09-24T16:44:34.667Z 2012-01-05T04:37:32.330Z The 'Network access: Shares that can be accessed anonymously' setting should be configured correctly. CM-7 IA-2 CCE-9542-2 2010-09-24T16:44:34.667Z 2010-10-04T15:53:07.297Z Auditing of 'Account Management: User Account Management' events on success should be enabled or disabled as appropriate. AU-2 CCE-9330-2 2010-09-24T16:44:34.667Z 2012-01-05T04:37:36.157Z The 'Minimum password age' setting should be configured correctly. IA-5 CCE-8811-2 2010-09-24T16:44:34.667Z 2012-01-05T04:37:25.253Z The 'User Account Control: Admin Approval Mode for the Built-in Administrator account' setting should be configured correctly. AC-2 IA-2 CCE-8813-8 2010-09-24T16:44:34.667Z 2012-01-05T04:37:25.330Z The 'User Account Control: Behavior of the elevation prompt for standard users' setting should be configured correctly. AC-2 IA-2 CCE-8732-0 2010-09-24T16:44:34.667Z 2012-01-05T04:37:24.317Z The 'Replace a process level token' user right should be assigned to the appropriate accounts. CM-6 CM-7 CCE-10787-0 2010-09-24T16:44:34.667Z 2010-10-04T15:53:23.547Z The "Turn off Program Inventory" setting should be configured correctly. CM-6 CCE-9386-4 2010-09-24T16:44:34.667Z 2012-01-05T04:37:37.597Z The 'Network access: Remotely accessible registry paths and sub-paths' setting should be configured correctly. CM-7 CCE-9185-0 2010-09-24T16:44:34.683Z 2012-01-05T04:37:31.830Z The 'Create a pagefile' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-10692-2 2010-09-24T16:44:34.683Z 2010-10-04T15:53:26.377Z The "Do Not Show First Use Dialog Boxes" setting for Windows Media Player should be configured correctly. CM-6 CCE-8484-8 2010-09-24T16:44:34.683Z 2010-10-04T15:52:34.923Z The built-in Administrator account should be correctly named. AC-7 CM-6 CCE-10051-1 2010-09-24T16:44:34.683Z 2012-01-05T04:37:18.267Z The screen saver should be enabled or disabled as appropriate for the current user. AC-1 AC-3 CM-6 CM-7 CCE-9098-5 2010-09-24T16:44:34.683Z 2012-01-05T04:37:29.567Z The 'Deny log on as a service' user right should be assigned to the appropriate accounts. AC-3 CM-6 IA-5 CCE-9622-2 2010-09-24T16:44:34.683Z 2010-10-04T15:53:08.907Z Auditing of 'Logon-Logoff: Other Logon/Logoff Events' events on success should be enabled or disabled as appropriate. AU-2 CCE-10856-3 2010-09-24T16:44:34.683Z 2010-10-04T15:53:24.577Z The "Do not delete temp folder upon exit" setting should be configured correctly. AU-9 CCE-9439-1 2010-09-24T16:44:34.683Z 2012-01-05T04:37:39.190Z The 'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic.' setting should be configured correctly. AC-1 AC-4 CCE-10623-7 2010-09-24T16:44:34.683Z 2010-10-04T15:53:25.813Z The "Turn off shell protocol protected mode" setting should be configured correctly. CM-6 CCE-8740-3 2010-09-24T16:44:34.683Z 2012-01-05T04:37:24.393Z The 'Interactive logon: Message title for users attempting to log on' setting should be configured correctly. AC-8 CM-6 CM-7 SC-5 CCE-9492-0 2010-09-24T16:44:34.683Z 2010-10-04T15:53:04.717Z Auditing of 'Detailed Tracking: RPC Events' events on success should be enabled or disabled as appropriate. AU-2 CCE-10081-8 2010-09-24T16:44:34.683Z 2010-10-04T15:52:31.030Z Auditing of 'Policy Change: Filtering Platform Policy Change' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9532-3 2010-09-24T16:44:34.683Z 2012-01-05T04:37:41.470Z The 'Network Security: Configure encryption types allowed for Kerberos' setting should be configured correctly. SC-9 CCE-10655-9 2010-09-24T16:44:34.700Z 2010-10-04T15:53:23.750Z The "Turn off Autoplay for non-volume devices" setting should be configured correctly. CM-6 CM-7 CCE-10441-4 2010-09-24T16:44:34.700Z 2010-10-04T15:53:22.313Z The "Enable Error Reporting" policy should be set correctly. SI-1 SI-2 CCE-9123-1 2010-09-24T16:44:34.700Z 2012-01-05T04:37:30.143Z The 'Domain member: Maximum machine account password age' setting should be configured correctly. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-8945-8 2010-09-24T16:44:34.700Z 2012-01-05T04:37:26.940Z The 'Recovery console: Allow floppy copy and access to all drives and all folders' setting should be configured correctly. AC-1 CM-2 CM-7 CCE-10850-6 2010-09-24T16:44:34.700Z 2010-10-04T15:53:24.297Z The "Turn off game updates" setting should be configured correctly. CM-3 CCE-9440-9 2010-09-24T16:44:34.700Z 2012-01-05T04:37:39.267Z The 'Devices: Restrict floppy access to locally logged-on user only' setting should be configured correctly. MP-2 CCE-9361-7 2010-09-24T16:44:34.700Z 2010-10-04T15:53:00.500Z The 'Registry policy processing' setting should be enabled or disabled as appropriate. CM-2 CCE-10496-8 2010-09-24T16:44:34.700Z 2010-10-04T15:53:24.953Z The "Allow indexing of encrypted files" setting should be configured correctly. CM-6 CCE-9319-5 2010-09-24T16:44:34.700Z 2012-01-05T04:37:35.690Z The 'System objects: Require case insensitivity for non-Windows subsystems' setting should be configured correctly. CM-6 CCE-9189-2 2010-09-24T16:44:34.700Z 2012-01-05T04:37:31.907Z The 'User Account Control: Run all administrators in Admin Approval Mode' setting should be configured correctly. AC-3 AC-6 CCE-9190-0 2010-09-24T16:44:34.700Z 2010-10-04T15:52:52.077Z Auditing of 'Privilege Use: Non Sensitive Privilege Use' events on success should be enabled or disabled as appropriate. AU-2 CCE-10166-7 2010-09-24T16:44:34.700Z 2012-01-05T04:37:19.737Z The 'Do not preserve zone information in file attachments' setting should be configured correctly. CM-6 CCE-10181-6 2010-09-24T16:44:34.700Z 2012-01-05T04:37:19.957Z The 'RPC Endpoint Mapper Client Authentication' setting should be configured correctly. CM-6 CCE-9734-5 2010-09-24T16:44:34.700Z 2010-10-04T15:53:11.953Z Auditing of 'DS Access: Directory Service Changes' events on success should be enabled or disabled as appropriate. AU-2 CCE-8974-8 2010-09-24T16:44:34.700Z 2012-01-05T04:37:27.347Z The 'Domain member: Digitally encrypt or sign secure channel data (always)' setting should be configured correctly. SC-9 CCE-8857-5 2010-09-24T16:44:34.713Z 2010-10-04T15:52:40.827Z Auditing of 'Logon-Logoff: IPsec Extended Mode' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9643-8 2010-09-24T16:44:34.713Z 2012-01-05T04:37:43.127Z The 'Turn off the "Publish to Web" task for files and folders' setting should be configured correctly. CM-6 CCE-9309-6 2010-09-24T16:44:34.713Z 2012-01-05T04:37:35.487Z The 'Take ownership of files or other objects' user right should be assigned to the appropriate accounts. CM-6 CCE-9562-0 2010-09-24T16:44:34.713Z 2010-10-04T15:53:07.673Z Auditing of 'Detailed Tracking: Process Creation' events on success should be enabled or disabled as appropriate. AU-2 CCE-9692-5 2010-09-24T16:44:34.713Z 2010-10-04T15:53:10.843Z Auditing of 'Account Management: Security Group Management' events on success should be enabled or disabled as appropriate. AU-2 CCE-9644-6 2010-09-24T16:44:34.713Z 2010-10-04T15:53:09.640Z Auditing of 'Account Management: Distribution Group Management' events on success should be enabled or disabled as appropriate. AU-2 CCE-8853-4 2010-09-24T16:44:34.713Z 2012-01-05T04:37:25.893Z Auditing of 'Logon-Logoff: Account Lockout' events on success should be enabled or disabled as appropriate. AU-2 CCE-8860-9 2010-09-24T16:44:34.713Z 2012-01-05T04:37:26.143Z Auditing of 'Object Access: Application Generated' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10088-3 2010-09-24T16:44:34.713Z 2010-10-04T15:52:31.203Z Auditing of 'System: Other System Events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9124-9 2010-09-24T16:44:34.713Z 2012-01-05T04:37:30.220Z The 'Restore files and directories' user right should be assigned to the appropriate accounts. CP-9 CCE-9258-5 2010-09-24T16:44:34.713Z 2010-10-04T15:52:57.030Z Auditing of 'Account Logon: Kerberos Authentication Service' events on success should be enabled or disabled as appropriate. AU-2 CCE-9375-7 2010-09-24T16:44:34.713Z 2012-01-05T04:37:37.363Z The 'Domain member: Digitally sign secure channel data (when possible)' setting should be configured correctly. CM-6 SC-2 CCE-8856-7 2010-09-24T16:44:34.713Z 2010-10-04T15:52:40.703Z Auditing of 'Logon-Logoff: Logoff' events on success should be enabled or disabled as appropriate. AU-2 CCE-9735-2 2010-09-24T16:44:34.713Z 2012-01-05T04:37:44.550Z Auditing of 'Detailed Tracking: DPAPI Activity' events on success should be enabled or disabled as appropriate. AU-2 CCE-9076-1 2010-09-24T16:44:34.713Z 2010-10-04T15:52:46.280Z Auditing of 'Logon-Logoff: Network Policy Server' events on success should be enabled or disabled as appropriate. AU-2 CCE-9684-2 2010-09-24T16:44:34.730Z 2012-01-05T04:37:43.783Z The 'Hide mechanisms to remove zone information' setting should be configured correctly. CM-6 CCE-9308-8 2010-09-24T16:44:34.730Z 2012-01-05T04:37:35.407Z The 'Account lockout duration' setting should be configured correctly. AC-7 CCE-10709-4 2010-09-24T16:44:34.730Z 2010-10-04T15:53:25.530Z The Windows Error Reporting "Display Error Notification" setting should be configured correctly. SI-1 SI-2 CCE-9704-8 2010-09-24T16:44:34.730Z 2010-10-04T15:53:11.030Z The 'Network security: Force logoff when logon hours expire' setting should be configured correctly. AC-1 CCE-10811-8 2010-09-24T16:44:34.730Z 2010-10-04T15:53:23.923Z The "Disable unpacking and installation of gadgets that are not digitally signed" setting should be configured correctly. CM-6 CCE-9348-4 2010-09-24T16:44:34.730Z 2012-01-05T04:37:36.783Z The 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' setting should be configured correctly. AC-4 SC-5 CCE-9172-8 2010-09-24T16:44:34.730Z 2010-10-04T15:52:51.047Z Auditing of 'Privilege Use: Sensitive Privilege Use' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9265-0 2010-09-24T16:44:34.730Z 2012-01-05T04:37:34.613Z The 'Microsoft network client: Send unencrypted password to third-party SMB servers' setting should be configured correctly. SC-8 CCE-9260-1 2010-09-24T16:44:34.730Z 2012-01-05T04:37:34.533Z The 'Store passwords using reversible encryption' setting should be configured correctly. AU-9 IA-5 CCE-9976-2 2010-09-24T16:44:34.730Z 2010-10-04T15:53:16.467Z Auditing of 'Policy Change: Authentication Policy Change' events on success should be enabled or disabled as appropriate. AU-2 CCE-9875-6 2010-09-24T16:44:34.730Z 2010-10-04T15:53:25.907Z The "Set Safe for Scripting" policy should be set correctly. SI-3 CCE-9136-3 2010-09-24T16:44:34.730Z 2012-01-05T04:37:30.517Z The 'Account lockout threshold' setting should be configured correctly. AC-1 CCE-8654-6 2010-09-24T16:44:34.730Z 2012-01-05T04:37:23.643Z The 'Network access: Do not allow storage of passwords and credentials for network authentication' setting should be configured correctly. IA-4 CCE-9307-0 2010-09-24T16:44:34.730Z 2012-01-05T04:37:35.330Z The 'Interactive logon: Prompt user to change password before expiration' setting should be configured correctly. IA-5 CCE-9657-8 2010-09-24T16:44:34.747Z 2010-10-04T15:53:09.733Z Auditing of 'Account Management: Other Account Management Events' events on success should be enabled or disabled as appropriate. AU-2 CCE-9244-5 2010-09-24T16:44:34.747Z 2012-01-05T04:37:33.847Z The 'Deny access to this computer from the network' user right should be assigned to the appropriate accounts. IA-2 CCE-10553-6 2010-09-24T16:44:34.747Z 2010-10-04T15:53:21.063Z The "Do not create system restore point when new device driver installed" setting should be configured correctly. CM-6 CCE-9521-6 2010-09-24T16:44:34.747Z 2010-10-04T15:53:06.187Z Auditing of 'Logon-Logoff: Special Logon' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9876-4 2010-09-24T16:44:34.747Z 2010-10-04T15:53:26.000Z The "Enable User Control Over Installs" policy should be set correctly. CM-3 CCE-9520-8 2010-09-24T16:44:34.747Z 2010-10-04T15:53:06.093Z Auditing of 'System: System Integrity' events on success should be enabled or disabled as appropriate. AU-2 CCE-9874-9 2010-09-24T16:44:34.747Z 2010-10-04T15:53:25.717Z The "Turn off Heap termination on corruption" setting should be configured correctly. CM-3 CCE-9014-2 2010-09-24T16:44:34.747Z 2012-01-05T04:37:27.907Z The 'Shut down the system' user right should be assigned to the appropriate accounts. AC-3 CM-6 CM-7 CCE-8655-3 2010-09-24T16:44:34.747Z 2012-01-05T04:37:23.720Z The 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-10644-3 2010-09-24T16:44:34.747Z 2010-10-04T15:53:30.610Z The "Prevent users from sharing files within their profile" setting should be configured correctly. AC-6 CCE-9528-1 2010-09-24T16:44:34.747Z 2012-01-05T04:37:41.317Z The 'Turn off Autoplay' setting should be configured correctly. CM-6 CM-7 CCE-9096-9 2010-09-24T16:44:34.747Z 2012-01-05T04:37:29.423Z The 'Network security: Allow Local System to use computer identity for NTLM' setting should be configured correctly. CM-7 IA-2 CCE-10014-9 2010-09-24T16:44:34.747Z 2010-10-04T15:52:30.127Z Auditing of 'Policy Change: Authentication Policy Change' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9805-3 2010-09-24T16:44:34.747Z 2010-10-04T15:53:14.377Z Auditing of 'Detailed Tracking: Process Creation' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9458-1 2010-09-24T16:44:34.747Z 2012-01-05T04:37:39.580Z The 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9456-5 2010-09-24T16:44:34.760Z 2012-01-05T04:37:39.503Z The 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9304-7 2010-09-24T16:44:34.760Z 2012-01-05T04:37:35.237Z The 'Devices: Restrict CD-ROM access to locally logged-on user only' setting should be configured correctly. MP-2 CCE-9741-0 2010-09-24T16:44:34.760Z 2010-10-04T15:53:12.687Z Auditing of 'Logon-Logoff: Network Policy Server' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9914-3 2010-09-24T16:44:34.760Z 2010-10-04T15:53:25.437Z The "Disable Windows Error Reporting" setting should be configured correctly. SI-1 SI-2 CCE-9314-6 2010-09-24T16:44:34.760Z 2010-10-04T15:52:58.627Z Auditing of 'Privilege Use: Other Privilege Use Events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9910-1 2010-09-24T16:44:34.760Z 2012-01-05T04:37:51.080Z The startup type of the Homegroup Provider service should be correct. CM-5 CM-6 CCE-9048-0 2010-09-24T16:44:34.760Z 2012-01-05T04:37:28.377Z The 'Increase a process working set' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-9194-2 2010-09-24T16:44:34.760Z 2010-10-04T15:52:52.577Z Auditing of 'System: System Integrity' events on failure should be enabled or disabled as appropriate. AU-2 CCE-8612-4 2010-09-24T16:44:34.760Z 2012-01-05T04:37:23.317Z The 'Change the system time' user right should be assigned to the appropriate accounts. AU-8 CM-7 CCE-9455-7 2010-09-24T16:44:34.760Z 2010-10-04T15:53:03.780Z Auditing of 'Object Access: Other Object Access Events' events on success should be enabled or disabled as appropriate. AU-2 CCE-9707-1 2010-09-24T16:44:34.760Z 2012-01-05T04:37:44.080Z The 'Shutdown: Allow system to be shut down without having to log on' setting should be configured correctly. CM-7 CCE-9370-8 2010-09-24T16:44:34.760Z 2012-01-05T04:37:37.267Z The 'Password must meet complexity requirements' policy should be set correctly. IA-5 CCE-9344-3 2010-09-24T16:44:34.760Z 2012-01-05T04:37:36.567Z The 'Microsoft network client: Digitally sign communications (if server agrees)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-8 CCE-8937-5 2010-09-24T16:44:34.760Z 2012-01-05T04:37:26.863Z The 'Network security: Do not store LAN Manager hash value on next password change' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-8807-0 2010-09-24T16:44:34.777Z 2012-01-05T04:37:25.157Z The 'Recovery console: Allow automatic administrative logon' setting should be configured correctly. AC-1 IA-2 CCE-9801-2 2010-09-24T16:44:34.777Z 2012-01-05T04:37:45.847Z The 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' setting should be configured correctly. AC-3 AC-6 CCE-9496-1 2010-09-24T16:44:34.777Z 2012-01-05T04:37:40.330Z The 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-10782-1 2010-09-24T16:44:34.777Z 2010-10-04T15:53:20.767Z The "Extend Point and Print connection to search Windows Update and use alternate connection if needed" setting should be configured correctly. SI-2 CCE-9632-1 2010-09-24T16:44:34.777Z 2010-10-04T15:53:09.280Z Auditing of 'Logon-Logoff: IPsec Quick Mode' events on success should be enabled or disabled as appropriate. AU-2 CCE-9802-0 2010-09-24T16:44:34.777Z 2010-10-04T15:53:14.203Z Auditing of 'System: IPsec Driver' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10050-3 2010-09-24T16:44:34.777Z 2010-10-04T15:52:30.407Z Auditing of 'Policy Change: Authorization Policy Change' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9376-5 2010-09-24T16:44:34.777Z 2010-10-04T15:53:01.187Z Auditing of 'Object Access: File Share' events on success should be enabled or disabled as appropriate. AU-2 CCE-9212-2 2010-09-24T16:44:34.777Z 2012-01-05T04:37:32.657Z The 'Deny log on as a batch job' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-9718-8 2010-09-24T16:44:34.777Z 2010-10-04T15:53:11.407Z Auditing of 'Account Logon: Credential Validation' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9816-0 2010-09-24T16:44:34.777Z 2012-01-05T04:37:46.127Z Auditing of 'Object Access: Application Generated' events on success should be enabled or disabled as appropriate. AU-2 CCE-9907-7 2010-09-24T16:44:34.777Z 2010-10-04T15:53:26.187Z The "Report Logon Server Not Available During User logon" setting should be configured correctly. AC-2 CCE-9668-5 2010-09-24T16:44:34.777Z 2010-10-04T15:53:10.017Z Auditing of 'Account Management: Other Account Management Events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9269-2 2010-09-24T16:44:34.777Z 2010-10-04T15:52:57.547Z Auditing of 'Account Logon: Kerberos Service Ticket Operations' events on failure should be enabled or disabled as appropriate. AU-2 CCE-8829-4 2010-09-24T16:44:34.793Z 2010-10-04T15:52:40.110Z Auditing of 'Account Management: Distribution Group Management' events on failure should be enabled or disabled as appropriate. AU-2 CCE-8973-0 2010-09-24T16:44:34.793Z 2012-01-05T04:37:27.253Z The 'Interactive logon: Message text for users attempting to log on' setting should be configured correctly. AC-8 CM-6 CM-7 SC-5 CCE-9845-9 2010-09-24T16:44:34.793Z 2010-10-04T15:53:15.063Z Auditing of 'Object Access: SAM' events on failure should be enabled or disabled as appropriate. AU-2 CCE-8467-3 2010-09-24T16:44:34.793Z 2012-01-05T04:37:21.440Z The 'Impersonate a client after authentication' user right should be assigned to the appropriate accounts. AC-2 CCE-10021-4 2010-09-24T16:44:34.793Z 2010-10-04T15:52:30.217Z Auditing of 'Policy Change: Audit Policy Change' events on success should be enabled or disabled as appropriate. AU-2 CCE-8487-1 2010-09-24T16:44:34.793Z 2012-01-05T04:37:21.707Z The 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9633-9 2010-09-24T16:44:34.793Z 2010-10-04T15:53:09.360Z Auditing of 'Policy Change: Authorization Policy Change' events on success should be enabled or disabled as appropriate. AU-2 CCE-10939-7 2010-09-24T16:44:34.793Z 2012-01-05T04:37:52.907Z DEPRECATED in favor of CCE-9715-4, CCE-8956-5. Previously: Auditing of 'Logon-Logoff: IPsec Main Mode' events on success should be enabled or disabled as appropriate. AU-2 CCE-9503-4 2010-09-24T16:44:34.793Z 2012-01-05T04:37:40.643Z The 'Network access: Sharing and security model for local accounts' setting should be configured correctly. CM-7 IA-2 CCE-8591-0 2010-09-24T16:44:34.793Z 2012-01-05T04:37:23.173Z The time in seconds before the screen saver grace period expires (ScreenSaverGracePeriod) setting should be configured correctly. AC-1 AC-3 CM-6 CM-7 CCE-9879-8 2010-09-24T16:44:34.793Z 2010-10-04T15:53:20.000Z The "Configuration of wireless settings using Windows Connect Now" setting should be configured correctly for Wireless Connect Now over Ethernet (UPnP). AC-1 CCE-10059-4 2010-09-24T16:44:34.793Z 2010-10-04T15:53:18.750Z The "Turn on Responder (RSPNDR) Driver" setting should be configured correctly. CM-6 CM-7 CCE-8714-8 2010-09-24T16:44:34.793Z 2010-10-04T15:52:38.110Z The 'Accounts: Guest account status' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9215-5 2010-09-24T16:44:34.793Z 2012-01-05T04:37:32.847Z The 'Create a token object' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-10763-1 2010-09-24T16:44:34.807Z 2010-10-04T15:53:30.157Z The startup type of the NetMeeting Remote Desktop Sharing service should be correct. AC-1 CM-7 CCE-9387-2 2010-09-24T16:44:34.807Z 2012-01-05T04:37:37.720Z The 'Domain member: Require strong (Windows 2000 or later) session key' setting should be configured correctly. CM-6 SC-2 CCE-9235-3 2010-09-24T16:44:34.807Z 2010-10-04T15:52:55.547Z Auditing of 'Policy Change: Audit Policy Change' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9728-7 2010-09-24T16:44:34.807Z 2010-10-04T15:53:11.673Z Auditing of 'Object Access: Filtering Platform Connection' events on success should be enabled or disabled as appropriate. AU-2 CCE-9938-2 2010-09-24T16:44:34.807Z 2012-01-05T04:37:46.817Z The 'Enumerate administrator accounts on elevation' setting should be configured correctly. AC-2 AC-3 CCE-10090-9 2010-09-24T16:44:34.807Z 2012-01-05T04:37:18.830Z The 'Do not allow passwords to be saved' setting should be configured correctly. IA-5 CCE-9405-2 2010-09-24T16:44:34.807Z 2010-10-04T15:53:02.467Z Auditing of 'Object Access: File Share' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9461-5 2010-09-24T16:44:34.807Z 2012-01-05T04:37:39.720Z The 'Log on as a service' user right should be assigned to the appropriate accounts. IA-5 CCE-9637-0 2010-09-24T16:44:34.807Z 2010-10-04T15:53:09.453Z Auditing of 'DS Access: Directory Service Replication' events on success should be enabled or disabled as appropriate. AU-2 CCE-9789-9 2010-09-24T16:44:34.807Z 2010-10-04T15:53:13.827Z Auditing of 'Object Access: Handle Manipulation' events on success should be enabled or disabled as appropriate. AU-2 CCE-9289-0 2010-09-24T16:44:34.807Z 2012-01-05T04:37:35.017Z The 'Lock pages in memory' user right should be assigned to the appropriate accounts. SI-3 CCE-9878-0 2010-09-24T16:44:34.807Z 2010-10-04T15:53:15.437Z Auditing of 'Privilege Use: Sensitive Privilege Use' events on success should be enabled or disabled as appropriate. AU-2 CCE-9586-9 2010-09-24T16:44:34.807Z 2010-10-04T15:53:07.953Z Auditing of 'System: Other System Events' events on success should be enabled or disabled as appropriate. AU-2 CCE-9842-6 2010-09-24T16:44:34.807Z 2010-10-04T15:53:22.627Z The "Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider" setting should be configured correctly. SC-7 CCE-9406-0 2010-09-24T16:44:34.807Z 2012-01-05T04:37:38.470Z The 'Microsoft network server: Amount of idle time required before suspending session' setting should be configured correctly. AC-1 AC-3 CM-6 CM-7 CCE-8999-5 2010-09-24T16:44:34.823Z 2012-01-05T04:37:27.707Z The 'Increase scheduling priority' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-9460-7 2010-09-24T16:44:34.823Z 2012-01-05T04:37:39.643Z Auditing of 'Object Access: Certification Services' events on success should be enabled or disabled as appropriate. AU-2 CCE-10160-0 2010-09-24T16:44:34.823Z 2010-10-04T15:53:22.030Z The "Turn Off Registration if URL Connection is Referring to Microsoft.com" setting should be configured correctly. CM-6 CCE-9988-7 2010-09-24T16:44:34.823Z 2010-10-04T15:53:16.750Z Auditing of 'Privilege Use: Other Privilege Use Events' events on success should be enabled or disabled as appropriate. AU-2 CCE-10795-3 2010-09-24T16:44:34.823Z 2010-10-04T15:53:21.937Z The "Turn Off Internet File Association Service" setting should be configured correctly. CM-3 CCE-8804-7 2010-09-24T16:44:34.823Z 2012-01-05T04:37:25.003Z The 'Network security: Allow LocalSystem NULL session fallback' setting should be configured correctly. CM-7 IA-2 CCE-10137-8 2010-09-24T16:44:34.823Z 2010-10-04T15:53:25.157Z The "Prevent Windows Anytime Upgrade from running" setting should be configured correctly. SI-2 CCE-9135-5 2010-09-24T16:44:34.823Z 2012-01-05T04:37:30.393Z The 'Load and unload device drivers' user right should be assigned to the appropriate accounts. CM-5 CM-6 CCE-10150-1 2010-09-24T16:44:34.823Z 2012-01-05T04:37:50.957Z The startup type of the Fax service should be correct. CM-6 CCE-9107-4 2010-09-24T16:44:34.823Z 2012-01-05T04:37:29.830Z The 'Allow log on through Remote Desktop Services' user right should be assigned to the appropriate accounts. AC-1 CCE-9149-6 2010-09-24T16:44:34.823Z 2012-01-05T04:37:31.050Z The 'Modify an object label' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-9829-3 2010-09-24T16:44:34.823Z 2012-01-05T04:37:46.300Z The 'Require a Password When a Computer Wakes (On Battery)' setting should be configured correctly. IA-5 CCE-8423-6 2010-09-24T16:44:34.823Z 2012-01-05T04:37:21.143Z The 'Change the time zone' user right should be assigned to the appropriate accounts. AU-8 CM-7 CCE-9137-1 2010-09-24T16:44:34.840Z 2010-10-04T15:52:48.923Z Auditing of 'Object Access: Kernel Object' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10098-2 2010-09-24T16:44:34.840Z 2010-10-04T15:52:31.563Z Auditing of 'Object Access: Handle Manipulation' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10778-9 2010-09-24T16:44:34.840Z 2010-10-04T15:53:20.657Z The "Prohibit Access of the Windows Connect Now Wizards" setting should be configured correctly. CM-6 CM-7 CCE-9628-9 2010-09-24T16:44:34.840Z 2012-01-05T04:37:42.800Z Auditing of 'DS Access: Detailed Directory Service Replication' events on success should be enabled or disabled as appropriate. AU-2 CCE-10061-0 2010-09-24T16:44:34.840Z 2012-01-05T04:37:18.347Z The 'Turn off printing over HTTP' setting should be configured correctly. CM-3 CCE-9925-9 2010-09-24T16:44:34.840Z 2010-10-04T15:53:15.907Z Auditing of 'System: IPsec Driver' events on success should be enabled or disabled as appropriate. AU-2 CCE-9683-4 2010-09-24T16:44:34.840Z 2010-10-04T15:53:10.563Z Auditing of 'Logon-Logoff: Logon' events on success should be enabled or disabled as appropriate. AU-2 CCE-9412-8 2010-09-24T16:44:34.840Z 2012-01-05T04:37:38.657Z Auditing of 'Detailed Tracking: DPAPI Activity' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10645-0 2010-09-24T16:44:34.840Z 2012-01-05T04:37:49.220Z The "Turn Off Handwriting Reconition Error Reporting" setting should be configured correctly. SI-1 SI-2 CCE-9534-9 2010-09-24T16:44:34.840Z 2012-01-05T04:37:41.550Z The 'Require message integrity' option for the 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' setting should be enabled or disabled as appropriate. AC-3 CM-6 CCE-9953-1 2010-09-24T16:44:34.840Z 2010-10-04T15:53:19.233Z Installation and Configuration of Network Bridge on the DNS Domain Network should be properly configured. SC-2 SC-7 CCE-8825-2 2010-09-24T16:44:34.840Z 2012-01-05T04:37:25.627Z The 'Microsoft network server: Digitally sign communications (if client agrees)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9193-4 2010-09-24T16:44:34.840Z 2012-01-05T04:37:32.143Z The 'Maximum password age' setting should be configured correctly. AC-3 CM-6 CM-7 IA-5 SC-5 CCE-9249-4 2010-09-24T16:44:34.840Z 2012-01-05T04:37:34.033Z The 'Network access: Do not allow anonymous enumeration of SAM accounts' setting should be configured correctly. AC-3 CM-6 CM-7 IA-4 CCE-9229-6 2010-09-24T16:44:34.840Z 2010-10-04T15:52:55.423Z The built-in Guest account should be correctly named. AC-7 CM-6 CCE-10500-7 2010-09-24T16:44:34.857Z 2010-10-04T15:53:22.890Z The "Configure Windows NTP Client\NtpServer" setting should be configured correctly. AU-8 CM-6 CM-7 CCE-9068-8 2010-09-24T16:44:34.857Z 2012-01-05T04:37:28.877Z The 'Adjust memory quotas for a process' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-8562-1 2010-09-24T16:44:34.857Z 2012-01-05T04:37:22.753Z The 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' setting should be configured correctly. AC-4 SC-5 CCE-10828-2 2010-09-24T16:44:34.857Z 2010-10-04T15:53:24.203Z The "Turn Off Downloading of Game Information" setting should be configured correctly. CM-3 CCE-10824-1 2010-09-24T16:44:34.857Z 2010-10-04T15:53:25.627Z The Windows Error Reporting "Do not send additional data" setting should be configured correctly. SI-1 SI-2 CCE-9763-4 2010-09-24T16:44:34.857Z 2010-10-04T15:53:12.967Z Auditing of 'Logon-Logoff: Special Logon' events on success should be enabled or disabled as appropriate. AU-2 CCE-10165-9 2010-09-24T16:44:34.857Z 2010-10-04T15:53:21.157Z The "Prevent device metadata retrieval from internet" setting should be configured correctly. CM-6 CCE-10608-8 2010-09-24T16:44:34.857Z 2010-10-04T15:53:24.390Z The "Set time limit for idle sessions" policy should be set correctly for Terminal Services. AC-1 CCE-10311-9 2010-09-24T16:44:34.857Z 2012-01-05T04:37:51.220Z The startup type of the Parantal Controls service should be correct. CM-6 CM-7 CCE-9791-5 2010-09-24T16:44:34.857Z 2010-10-04T15:53:13.923Z Auditing of 'DS Access: Directory Service Access' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10078-4 2010-09-24T16:44:34.857Z 2012-01-05T04:37:18.597Z Auditing of 'Object Access: Registry' events on failure should be enabled or disabled as appropriate. AU-2 CCE-8475-6 2010-09-24T16:44:34.857Z 2012-01-05T04:37:21.517Z The 'Perform volume maintenance tasks' user right should be assigned to the appropriate accounts. AC-3 CM-6 CP-9 CCE-9918-4 2010-09-24T16:44:34.857Z 2012-01-05T04:37:46.707Z The 'Turn off Data Execution Prevention for Explorer' setting should be configured correctly. CM-3 CCE-8936-7 2010-09-24T16:44:34.857Z 2012-01-05T04:37:26.783Z The 'Network access: Let Everyone permissions apply to anonymous users' setting should be configured correctly. AC-2 IA-2 CCE-9540-6 2010-09-24T16:44:34.857Z 2012-01-05T04:37:41.817Z The 'Network access: Restrict anonymous access to Named Pipes and Shares' setting should be configured correctly. CM-7 CCE-9736-0 2010-09-24T16:44:34.870Z 2012-01-05T04:37:44.627Z The 'Require message integrity' option for the 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' setting should be enabled or disabled as appropriate. CM-7 CCE-9342-7 2010-09-24T16:44:34.870Z 2012-01-05T04:37:36.487Z The 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' setting should be configured correctly. AC-3 CM-6 CM-7 IA-2 SC-5 CCE-9908-5 2010-09-24T16:44:34.870Z 2010-10-04T15:53:26.280Z The "Prevent Windows Media DRM Internet Access" setting should be configured correctly. CM-6 CM-7 CCE-9274-2 2010-09-24T16:44:34.870Z 2012-01-05T04:37:34.800Z The 'Deny log on through Remote Desktop Services' user right should be assigned to the appropriate accounts. AC-1 CCE-9133-0 2010-09-24T16:44:34.870Z 2010-10-04T15:52:48.563Z Auditing of 'Object Access: Filtering Platform Packet Drop' events on success should be enabled or disabled as appropriate. AU-2 CCE-8503-5 2010-09-24T16:44:34.870Z 2012-01-05T04:37:21.923Z The 'Microsoft network server: Server SPN target name validation level' setting should be configured correctly. SC-9 CCE-9295-7 2010-09-24T16:44:34.870Z 2012-01-05T04:37:35.080Z The 'Domain member: Disable machine account password changes' setting should be configured correctly. IA-5 CCE-8583-7 2010-09-24T16:44:34.870Z 2012-01-05T04:37:22.923Z The 'Debug programs' user right should be assigned to the appropriate accounts. AC-3 CCE-10591-6 2010-09-24T16:44:34.870Z 2010-10-04T15:53:22.407Z Use Classic Logon should be properly configured. AC-1 CM-6 CM-7 CCE-8818-7 2010-09-24T16:44:34.870Z 2012-01-05T04:37:25.503Z The 'Interactive logon: Require Domain Controller authentication to unlock workstation' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-9603-2 2010-09-24T16:44:34.870Z 2012-01-05T04:37:42.457Z The 'Maximum Log Size (KB)' setting should be configured correctly for the application log. AU-2 CCE-9358-3 2010-09-24T16:44:34.870Z 2012-01-05T04:37:36.940Z The 'Microsoft network server: Disconnect clients when logon hours expire' setting should be configured correctly. AC-3 CM-6 CM-7 SC-1 SC-5 CCE-9320-3 2010-09-24T16:44:34.870Z 2012-01-05T04:37:35.767Z The 'Log on as a batch job' user right should be assigned to the appropriate accounts. IA-5 CCE-9040-7 2010-09-24T16:44:34.870Z 2012-01-05T04:37:28.237Z The 'Microsoft network server: Digitally sign communications (always)' setting should be configured correctly. CM-6 SC-8 SC-9 CCE-9426-8 2010-09-24T16:44:34.887Z 2012-01-05T04:37:39.003Z The 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' setting should be configured correctly. AC-4 SC-5 CCE-9737-8 2010-09-24T16:44:34.887Z 2012-01-05T04:37:44.907Z Auditing of 'Object Access: Registry' events on success should be enabled or disabled as appropriate. AU-2 CCE-9357-5 2010-09-24T16:44:34.887Z 2012-01-05T04:37:36.863Z The 'Minimum password length' setting should be configured correctly. IA-5 CCE-9569-5 2010-09-24T16:44:34.887Z 2010-10-04T15:53:07.767Z Auditing of 'Object Access: Filtering Platform Connection' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9559-6 2010-09-24T16:44:34.887Z 2012-01-05T04:37:42.017Z The 'Turn off the Windows Messenger Customer Experience Improvement Program' setting should be configured correctly. SC-7 CCE-9432-6 2010-09-24T16:44:34.887Z 2012-01-05T04:37:39.080Z The 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' setting should be configured correctly. AU-2 CCE-10649-2 2010-09-24T16:44:34.887Z 2010-10-04T15:53:21.843Z The "Turn Off Internet Connection Wizard if URL Connection is Referring to Microsoft.com" setting should be configured correctly. CM-3 CCE-10509-8 2010-09-24T16:44:34.887Z 2010-10-04T15:53:19.517Z The "Route all traffic through the internal network" setting should be configured correctly. AC-4 CCE-9823-6 2010-09-24T16:44:34.887Z 2010-10-04T15:53:22.127Z The "Turn Off the 'Order Prints' Picture Task" setting should be configured correctly. CM-6 CCE-9227-0 2010-09-24T16:44:34.887Z 2010-10-04T15:52:55.297Z Auditing of 'Detailed Tracking: Process Termination' events on success should be enabled or disabled as appropriate. AU-2 CCE-8850-0 2010-09-24T16:44:34.887Z 2010-10-04T15:52:40.407Z Auditing of 'DS Access: Directory Service Changes' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9327-8 2010-09-24T16:44:34.887Z 2012-01-05T04:37:36.003Z The 'Microsoft network client: Digitally sign communications (always)' setting should be configured correctly. SC-8 CCE-9831-9 2010-09-24T16:44:34.887Z 2010-10-04T15:53:22.217Z The "Turn off Windows Customer Experience Improvement Program" setting should be configured correctly. CCE-9998-6 2010-09-24T16:44:34.887Z 2010-10-04T15:53:16.937Z Auditing of 'System: Security System Extension' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9226-2 2010-09-24T16:44:34.887Z 2012-01-05T04:37:33.440Z The 'Generate security audits' user right should be assigned to the appropriate accounts. AU-2 CCE-10586-6 2010-09-24T16:44:34.903Z 2010-10-04T15:53:24.017Z The "Turn Off User Installed Windows Sidebar Gadgets" setting should be configured correctly. CM-3 CCE-8884-9 2010-09-24T16:49:02.260Z 2012-01-05T04:37:26.393Z Display of a notification to the user when Windows Firewall blocks network activity should be enabled or disabled as appropriate for the private profile. CM-3 CM-6 CCE-9749-3 2010-09-24T16:49:02.307Z 2010-10-04T15:53:17.983Z The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Public Profile. AU-2 CCE-9774-1 2010-09-24T16:49:02.323Z 2012-01-05T04:37:45.580Z Display of a notification to the user when Windows Firewall blocks network activity should be enabled or disabled as appropriate for the domain profile. CM-3 CM-6 CCE-10611-2 2010-09-24T16:49:02.323Z 2012-01-05T04:37:47.720Z The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Private Profile. AU-2 CCE-8870-8 2010-09-24T16:49:02.357Z 2012-01-05T04:37:26.317Z Windows Firewall should allow or block outbound connections by default as appropriate for the Private Profile. SC-7 CCE-10268-1 2010-09-24T16:49:02.370Z 2012-01-05T04:37:47.517Z The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 CCE-9926-7 2010-09-24T16:49:02.387Z 2010-10-04T15:53:18.173Z The "Log File Path and Name" for the Windows Firewall should be configured correctly for the Public Profile. CM-6 CCE-9663-6 2010-09-24T16:49:02.403Z 2012-01-05T04:37:43.300Z The 'Windows Firewall: Private: Apply local firewall rules' setting should be configured correctly. AC-4 CCE-9773-3 2010-09-24T16:49:02.417Z 2012-01-05T04:37:45.517Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Public Profile. SC-5 SC-7 CCE-9747-7 2010-09-24T16:49:02.433Z 2010-10-04T15:53:17.517Z The "Log File Size Limit" for the Windows Firewall should be configured correctly for the Domain Profile. CM-6 CCE-10022-2 2010-09-24T16:49:02.450Z 2010-10-04T15:53:17.423Z The "Log File Path and Name" for the Windows Firewall should be configured correctly for the Domain Profile. CM-6 CCE-9509-1 2010-09-24T16:49:02.463Z 2012-01-05T04:37:40.907Z Windows Firewall should allow or block outbound connections by default as appropriate for the Domain Profile. SC-7 CCE-10386-1 2010-09-24T16:49:02.480Z 2010-10-04T15:53:17.797Z The "Log File Path and Name" for the Windows Firewall should be configured correctly for the Private Profile. CM-6 CCE-9588-5 2010-09-24T16:49:02.497Z 2012-01-05T04:37:42.237Z Windows Firewall should allow or block outbound connections by default as appropriate for the Public Profile. SC-7 CCE-9817-8 2010-09-24T16:49:02.510Z 2012-01-05T04:37:46.190Z The 'Windows Firewall: Public: Apply local connection security rules' setting should be configured correctly. CM-6 SC-7 CCE-10250-9 2010-09-24T16:49:02.527Z 2010-10-04T15:53:17.890Z The "Log File Size Limit" for the Windows Firewall should be configured correctly for the Private Profile. CM-6 CCE-9593-5 2010-09-24T16:49:02.543Z 2012-01-05T04:37:42.330Z The Windows Firewall should be enabled or disabled as appropriate for the Public Profile. CCE-9694-1 2010-09-24T16:49:02.557Z 2012-01-05T04:37:43.957Z Windows Firewall should allow or block inbound connections by default as appropriate for the Private Profile. AC-4 SC-7 CCE-9686-7 2010-09-24T16:49:02.573Z 2012-01-05T04:37:43.847Z The 'Windows Firewall: Domain: Apply local firewall rules' setting should be configured correctly. AC-4 CCE-10215-2 2010-09-24T16:49:02.590Z 2010-10-04T15:53:17.610Z The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Private Profile. AU-2 CCE-9329-4 2010-09-24T16:49:02.607Z 2012-01-05T04:37:36.067Z The 'Windows Firewall: Domain: Apply local connection security rules' setting should be configured correctly. CM-6 SC-7 CCE-9712-1 2010-09-24T16:49:02.620Z 2012-01-05T04:37:44.143Z The 'Windows Firewall: Private: Apply local connection security rules' setting should be configured correctly. AC-4 CCE-9620-6 2010-09-24T16:49:02.637Z 2012-01-05T04:37:42.707Z Windows Firewall should allow or block inbound connections by default as appropriate for the Domain Profile. AC-4 SC-7 CCE-9465-6 2010-09-24T16:49:02.667Z 2012-01-05T04:37:40.017Z The Windows Firewall should be enabled or disabled as appropriate for the Domain Profile. AC-4 CCE-9069-6 2010-09-24T16:49:02.683Z 2012-01-05T04:37:28.957Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Domain Profile. SC-5 SC-7 CCE-9786-5 2010-09-24T16:49:02.713Z 2012-01-05T04:37:45.643Z The 'Windows Firewall: Public: Apply local firewall rules' setting should be configured correctly. AC-4 CCE-9522-4 2010-09-24T16:49:02.713Z 2012-01-05T04:37:41.113Z Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Private Profile. SC-5 SC-7 CCE-9007-6 2010-09-24T16:49:02.730Z 2012-01-05T04:37:27.830Z Windows Firewall should allow or block inbound connections by default as appropriate for the Public Profile. AC-4 SC-7 CCE-9742-8 2010-09-24T16:49:02.760Z 2012-01-05T04:37:45.080Z Display of a notification to the user when Windows Firewall blocks network activity should be enabled or disabled as appropriate for the public profile. CM-3 CM-6 CCE-9739-4 2010-09-24T16:49:02.777Z 2012-01-05T04:37:44.987Z The Windows Firewall should be enabled or disabled as appropriate for the Private Profile. AC-4 CCE-10373-9 2010-09-24T16:49:02.793Z 2010-10-04T15:53:18.280Z The "Log File Size Limit" for the Windows Firewall should be configured correctly for the Public Profile. CM-6 CCE-9753-5 2010-09-24T16:49:02.807Z 2012-01-05T04:37:47.957Z The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Public Profile. AU-2 CCE-10502-3 2010-09-24T16:49:02.807Z 2010-10-04T15:53:17.217Z The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Domain Profile. AU-2 CCE-4277-0 2010-09-24T17:00:07.590Z 2010-04-28T04:00:00.000Z The "Disable Update Diagnostics" setting should be configured correctly. CM-5 CM-6 CCE-10004-0 2010-10-04T15:44:40.280Z 2012-01-05T04:30:39.097Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. SC-1 CCE-10065-1 2010-10-04T15:44:40.377Z 2012-01-05T04:30:39.377Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CM-7 SI-3 CCE-10145-1 2010-10-04T15:44:40.500Z 2012-01-05T04:30:39.830Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CM-7 SI-3 CCE-10163-4 2010-10-04T15:44:40.517Z 2012-01-05T04:30:39.877Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Locked-Down Intranet Zone. CM-7 SI-3 CCE-10211-1 2010-10-04T15:44:40.563Z 2012-01-05T04:30:40.003Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Local Machine Zone. CM-7 SI-3 CCE-10253-3 2010-10-04T15:44:40.593Z 2012-01-05T04:30:40.127Z The "Prevent "Fix settings" functionality" machine setting should be configured correctly. CM-3 CCE-10291-3 2010-10-04T15:44:40.657Z 2012-01-05T04:30:40.330Z The "Turn on the auto-complete feature for user names and passwords on forms" current user setting should be configured correctly. CM-6 IA-5 CCE-10388-7 2010-10-04T15:44:40.750Z 2012-01-05T04:30:40.737Z The "Disable AutoComplete for forms" current user setting should be configured correctly. CM-5 CCE-10396-0 2010-10-04T15:44:40.827Z 2012-01-05T04:30:41.067Z The "Disable the Advanced page" machine setting should be configured correctly. CM-5 CM-6 CCE-10415-8 2010-10-04T15:44:40.890Z 2012-01-05T04:30:41.267Z The "Disable Save this program to disk option" current user setting should be configured correctly. CM-3 CM-6 CCE-10436-4 2010-10-04T15:44:40.937Z 2012-01-05T04:30:41.457Z The "Prevent ignoring certificate errors" machine setting should be configured correctly. CCE-10464-6 2010-10-04T15:44:40.967Z 2012-01-05T04:30:41.580Z The "Disable changing proxy settings" machine setting should be configured correctly. AC-4 CCE-10503-1 2010-10-04T15:44:41.093Z 2012-01-05T04:30:42.003Z The "Disable changing certificate settings" current user setting should be configured correctly. IA-5 CCE-10550-2 2010-10-04T15:44:41.157Z 2012-01-05T04:30:42.253Z The "Disable the Security page" machine setting should be configured correctly. CM-5 CM-6 CCE-10605-4 2010-10-04T15:44:41.297Z 2012-01-05T04:30:42.753Z The "Disable changing connection settings" machine setting should be configured correctly. CM-5 CCE-9230-4 2010-10-04T15:44:41.483Z 2012-01-05T04:30:43.423Z The "Only use the ActiveX Installer Service for installation of ActiveX Controls" machine setting should be configured correctly. SC-1 CCE-9233-8 2010-10-04T15:44:41.517Z 2012-01-05T04:30:43.470Z The "Prevent Bypassing SmartScreen Filter Warnings" machine setting should be configured correctly. CM-7 SI-3 CCE-9238-7 2010-10-04T15:44:41.530Z 2012-01-05T04:30:43.533Z The "Prevent Deleting Cookies" machine setting should be configured correctly. AU-9 CCE-9489-6 2010-10-04T15:44:41.547Z 2012-01-05T04:30:43.580Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Locked-Down Internet Zone. CM-7 SI-3 CCE-9504-2 2010-10-04T15:44:41.563Z 2012-01-05T04:30:43.643Z The "Disable Per-User Installation of ActiveX Controls" machine setting should be configured correctly. SC-1 CCE-9580-2 2010-10-04T15:44:41.577Z 2012-01-05T04:30:43.707Z The "Turn off ActiveX opt-in prompt" machine setting should be configured correctly. SC-1 CCE-9599-2 2010-10-04T15:44:41.593Z 2012-01-05T04:30:43.753Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Locked-Down Internet Zone. SC-1 CCE-9652-9 2010-10-04T15:44:41.610Z 2012-01-05T04:30:43.830Z The "Turn off Encryption Support" machine setting should be configured correctly. CM-3 CCE-9775-8 2010-10-04T15:44:41.717Z 2012-01-05T04:30:44.253Z The "Turn off "Delete Browsing History" functionality" machine setting should be configured correctly. CCE-9867-3 2010-10-04T15:44:41.877Z 2012-01-05T04:30:44.817Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CM-7 SI-3 CCE-9869-9 2010-10-04T15:44:41.890Z 2012-01-05T04:30:44.877Z The 'Software channel permissions' setting should be configured correctly for the Internet Zone. CM-5 CCE-9889-7 2010-10-04T15:44:41.923Z 2012-01-05T04:30:45.003Z The "Prevent Deleting Temporary Internet Files" machine setting should be configured correctly. AU-9 CCE-9987-9 2010-10-04T15:44:42.157Z 2010-10-04T15:44:42.157Z The "Disable Automatic Install of Internet Explorer components" setting should be configured correctly. CM-5 SI-3 SI-7 SI-8 CCE-10634-4 2010-10-04T15:44:42.173Z 2010-10-04T15:44:42.173Z The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly. CM-6 SC-1 SI-2 CCE-10632-8 2010-10-04T15:44:42.187Z 2010-10-04T15:44:42.203Z The "Disable showing the splash screen" setting should be configured correctly. CM-5 CM-6 CCE-14910-4 2010-10-04T15:44:42.703Z 2010-10-04T15:44:42.703Z The "Update Check Interval" should be set to the appropriate number of days. CCE-10540-3 2010-10-04T15:44:42.767Z 2010-10-04T15:44:42.780Z The "Turn off Managing Phishing Filter" setting should be configured correctly. SC-1 SI-3 SI-8 CCE-10829-0 2010-10-04T15:44:42.923Z 2012-01-05T04:30:47.940Z The "Disable external branding of Internet Explorer" current user setting should be configured correctly. CM-6 CCE-10701-1 2010-10-04T15:44:42.937Z 2012-01-05T04:30:47.987Z The "Turn off page transitions" current user setting should be configured correctly. CM-6 CCE-10816-7 2010-10-04T15:44:42.953Z 2012-01-05T04:30:48.017Z DEPRECATED. Previously: The "Turn on the Internet Connection Wizard Auto Detect" setting should be configured correctly. Note: According to Microsoft, does not apply to IE 8. CCE-10820-9 2010-10-04T15:44:42.967Z 2012-01-05T04:30:48.067Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Intranet Zone. CCE-16818-7 2010-10-04T15:44:43.000Z 2012-01-05T04:30:48.113Z The "Customize User Agent String" current user setting should be configured correctly. CCE-17008-4 2010-10-04T15:44:43.017Z 2012-01-05T04:30:48.157Z The "Do not allow users to enable or disable add-ons" current user setting should be configured correctly. CCE-17025-8 2010-10-04T15:44:43.030Z 2012-01-05T04:30:48.207Z The "Enforce Full Screen Mode" current user setting should be configured correctly. CCE-16073-9 2010-10-04T15:44:43.047Z 2012-01-05T04:30:48.253Z The "Disable changing ratings settings" current user setting should be configured correctly. CCE-16360-0 2010-10-04T15:44:43.063Z 2012-01-05T04:30:48.300Z The "Turn off Crash Detection" current user setting should be configured correctly. CCE-17043-1 2010-10-04T15:44:43.093Z 2012-01-05T04:30:48.347Z The "Prevent Internet Explorer Search box from displaying" current user setting should be configured correctly. CCE-16917-7 2010-10-04T15:44:43.110Z 2012-01-05T04:30:48.393Z The "Disable changing Temporary Internet files settings" current user setting should be configured correctly. CCE-17082-9 2010-10-04T15:44:43.140Z 2012-01-05T04:30:48.457Z The "Turn off configuration of default behavior of new tab creation" current user setting should be configured correctly. CCE-17007-6 2010-10-04T15:44:43.157Z 2012-01-05T04:30:48.503Z The "Disable Per-User Installation of ActiveX Controls" current user setting should be configured correctly. CCE-16902-9 2010-10-04T15:44:43.173Z 2012-01-05T04:30:48.550Z The "Turn off tabbed browsing" current user setting should be configured correctly. CCE-16218-0 2010-10-04T15:44:43.187Z 2012-01-05T04:30:48.580Z The "Restrict changing the default search provider" current user setting should be configured correctly. CCE-17086-0 2010-10-04T15:44:43.203Z 2012-01-05T04:30:48.643Z The "Disable changing color settings" current user setting should be configured correctly. CCE-16950-8 2010-10-04T15:44:43.217Z 2012-01-05T04:30:48.690Z The "Disable changing language settings" current user setting should be configured correctly. CCE-17053-0 2010-10-04T15:44:43.250Z 2012-01-05T04:30:48.737Z The "Prevent participation in the Customer Experience Improvement Program" current user setting should be configured correctly. CCE-16511-8 2010-10-04T15:44:43.267Z 2012-01-05T04:30:48.767Z The "Only use the ActiveX Installer Service for installation of ActiveX Controls" current user setting should be configured correctly. CCE-16893-0 2010-10-04T15:44:43.280Z 2012-01-05T04:30:48.817Z The "Turn off page zooming functionality" current user setting should be configured correctly. CCE-16478-0 2010-10-04T15:44:43.297Z 2012-01-05T04:30:48.863Z The "Disable changing default browser check" current user setting should be configured correctly. CCE-16813-8 2010-10-04T15:44:43.313Z 2012-01-05T04:30:48.907Z The "Disable changing Messaging settings" current user setting should be configured correctly. CCE-16919-3 2010-10-04T15:44:43.343Z 2012-01-05T04:30:48.957Z The "Disable changing Advanced page settings" current user setting should be configured correctly. CCE-16831-0 2010-10-04T15:44:43.360Z 2012-01-05T04:30:49.003Z The "Turn off the activation of the quick pick menu" current user setting should be configured correctly. CCE-16236-2 2010-10-04T15:44:43.377Z 2012-01-05T04:30:49.067Z The "Turn off Automatic Crash Recovery Prompt" current user setting should be configured correctly. CCE-16906-0 2010-10-04T15:44:43.390Z 2012-01-05T04:30:49.113Z The "Disable changing Calendar and Contact settings" current user setting should be configured correctly. CCE-16752-8 2010-10-04T15:44:43.407Z 2012-01-05T04:30:49.157Z The "Turn off displaying the Internet Explorer Help Menu" current user setting should be configured correctly. CCE-16474-9 2010-10-04T15:44:43.437Z 2012-01-05T04:30:49.207Z The "Disable changing proxy settings" current user setting should be configured correctly. CCE-16113-3 2010-10-04T15:44:43.453Z 2012-01-05T04:30:49.253Z The "Turn off Quick Tabs functionality" current user setting should be configured correctly. CCE-16626-4 2010-10-04T15:44:43.467Z 2012-01-05T04:30:49.300Z The "Disable caching of Auto-Proxy scripts" current user setting should be configured correctly. CCE-16090-3 2010-10-04T15:44:43.483Z 2012-01-05T04:30:49.347Z The "Turn off ActiveX opt-in prompt" current user setting should be configured correctly. CCE-16767-6 2010-10-04T15:44:43.500Z 2012-01-05T04:30:49.393Z The "Turn off the auto-complete feature for web addresses" current user setting should be configured correctly. CCE-16756-9 2010-10-04T15:44:43.530Z 2012-01-05T04:30:49.440Z The "Turn off Reopen Last Browsing Session" current user setting should be configured correctly. CCE-16351-9 2010-10-04T15:44:43.547Z 2012-01-05T04:30:49.487Z The "Turn off managing Pop-up filter level" current user setting should be configured correctly. CCE-16999-5 2010-10-04T15:44:43.563Z 2012-01-05T04:30:49.533Z The "Disable changing home page settings" current user setting should be configured correctly. CCE-17003-5 2010-10-04T15:44:43.577Z 2012-01-05T04:30:49.580Z The "Turn on menu bar by default" current user setting should be configured correctly. CCE-16356-8 2010-10-04T15:44:43.610Z 2012-01-05T04:30:49.643Z The "Disable changing link color settings" current user setting should be configured correctly. CCE-16285-9 2010-10-04T15:44:43.627Z 2012-01-05T04:30:49.690Z The "Turn off configuration of window reuse" current user setting should be configured correctly. CCE-16977-1 2010-10-04T15:44:43.640Z 2012-01-05T04:30:49.737Z The "Turn off Tab Grouping" current user setting should be configured correctly. CCE-17020-9 2010-10-04T15:44:43.657Z 2012-01-05T04:30:49.800Z The "Set tab process growth" current user setting should be configured correctly. CCE-16267-7 2010-10-04T15:44:43.687Z 2012-01-05T04:30:49.847Z The "Disable Internet Connection wizard" current user setting should be configured correctly. CCE-16364-2 2010-10-04T15:44:43.703Z 2012-01-05T04:30:49.907Z The "Prevent performance of First Run Customize settings" current user setting should be configured correctly. CCE-16232-1 2010-10-04T15:44:43.717Z 2012-01-05T04:30:49.957Z The "Turn off Managing Pop-up Allow list" current user setting should be configured correctly. CCE-16093-7 2010-10-04T15:44:43.733Z 2012-01-05T04:30:50.003Z The "Configure new tab page default behavior" current user setting should be configured correctly. CCE-17018-3 2010-10-04T15:44:43.750Z 2012-01-05T04:30:50.050Z The "Turn off pop-up management" current user setting should be configured correctly. CCE-16088-7 2010-10-04T15:44:43.767Z 2012-01-05T04:30:50.113Z The "Disable changing secondary home page settings" current user setting should be configured correctly. CCE-16915-1 2010-10-04T15:44:43.797Z 2012-01-05T04:30:50.157Z The "Prevent Bypassing SmartScreen Filter Warnings" current user setting should be configured correctly. CCE-16897-1 2010-10-04T15:44:43.813Z 2012-01-05T04:30:50.220Z The "Prevent "Fix settings" functionality" current user setting should be configured correctly. CCE-16699-1 2010-10-04T15:44:43.827Z 2012-01-05T04:30:50.283Z The "Restrict search providers to a specific list of providers" current user setting should be configured correctly. CCE-16263-6 2010-10-04T15:44:43.860Z 2012-01-05T04:30:50.330Z The "Disable changing Automatic Configuration settings" current user setting should be configured correctly. CCE-16079-6 2010-10-04T15:44:43.877Z 2012-01-05T04:30:50.377Z The "Disable changing accessibility settings" current user setting should be configured correctly. CCE-16620-7 2010-10-04T15:44:43.890Z 2012-01-05T04:30:50.423Z The "Pop-up allow list" current user setting should be configured correctly. CCE-16749-4 2010-10-04T15:44:43.923Z 2012-01-05T04:30:50.470Z The "Turn off configuration of tabbed browsing pop-up behavior" current user setting should be configured correctly. CCE-16406-1 2010-10-04T15:44:43.937Z 2012-01-05T04:30:50.517Z The "Display error message on proxy script download failure" current user setting should be configured correctly. CCE-17035-7 2010-10-04T15:44:43.953Z 2012-01-05T04:30:50.567Z The "Turn off Managing SmartScreen Filter" current user setting should be configured correctly. CCE-16663-7 2010-10-04T15:44:43.983Z 2012-01-05T04:30:50.613Z The "Turn on Suggested Sites" current user setting should be configured correctly. CCE-17012-6 2010-10-04T15:44:44.000Z 2012-01-05T04:30:50.657Z The "Disable changing font settings" current user setting should be configured correctly. CCE-16794-0 2010-10-04T15:44:44.017Z 2012-01-05T04:30:50.720Z The "Turn off Favorites bar" current user setting should be configured correctly. CCE-16994-6 2010-10-04T15:44:44.030Z 2012-01-05T04:30:50.767Z The "Turn off suggestions for all user-installed providers" current user setting should be configured correctly. CCE-16227-1 2010-10-04T15:44:44.047Z 2012-01-05T04:30:50.817Z The "Turn off the Security Settings Check feature" current user setting should be configured correctly. CCE-17031-6 2010-10-04T15:44:44.077Z 2012-01-05T04:30:50.863Z The "Use Automatic Detection for dial-up connections" current user setting should be configured correctly. CCE-16295-8 2010-10-04T15:44:44.093Z 2012-01-05T04:30:50.907Z The "Disable changing connection settings" current user setting should be configured correctly. CCE-16091-1 2010-10-04T15:44:44.110Z 2012-01-05T04:30:50.957Z The "Turn on Compatibility Logging" current user setting should be configured correctly. CCE-17030-8 2010-10-04T15:44:44.140Z 2012-01-05T04:30:51.003Z The "Moving the menu bar above the navigation bar" current user setting should be configured correctly. CCE-16487-1 2010-10-04T15:44:44.157Z 2012-01-05T04:30:51.067Z The "Add a specific list of search providers to the user's search provider list" current user setting should be configured correctly. CCE-16840-1 2010-10-04T15:44:44.173Z 2012-01-05T04:30:51.127Z The "Disable Import/Export Settings wizard" current user setting should be configured correctly. CCE-16033-3 2010-10-04T15:44:44.203Z 2012-01-05T04:30:51.173Z The "Turn off Accelerators" machine setting should be configured correctly. CCE-16395-6 2010-10-04T15:44:44.217Z 2012-01-05T04:30:51.220Z The "Deploy default Accelerators" machine setting should be configured correctly. CCE-16527-4 2010-10-04T15:44:44.233Z 2012-01-05T04:30:51.267Z The "Deploy non-default Accelerators" machine setting should be configured correctly. CCE-16276-8 2010-10-04T15:44:44.250Z 2012-01-05T04:30:51.317Z The "Use Policy Accelerators" machine setting should be configured correctly. CCE-16852-6 2010-10-04T15:44:44.280Z 2012-01-05T04:30:51.407Z The "Deploy non-default Accelerators" current user setting should be configured correctly. CCE-16874-0 2010-10-04T15:44:44.297Z 2012-01-05T04:30:51.457Z The "Deploy default Accelerators" current user setting should be configured correctly. CCE-16848-4 2010-10-04T15:44:44.313Z 2012-01-05T04:30:51.503Z The "Use Policy Accelerators" current user setting should be configured correctly. CCE-16879-9 2010-10-04T15:44:44.327Z 2012-01-05T04:30:51.567Z The "Turn off Accelerators" current user setting should be configured correctly. CCE-15702-4 2010-10-04T15:44:44.343Z 2012-01-05T04:30:51.613Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Restricted Sites Zone. CCE-16370-9 2010-10-04T15:44:44.377Z 2012-01-05T04:30:51.673Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Restricted Sites Zone. CCE-15641-4 2010-10-04T15:44:44.390Z 2012-01-05T04:30:51.753Z The "Allow active content over restricted protocols to access my computer" machine setting should be configured correctly for the Restricted Sites Zone. CCE-16299-0 2010-10-04T15:44:44.407Z 2012-01-05T04:30:51.800Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Restricted Sites Zone. CCE-16363-4 2010-10-04T15:44:44.423Z 2012-01-05T04:30:51.847Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Restricted Sites Zone. CCE-15546-5 2010-10-04T15:44:44.453Z 2012-01-05T04:30:51.893Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Restricted Sites Zone. CCE-16391-5 2010-10-04T15:44:44.467Z 2012-01-05T04:30:51.957Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Restricted Sites Zone. CCE-16268-5 2010-10-04T15:44:44.483Z 2012-01-05T04:30:52.003Z The "XAML browser applications" machine setting should be configured correctly for the Restricted Sites Zone. CCE-16537-3 2010-10-04T15:44:44.500Z 2012-01-05T04:30:52.050Z The "XPS documents" machine setting should be configured correctly for the Restricted Sites Zone. CCE-16294-1 2010-10-04T15:44:44.530Z 2012-01-05T04:30:52.097Z The "Display mixed content" machine setting should be configured correctly for the Restricted Sites Zone. CCE-15647-1 2010-10-04T15:44:44.547Z 2012-01-05T04:30:52.143Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Restricted Sites Zone. CCE-15569-7 2010-10-04T15:44:44.563Z 2012-01-05T04:30:52.190Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Restricted Sites Zone. CCE-15760-2 2010-10-04T15:44:44.593Z 2012-01-05T04:30:52.237Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Restricted Sites Zone. CCE-15727-1 2010-10-04T15:44:44.610Z 2012-01-05T04:30:52.283Z The "Allow the printing of background colors and images" current user setting should be configured correctly. CCE-16480-6 2010-10-04T15:44:44.627Z 2012-01-05T04:30:52.363Z The "Restrict ActiveX Install: Process List" machine setting should be configured correctly. CCE-16718-9 2010-10-04T15:44:44.673Z 2012-01-05T04:30:52.407Z The "Restrict ActiveX Install: All Processes" machine setting should be configured correctly. CCE-15480-7 2010-10-04T15:44:44.687Z 2012-01-05T04:30:52.457Z The "Prevent Deleting Favorites Site Data" machine setting should be configured correctly. CCE-15022-7 2010-10-04T15:44:44.703Z 2012-01-05T04:30:52.503Z The "Prevent Deleting Passwords" machine setting should be configured correctly. CCE-16001-0 2010-10-04T15:44:44.733Z 2012-01-05T04:30:52.567Z The "Prevent Deleting InPrivate Filtering data" machine setting should be configured correctly. CCE-15494-8 2010-10-04T15:44:44.750Z 2012-01-05T04:30:52.627Z The "Configure Delete Browsing History on exit" machine setting should be configured correctly. CCE-15242-1 2010-10-04T15:44:44.767Z 2012-01-05T04:30:52.673Z The "Prevent Deleting Form Data" machine setting should be configured correctly. CCE-16149-7 2010-10-04T15:44:44.780Z 2012-01-05T04:30:52.720Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Internet Zone. CCE-16173-7 2010-10-04T15:44:44.813Z 2012-01-05T04:30:52.783Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Internet Zone. CCE-16197-6 2010-10-04T15:44:44.827Z 2012-01-05T04:30:52.830Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Internet Zone. CCE-15201-7 2010-10-04T15:44:44.843Z 2012-01-05T04:30:52.877Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Internet Zone. CCE-16136-4 2010-10-04T15:44:44.877Z 2012-01-05T04:30:52.923Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Internet Zone. CCE-15986-3 2010-10-04T15:44:44.890Z 2012-01-05T04:30:52.970Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Internet Zone. CCE-15871-7 2010-10-04T15:44:44.907Z 2012-01-05T04:30:53.033Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Internet Zone. CCE-15686-9 2010-10-04T15:44:44.923Z 2012-01-05T04:30:53.080Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Internet Zone. CCE-16050-7 2010-10-04T15:44:44.953Z 2012-01-05T04:30:53.127Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Internet Zone. CCE-15438-5 2010-10-04T15:44:44.967Z 2012-01-05T04:30:53.173Z The "Display mixed content" current user setting should be configured correctly for the Internet Zone. CCE-15280-1 2010-10-04T15:44:44.983Z 2012-01-05T04:30:53.220Z The "Scripting of Java applets" current user setting should be configured correctly for the Internet Zone. CCE-15220-7 2010-10-04T15:44:45.017Z 2012-01-05T04:30:53.283Z The "Access data sources across domains" current user setting should be configured correctly for the Internet Zone. CCE-15825-3 2010-10-04T15:44:45.030Z 2012-01-05T04:30:53.347Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Internet Zone. CCE-16078-8 2010-10-04T15:44:45.047Z 2012-01-05T04:30:53.407Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Internet Zone. CCE-15515-0 2010-10-04T15:44:45.063Z 2012-01-05T04:30:53.470Z The "Allow active content over restricted protocols to access my computer" current user setting should be configured correctly for the Internet Zone. CCE-16182-8 2010-10-04T15:44:45.093Z 2012-01-05T04:30:53.517Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Internet Zone. CCE-15968-1 2010-10-04T15:44:45.110Z 2012-01-05T04:30:53.567Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Internet Zone. CCE-15305-6 2010-10-04T15:44:45.127Z 2012-01-05T04:30:53.627Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Internet Zone. CCE-16169-5 2010-10-04T15:44:45.140Z 2012-01-05T04:30:53.673Z The "XPS documents" current user setting should be configured correctly for the Internet Zone. CCE-15990-5 2010-10-04T15:44:45.173Z 2012-01-05T04:30:53.737Z The "Userdata persistence" current user setting should be configured correctly for the Internet Zone. CCE-15922-8 2010-10-04T15:44:45.187Z 2012-01-05T04:30:53.783Z The "Allow META REFRESH" current user setting should be configured correctly for the Internet Zone. CCE-15505-1 2010-10-04T15:44:45.203Z 2012-01-05T04:30:53.830Z The "Allow Scriptlets" current user setting should be configured correctly for the Internet Zone. CCE-15347-8 2010-10-04T15:44:45.233Z 2012-01-05T04:30:53.877Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Internet Zone. CCE-16083-8 2010-10-04T15:44:45.250Z 2012-01-05T04:30:53.923Z The "Logon options" current user setting should be configured correctly for the Internet Zone. CCE-15652-1 2010-10-04T15:44:45.267Z 2012-01-05T04:30:53.987Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Internet Zone. CCE-16028-3 2010-10-04T15:44:45.280Z 2012-01-05T04:30:54.033Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Internet Zone. CCE-15809-7 2010-10-04T15:44:45.297Z 2012-01-05T04:30:54.097Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Internet Zone. CCE-15202-5 2010-10-04T15:44:45.327Z 2012-01-05T04:30:54.143Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Internet Zone. CCE-15667-9 2010-10-04T15:44:45.343Z 2012-01-05T04:30:54.190Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Internet Zone. CCE-16201-6 2010-10-04T15:44:45.360Z 2012-01-05T04:30:54.253Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Internet Zone. CCE-15783-4 2010-10-04T15:44:45.390Z 2012-01-05T04:30:54.300Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Internet Zone. CCE-15931-9 2010-10-04T15:44:45.407Z 2012-01-05T04:30:54.347Z The "XAML browser applications" current user setting should be configured correctly for the Internet Zone. CCE-15675-2 2010-10-04T15:44:45.423Z 2012-01-05T04:30:54.393Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Internet Zone. CCE-15404-7 2010-10-04T15:44:45.453Z 2012-01-05T04:30:54.440Z The "Loose XAML files" current user setting should be configured correctly for the Internet Zone. CCE-15730-5 2010-10-04T15:44:45.467Z 2012-01-05T04:30:54.503Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Internet Zone. CCE-15356-9 2010-10-04T15:44:45.483Z 2012-01-05T04:30:54.550Z The "Allow installation of desktop items" current user setting should be configured correctly for the Internet Zone. CCE-16017-6 2010-10-04T15:44:45.517Z 2012-01-05T04:30:54.597Z The "Allow font downloads" current user setting should be configured correctly for the Internet Zone. CCE-16127-3 2010-10-04T15:44:45.530Z 2012-01-05T04:30:54.643Z The "Allow file downloads" current user setting should be configured correctly for the Internet Zone. CCE-15211-6 2010-10-04T15:44:45.547Z 2012-01-05T04:30:54.707Z The "Java permissions" current user setting should be configured correctly for the Internet Zone. CCE-16131-5 2010-10-04T15:44:45.577Z 2012-01-05T04:30:54.767Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Internet Zone. CCE-15510-1 2010-10-04T15:44:45.593Z 2012-01-05T04:30:54.817Z The "Software channel permissions" current user setting should be configured correctly for the Internet Zone. CCE-15223-1 2010-10-04T15:44:45.610Z 2012-01-05T04:30:54.863Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Internet Zone. CCE-15199-3 2010-10-04T15:44:45.627Z 2012-01-05T04:30:54.940Z The "Allow active scripting" current user setting should be configured correctly for the Internet Zone. CCE-15279-3 2010-10-04T15:44:45.657Z 2012-01-05T04:30:55.003Z The "Turn on Protected Mode" current user setting should be configured correctly for the Internet Zone. CCE-15518-4 2010-10-04T15:44:45.673Z 2012-01-05T04:30:55.050Z The "Allow status bar updates via script" current user setting should be configured correctly for the Internet Zone. CCE-16210-7 2010-10-04T15:44:45.687Z 2012-01-05T04:30:55.097Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Internet Zone. CCE-15263-7 2010-10-04T15:44:45.717Z 2012-01-05T04:30:55.157Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Internet Zone. CCE-15254-6 2010-10-04T15:44:45.733Z 2012-01-05T04:30:55.220Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Internet Zone. CCE-15598-6 2010-10-04T15:44:45.750Z 2012-01-05T04:30:55.267Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Internet Zone. CCE-15881-6 2010-10-04T15:44:45.780Z 2012-01-05T04:30:55.330Z The "Restrict File Download: All Processes" machine setting should be configured correctly. CCE-16775-9 2010-10-04T15:44:45.797Z 2012-01-05T04:30:55.377Z The "Restrict File Download: Process List" machine setting should be configured correctly. CCE-15578-8 2010-10-04T15:44:45.813Z 2012-01-05T04:30:55.440Z The "Allow Scriptlets" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15649-7 2010-10-04T15:44:45.827Z 2012-01-05T04:30:55.487Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16338-6 2010-10-04T15:44:45.860Z 2012-01-05T04:30:55.533Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16602-5 2010-10-04T15:44:45.877Z 2012-01-05T04:30:55.597Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16408-7 2010-10-04T15:44:45.890Z 2012-01-05T04:30:55.657Z The "Software channel permissions" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15339-5 2010-10-04T15:44:45.923Z 2012-01-05T04:30:55.707Z The "Allow installation of desktop items" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15317-1 2010-10-04T15:44:45.937Z 2012-01-05T04:30:55.753Z The "Scripting of Java applets" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15532-5 2010-10-04T15:44:45.953Z 2012-01-05T04:30:55.800Z The "Java permissions" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15724-8 2010-10-04T15:44:45.967Z 2012-01-05T04:30:55.863Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15979-8 2010-10-04T15:44:46.000Z 2012-01-05T04:30:55.907Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15838-6 2010-10-04T15:44:46.017Z 2012-01-05T04:30:55.957Z The "Display mixed content" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15712-3 2010-10-04T15:44:46.030Z 2012-01-05T04:30:56.003Z The "Userdata persistence" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16168-7 2010-10-04T15:44:46.063Z 2012-01-05T04:30:56.080Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15734-7 2010-10-04T15:44:46.077Z 2012-01-05T04:30:56.157Z The "Allow font downloads" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-17028-2 2010-10-04T15:44:46.093Z 2012-01-05T04:30:56.207Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15999-6 2010-10-04T15:44:46.127Z 2012-01-05T04:30:56.267Z The "Allow font downloads" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15690-1 2010-10-04T15:44:46.140Z 2012-01-05T04:30:56.317Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16063-0 2010-10-04T15:44:46.157Z 2012-01-05T04:30:56.363Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16014-3 2010-10-04T15:44:46.173Z 2012-01-05T04:30:56.407Z The "Turn on Protected Mode" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15320-5 2010-10-04T15:44:46.203Z 2012-01-05T04:30:56.457Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16187-7 2010-10-04T15:44:46.217Z 2012-01-05T04:30:56.503Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16844-3 2010-10-04T15:44:46.233Z 2012-01-05T04:30:56.550Z The "Loose XAML files" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16441-8 2010-10-04T15:44:46.267Z 2012-01-05T04:30:56.613Z The "Allow installation of desktop items" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15622-4 2010-10-04T15:44:46.280Z 2012-01-05T04:30:56.657Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15512-7 2010-10-04T15:44:46.313Z 2012-01-05T04:30:56.720Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16204-0 2010-10-04T15:44:46.327Z 2012-01-05T04:30:56.767Z The "Allow Scriptlets" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16983-9 2010-10-04T15:44:46.360Z 2012-01-05T04:30:56.817Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16177-8 2010-10-04T15:44:46.377Z 2012-01-05T04:30:56.863Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16174-5 2010-10-04T15:44:46.390Z 2012-01-05T04:30:56.907Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16015-0 2010-10-04T15:44:46.423Z 2012-01-05T04:30:56.957Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15102-7 2010-10-04T15:44:46.437Z 2012-01-05T04:30:57.003Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16429-3 2010-10-04T15:44:46.453Z 2012-01-05T04:30:57.050Z The "Display mixed content" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16067-1 2010-10-04T15:44:46.483Z 2012-01-05T04:30:57.113Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15067-2 2010-10-04T15:44:46.500Z 2012-01-05T04:30:57.143Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16809-6 2010-10-04T15:44:46.517Z 2012-01-05T04:30:57.220Z The "Logon options" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16444-2 2010-10-04T15:44:46.547Z 2012-01-05T04:30:57.300Z The "Scripting of Java applets" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16505-0 2010-10-04T15:44:46.563Z 2012-01-05T04:30:57.347Z The "Allow active scripting" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15963-2 2010-10-04T15:44:46.577Z 2012-01-05T04:30:57.393Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15976-4 2010-10-04T15:44:46.610Z 2012-01-05T04:30:57.440Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16215-6 2010-10-04T15:44:46.627Z 2012-01-05T04:30:57.487Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16117-4 2010-10-04T15:44:46.640Z 2012-01-05T04:30:57.533Z The "Logon options" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15747-9 2010-10-04T15:44:46.673Z 2012-01-05T04:30:57.580Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16430-1 2010-10-04T15:44:46.687Z 2012-01-05T04:30:57.627Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15327-0 2010-10-04T15:44:46.703Z 2012-01-05T04:30:57.673Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16219-8 2010-10-04T15:44:46.733Z 2012-01-05T04:30:57.720Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16561-3 2010-10-04T15:44:46.750Z 2012-01-05T04:30:57.767Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15323-9 2010-10-04T15:44:46.767Z 2012-01-05T04:30:57.817Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15882-4 2010-10-04T15:44:46.797Z 2012-01-05T04:30:57.907Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15636-4 2010-10-04T15:44:46.813Z 2012-01-05T04:30:57.970Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15873-3 2010-10-04T15:44:46.827Z 2012-01-05T04:30:58.017Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15351-0 2010-10-04T15:44:46.843Z 2012-01-05T04:30:58.080Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16642-1 2010-10-04T15:44:46.877Z 2012-01-05T04:30:58.127Z The "Allow Scriptlets" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16457-4 2010-10-04T15:44:46.890Z 2012-01-05T04:30:58.173Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16898-9 2010-10-04T15:44:46.907Z 2012-01-05T04:30:58.220Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15773-5 2010-10-04T15:44:46.937Z 2012-01-05T04:30:58.267Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15538-2 2010-10-04T15:44:46.953Z 2012-01-05T04:30:58.317Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16036-6 2010-10-04T15:44:46.967Z 2012-01-05T04:30:58.363Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16522-5 2010-10-04T15:44:47.000Z 2012-01-05T04:30:58.423Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16314-7 2010-10-04T15:44:47.017Z 2012-01-05T04:30:58.487Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16184-4 2010-10-04T15:44:47.030Z 2012-01-05T04:30:58.567Z The "Java permissions" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15500-2 2010-10-04T15:44:47.063Z 2012-01-05T04:30:58.613Z The "Access data sources across domains" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16129-9 2010-10-04T15:44:47.077Z 2012-01-05T04:30:58.673Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16407-9 2010-10-04T15:44:47.093Z 2012-01-05T04:30:58.720Z The "Turn on Protected Mode" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16270-1 2010-10-04T15:44:47.110Z 2012-01-05T04:30:58.767Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15692-7 2010-10-04T15:44:47.140Z 2012-01-05T04:30:58.830Z The "Java permissions" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15096-1 2010-10-04T15:44:47.157Z 2012-01-05T04:30:58.877Z The "Loose XAML files" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15091-2 2010-10-04T15:44:47.173Z 2012-01-05T04:30:58.940Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16335-2 2010-10-04T15:44:47.203Z 2012-01-05T04:30:58.987Z The "Allow active scripting" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16562-1 2010-10-04T15:44:47.217Z 2012-01-05T04:30:59.033Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15105-0 2010-10-04T15:44:47.250Z 2012-01-05T04:30:59.080Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15599-4 2010-10-04T15:44:47.267Z 2012-01-05T04:30:59.127Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15066-4 2010-10-04T15:44:47.280Z 2012-01-05T04:30:59.173Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15200-9 2010-10-04T15:44:47.313Z 2012-01-05T04:30:59.237Z The "XAML browser applications" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16459-0 2010-10-04T15:44:47.327Z 2012-01-05T04:30:59.283Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16181-0 2010-10-04T15:44:47.343Z 2012-01-05T04:30:59.330Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15926-9 2010-10-04T15:44:47.377Z 2012-01-05T04:30:59.377Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15601-8 2010-10-04T15:44:47.390Z 2012-01-05T04:30:59.423Z The "Logon options" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16040-8 2010-10-04T15:44:47.407Z 2012-01-05T04:30:59.470Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15693-5 2010-10-04T15:44:47.423Z 2012-01-05T04:30:59.567Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16434-3 2010-10-04T15:44:47.453Z 2012-01-05T04:30:59.613Z The "Allow status bar updates via script" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16234-7 2010-10-04T15:44:47.467Z 2012-01-05T04:30:59.657Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16281-8 2010-10-04T15:44:47.483Z 2012-01-05T04:30:59.707Z The "Scripting of Java applets" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16479-8 2010-10-04T15:44:47.517Z 2012-01-05T04:30:59.753Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16374-1 2010-10-04T15:44:47.530Z 2012-01-05T04:30:59.800Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16226-3 2010-10-04T15:44:47.547Z 2012-01-05T04:30:59.830Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16206-5 2010-10-04T15:44:47.577Z 2012-01-05T04:30:59.893Z The "Allow Scriptlets" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16466-5 2010-10-04T15:44:47.593Z 2012-01-05T04:30:59.940Z The "XPS documents" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-17227-0 2010-10-04T15:44:47.627Z 2012-01-05T04:30:59.987Z The "Allow font downloads" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16176-0 2010-10-04T15:44:47.640Z 2012-01-05T04:31:00.050Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16361-8 2010-10-04T15:44:47.657Z 2012-01-05T04:31:00.097Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16816-1 2010-10-04T15:44:47.687Z 2012-01-05T04:31:00.157Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15876-6 2010-10-04T15:44:47.703Z 2012-01-05T04:31:00.207Z The "Allow META REFRESH" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15832-9 2010-10-04T15:44:47.717Z 2012-01-05T04:31:00.253Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16296-6 2010-10-04T15:44:47.750Z 2012-01-05T04:31:00.300Z The "Software channel permissions" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16426-9 2010-10-04T15:44:47.767Z 2012-01-05T04:31:00.347Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16449-1 2010-10-04T15:44:47.780Z 2012-01-05T04:31:00.393Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15076-3 2010-10-04T15:44:47.813Z 2012-01-05T04:31:00.440Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16220-6 2010-10-04T15:44:47.827Z 2012-01-05T04:31:00.487Z The "Allow file downloads" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15044-1 2010-10-04T15:44:47.843Z 2012-01-05T04:31:00.533Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16211-5 2010-10-04T15:44:47.860Z 2012-01-05T04:31:00.580Z The "Display mixed content" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15862-6 2010-10-04T15:44:47.890Z 2012-01-05T04:31:00.627Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16180-2 2010-10-04T15:44:47.907Z 2012-01-05T04:31:00.673Z The "Allow status bar updates via script" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16359-2 2010-10-04T15:44:47.923Z 2012-01-05T04:31:00.720Z The "XAML browser applications" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15558-0 2010-10-04T15:44:47.953Z 2012-01-05T04:31:00.783Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16452-5 2010-10-04T15:44:47.967Z 2012-01-05T04:31:00.863Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15620-8 2010-10-04T15:44:47.983Z 2012-01-05T04:31:00.907Z The "Software channel permissions" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16381-6 2010-10-04T15:44:48.017Z 2012-01-05T04:31:00.957Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16024-2 2010-10-04T15:44:48.047Z 2012-01-05T04:31:01.003Z The "Allow META REFRESH" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-17238-7 2010-10-04T15:44:48.063Z 2012-01-05T04:31:01.050Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16492-1 2010-10-04T15:44:48.077Z 2012-01-05T04:31:01.097Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16344-4 2010-10-04T15:44:48.110Z 2012-01-05T04:31:01.143Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16071-3 2010-10-04T15:44:48.127Z 2012-01-05T04:31:01.190Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16476-4 2010-10-04T15:44:48.140Z 2012-01-05T04:31:01.237Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16280-0 2010-10-04T15:44:48.173Z 2012-01-05T04:31:01.283Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16190-1 2010-10-04T15:44:48.187Z 2012-01-05T04:31:01.347Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16095-2 2010-10-04T15:44:48.203Z 2012-01-05T04:31:01.393Z The "Allow status bar updates via script" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-17252-8 2010-10-04T15:44:48.233Z 2012-01-05T04:31:01.440Z The "Userdata persistence" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15212-4 2010-10-04T15:44:48.250Z 2012-01-05T04:31:01.487Z The "Software channel permissions" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16155-4 2010-10-04T15:44:48.267Z 2012-01-05T04:31:01.550Z The "Java permissions" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15204-1 2010-10-04T15:44:48.297Z 2012-01-05T04:31:01.597Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15567-1 2010-10-04T15:44:48.313Z 2012-01-05T04:31:01.643Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16325-3 2010-10-04T15:44:48.327Z 2012-01-05T04:31:01.690Z The "Allow installation of desktop items" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15966-5 2010-10-04T15:44:48.360Z 2012-01-05T04:31:01.737Z The "Access data sources across domains" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16291-7 2010-10-04T15:44:48.377Z 2012-01-05T04:31:01.783Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15975-6 2010-10-04T15:44:48.407Z 2012-01-05T04:31:01.847Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15678-6 2010-10-04T15:44:48.423Z 2012-01-05T04:31:01.893Z The "Userdata persistence" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15243-9 2010-10-04T15:44:48.437Z 2012-01-05T04:31:01.940Z The "Java permissions" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16080-4 2010-10-04T15:44:48.467Z 2012-01-05T04:31:02.003Z The "Allow file downloads" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15935-0 2010-10-04T15:44:48.483Z 2012-01-05T04:31:02.050Z The "Loose XAML files" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15992-1 2010-10-04T15:44:48.500Z 2012-01-05T04:31:02.097Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16331-1 2010-10-04T15:44:48.530Z 2012-01-05T04:31:02.157Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16075-4 2010-10-04T15:44:48.547Z 2012-01-05T04:31:02.207Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16311-3 2010-10-04T15:44:48.563Z 2012-01-05T04:31:02.253Z The "Allow Scriptlets" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-17231-2 2010-10-04T15:44:48.593Z 2012-01-05T04:31:02.300Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15722-2 2010-10-04T15:44:48.610Z 2012-01-05T04:31:02.347Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15742-0 2010-10-04T15:44:48.640Z 2012-01-05T04:31:02.393Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16448-3 2010-10-04T15:44:48.657Z 2012-01-05T04:31:02.440Z The "XPS documents" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15984-8 2010-10-04T15:44:48.673Z 2012-01-05T04:31:02.487Z The "Allow status bar updates via script" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16134-9 2010-10-04T15:44:48.703Z 2012-01-05T04:31:02.550Z The "Userdata persistence" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16926-8 2010-10-04T15:44:48.717Z 2012-01-05T04:31:02.597Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16272-7 2010-10-04T15:44:48.733Z 2012-01-05T04:31:02.657Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16473-1 2010-10-04T15:44:48.767Z 2012-01-05T04:31:02.707Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16450-9 2010-10-04T15:44:48.780Z 2012-01-05T04:31:02.753Z The "Allow active scripting" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-17062-1 2010-10-04T15:44:48.813Z 2012-01-05T04:31:02.800Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15812-1 2010-10-04T15:44:48.827Z 2012-01-05T04:31:02.863Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16265-1 2010-10-04T15:44:48.860Z 2012-01-05T04:31:02.907Z The "XAML browser applications" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16200-8 2010-10-04T15:44:48.877Z 2012-01-05T04:31:02.957Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15912-9 2010-10-04T15:44:48.890Z 2012-01-05T04:31:03.003Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16065-5 2010-10-04T15:44:48.923Z 2012-01-05T04:31:03.050Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15816-2 2010-10-04T15:44:48.937Z 2012-01-05T04:31:03.113Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16346-9 2010-10-04T15:44:48.967Z 2012-01-05T04:31:03.157Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16062-2 2010-10-04T15:44:48.983Z 2012-01-05T04:31:03.253Z The "Allow active scripting" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-17077-9 2010-10-04T15:44:49.017Z 2012-01-05T04:31:03.300Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15638-0 2010-10-04T15:44:49.030Z 2012-01-05T04:31:03.347Z The "Allow META REFRESH" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-17243-7 2010-10-04T15:44:49.047Z 2012-01-05T04:31:03.393Z The "Allow installation of desktop items" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16486-3 2010-10-04T15:44:49.077Z 2012-01-05T04:31:03.440Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16417-8 2010-10-04T15:44:49.093Z 2012-01-05T04:31:03.503Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15463-3 2010-10-04T15:44:49.110Z 2012-01-05T04:31:03.550Z The "Logon options" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16035-8 2010-10-04T15:44:49.140Z 2012-01-05T04:31:03.597Z The "Allow active scripting" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16055-6 2010-10-04T15:44:49.157Z 2012-01-05T04:31:03.643Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16732-0 2010-10-04T15:44:49.187Z 2012-01-05T04:31:03.690Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16501-9 2010-10-04T15:44:49.203Z 2012-01-05T04:31:03.737Z The "Loose XAML files" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16307-1 2010-10-04T15:44:49.217Z 2012-01-05T04:31:03.800Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16580-3 2010-10-04T15:44:49.250Z 2012-01-05T04:31:03.847Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15703-2 2010-10-04T15:44:49.267Z 2012-01-05T04:31:03.907Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16481-4 2010-10-04T15:44:49.280Z 2012-01-05T04:31:03.957Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-17247-8 2010-10-04T15:44:49.313Z 2012-01-05T04:31:04.003Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16556-3 2010-10-04T15:44:49.327Z 2012-01-05T04:31:04.050Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15036-7 2010-10-04T15:44:49.360Z 2012-01-05T04:31:04.097Z The "Allow installation of desktop items" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16482-2 2010-10-04T15:44:49.377Z 2012-01-05T04:31:04.143Z The "XAML browser applications" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16442-6 2010-10-04T15:44:49.390Z 2012-01-05T04:31:04.207Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15981-4 2010-10-04T15:44:49.423Z 2012-01-05T04:31:04.253Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-17146-2 2010-10-04T15:44:49.437Z 2012-01-05T04:31:04.300Z The "Scripting of Java applets" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16949-0 2010-10-04T15:44:49.467Z 2012-01-05T04:31:04.363Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15525-9 2010-10-04T15:44:49.483Z 2012-01-05T04:31:04.407Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-17021-7 2010-10-04T15:44:49.500Z 2012-01-05T04:31:04.457Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15755-2 2010-10-04T15:44:49.530Z 2012-01-05T04:31:04.503Z The "Scripting of Java applets" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-17177-7 2010-10-04T15:44:49.547Z 2012-01-05T04:31:04.550Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15754-5 2010-10-04T15:44:49.577Z 2012-01-05T04:31:04.597Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16213-1 2010-10-04T15:44:49.610Z 2012-01-05T04:31:04.643Z The "Allow font downloads" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16352-7 2010-10-04T15:44:49.627Z 2012-01-05T04:31:04.690Z The "XAML browser applications" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15778-4 2010-10-04T15:44:49.640Z 2012-01-05T04:31:04.737Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16970-6 2010-10-04T15:44:49.673Z 2012-01-05T04:31:04.783Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15324-7 2010-10-04T15:44:49.687Z 2012-01-05T04:31:04.830Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15942-6 2010-10-04T15:44:49.703Z 2012-01-05T04:31:04.877Z The "XPS documents" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16217-2 2010-10-04T15:44:49.733Z 2012-01-05T04:31:04.940Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15574-7 2010-10-04T15:44:49.750Z 2012-01-05T04:31:05.003Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16333-7 2010-10-04T15:44:49.780Z 2012-01-05T04:31:05.067Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15432-8 2010-10-04T15:44:49.797Z 2012-01-05T04:31:05.113Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16446-7 2010-10-04T15:44:49.827Z 2012-01-05T04:31:05.173Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16045-7 2010-10-04T15:44:49.843Z 2012-01-05T04:31:05.220Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-17066-2 2010-10-04T15:44:49.860Z 2012-01-05T04:31:05.267Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15233-0 2010-10-04T15:44:49.890Z 2012-01-05T04:31:05.317Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16222-2 2010-10-04T15:44:49.907Z 2012-01-05T04:31:05.363Z The "Access data sources across domains" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15997-0 2010-10-04T15:44:49.923Z 2012-01-05T04:31:05.407Z The "Allow file downloads" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15941-8 2010-10-04T15:44:49.953Z 2012-01-05T04:31:05.457Z The "Loose XAML files" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15634-9 2010-10-04T15:44:49.967Z 2012-01-05T04:31:05.550Z The "Allow file downloads" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15228-0 2010-10-04T15:44:50.000Z 2012-01-05T04:31:05.597Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15301-5 2010-10-04T15:44:50.017Z 2012-01-05T04:31:05.643Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15679-4 2010-10-04T15:44:50.030Z 2012-01-05T04:31:05.690Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16221-4 2010-10-04T15:44:50.063Z 2012-01-05T04:31:05.737Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15939-2 2010-10-04T15:44:50.077Z 2012-01-05T04:31:05.783Z The "XPS documents" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16390-7 2010-10-04T15:44:50.110Z 2012-01-05T04:31:05.830Z The "Allow file downloads" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-17225-4 2010-10-04T15:44:50.127Z 2012-01-05T04:31:05.893Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16339-4 2010-10-04T15:44:50.140Z 2012-01-05T04:31:05.940Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16305-5 2010-10-04T15:44:50.173Z 2012-01-05T04:31:05.987Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16321-2 2010-10-04T15:44:50.187Z 2012-01-05T04:31:06.033Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15551-5 2010-10-04T15:44:50.217Z 2012-01-05T04:31:06.097Z The "Userdata persistence" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16453-3 2010-10-04T15:44:50.233Z 2012-01-05T04:31:06.157Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16258-6 2010-10-04T15:44:50.250Z 2012-01-05T04:31:06.207Z The "Allow status bar updates via script" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15322-1 2010-10-04T15:44:50.280Z 2012-01-05T04:31:06.253Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16386-5 2010-10-04T15:44:50.297Z 2012-01-05T04:31:06.300Z The "Turn on Protected Mode" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16495-4 2010-10-04T15:44:50.327Z 2012-01-05T04:31:06.347Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-17118-1 2010-10-04T15:44:50.343Z 2012-01-05T04:31:06.393Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16415-2 2010-10-04T15:44:50.377Z 2012-01-05T04:31:06.457Z The "XPS documents" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-17180-1 2010-10-04T15:44:50.390Z 2012-01-05T04:31:06.487Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16366-7 2010-10-04T15:44:50.423Z 2012-01-05T04:31:06.533Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16223-0 2010-10-04T15:44:50.437Z 2012-01-05T04:31:06.580Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15506-9 2010-10-04T15:44:50.453Z 2012-01-05T04:31:06.627Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15626-5 2010-10-04T15:44:50.483Z 2012-01-05T04:31:06.690Z The "Access data sources across domains" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16560-5 2010-10-04T15:44:50.500Z 2012-01-05T04:31:06.737Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-17141-3 2010-10-04T15:44:50.517Z 2012-01-05T04:31:06.800Z The "Allow META REFRESH" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16399-8 2010-10-04T15:44:50.547Z 2012-01-05T04:31:06.863Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16326-1 2010-10-04T15:44:50.563Z 2012-01-05T04:31:06.907Z The "Display mixed content" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15100-1 2010-10-04T15:44:50.593Z 2012-01-05T04:31:06.970Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15318-9 2010-10-04T15:44:50.610Z 2012-01-05T04:31:07.033Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-17032-4 2010-10-04T15:44:50.640Z 2012-01-05T04:31:07.080Z The "Turn on Protected Mode" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16198-4 2010-10-04T15:44:50.657Z 2012-01-05T04:31:07.127Z The "Allow META REFRESH" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15255-3 2010-10-04T15:44:50.673Z 2012-01-05T04:31:07.173Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-17078-7 2010-10-04T15:44:50.703Z 2012-01-05T04:31:07.237Z The "Software channel permissions" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15513-5 2010-10-04T15:44:50.717Z 2012-01-05T04:31:07.283Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16455-8 2010-10-04T15:44:50.733Z 2012-01-05T04:31:07.330Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15539-0 2010-10-04T15:44:50.767Z 2012-01-05T04:31:07.377Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15603-4 2010-10-04T15:44:50.780Z 2012-01-05T04:31:07.423Z The "Turn on Protected Mode" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16576-1 2010-10-04T15:44:50.797Z 2012-01-05T04:31:07.470Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15328-8 2010-10-04T15:44:50.827Z 2012-01-05T04:31:07.517Z The "Display mixed content" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16412-9 2010-10-04T15:44:50.843Z 2012-01-05T04:31:07.567Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16420-2 2010-10-04T15:44:50.860Z 2012-01-05T04:31:07.613Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16761-9 2010-10-04T15:44:50.890Z 2012-01-05T04:31:07.673Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16041-6 2010-10-04T15:44:50.907Z 2012-01-05T04:31:07.720Z The "Access data sources across domains" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-15646-3 2010-10-04T15:44:50.937Z 2012-01-05T04:31:07.767Z The "Logon options" current user setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16011-9 2010-10-04T15:44:50.953Z 2012-01-05T04:31:07.830Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15632-3 2010-10-04T15:44:50.983Z 2012-01-05T04:31:07.877Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15589-5 2010-10-04T15:44:51.017Z 2012-01-05T04:31:07.923Z The "Allow font downloads" current user setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16082-0 2010-10-04T15:44:51.030Z 2012-01-05T04:31:08.003Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Locked-Down Internet Zone. CCE-16645-4 2010-10-04T15:44:51.047Z 2012-01-05T04:31:08.067Z The "Restrict ActiveX Install: Internet Explorer Processes" current user setting should be configured correctly. CCE-15869-1 2010-10-04T15:44:51.077Z 2012-01-05T04:31:08.127Z The "Restrict ActiveX Install: All Processes" current user setting should be configured correctly. CCE-16491-3 2010-10-04T15:44:51.093Z 2012-01-05T04:31:08.173Z The "Restrict ActiveX Install: Process List" current user setting should be configured correctly. CCE-16032-5 2010-10-04T15:44:51.127Z 2012-01-05T04:31:08.220Z The "Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt: Internet Explorer Processes" machine setting should be configured correctly. CCE-15508-5 2010-10-04T15:44:51.140Z 2012-01-05T04:31:08.283Z The "Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt: All Processes" machine setting should be configured correctly. CCE-15781-8 2010-10-04T15:44:51.173Z 2012-01-05T04:31:08.330Z The "Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt: Process List" machine setting should be configured correctly. CCE-15482-3 2010-10-04T15:44:51.187Z 2012-01-05T04:31:08.377Z The "Object Caching Protection: Process List" machine setting should be configured correctly. CCE-15483-1 2010-10-04T15:44:51.203Z 2012-01-05T04:31:08.423Z The "Object Caching Protection: Internet Explorer Processes" machine setting should be configured correctly. CCE-15487-2 2010-10-04T15:44:51.233Z 2012-01-05T04:31:08.470Z The "Object Caching Protection: All Processes" machine setting should be configured correctly. CCE-16683-5 2010-10-04T15:44:51.250Z 2012-01-05T04:31:08.517Z The "Prevent setting of the code download path for each machine" machine setting should be configured correctly. CCE-16121-6 2010-10-04T15:44:51.267Z 2012-01-05T04:31:08.567Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Local Machine Zone. CCE-15177-9 2010-10-04T15:44:51.297Z 2012-01-05T04:31:08.613Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Local Machine Zone. CCE-16081-2 2010-10-04T15:44:51.313Z 2012-01-05T04:31:08.657Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Local Machine Zone. CCE-16085-3 2010-10-04T15:44:51.343Z 2012-01-05T04:31:08.707Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Local Machine Zone. CCE-15787-5 2010-10-04T15:44:51.360Z 2012-01-05T04:31:08.737Z The "Software channel permissions" current user setting should be configured correctly for the Local Machine Zone. CCE-15961-6 2010-10-04T15:44:51.377Z 2012-01-05T04:31:08.783Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Local Machine Zone. CCE-15989-7 2010-10-04T15:44:51.407Z 2012-01-05T04:31:08.830Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Local Machine Zone. CCE-15215-7 2010-10-04T15:44:51.423Z 2012-01-05T04:31:08.877Z The "Allow Scriptlets" current user setting should be configured correctly for the Local Machine Zone. CCE-15446-8 2010-10-04T15:44:51.453Z 2012-01-05T04:31:08.923Z The "Java permissions" current user setting should be configured correctly for the Local Machine Zone. CCE-15748-7 2010-10-04T15:44:51.467Z 2012-01-05T04:31:08.970Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Local Machine Zone. CCE-15479-9 2010-10-04T15:44:51.483Z 2012-01-05T04:31:09.017Z The "Allow installation of desktop items" current user setting should be configured correctly for the Local Machine Zone. CCE-15162-1 2010-10-04T15:44:51.517Z 2012-01-05T04:31:09.050Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Local Machine Zone. CCE-15385-8 2010-10-04T15:44:51.530Z 2012-01-05T04:31:09.097Z The "Allow META REFRESH" current user setting should be configured correctly for the Local Machine Zone. CCE-15171-2 2010-10-04T15:44:51.563Z 2012-01-05T04:31:09.143Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Local Machine Zone. CCE-16044-0 2010-10-04T15:44:51.577Z 2012-01-05T04:31:09.190Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Local Machine Zone. CCE-15988-9 2010-10-04T15:44:51.610Z 2012-01-05T04:31:09.237Z The "Turn on Protected Mode" current user setting should be configured correctly for the Local Machine Zone. CCE-15858-4 2010-10-04T15:44:51.627Z 2012-01-05T04:31:09.300Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Local Machine Zone. CCE-15195-1 2010-10-04T15:44:51.640Z 2012-01-05T04:31:09.363Z The "Userdata persistence" current user setting should be configured correctly for the Local Machine Zone. CCE-16122-4 2010-10-04T15:44:51.673Z 2012-01-05T04:31:09.407Z The "Allow file downloads" current user setting should be configured correctly for the Local Machine Zone. CCE-15153-0 2010-10-04T15:44:51.687Z 2012-01-05T04:31:09.440Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Local Machine Zone. CCE-15157-1 2010-10-04T15:44:51.717Z 2012-01-05T04:31:09.487Z The "Allow active content over restricted protocols to access my computer" current user setting should be configured correctly for the Local Machine Zone. CCE-16116-6 2010-10-04T15:44:51.750Z 2012-01-05T04:31:09.533Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Local Machine Zone. CCE-15800-6 2010-10-04T15:44:51.767Z 2012-01-05T04:31:09.580Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Local Machine Zone. CCE-16108-3 2010-10-04T15:44:51.780Z 2012-01-05T04:31:09.643Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Local Machine Zone. CCE-15902-0 2010-10-04T15:44:51.813Z 2012-01-05T04:31:09.690Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Local Machine Zone. CCE-16025-9 2010-10-04T15:44:51.827Z 2012-01-05T04:31:09.737Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Local Machine Zone. CCE-15761-0 2010-10-04T15:44:51.860Z 2012-01-05T04:31:09.783Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Local Machine Zone. CCE-15668-7 2010-10-04T15:44:51.877Z 2012-01-05T04:31:09.817Z The "Allow font downloads" current user setting should be configured correctly for the Local Machine Zone. CCE-16064-8 2010-10-04T15:44:51.907Z 2012-01-05T04:31:09.863Z The "XPS documents" current user setting should be configured correctly for the Local Machine Zone. CCE-15196-9 2010-10-04T15:44:51.923Z 2012-01-05T04:31:09.923Z The "Allow active scripting" current user setting should be configured correctly for the Local Machine Zone. CCE-16054-9 2010-10-04T15:44:51.937Z 2012-01-05T04:31:09.970Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Local Machine Zone. CCE-15193-6 2010-10-04T15:44:51.967Z 2012-01-05T04:31:10.017Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Local Machine Zone. CCE-15757-8 2010-10-04T15:44:51.983Z 2012-01-05T04:31:10.067Z The "Access data sources across domains" current user setting should be configured correctly for the Local Machine Zone. CCE-16144-8 2010-10-04T15:44:52.017Z 2012-01-05T04:31:10.127Z The "Display mixed content" current user setting should be configured correctly for the Local Machine Zone. CCE-15241-3 2010-10-04T15:44:52.030Z 2012-01-05T04:31:10.173Z The "XAML browser applications" current user setting should be configured correctly for the Local Machine Zone. CCE-16076-2 2010-10-04T15:44:52.063Z 2012-01-05T04:31:10.220Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Local Machine Zone. CCE-16003-6 2010-10-04T15:44:52.077Z 2012-01-05T04:31:10.267Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Local Machine Zone. CCE-15602-6 2010-10-04T15:44:52.093Z 2012-01-05T04:31:10.317Z The "Scripting of Java applets" current user setting should be configured correctly for the Local Machine Zone. CCE-16031-7 2010-10-04T15:44:52.127Z 2012-01-05T04:31:10.363Z The "Logon options" current user setting should be configured correctly for the Local Machine Zone. CCE-16126-5 2010-10-04T15:44:52.140Z 2012-01-05T04:31:10.407Z The "Allow status bar updates via script" current user setting should be configured correctly for the Local Machine Zone. CCE-16140-6 2010-10-04T15:44:52.173Z 2012-01-05T04:31:10.470Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Local Machine Zone. CCE-16100-0 2010-10-04T15:44:52.187Z 2012-01-05T04:31:10.517Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Local Machine Zone. CCE-15185-2 2010-10-04T15:44:52.203Z 2012-01-05T04:31:10.597Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Local Machine Zone. CCE-16099-4 2010-10-04T15:44:52.233Z 2012-01-05T04:31:10.673Z The "Loose XAML files" current user setting should be configured correctly for the Local Machine Zone. CCE-15880-8 2010-10-04T15:44:52.250Z 2012-01-05T04:31:10.720Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Local Machine Zone. CCE-16059-8 2010-10-04T15:44:52.280Z 2012-01-05T04:31:10.767Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Local Machine Zone. CCE-15565-5 2010-10-04T15:44:52.297Z 2012-01-05T04:31:10.830Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Local Machine Zone. CCE-15752-9 2010-10-04T15:44:52.313Z 2012-01-05T04:31:10.877Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Local Machine Zone. CCE-15237-1 2010-10-04T15:44:52.343Z 2012-01-05T04:31:10.923Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Local Machine Zone. CCE-15959-0 2010-10-04T15:44:52.377Z 2012-01-05T04:31:10.957Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Local Machine Zone. CCE-16692-6 2010-10-04T15:44:52.390Z 2012-01-05T04:31:11.003Z The "Network Protocol Lockdown: Internet Explorer Processes" current user setting should be configured correctly. CCE-16696-7 2010-10-04T15:44:52.407Z 2012-01-05T04:31:11.050Z The "Network Protocol Lockdown: All Processes" current user setting should be configured correctly. CCE-16670-2 2010-10-04T15:44:52.437Z 2012-01-05T04:31:11.097Z The "Network Protocol Lockdown: Process List" current user setting should be configured correctly. CCE-16648-8 2010-10-04T15:44:52.453Z 2012-01-05T04:31:11.143Z The "Consistent Mime Handling: All Processes" machine setting should be configured correctly. CCE-16653-8 2010-10-04T15:44:52.483Z 2012-01-05T04:31:11.190Z The "Consistent Mime Handling: Process List" machine setting should be configured correctly. CCE-17095-1 2010-10-04T15:44:52.500Z 2012-01-05T04:31:11.237Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17092-8 2010-10-04T15:44:52.530Z 2012-01-05T04:31:11.283Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16988-8 2010-10-04T15:44:52.547Z 2012-01-05T04:31:11.347Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17014-2 2010-10-04T15:44:52.577Z 2012-01-05T04:31:11.393Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17054-8 2010-10-04T15:44:52.593Z 2012-01-05T04:31:11.440Z The "Display mixed content" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17076-1 2010-10-04T15:44:52.627Z 2012-01-05T04:31:11.487Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17023-3 2010-10-04T15:44:52.640Z 2012-01-05T04:31:11.533Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17006-8 2010-10-04T15:44:52.673Z 2012-01-05T04:31:11.580Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16611-6 2010-10-04T15:44:52.687Z 2012-01-05T04:31:11.627Z The "XPS documents" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16734-6 2010-10-04T15:44:52.703Z 2012-01-05T04:31:11.673Z The "Allow file downloads" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16196-8 2010-10-04T15:44:52.733Z 2012-01-05T04:31:11.767Z The "Logon options" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17107-4 2010-10-04T15:44:52.750Z 2012-01-05T04:31:11.830Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16817-9 2010-10-04T15:44:52.767Z 2012-01-05T04:31:11.877Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16159-6 2010-10-04T15:44:52.797Z 2012-01-05T04:31:11.923Z The "Java permissions" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16494-7 2010-10-04T15:44:52.813Z 2012-01-05T04:31:11.987Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16118-2 2010-10-04T15:44:52.843Z 2012-01-05T04:31:12.050Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16905-2 2010-10-04T15:44:52.860Z 2012-01-05T04:31:12.097Z The "Userdata persistence" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17073-8 2010-10-04T15:44:52.890Z 2012-01-05T04:31:12.143Z The "Access data sources across domains" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16974-8 2010-10-04T15:44:52.907Z 2012-01-05T04:31:12.190Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17063-9 2010-10-04T15:44:52.937Z 2012-01-05T04:31:12.237Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16154-7 2010-10-04T15:44:52.953Z 2012-01-05T04:31:12.283Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17010-0 2010-10-04T15:44:52.983Z 2012-01-05T04:31:12.330Z The "Allow active scripting" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16878-1 2010-10-04T15:44:53.000Z 2012-01-05T04:31:12.377Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16156-2 2010-10-04T15:44:53.030Z 2012-01-05T04:31:12.440Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16496-2 2010-10-04T15:44:53.047Z 2012-01-05T04:31:12.487Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16240-4 2010-10-04T15:44:53.077Z 2012-01-05T04:31:12.533Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16209-9 2010-10-04T15:44:53.093Z 2012-01-05T04:31:12.580Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17079-5 2010-10-04T15:44:53.127Z 2012-01-05T04:31:12.643Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Restricted Sites Zone. CCE-16135-6 2010-10-04T15:44:53.140Z 2012-01-05T04:31:12.690Z The "Software channel permissions" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16738-7 2010-10-04T15:44:53.157Z 2012-01-05T04:31:12.737Z The "Allow active content over restricted protocols to access my computer" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16855-9 2010-10-04T15:44:53.187Z 2012-01-05T04:31:12.783Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16139-8 2010-10-04T15:44:53.203Z 2012-01-05T04:31:12.830Z The "Loose XAML files" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17124-9 2010-10-04T15:44:53.233Z 2012-01-05T04:31:12.877Z The "Allow META REFRESH" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17085-2 2010-10-04T15:44:53.250Z 2012-01-05T04:31:12.923Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16107-5 2010-10-04T15:44:53.280Z 2012-01-05T04:31:12.970Z The "Allow installation of desktop items" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17088-6 2010-10-04T15:44:53.313Z 2012-01-05T04:31:13.033Z The "Turn on Protected Mode" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16109-1 2010-10-04T15:44:53.327Z 2012-01-05T04:31:13.113Z The "Allow status bar updates via script" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16709-8 2010-10-04T15:44:53.360Z 2012-01-05T04:31:13.157Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16860-9 2010-10-04T15:44:53.377Z 2012-01-05T04:31:13.207Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16153-9 2010-10-04T15:44:53.390Z 2012-01-05T04:31:13.253Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16832-8 2010-10-04T15:44:53.423Z 2012-01-05T04:31:13.283Z The "Allow font downloads" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16130-7 2010-10-04T15:44:53.437Z 2012-01-05T04:31:13.330Z The "Scripting of Java applets" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17050-6 2010-10-04T15:44:53.467Z 2012-01-05T04:31:13.377Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16152-1 2010-10-04T15:44:53.483Z 2012-01-05T04:31:13.423Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17117-3 2010-10-04T15:44:53.517Z 2012-01-05T04:31:13.470Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17059-7 2010-10-04T15:44:53.530Z 2012-01-05T04:31:13.533Z The "XAML browser applications" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16503-5 2010-10-04T15:44:53.563Z 2012-01-05T04:31:13.580Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16507-6 2010-10-04T15:44:53.577Z 2012-01-05T04:31:13.627Z The "Allow Scriptlets" current user setting should be configured correctly for the Restricted Sites Zone. CCE-17099-3 2010-10-04T15:44:53.610Z 2012-01-05T04:31:13.690Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Restricted Sites Zone. CCE-16336-0 2010-10-04T15:44:53.627Z 2012-01-05T04:31:13.737Z The "Prevent configuration of search from the Address bar" current user setting should be configured correctly. CCE-15739-6 2010-10-04T15:44:53.657Z 2012-01-05T04:31:13.800Z The "Turn on the Internet Connection Wizard Auto Detect" current user setting should be configured correctly. CCE-16925-0 2010-10-04T15:44:53.673Z 2012-01-05T04:31:13.863Z The "Turn off sending URLs as UTF-8 (requires restart)" current user setting should be configured correctly. CCE-16089-5 2010-10-04T15:44:53.703Z 2012-01-05T04:31:13.907Z The "Add-on List" current user setting should be configured correctly. CCE-16711-4 2010-10-04T15:44:53.717Z 2012-01-05T04:31:13.957Z The "Deny all add-ons unless specifically allowed in the Add-on List" current user setting should be configured correctly. CCE-16847-6 2010-10-04T15:44:53.750Z 2012-01-05T04:31:14.003Z The "Add-on Management: All Processes" current user setting should be configured correctly. CCE-16341-0 2010-10-04T15:44:53.767Z 2012-01-05T04:31:14.050Z The "Add-on Management: Process List" current user setting should be configured correctly. CCE-16125-7 2010-10-04T15:44:53.797Z 2012-01-05T04:31:14.097Z The "Mime Sniffing Safety Feature: Process List" current user setting should be configured correctly. CCE-16367-5 2010-10-04T15:44:53.813Z 2012-01-05T04:31:14.143Z The "Mime Sniffing Safety Feature: Internet Explorer Processes" current user setting should be configured correctly. CCE-16239-6 2010-10-04T15:44:53.843Z 2012-01-05T04:31:14.190Z The "Mime Sniffing Safety Feature: All Processes" current user setting should be configured correctly. CCE-15947-5 2010-10-04T15:44:53.860Z 2012-01-05T04:31:14.237Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16904-5 2010-10-04T15:44:53.877Z 2012-01-05T04:31:14.300Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16659-5 2010-10-04T15:44:53.907Z 2012-01-05T04:31:14.377Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16251-1 2010-10-04T15:44:53.923Z 2012-01-05T04:31:14.440Z The "Turn on Protected Mode" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16026-7 2010-10-04T15:44:53.953Z 2012-01-05T04:31:14.487Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16864-1 2010-10-04T15:44:53.967Z 2012-01-05T04:31:14.517Z The "Userdata persistence" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16046-5 2010-10-04T15:44:54.000Z 2012-01-05T04:31:14.567Z The "Allow font downloads" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16826-0 2010-10-04T15:44:54.017Z 2012-01-05T04:31:14.613Z The "Loose XAML files" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15190-2 2010-10-04T15:44:54.047Z 2012-01-05T04:31:14.657Z The "Allow file downloads" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16243-8 2010-10-04T15:44:54.063Z 2012-01-05T04:31:14.707Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16230-5 2010-10-04T15:44:54.093Z 2012-01-05T04:31:14.767Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16637-1 2010-10-04T15:44:54.127Z 2012-01-05T04:31:14.800Z The "Allow Scriptlets" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16347-7 2010-10-04T15:44:54.140Z 2012-01-05T04:31:14.847Z The "Loose XAML files" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15719-8 2010-10-04T15:44:54.173Z 2012-01-05T04:31:14.893Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16565-4 2010-10-04T15:44:54.187Z 2012-01-05T04:31:14.940Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16719-7 2010-10-04T15:44:54.217Z 2012-01-05T04:31:14.987Z The "Software channel permissions" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16178-6 2010-10-04T15:44:54.233Z 2012-01-05T04:31:15.033Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16667-8 2010-10-04T15:44:54.250Z 2012-01-05T04:31:15.080Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16650-4 2010-10-04T15:44:54.280Z 2012-01-05T04:31:15.127Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15807-1 2010-10-04T15:44:54.297Z 2012-01-05T04:31:15.190Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16425-1 2010-10-04T15:44:54.327Z 2012-01-05T04:31:15.237Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16539-9 2010-10-04T15:44:54.343Z 2012-01-05T04:31:15.267Z The "Allow status bar updates via script" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16857-5 2010-10-04T15:44:54.377Z 2012-01-05T04:31:15.317Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16807-0 2010-10-04T15:44:54.390Z 2012-01-05T04:31:15.363Z The "Logon options" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16233-9 2010-10-04T15:44:54.423Z 2012-01-05T04:31:15.440Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15949-1 2010-10-04T15:44:54.437Z 2012-01-05T04:31:15.487Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-14981-5 2010-10-04T15:44:54.467Z 2012-01-05T04:31:15.550Z The "Logon options" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16160-4 2010-10-04T15:44:54.483Z 2012-01-05T04:31:15.613Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16039-0 2010-10-04T15:44:54.517Z 2012-01-05T04:31:15.657Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15710-7 2010-10-04T15:44:54.530Z 2012-01-05T04:31:15.720Z The "Userdata persistence" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16668-6 2010-10-04T15:44:54.563Z 2012-01-05T04:31:15.767Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16581-1 2010-10-04T15:44:54.577Z 2012-01-05T04:31:15.817Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15682-8 2010-10-04T15:44:54.610Z 2012-01-05T04:31:15.863Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16614-0 2010-10-04T15:44:54.627Z 2012-01-05T04:31:15.907Z The "Allow installation of desktop items" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16543-1 2010-10-04T15:44:54.687Z 2012-01-05T04:31:15.940Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16959-9 2010-10-04T15:44:54.703Z 2012-01-05T04:31:16.003Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16086-1 2010-10-04T15:44:54.717Z 2012-01-05T04:31:16.033Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15798-2 2010-10-04T15:44:54.750Z 2012-01-05T04:31:16.080Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16601-7 2010-10-04T15:44:54.780Z 2012-01-05T04:31:16.127Z The "Loose XAML files" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16803-9 2010-10-04T15:44:54.797Z 2012-01-05T04:31:16.173Z The "Software channel permissions" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15811-3 2010-10-04T15:44:54.813Z 2012-01-05T04:31:16.220Z The "Turn on Protected Mode" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16468-1 2010-10-04T15:44:54.843Z 2012-01-05T04:31:16.283Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16616-5 2010-10-04T15:44:54.877Z 2012-01-05T04:31:16.330Z The "Software channel permissions" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15897-2 2010-10-04T15:44:54.890Z 2012-01-05T04:31:16.377Z The "XAML browser applications" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16454-1 2010-10-04T15:44:54.923Z 2012-01-05T04:31:16.423Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16445-9 2010-10-04T15:44:54.953Z 2012-01-05T04:31:16.470Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16548-0 2010-10-04T15:44:54.967Z 2012-01-05T04:31:16.517Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15080-5 2010-10-04T15:44:55.000Z 2012-01-05T04:31:16.567Z The "Display mixed content" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15644-8 2010-10-04T15:44:55.017Z 2012-01-05T04:31:16.613Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16029-1 2010-10-04T15:44:55.047Z 2012-01-05T04:31:16.657Z The "Allow active scripting" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16733-8 2010-10-04T15:44:55.063Z 2012-01-05T04:31:16.707Z The "Allow font downloads" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15728-9 2010-10-04T15:44:55.093Z 2012-01-05T04:31:16.753Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15304-9 2010-10-04T15:44:55.110Z 2012-01-05T04:31:16.800Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16535-7 2010-10-04T15:44:55.140Z 2012-01-05T04:31:16.863Z The "Allow active scripting" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16519-1 2010-10-04T15:44:55.157Z 2012-01-05T04:31:16.907Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15653-9 2010-10-04T15:44:55.187Z 2012-01-05T04:31:16.957Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15842-8 2010-10-04T15:44:55.203Z 2012-01-05T04:31:17.003Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16947-4 2010-10-04T15:44:55.233Z 2012-01-05T04:31:17.050Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15906-1 2010-10-04T15:44:55.250Z 2012-01-05T04:31:17.097Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16954-0 2010-10-04T15:44:55.280Z 2012-01-05T04:31:17.143Z The "Logon options" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16876-5 2010-10-04T15:44:55.313Z 2012-01-05T04:31:17.190Z The "XPS documents" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15970-7 2010-10-04T15:44:55.327Z 2012-01-05T04:31:17.237Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16793-2 2010-10-04T15:44:55.360Z 2012-01-05T04:31:17.283Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16471-5 2010-10-04T15:44:55.377Z 2012-01-05T04:31:17.330Z The "Scripting of Java applets" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16499-6 2010-10-04T15:44:55.407Z 2012-01-05T04:31:17.377Z The "Allow META REFRESH" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15864-2 2010-10-04T15:44:55.423Z 2012-01-05T04:31:17.423Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15847-7 2010-10-04T15:44:55.453Z 2012-01-05T04:31:17.470Z The "Allow active scripting" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16841-9 2010-10-04T15:44:55.483Z 2012-01-05T04:31:17.517Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16077-0 2010-10-04T15:44:55.517Z 2012-01-05T04:31:17.567Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15012-8 2010-10-04T15:44:55.530Z 2012-01-05T04:31:17.613Z The "Allow status bar updates via script" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15666-1 2010-10-04T15:44:55.563Z 2012-01-05T04:31:17.657Z The "Allow Scriptlets" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16104-2 2010-10-04T15:44:55.577Z 2012-01-05T04:31:17.707Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15960-8 2010-10-04T15:44:55.610Z 2012-01-05T04:31:17.753Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16009-3 2010-10-04T15:44:55.640Z 2012-01-05T04:31:17.800Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16895-5 2010-10-04T15:44:55.657Z 2012-01-05T04:31:17.863Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16225-5 2010-10-04T15:44:55.687Z 2012-01-05T04:31:17.907Z The "Turn on Protected Mode" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16205-7 2010-10-04T15:44:55.717Z 2012-01-05T04:31:17.957Z The "Allow file downloads" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16546-4 2010-10-04T15:44:55.733Z 2012-01-05T04:31:18.003Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16932-6 2010-10-04T15:44:55.767Z 2012-01-05T04:31:18.067Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16891-4 2010-10-04T15:44:55.780Z 2012-01-05T04:31:18.127Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16886-4 2010-10-04T15:44:55.813Z 2012-01-05T04:31:18.173Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16179-4 2010-10-04T15:44:55.827Z 2012-01-05T04:31:18.220Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16246-1 2010-10-04T15:44:55.860Z 2012-01-05T04:31:18.267Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16567-0 2010-10-04T15:44:55.890Z 2012-01-05T04:31:18.317Z The "Userdata persistence" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15813-9 2010-10-04T15:44:55.907Z 2012-01-05T04:31:18.363Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15987-1 2010-10-04T15:44:55.937Z 2012-01-05T04:31:18.407Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16533-2 2010-10-04T15:44:55.953Z 2012-01-05T04:31:18.457Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16069-7 2010-10-04T15:44:55.983Z 2012-01-05T04:31:18.503Z The "Allow file downloads" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15934-3 2010-10-04T15:44:56.000Z 2012-01-05T04:31:18.550Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15393-2 2010-10-04T15:44:56.030Z 2012-01-05T04:31:18.613Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16859-1 2010-10-04T15:44:56.047Z 2012-01-05T04:31:18.673Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16643-9 2010-10-04T15:44:56.077Z 2012-01-05T04:31:18.720Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15208-2 2010-10-04T15:44:56.093Z 2012-01-05T04:31:18.767Z The "XAML browser applications" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16737-9 2010-10-04T15:44:56.110Z 2012-01-05T04:31:18.847Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15596-0 2010-10-04T15:44:56.140Z 2012-01-05T04:31:18.940Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15909-5 2010-10-04T15:44:56.157Z 2012-01-05T04:31:18.987Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16195-0 2010-10-04T15:44:56.187Z 2012-01-05T04:31:19.033Z The "XPS documents" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15362-7 2010-10-04T15:44:56.203Z 2012-01-05T04:31:19.080Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15766-9 2010-10-04T15:44:56.233Z 2012-01-05T04:31:19.113Z The "XAML browser applications" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15983-0 2010-10-04T15:44:56.250Z 2012-01-05T04:31:19.157Z The "Allow installation of desktop items" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16447-5 2010-10-04T15:44:56.280Z 2012-01-05T04:31:19.220Z The "Allow installation of desktop items" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15694-3 2010-10-04T15:44:56.297Z 2012-01-05T04:31:19.267Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16617-3 2010-10-04T15:44:56.327Z 2012-01-05T04:31:19.330Z The "Access data sources across domains" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16730-4 2010-10-04T15:44:56.343Z 2012-01-05T04:31:19.407Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15017-7 2010-10-04T15:44:56.377Z 2012-01-05T04:31:19.457Z The "Loose XAML files" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16229-7 2010-10-04T15:44:56.390Z 2012-01-05T04:31:19.503Z The "Allow installation of desktop items" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16784-1 2010-10-04T15:44:56.423Z 2012-01-05T04:31:19.550Z The "Userdata persistence" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16043-2 2010-10-04T15:44:56.437Z 2012-01-05T04:31:19.597Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16729-6 2010-10-04T15:44:56.467Z 2012-01-05T04:31:19.643Z The "Allow META REFRESH" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16318-8 2010-10-04T15:44:56.500Z 2012-01-05T04:31:19.690Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15915-2 2010-10-04T15:44:56.517Z 2012-01-05T04:31:19.737Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16189-3 2010-10-04T15:44:56.547Z 2012-01-05T04:31:19.800Z The "Display mixed content" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15600-0 2010-10-04T15:44:56.563Z 2012-01-05T04:31:19.847Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16373-3 2010-10-04T15:44:56.593Z 2012-01-05T04:31:19.893Z The "Allow Scriptlets" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15957-4 2010-10-04T15:44:56.610Z 2012-01-05T04:31:19.940Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16854-2 2010-10-04T15:44:56.640Z 2012-01-05T04:31:19.970Z The "Allow installation of desktop items" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15952-5 2010-10-04T15:44:56.657Z 2012-01-05T04:31:20.033Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16553-0 2010-10-04T15:44:56.687Z 2012-01-05T04:31:20.080Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16922-7 2010-10-04T15:44:56.703Z 2012-01-05T04:31:20.143Z The "Allow status bar updates via script" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16577-9 2010-10-04T15:44:56.733Z 2012-01-05T04:31:20.190Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15639-8 2010-10-04T15:44:56.750Z 2012-01-05T04:31:20.237Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15971-5 2010-10-04T15:44:56.780Z 2012-01-05T04:31:20.283Z The "Access data sources across domains" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-17009-2 2010-10-04T15:44:56.797Z 2012-01-05T04:31:20.330Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16517-5 2010-10-04T15:44:56.827Z 2012-01-05T04:31:20.377Z The "Allow Scriptlets" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16943-3 2010-10-04T15:44:56.860Z 2012-01-05T04:31:20.423Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16224-8 2010-10-04T15:44:56.877Z 2012-01-05T04:31:20.487Z The "Display mixed content" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16004-4 2010-10-04T15:44:56.907Z 2012-01-05T04:31:20.533Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16724-7 2010-10-04T15:44:56.923Z 2012-01-05T04:31:20.580Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16092-9 2010-10-04T15:44:56.953Z 2012-01-05T04:31:20.627Z The "Logon options" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16595-1 2010-10-04T15:44:56.967Z 2012-01-05T04:31:20.690Z The "Userdata persistence" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16274-3 2010-10-04T15:44:57.000Z 2012-01-05T04:31:20.737Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16824-5 2010-10-04T15:44:57.017Z 2012-01-05T04:31:20.800Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16607-4 2010-10-04T15:44:57.047Z 2012-01-05T04:31:20.847Z The "Allow font downloads" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16571-2 2010-10-04T15:44:57.063Z 2012-01-05T04:31:20.893Z The "XPS documents" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16963-1 2010-10-04T15:44:57.093Z 2012-01-05T04:31:20.940Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16188-5 2010-10-04T15:44:57.110Z 2012-01-05T04:31:20.987Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16105-9 2010-10-04T15:44:57.140Z 2012-01-05T04:31:21.033Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15948-3 2010-10-04T15:44:57.173Z 2012-01-05T04:31:21.113Z The "Scripting of Java applets" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16985-4 2010-10-04T15:44:57.187Z 2012-01-05T04:31:21.157Z The "Allow active scripting" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16096-0 2010-10-04T15:44:57.217Z 2012-01-05T04:31:21.207Z The "Allow status bar updates via script" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16830-2 2010-10-04T15:44:57.233Z 2012-01-05T04:31:21.253Z The "Allow status bar updates via script" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16110-9 2010-10-04T15:44:57.267Z 2012-01-05T04:31:21.300Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16957-3 2010-10-04T15:44:57.297Z 2012-01-05T04:31:21.347Z The "Display mixed content" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15851-9 2010-10-04T15:44:57.313Z 2012-01-05T04:31:21.393Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16490-5 2010-10-04T15:44:57.343Z 2012-01-05T04:31:21.457Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16935-9 2010-10-04T15:44:57.360Z 2012-01-05T04:31:21.503Z The "XAML browser applications" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15642-2 2010-10-04T15:44:57.390Z 2012-01-05T04:31:21.550Z The "Allow file downloads" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15892-3 2010-10-04T15:44:57.407Z 2012-01-05T04:31:21.597Z The "Allow active scripting" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16320-4 2010-10-04T15:44:57.437Z 2012-01-05T04:31:21.657Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16635-5 2010-10-04T15:44:57.453Z 2012-01-05T04:31:21.737Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15732-1 2010-10-04T15:44:57.483Z 2012-01-05T04:31:21.800Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16392-3 2010-10-04T15:44:57.517Z 2012-01-05T04:31:21.863Z The "Display mixed content" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15956-6 2010-10-04T15:44:57.530Z 2012-01-05T04:31:21.940Z The "Software channel permissions" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16972-2 2010-10-04T15:44:57.547Z 2012-01-05T04:31:21.987Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15954-1 2010-10-04T15:44:57.577Z 2012-01-05T04:31:22.050Z The "Allow META REFRESH" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16631-4 2010-10-04T15:44:57.610Z 2012-01-05T04:31:22.113Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16228-9 2010-10-04T15:44:57.627Z 2012-01-05T04:31:22.173Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15891-5 2010-10-04T15:44:57.657Z 2012-01-05T04:31:22.220Z The "XPS documents" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16782-5 2010-10-04T15:44:57.673Z 2012-01-05T04:31:22.267Z The "Allow META REFRESH" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16371-7 2010-10-04T15:44:57.703Z 2012-01-05T04:31:22.317Z The "Scripting of Java applets" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16828-6 2010-10-04T15:44:57.717Z 2012-01-05T04:31:22.363Z The "Scripting of Java applets" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15944-2 2010-10-04T15:44:57.750Z 2012-01-05T04:31:22.407Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16600-9 2010-10-04T15:44:57.767Z 2012-01-05T04:31:22.457Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15901-2 2010-10-04T15:44:57.797Z 2012-01-05T04:31:22.503Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16789-0 2010-10-04T15:44:57.813Z 2012-01-05T04:31:22.550Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16714-8 2010-10-04T15:44:57.843Z 2012-01-05T04:31:22.597Z The "Access data sources across domains" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16851-8 2010-10-04T15:44:57.877Z 2012-01-05T04:31:22.643Z The "Allow font downloads" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16547-2 2010-10-04T15:44:57.907Z 2012-01-05T04:31:22.690Z The "XAML browser applications" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16094-5 2010-10-04T15:44:57.923Z 2012-01-05T04:31:22.753Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16624-9 2010-10-04T15:44:57.953Z 2012-01-05T04:31:22.830Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15198-5 2010-10-04T15:44:57.967Z 2012-01-05T04:31:22.893Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15016-9 2010-10-04T15:44:58.000Z 2012-01-05T04:31:22.940Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16460-8 2010-10-04T15:44:58.017Z 2012-01-05T04:31:22.987Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16575-3 2010-10-04T15:44:58.047Z 2012-01-05T04:31:23.033Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16953-2 2010-10-04T15:44:58.077Z 2012-01-05T04:31:23.080Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16465-7 2010-10-04T15:44:58.093Z 2012-01-05T04:31:23.127Z The "XPS documents" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15920-2 2010-10-04T15:44:58.127Z 2012-01-05T04:31:23.190Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16861-7 2010-10-04T15:44:58.140Z 2012-01-05T04:31:23.237Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16872-4 2010-10-04T15:44:58.173Z 2012-01-05T04:31:23.300Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16362-6 2010-10-04T15:44:58.187Z 2012-01-05T04:31:23.393Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16880-7 2010-10-04T15:44:58.217Z 2012-01-05T04:31:23.487Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15794-1 2010-10-04T15:44:58.233Z 2012-01-05T04:31:23.550Z The "Allow META REFRESH" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16552-2 2010-10-04T15:44:58.267Z 2012-01-05T04:31:23.580Z The "Allow Scriptlets" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16987-0 2010-10-04T15:44:58.297Z 2012-01-05T04:31:23.627Z The "Turn on Protected Mode" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15900-4 2010-10-04T15:44:58.313Z 2012-01-05T04:31:23.673Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-15594-5 2010-10-04T15:44:58.343Z 2012-01-05T04:31:23.720Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16549-8 2010-10-04T15:44:58.360Z 2012-01-05T04:31:23.767Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16020-0 2010-10-04T15:44:58.390Z 2012-01-05T04:31:23.830Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15021-9 2010-10-04T15:44:58.407Z 2012-01-05T04:31:23.877Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16375-8 2010-10-04T15:44:58.437Z 2012-01-05T04:31:23.923Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16238-8 2010-10-04T15:44:58.467Z 2012-01-05T04:31:23.970Z The "Software channel permissions" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16613-2 2010-10-04T15:44:58.483Z 2012-01-05T04:31:24.017Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15689-3 2010-10-04T15:44:58.517Z 2012-01-05T04:31:24.067Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16298-2 2010-10-04T15:44:58.547Z 2012-01-05T04:31:24.113Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15850-1 2010-10-04T15:44:58.563Z 2012-01-05T04:31:24.157Z The "Allow font downloads" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16382-4 2010-10-04T15:44:58.593Z 2012-01-05T04:31:24.207Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15904-6 2010-10-04T15:44:58.610Z 2012-01-05T04:31:24.253Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16030-9 2010-10-04T15:44:58.640Z 2012-01-05T04:31:24.300Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16839-3 2010-10-04T15:44:58.657Z 2012-01-05T04:31:24.347Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16242-0 2010-10-04T15:44:58.687Z 2012-01-05T04:31:24.393Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16976-3 2010-10-04T15:44:58.717Z 2012-01-05T04:31:24.440Z The "Turn on Protected Mode" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16212-3 2010-10-04T15:44:58.733Z 2012-01-05T04:31:24.503Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-15697-6 2010-10-04T15:44:58.767Z 2012-01-05T04:31:24.550Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-14982-3 2010-10-04T15:44:58.780Z 2012-01-05T04:31:24.597Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Locked-Down Local Machine Zone. CCE-16867-4 2010-10-04T15:44:58.813Z 2012-01-05T04:31:24.643Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16965-6 2010-10-04T15:44:58.827Z 2012-01-05T04:31:24.737Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16193-5 2010-10-04T15:44:58.860Z 2012-01-05T04:31:24.783Z The "Scripting of Java applets" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16416-0 2010-10-04T15:44:58.877Z 2012-01-05T04:31:24.830Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-15980-6 2010-10-04T15:44:58.907Z 2012-01-05T04:31:24.877Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16013-5 2010-10-04T15:44:58.937Z 2012-01-05T04:31:24.923Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-15681-0 2010-10-04T15:44:58.953Z 2012-01-05T04:31:24.970Z The "Access data sources across domains" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16498-8 2010-10-04T15:44:58.983Z 2012-01-05T04:31:25.017Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16811-2 2010-10-04T15:44:59.000Z 2012-01-05T04:31:25.080Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16387-3 2010-10-04T15:44:59.030Z 2012-01-05T04:31:25.143Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16622-3 2010-10-04T15:44:59.047Z 2012-01-05T04:31:25.220Z The "Logon options" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16605-8 2010-10-04T15:44:59.077Z 2012-01-05T04:31:25.267Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-17036-5 2010-10-04T15:44:59.110Z 2012-01-05T04:31:25.317Z The "Access data sources across domains" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16948-2 2010-10-04T15:44:59.140Z 2012-01-05T04:31:25.363Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16798-1 2010-10-04T15:44:59.157Z 2012-01-05T04:31:25.407Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16951-6 2010-10-04T15:44:59.187Z 2012-01-05T04:31:25.457Z The "Allow file downloads" machine setting should be configured correctly for the Locked-Down Internet Zone. CCE-16540-7 2010-10-04T15:44:59.203Z 2012-01-05T04:31:25.487Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15674-5 2010-10-04T15:44:59.233Z 2012-01-05T04:31:25.533Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16504-3 2010-10-04T15:44:59.250Z 2012-01-05T04:31:25.580Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16885-6 2010-10-04T15:44:59.280Z 2012-01-05T04:31:25.613Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Locked-Down Restricted Sites Zone. CCE-16627-2 2010-10-04T15:44:59.297Z 2012-01-05T04:31:25.657Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16380-8 2010-10-04T15:44:59.327Z 2012-01-05T04:31:25.707Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16288-3 2010-10-04T15:44:59.343Z 2012-01-05T04:31:25.753Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16342-8 2010-10-04T15:44:59.377Z 2012-01-05T04:31:25.800Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-15985-5 2010-10-04T15:44:59.407Z 2012-01-05T04:31:25.847Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16513-4 2010-10-04T15:44:59.423Z 2012-01-05T04:31:25.893Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Locked-Down Trusted Sites Zone. CCE-16183-6 2010-10-04T15:44:59.453Z 2012-01-05T04:31:25.940Z The "Loose XAML files" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16010-1 2010-10-04T15:44:59.467Z 2012-01-05T04:31:25.987Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Locked-Down Intranet Zone. CCE-16524-1 2010-10-04T15:44:59.500Z 2012-01-05T04:31:26.050Z The "File size limits for Local Machine zone" current user setting should be configured correctly. CCE-15903-8 2010-10-04T15:44:59.530Z 2012-01-05T04:31:26.097Z The "File size limits for Intranet zone" current user setting should be configured correctly. CCE-16555-5 2010-10-04T15:44:59.547Z 2012-01-05T04:31:26.143Z The "File size limits for Internet zone" current user setting should be configured correctly. CCE-16317-0 2010-10-04T15:44:59.577Z 2012-01-05T04:31:26.190Z The "File size limits for Restricted Sites zone" current user setting should be configured correctly. CCE-15776-8 2010-10-04T15:44:59.593Z 2012-01-05T04:31:26.237Z The "File size limits for Trusted Sites zone" current user setting should be configured correctly. CCE-15841-0 2010-10-04T15:44:59.627Z 2012-01-05T04:31:26.283Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Intranet Zone. CCE-15360-1 2010-10-04T15:44:59.640Z 2012-01-05T04:31:26.347Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Intranet Zone. CCE-15705-7 2010-10-04T15:44:59.673Z 2012-01-05T04:31:26.393Z The "XAML browser applications" machine setting should be configured correctly for the Intranet Zone. CCE-15619-0 2010-10-04T15:44:59.703Z 2012-01-05T04:31:26.440Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Intranet Zone. CCE-15295-9 2010-10-04T15:44:59.733Z 2012-01-05T04:31:26.487Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Intranet Zone. CCE-14928-6 2010-10-04T15:44:59.750Z 2012-01-05T04:31:26.550Z The "Allow active content over restricted protocols to access my computer" machine setting should be configured correctly for the Intranet Zone. CCE-15818-8 2010-10-04T15:44:59.780Z 2012-01-05T04:31:26.597Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Intranet Zone. CCE-15802-2 2010-10-04T15:44:59.797Z 2012-01-05T04:31:26.657Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Intranet Zone. CCE-15762-8 2010-10-04T15:44:59.827Z 2012-01-05T04:31:26.707Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Intranet Zone. CCE-15168-8 2010-10-04T15:44:59.843Z 2012-01-05T04:31:26.753Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Intranet Zone. CCE-14930-2 2010-10-04T15:44:59.877Z 2012-01-05T04:31:26.800Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Intranet Zone. CCE-15775-0 2010-10-04T15:44:59.907Z 2012-01-05T04:31:26.847Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Intranet Zone. CCE-15082-1 2010-10-04T15:44:59.923Z 2012-01-05T04:31:26.893Z The "Turn on Protected Mode" machine setting should be configured correctly for the Intranet Zone. CCE-15534-1 2010-10-04T15:44:59.953Z 2012-01-05T04:31:26.957Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Intranet Zone. CCE-15771-9 2010-10-04T15:44:59.967Z 2012-01-05T04:31:27.017Z The "Scripting of Java applets" machine setting should be configured correctly for the Intranet Zone. CCE-15714-9 2010-10-04T15:45:00.000Z 2012-01-05T04:31:27.067Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Intranet Zone. CCE-15219-9 2010-10-04T15:45:00.017Z 2012-01-05T04:31:27.113Z The "Access data sources across domains" machine setting should be configured correctly for the Intranet Zone. CCE-15866-7 2010-10-04T15:45:00.047Z 2012-01-05T04:31:27.173Z The "Display mixed content" machine setting should be configured correctly for the Intranet Zone. CCE-15908-7 2010-10-04T15:45:00.077Z 2012-01-05T04:31:27.220Z The "Allow active scripting" machine setting should be configured correctly for the Intranet Zone. CCE-15846-9 2010-10-04T15:45:00.093Z 2012-01-05T04:31:27.283Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Intranet Zone. CCE-15300-7 2010-10-04T15:45:00.127Z 2012-01-05T04:31:27.330Z The "Software channel permissions" machine setting should be configured correctly for the Intranet Zone. CCE-15580-4 2010-10-04T15:45:00.140Z 2012-01-05T04:31:27.377Z The "Allow META REFRESH" machine setting should be configured correctly for the Intranet Zone. CCE-15899-8 2010-10-04T15:45:00.173Z 2012-01-05T04:31:27.423Z The "Allow Scriptlets" machine setting should be configured correctly for the Intranet Zone. CCE-15753-7 2010-10-04T15:45:00.203Z 2012-01-05T04:31:27.470Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Intranet Zone. CCE-15489-8 2010-10-04T15:45:00.217Z 2012-01-05T04:31:27.517Z The "Allow font downloads" machine setting should be configured correctly for the Intranet Zone. CCE-15234-8 2010-10-04T15:45:00.250Z 2012-01-05T04:31:27.567Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Intranet Zone. CCE-14934-4 2010-10-04T15:45:00.267Z 2012-01-05T04:31:27.613Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Intranet Zone. CCE-14926-0 2010-10-04T15:45:00.297Z 2012-01-05T04:31:27.673Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Intranet Zone. CCE-15057-3 2010-10-04T15:45:00.327Z 2012-01-05T04:31:27.720Z The "Userdata persistence" machine setting should be configured correctly for the Intranet Zone. CCE-14959-1 2010-10-04T15:45:00.343Z 2012-01-05T04:31:27.767Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Intranet Zone. CCE-15894-9 2010-10-04T15:45:00.377Z 2012-01-05T04:31:27.817Z The "Allow file downloads" machine setting should be configured correctly for the Intranet Zone. CCE-15621-6 2010-10-04T15:45:00.390Z 2012-01-05T04:31:27.863Z The "Allow installation of desktop items" machine setting should be configured correctly for the Intranet Zone. CCE-15286-8 2010-10-04T15:45:00.423Z 2012-01-05T04:31:27.907Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Intranet Zone. CCE-15840-2 2010-10-04T15:45:00.437Z 2012-01-05T04:31:27.957Z The "Loose XAML files" machine setting should be configured correctly for the Intranet Zone. CCE-15476-5 2010-10-04T15:45:00.467Z 2012-01-05T04:31:28.003Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Intranet Zone. CCE-15612-5 2010-10-04T15:45:00.500Z 2012-01-05T04:31:28.050Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Intranet Zone. CCE-15758-6 2010-10-04T15:45:00.517Z 2012-01-05T04:31:28.097Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Intranet Zone. CCE-15780-0 2010-10-04T15:45:00.547Z 2012-01-05T04:31:28.157Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Intranet Zone. CCE-15084-7 2010-10-04T15:45:00.563Z 2012-01-05T04:31:28.237Z The "Logon options" machine setting should be configured correctly for the Intranet Zone. CCE-15784-2 2010-10-04T15:45:00.593Z 2012-01-05T04:31:28.300Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Intranet Zone. CCE-15767-7 2010-10-04T15:45:00.627Z 2012-01-05T04:31:28.363Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Intranet Zone. CCE-15736-2 2010-10-04T15:45:00.657Z 2012-01-05T04:31:28.423Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Intranet Zone. CCE-15814-7 2010-10-04T15:45:00.673Z 2012-01-05T04:31:28.470Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Intranet Zone. CCE-14943-5 2010-10-04T15:45:00.703Z 2012-01-05T04:31:28.517Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Intranet Zone. CCE-15824-6 2010-10-04T15:45:00.717Z 2012-01-05T04:31:28.567Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Intranet Zone. CCE-15793-3 2010-10-04T15:45:00.750Z 2012-01-05T04:31:28.613Z The "XPS documents" machine setting should be configured correctly for the Intranet Zone. CCE-15930-1 2010-10-04T15:45:00.780Z 2012-01-05T04:31:28.657Z The "Allow status bar updates via script" machine setting should be configured correctly for the Intranet Zone. CCE-15819-6 2010-10-04T15:45:00.797Z 2012-01-05T04:31:28.707Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Intranet Zone. CCE-16551-4 2010-10-04T15:45:00.827Z 2012-01-05T04:31:28.753Z The "Add-on Management: Process List" machine setting should be configured correctly. CCE-16269-3 2010-10-04T15:45:00.843Z 2012-01-05T04:31:28.817Z The "Add-on List" machine setting should be configured correctly. CCE-15982-2 2010-10-04T15:45:00.877Z 2012-01-05T04:31:28.863Z The "Deny all add-ons unless specifically allowed in the Add-on List" machine setting should be configured correctly. CCE-16921-9 2010-10-04T15:45:00.890Z 2012-01-05T04:31:28.923Z The "Add-on Management: All Processes" machine setting should be configured correctly. CCE-15886-5 2010-10-04T15:45:00.923Z 2012-01-05T04:31:28.970Z The "Scripted Window Security Restrictions: Process List" current user setting should be configured correctly. CCE-16462-4 2010-10-04T15:45:00.953Z 2012-01-05T04:31:29.017Z The "Scripted Window Security Restrictions: Internet Explorer Processes" current user setting should be configured correctly. CCE-16467-3 2010-10-04T15:45:00.967Z 2012-01-05T04:31:29.067Z The "Scripted Window Security Restrictions: All Processes" current user setting should be configured correctly. CCE-15804-8 2010-10-04T15:45:01.000Z 2012-01-05T04:31:29.113Z The "Use Policy List of Internet Explorer 7 sites" machine setting should be configured correctly. CCE-15822-0 2010-10-04T15:45:01.030Z 2012-01-05T04:31:29.157Z The "Turn off Compatibility View button" machine setting should be configured correctly. CCE-14932-8 2010-10-04T15:45:01.047Z 2012-01-05T04:31:29.253Z The "Turn on Internet Explorer 7 Standards Mode" machine setting should be configured correctly. CCE-15575-4 2010-10-04T15:45:01.077Z 2012-01-05T04:31:29.300Z The "Turn on Internet Explorer Standards Mode for Local Intranet" machine setting should be configured correctly. CCE-15707-3 2010-10-04T15:45:01.093Z 2012-01-05T04:31:29.347Z The "Turn off Compatibility View" machine setting should be configured correctly. CCE-16656-1 2010-10-04T15:45:01.127Z 2012-01-05T04:31:29.393Z The "Turn off Data Execution Prevention" machine setting should be configured correctly. CCE-16661-1 2010-10-04T15:45:01.157Z 2012-01-05T04:31:29.440Z The "Turn off Data URI Support" machine setting should be configured correctly. CCE-15896-4 2010-10-04T15:45:01.217Z 2012-01-05T04:31:29.487Z The "Turn off Windows Search AutoComplete" machine setting should be configured correctly. CCE-15859-2 2010-10-04T15:45:01.250Z 2012-01-05T04:31:29.550Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Intranet Zone. CCE-16385-7 2010-10-04T15:45:01.280Z 2012-01-05T04:31:29.597Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Intranet Zone. CCE-16053-1 2010-10-04T15:45:01.297Z 2012-01-05T04:31:29.643Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Intranet Zone. CCE-15450-0 2010-10-04T15:45:01.327Z 2012-01-05T04:31:29.690Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Intranet Zone. CCE-16437-6 2010-10-04T15:45:01.343Z 2012-01-05T04:31:29.753Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Intranet Zone. CCE-15735-4 2010-10-04T15:45:01.377Z 2012-01-05T04:31:29.800Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Intranet Zone. CCE-16433-5 2010-10-04T15:45:01.407Z 2012-01-05T04:31:29.863Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Intranet Zone. CCE-16424-4 2010-10-04T15:45:01.437Z 2012-01-05T04:31:29.907Z The "Software channel permissions" current user setting should be configured correctly for the Intranet Zone. CCE-16428-5 2010-10-04T15:45:01.453Z 2012-01-05T04:31:29.957Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Intranet Zone. CCE-15460-9 2010-10-04T15:45:01.483Z 2012-01-05T04:31:30.003Z The "Allow active content over restricted protocols to access my computer" current user setting should be configured correctly for the Intranet Zone. CCE-16057-2 2010-10-04T15:45:01.500Z 2012-01-05T04:31:30.050Z The "Loose XAML files" current user setting should be configured correctly for the Intranet Zone. CCE-16398-0 2010-10-04T15:45:01.530Z 2012-01-05T04:31:30.097Z The "Allow META REFRESH" current user setting should be configured correctly for the Intranet Zone. CCE-16328-7 2010-10-04T15:45:01.563Z 2012-01-05T04:31:30.143Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Intranet Zone. CCE-15673-7 2010-10-04T15:45:01.577Z 2012-01-05T04:31:30.190Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Intranet Zone. CCE-16435-0 2010-10-04T15:45:01.610Z 2012-01-05T04:31:30.237Z The "Java permissions" current user setting should be configured correctly for the Intranet Zone. CCE-16397-2 2010-10-04T15:45:01.640Z 2012-01-05T04:31:30.300Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Intranet Zone. CCE-15913-7 2010-10-04T15:45:01.657Z 2012-01-05T04:31:30.347Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Intranet Zone. CCE-15696-8 2010-10-04T15:45:01.687Z 2012-01-05T04:31:30.393Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Intranet Zone. CCE-16248-7 2010-10-04T15:45:01.717Z 2012-01-05T04:31:30.440Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Intranet Zone. CCE-16114-1 2010-10-04T15:45:01.733Z 2012-01-05T04:31:30.487Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Intranet Zone. CCE-16115-8 2010-10-04T15:45:01.767Z 2012-01-05T04:31:30.533Z The "Display mixed content" current user setting should be configured correctly for the Intranet Zone. CCE-16202-4 2010-10-04T15:45:01.780Z 2012-01-05T04:31:30.580Z The "Allow Scriptlets" current user setting should be configured correctly for the Intranet Zone. CCE-15421-1 2010-10-04T15:45:01.813Z 2012-01-05T04:31:30.627Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Intranet Zone. CCE-16330-3 2010-10-04T15:45:01.843Z 2012-01-05T04:31:30.673Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Intranet Zone. CCE-16411-1 2010-10-04T15:45:01.860Z 2012-01-05T04:31:30.737Z The "Scripting of Java applets" current user setting should be configured correctly for the Intranet Zone. CCE-15854-3 2010-10-04T15:45:01.890Z 2012-01-05T04:31:30.783Z The "Allow status bar updates via script" current user setting should be configured correctly for the Intranet Zone. CCE-15464-1 2010-10-04T15:45:01.923Z 2012-01-05T04:31:30.847Z The "Turn on Protected Mode" current user setting should be configured correctly for the Intranet Zone. CCE-16358-4 2010-10-04T15:45:01.937Z 2012-01-05T04:31:30.907Z The "Userdata persistence" current user setting should be configured correctly for the Intranet Zone. CCE-15443-5 2010-10-04T15:45:01.967Z 2012-01-05T04:31:30.957Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Intranet Zone. CCE-16216-4 2010-10-04T15:45:02.000Z 2012-01-05T04:31:31.003Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Intranet Zone. CCE-16103-4 2010-10-04T15:45:02.017Z 2012-01-05T04:31:31.033Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Intranet Zone. CCE-15640-6 2010-10-04T15:45:02.047Z 2012-01-05T04:31:31.080Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Intranet Zone. CCE-15827-9 2010-10-04T15:45:02.077Z 2012-01-05T04:31:31.127Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Intranet Zone. CCE-16119-0 2010-10-04T15:45:02.093Z 2012-01-05T04:31:31.173Z The "Allow font downloads" current user setting should be configured correctly for the Intranet Zone. CCE-15456-7 2010-10-04T15:45:02.127Z 2012-01-05T04:31:31.220Z The "Allow file downloads" current user setting should be configured correctly for the Intranet Zone. CCE-15868-3 2010-10-04T15:45:02.157Z 2012-01-05T04:31:31.267Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Intranet Zone. CCE-15823-8 2010-10-04T15:45:02.187Z 2012-01-05T04:31:31.317Z The "XPS documents" current user setting should be configured correctly for the Intranet Zone. CCE-15995-4 2010-10-04T15:45:02.203Z 2012-01-05T04:31:31.363Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Intranet Zone. CCE-16102-6 2010-10-04T15:45:02.233Z 2012-01-05T04:31:31.407Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Intranet Zone. CCE-16422-8 2010-10-04T15:45:02.250Z 2012-01-05T04:31:31.457Z The "Allow active scripting" current user setting should be configured correctly for the Intranet Zone. CCE-16431-9 2010-10-04T15:45:02.280Z 2012-01-05T04:31:31.503Z The "Access data sources across domains" current user setting should be configured correctly for the Intranet Zone. CCE-15447-6 2010-10-04T15:45:02.313Z 2012-01-05T04:31:31.550Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Intranet Zone. CCE-16261-0 2010-10-04T15:45:02.343Z 2012-01-05T04:31:31.597Z The "XAML browser applications" current user setting should be configured correctly for the Intranet Zone. CCE-16066-3 2010-10-04T15:45:02.360Z 2012-01-05T04:31:31.643Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Intranet Zone. CCE-15974-9 2010-10-04T15:45:02.390Z 2012-01-05T04:31:31.690Z The "Allow installation of desktop items" current user setting should be configured correctly for the Intranet Zone. CCE-16357-6 2010-10-04T15:45:02.407Z 2012-01-05T04:31:31.737Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Intranet Zone. CCE-16379-0 2010-10-04T15:45:02.437Z 2012-01-05T04:31:31.783Z The "Logon options" current user setting should be configured correctly for the Intranet Zone. CCE-16132-3 2010-10-04T15:45:02.453Z 2012-01-05T04:31:31.830Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Intranet Zone. CCE-16264-4 2010-10-04T15:45:02.483Z 2012-01-05T04:31:31.863Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Intranet Zone. CCE-15591-1 2010-10-04T15:45:02.517Z 2012-01-05T04:31:31.907Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Intranet Zone. CCE-16440-0 2010-10-04T15:45:02.530Z 2012-01-05T04:31:31.957Z The "Protection From Zone Elevation: Process List" current user setting should be configured correctly. CCE-16541-5 2010-10-04T15:45:02.563Z 2012-01-05T04:31:32.003Z The "Protection From Zone Elevation: All Processes" current user setting should be configured correctly. CCE-16568-8 2010-10-04T15:45:02.593Z 2012-01-05T04:31:32.033Z The "Protection From Zone Elevation: Internet Explorer Processes" current user setting should be configured correctly. CCE-15434-4 2010-10-04T15:45:02.610Z 2012-01-05T04:31:32.080Z The "Prevent users from configuring background color" current user setting should be configured correctly. CCE-15685-1 2010-10-04T15:45:02.640Z 2012-01-05T04:31:32.143Z The "Prevent the use of Windows colors" current user setting should be configured correctly. CCE-15417-9 2010-10-04T15:45:02.657Z 2012-01-05T04:31:32.190Z The "Prevent users from configuring text color" current user setting should be configured correctly. CCE-16931-8 2010-10-04T15:45:02.687Z 2012-01-05T04:31:32.237Z The "Local Machine Zone Restricted Protocols" current user setting should be configured correctly. CCE-17080-3 2010-10-04T15:45:02.717Z 2012-01-05T04:31:32.283Z The "Intranet Zone Restricted Protocols" current user setting should be configured correctly. CCE-16944-1 2010-10-04T15:45:02.733Z 2012-01-05T04:31:32.330Z The "Internet Zone Restricted Protocols" current user setting should be configured correctly. CCE-16662-9 2010-10-04T15:45:02.767Z 2012-01-05T04:31:32.377Z The "Restricted Sites Zone Restricted Protocols" current user setting should be configured correctly. CCE-16097-8 2010-10-04T15:45:02.797Z 2012-01-05T04:31:32.423Z The "Trusted Sites Zone Restricted Protocols" current user setting should be configured correctly. CCE-16327-9 2010-10-04T15:45:02.827Z 2012-01-05T04:31:32.503Z The "Mime Sniffing Safety Feature: Process List" machine setting should be configured correctly. CCE-16322-0 2010-10-04T15:45:02.843Z 2012-01-05T04:31:32.550Z The "Mime Sniffing Safety Feature: All Processes" machine setting should be configured correctly. CCE-15785-9 2010-10-04T15:45:02.877Z 2012-01-05T04:31:32.597Z The "Turn on script debugging" current user setting should be configured correctly. CCE-15996-2 2010-10-04T15:45:02.907Z 2012-01-05T04:31:32.643Z The "Turn off friendly http error messages" current user setting should be configured correctly. CCE-16754-4 2010-10-04T15:45:02.923Z 2012-01-05T04:31:32.690Z The "Turn on the display of a notification about every script error" current user setting should be configured correctly. CCE-16758-5 2010-10-04T15:45:02.953Z 2012-01-05T04:31:32.737Z The "Turn off configuring underline links" current user setting should be configured correctly. CCE-15779-2 2010-10-04T15:45:02.967Z 2012-01-05T04:31:32.783Z The "Turn off smooth scrolling" current user setting should be configured correctly. CCE-16302-2 2010-10-04T15:45:03.000Z 2012-01-05T04:31:32.830Z The "Information Bar: All Processes" machine setting should be configured correctly. CCE-16324-6 2010-10-04T15:45:03.030Z 2012-01-05T04:31:32.877Z The "Information Bar: Internet Explorer Processes" machine setting should be configured correctly. CCE-16421-0 2010-10-04T15:45:03.047Z 2012-01-05T04:31:32.923Z The "Information Bar: Process List" machine setting should be configured correctly. CCE-15507-7 2010-10-04T15:45:03.077Z 2012-01-05T04:31:32.970Z The "Allow active content over restricted protocols to access my computer" machine setting should be configured correctly for the Internet Zone. CCE-15751-1 2010-10-04T15:45:03.093Z 2012-01-05T04:31:33.017Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Internet Zone. CCE-16145-5 2010-10-04T15:45:03.127Z 2012-01-05T04:31:33.080Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Internet Zone. CCE-15520-0 2010-10-04T15:45:03.157Z 2012-01-05T04:31:33.113Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Internet Zone. CCE-15314-8 2010-10-04T15:45:03.173Z 2012-01-05T04:31:33.173Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Internet Zone. CCE-16151-3 2010-10-04T15:45:03.203Z 2012-01-05T04:31:33.207Z The "Allow META REFRESH" machine setting should be configured correctly for the Internet Zone. CCE-16138-0 2010-10-04T15:45:03.233Z 2012-01-05T04:31:33.267Z The "XAML browser applications" machine setting should be configured correctly for the Internet Zone. CCE-16150-5 2010-10-04T15:45:03.250Z 2012-01-05T04:31:33.317Z The "Scripting of Java applets" machine setting should be configured correctly for the Internet Zone. CCE-16006-9 2010-10-04T15:45:03.280Z 2012-01-05T04:31:33.363Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Internet Zone. CCE-15277-7 2010-10-04T15:45:03.313Z 2012-01-05T04:31:33.440Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Internet Zone. CCE-15292-6 2010-10-04T15:45:03.327Z 2012-01-05T04:31:33.503Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Internet Zone. CCE-16141-4 2010-10-04T15:45:03.360Z 2012-01-05T04:31:33.580Z The "Allow file downloads" machine setting should be configured correctly for the Internet Zone. CCE-15309-8 2010-10-04T15:45:03.390Z 2012-01-05T04:31:33.627Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Internet Zone. CCE-15311-4 2010-10-04T15:45:03.407Z 2012-01-05T04:31:33.673Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Internet Zone. CCE-15268-6 2010-10-04T15:45:03.437Z 2012-01-05T04:31:33.720Z The "Display mixed content" machine setting should be configured correctly for the Internet Zone. CCE-15643-0 2010-10-04T15:45:03.467Z 2012-01-05T04:31:33.767Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Internet Zone. CCE-15993-9 2010-10-04T15:45:03.483Z 2012-01-05T04:31:33.830Z The "Allow active scripting" machine setting should be configured correctly for the Internet Zone. CCE-16143-0 2010-10-04T15:45:03.530Z 2012-01-05T04:31:33.877Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Internet Zone. CCE-16123-2 2010-10-04T15:45:03.547Z 2012-01-05T04:31:33.940Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Internet Zone. CCE-15629-9 2010-10-04T15:45:03.577Z 2012-01-05T04:31:33.987Z The "XPS documents" machine setting should be configured correctly for the Internet Zone. CCE-16260-2 2010-10-04T15:45:03.593Z 2012-01-05T04:31:34.033Z The "Turn off Data URI Support" current user setting should be configured correctly. CCE-16785-8 2010-10-04T15:45:03.627Z 2012-01-05T04:31:34.080Z The "Turn on Internet Explorer Standards Mode for Local Intranet" current user setting should be configured correctly. CCE-16666-0 2010-10-04T15:45:03.657Z 2012-01-05T04:31:34.127Z The "Turn off Compatibility View" current user setting should be configured correctly. CCE-16652-0 2010-10-04T15:45:03.673Z 2012-01-05T04:31:34.173Z The "Use Policy List of Internet Explorer 7 sites" current user setting should be configured correctly. CCE-16679-3 2010-10-04T15:45:03.703Z 2012-01-05T04:31:34.220Z The "Turn off Compatibility View button" current user setting should be configured correctly. CCE-16674-4 2010-10-04T15:45:03.733Z 2012-01-05T04:31:34.267Z The "Turn on Internet Explorer 7 Standards Mode" current user setting should be configured correctly. CCE-16022-6 2010-10-04T15:45:03.750Z 2012-01-05T04:31:34.317Z The "Include updated Web site lists from Microsoft" current user setting should be configured correctly. CCE-15946-7 2010-10-04T15:45:03.780Z 2012-01-05T04:31:34.377Z The "Use UTF-8 for mailto links" current user setting should be configured correctly. CCE-16690-0 2010-10-04T15:45:03.813Z 2012-01-05T04:31:34.457Z The "Disable the Advanced page" current user setting should be configured correctly. CCE-15805-5 2010-10-04T15:45:03.827Z 2012-01-05T04:31:34.503Z The "Send internationalized domain names" current user setting should be configured correctly. CCE-15803-0 2010-10-04T15:45:03.860Z 2012-01-05T04:31:34.567Z The "Prevent ignoring certificate errors" current user setting should be configured correctly. CCE-16703-1 2010-10-04T15:45:03.890Z 2012-01-05T04:31:34.613Z The "Disable the Content page" current user setting should be configured correctly. CCE-16604-1 2010-10-04T15:45:03.907Z 2012-01-05T04:31:34.657Z The "Disable the General page" current user setting should be configured correctly. CCE-16554-8 2010-10-04T15:45:03.937Z 2012-01-05T04:31:34.707Z The "Disable the Privacy page" current user setting should be configured correctly. CCE-16694-2 2010-10-04T15:45:03.967Z 2012-01-05T04:31:34.783Z The "Disable the Connections page" current user setting should be configured correctly. CCE-16599-3 2010-10-04T15:45:03.983Z 2012-01-05T04:31:34.847Z The "Disable the Programs page" current user setting should be configured correctly. CCE-16461-6 2010-10-04T15:45:04.017Z 2012-01-05T04:31:34.893Z The "Disable the Security page" current user setting should be configured correctly. CCE-16034-1 2010-10-04T15:45:04.030Z 2012-01-05T04:31:34.940Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Local Machine Zone. CCE-16147-1 2010-10-04T15:45:04.063Z 2012-01-05T04:31:34.987Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Local Machine Zone. CCE-15857-6 2010-10-04T15:45:04.093Z 2012-01-05T04:31:35.033Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Local Machine Zone. CCE-15733-9 2010-10-04T15:45:04.127Z 2012-01-05T04:31:35.080Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Local Machine Zone. CCE-15729-7 2010-10-04T15:45:04.140Z 2012-01-05T04:31:35.143Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Local Machine Zone. CCE-16597-7 2010-10-04T15:45:04.173Z 2012-01-05T04:31:35.190Z The "XPS documents" machine setting should be configured correctly for the Local Machine Zone. CCE-16681-9 2010-10-04T15:45:04.203Z 2012-01-05T04:31:35.237Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Local Machine Zone. CCE-16016-8 2010-10-04T15:45:04.217Z 2012-01-05T04:31:35.283Z The "XAML browser applications" machine setting should be configured correctly for the Local Machine Zone. CCE-16629-8 2010-10-04T15:45:04.250Z 2012-01-05T04:31:35.330Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Local Machine Zone. CCE-16707-2 2010-10-04T15:45:04.280Z 2012-01-05T04:31:35.393Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Local Machine Zone. CCE-16702-3 2010-10-04T15:45:04.313Z 2012-01-05T04:31:35.457Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Local Machine Zone. CCE-16508-4 2010-10-04T15:45:04.327Z 2012-01-05T04:31:35.503Z The "Allow installation of desktop items" machine setting should be configured correctly for the Local Machine Zone. CCE-16583-7 2010-10-04T15:45:04.360Z 2012-01-05T04:31:35.567Z The "Software channel permissions" machine setting should be configured correctly for the Local Machine Zone. CCE-16423-6 2010-10-04T15:45:04.377Z 2012-01-05T04:31:35.627Z The "Allow META REFRESH" machine setting should be configured correctly for the Local Machine Zone. CCE-15893-1 2010-10-04T15:45:04.407Z 2012-01-05T04:31:35.673Z The "Allow status bar updates via script" machine setting should be configured correctly for the Local Machine Zone. CCE-16559-7 2010-10-04T15:45:04.437Z 2012-01-05T04:31:35.720Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Local Machine Zone. CCE-16658-7 2010-10-04T15:45:04.453Z 2012-01-05T04:31:35.767Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Local Machine Zone. CCE-15770-1 2010-10-04T15:45:04.483Z 2012-01-05T04:31:35.830Z The "Userdata persistence" machine setting should be configured correctly for the Local Machine Zone. CCE-15709-9 2010-10-04T15:45:04.517Z 2012-01-05T04:31:35.877Z The "Allow file downloads" machine setting should be configured correctly for the Local Machine Zone. CCE-15699-2 2010-10-04T15:45:04.530Z 2012-01-05T04:31:35.923Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Local Machine Zone. CCE-15713-1 2010-10-04T15:45:04.563Z 2012-01-05T04:31:35.987Z The "Loose XAML files" machine setting should be configured correctly for the Local Machine Zone. CCE-16319-6 2010-10-04T15:45:04.577Z 2012-01-05T04:31:36.033Z The "Turn on Protected Mode" machine setting should be configured correctly for the Local Machine Zone. CCE-15953-3 2010-10-04T15:45:04.610Z 2012-01-05T04:31:36.113Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Local Machine Zone. CCE-15706-5 2010-10-04T15:45:04.640Z 2012-01-05T04:31:36.207Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Local Machine Zone. CCE-16544-9 2010-10-04T15:45:04.673Z 2012-01-05T04:31:36.267Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Local Machine Zone. CCE-16165-3 2010-10-04T15:45:04.687Z 2012-01-05T04:31:36.317Z The "Allow font downloads" machine setting should be configured correctly for the Local Machine Zone. CCE-15967-3 2010-10-04T15:45:04.717Z 2012-01-05T04:31:36.363Z The "Allow active content over restricted protocols to access my computer" machine setting should be configured correctly for the Local Machine Zone. CCE-16640-5 2010-10-04T15:45:04.750Z 2012-01-05T04:31:36.407Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Local Machine Zone. CCE-15708-1 2010-10-04T15:45:04.767Z 2012-01-05T04:31:36.470Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Local Machine Zone. CCE-15716-4 2010-10-04T15:45:04.797Z 2012-01-05T04:31:36.517Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Local Machine Zone. CCE-16633-0 2010-10-04T15:45:04.827Z 2012-01-05T04:31:36.567Z The "Display mixed content" machine setting should be configured correctly for the Local Machine Zone. CCE-15721-4 2010-10-04T15:45:04.843Z 2012-01-05T04:31:36.597Z The "Allow Scriptlets" machine setting should be configured correctly for the Local Machine Zone. CCE-16628-0 2010-10-04T15:45:04.877Z 2012-01-05T04:31:36.643Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Local Machine Zone. CCE-16262-8 2010-10-04T15:45:04.890Z 2012-01-05T04:31:36.707Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Local Machine Zone. CCE-16012-7 2010-10-04T15:45:04.923Z 2012-01-05T04:31:36.753Z The "Allow active scripting" machine setting should be configured correctly for the Local Machine Zone. CCE-16451-7 2010-10-04T15:45:04.953Z 2012-01-05T04:31:36.800Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Local Machine Zone. CCE-16257-8 2010-10-04T15:45:04.983Z 2012-01-05T04:31:36.847Z The "Scripting of Java applets" machine setting should be configured correctly for the Local Machine Zone. CCE-16579-5 2010-10-04T15:45:05.017Z 2012-01-05T04:31:36.893Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Local Machine Zone. CCE-16163-8 2010-10-04T15:45:05.030Z 2012-01-05T04:31:36.923Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Local Machine Zone. CCE-16514-2 2010-10-04T15:45:05.063Z 2012-01-05T04:31:36.970Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Local Machine Zone. CCE-16578-7 2010-10-04T15:45:05.093Z 2012-01-05T04:31:37.017Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Local Machine Zone. CCE-16266-9 2010-10-04T15:45:05.110Z 2012-01-05T04:31:37.067Z The "Logon options" machine setting should be configured correctly for the Local Machine Zone. CCE-16680-1 2010-10-04T15:45:05.140Z 2012-01-05T04:31:37.113Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Local Machine Zone. CCE-16623-1 2010-10-04T15:45:05.173Z 2012-01-05T04:31:37.157Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Local Machine Zone. CCE-16526-6 2010-10-04T15:45:05.187Z 2012-01-05T04:31:37.207Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Local Machine Zone. CCE-16403-8 2010-10-04T15:45:05.217Z 2012-01-05T04:31:37.253Z The "Access data sources across domains" machine setting should be configured correctly for the Local Machine Zone. CCE-16619-9 2010-10-04T15:45:05.250Z 2012-01-05T04:31:37.317Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Local Machine Zone. CCE-16404-6 2010-10-04T15:45:05.267Z 2012-01-05T04:31:37.363Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Local Machine Zone. CCE-15795-8 2010-10-04T15:45:05.297Z 2012-01-05T04:31:37.440Z The "Binary Behavior Security Restriction: All Processes" current user setting should be configured correctly. CCE-15914-5 2010-10-04T15:45:05.327Z 2012-01-05T04:31:37.533Z The "Binary Behavior Security Restriction: Process List" current user setting should be configured correctly. CCE-16443-4 2010-10-04T15:45:05.343Z 2012-01-05T04:31:37.597Z The "Admin-approved behaviors" current user setting should be configured correctly. CCE-16192-7 2010-10-04T15:45:05.377Z 2012-01-05T04:31:37.643Z The "Binary Behavior Security Restriction: Internet Explorer Processes" current user setting should be configured correctly. CCE-16256-0 2010-10-04T15:45:05.407Z 2012-01-05T04:31:37.690Z The "Turn Off First-Run Opt-In" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15428-6 2010-10-04T15:45:05.423Z 2012-01-05T04:31:37.737Z The "Allow installation of desktop items" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15688-5 2010-10-04T15:45:05.453Z 2012-01-05T04:31:37.783Z The "XAML browser applications" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16058-0 2010-10-04T15:45:05.483Z 2012-01-05T04:31:37.830Z The "Run .NET Framework-reliant components not signed with Authenticode" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16023-4 2010-10-04T15:45:05.517Z 2012-01-05T04:31:37.877Z The "Allow font downloads" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16231-3 2010-10-04T15:45:05.530Z 2012-01-05T04:31:37.940Z The "Allow script-initiated windows without size or position constraints" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15962-4 2010-10-04T15:45:05.563Z 2012-01-05T04:31:37.987Z The "Script ActiveX controls marked safe for scripting" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16137-2 2010-10-04T15:45:05.593Z 2012-01-05T04:31:38.033Z The "Initialize and script ActiveX controls not marked as safe" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15943-4 2010-10-04T15:45:05.610Z 2012-01-05T04:31:38.080Z The "Only allow approved domains to use ActiveX controls without prompt" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16185-1 2010-10-04T15:45:05.640Z 2012-01-05T04:31:38.113Z The "Navigate windows and frames across different domains" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16235-4 2010-10-04T15:45:05.673Z 2012-01-05T04:31:38.157Z The "XPS documents" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15344-5 2010-10-04T15:45:05.703Z 2012-01-05T04:31:38.220Z The "Turn on Cross-Site Scripting (XSS) Filter" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15372-6 2010-10-04T15:45:05.733Z 2012-01-05T04:31:38.267Z The "Allow drag and drop or copy and paste files" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15958-2 2010-10-04T15:45:05.750Z 2012-01-05T04:31:38.317Z The "Automatic prompting for file downloads" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15371-8 2010-10-04T15:45:05.780Z 2012-01-05T04:31:38.363Z The "Web sites in less privileged Web content zones can navigate into this zone" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16002-8 2010-10-04T15:45:05.813Z 2012-01-05T04:31:38.393Z The "Loose XAML files" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16186-9 2010-10-04T15:45:05.827Z 2012-01-05T04:31:38.440Z The "Userdata persistence" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15573-9 2010-10-04T15:45:05.860Z 2012-01-05T04:31:38.503Z The "Allow active content over restricted protocols to access my computer" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15661-2 2010-10-04T15:45:05.890Z 2012-01-05T04:31:38.550Z The "Allow active scripting" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16282-6 2010-10-04T15:45:05.907Z 2012-01-05T04:31:38.597Z The "Allow video and animation on a Web page that uses a legacy media player" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16133-1 2010-10-04T15:45:05.937Z 2012-01-05T04:31:38.643Z The "Download unsigned ActiveX controls" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16194-3 2010-10-04T15:45:05.967Z 2012-01-05T04:31:38.690Z The "Include local directory path when uploading files to a server" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15369-2 2010-10-04T15:45:06.000Z 2012-01-05T04:31:38.753Z The "Disable .NET Framework Setup" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16354-3 2010-10-04T15:45:06.030Z 2012-01-05T04:31:38.800Z The "Allow websites to prompt for information using scripted windows" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16007-7 2010-10-04T15:45:06.047Z 2012-01-05T04:31:38.893Z The "Allow websites to open windows without address or status bars" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15370-0 2010-10-04T15:45:06.077Z 2012-01-05T04:31:38.970Z The "Access data sources across domains" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15921-0 2010-10-04T15:45:06.110Z 2012-01-05T04:31:39.017Z The "Use Pop-up Blocker" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15628-1 2010-10-04T15:45:06.127Z 2012-01-05T04:31:39.067Z The "Logon options" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15564-8 2010-10-04T15:45:06.157Z 2012-01-05T04:31:39.113Z The "Automatic prompting for ActiveX controls" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15998-8 2010-10-04T15:45:06.187Z 2012-01-05T04:31:39.157Z The "Submit non-encrypted form data" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16300-6 2010-10-04T15:45:06.203Z 2012-01-05T04:31:39.207Z The "Software channel permissions" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15542-4 2010-10-04T15:45:06.233Z 2012-01-05T04:31:39.267Z The "Allow META REFRESH" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16146-3 2010-10-04T15:45:06.267Z 2012-01-05T04:31:39.317Z The "Allow binary and script behaviors" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16365-9 2010-10-04T15:45:06.297Z 2012-01-05T04:31:39.363Z The "Run ActiveX controls and plugins" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16345-1 2010-10-04T15:45:06.327Z 2012-01-05T04:31:39.407Z The "Allow Scriptlets" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15820-4 2010-10-04T15:45:06.343Z 2012-01-05T04:31:39.457Z The "Turn on Protected Mode" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15635-6 2010-10-04T15:45:06.377Z 2012-01-05T04:31:39.503Z The "Display mixed content" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15348-6 2010-10-04T15:45:06.407Z 2012-01-05T04:31:39.550Z The "Use SmartScreen Filter" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16278-4 2010-10-04T15:45:06.437Z 2012-01-05T04:31:39.597Z The "Allow file downloads" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16098-6 2010-10-04T15:45:06.467Z 2012-01-05T04:31:39.643Z The "Launching applications and files in an IFRAME" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16348-5 2010-10-04T15:45:06.483Z 2012-01-05T04:31:39.690Z The "Allow status bar updates via script" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16304-8 2010-10-04T15:45:06.517Z 2012-01-05T04:31:39.737Z The "Download signed ActiveX controls" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16199-2 2010-10-04T15:45:06.547Z 2012-01-05T04:31:39.783Z The "Run .NET Framework-reliant components signed with Authenticode" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15648-9 2010-10-04T15:45:06.563Z 2012-01-05T04:31:39.847Z The "Scripting of Java applets" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16018-4 2010-10-04T15:45:06.593Z 2012-01-05T04:31:39.893Z The "Launching programs and unsafe files" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16208-1 2010-10-04T15:45:06.627Z 2012-01-05T04:31:39.940Z The "Open files based on content, not file extension" machine setting should be configured correctly for the Trusted Sites Zone. CCE-15441-9 2010-10-04T15:45:06.640Z 2012-01-05T04:31:39.987Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." machine setting should be configured correctly for the Trusted Sites Zone. CCE-15994-7 2010-10-04T15:45:06.687Z 2012-01-05T04:31:40.033Z The "Allow scripting of Internet Explorer web browser control" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16245-3 2010-10-04T15:45:06.717Z 2012-01-05T04:31:40.080Z The "Allow cut, copy or paste operations from the clipboard via script" machine setting should be configured correctly for the Trusted Sites Zone. CCE-16072-1 2010-10-04T15:45:06.733Z 2012-01-05T04:31:40.157Z The "Use HTTP 1.1" machine setting should be configured correctly. CCE-16254-5 2010-10-04T15:45:06.767Z 2012-01-05T04:31:40.220Z The "Do not save encrypted pages to disk" machine setting should be configured correctly. CCE-16142-2 2010-10-04T15:45:06.797Z 2012-01-05T04:31:40.267Z The "Do not allow resetting Internet Explorer settings" machine setting should be configured correctly. CCE-15878-2 2010-10-04T15:45:06.827Z 2012-01-05T04:31:40.317Z The "Empty Temporary Internet Files folder when browser is closed" machine setting should be configured correctly. CCE-16827-8 2010-10-04T15:45:06.843Z 2012-01-05T04:31:40.363Z The "Turn off ClearType" machine setting should be configured correctly. CCE-15872-5 2010-10-04T15:45:06.877Z 2012-01-05T04:31:40.407Z The "Play animations in web pages" machine setting should be configured correctly. CCE-15877-4 2010-10-04T15:45:06.907Z 2012-01-05T04:31:40.457Z The "Use HTTP 1.1 through proxy connections" machine setting should be configured correctly. CCE-16241-2 2010-10-04T15:45:06.923Z 2012-01-05T04:31:40.503Z The "Turn on Caret Browsing support" machine setting should be configured correctly. CCE-15863-4 2010-10-04T15:45:06.953Z 2012-01-05T04:31:40.550Z The "Play sounds in web pages" machine setting should be configured correctly. CCE-16027-5 2010-10-04T15:45:06.983Z 2012-01-05T04:31:40.597Z The "Intranet Zone Template" machine setting should be configured correctly. CCE-16805-4 2010-10-04T15:45:07.017Z 2012-01-05T04:31:40.657Z The "Local Machine Zone Template" machine setting should be configured correctly. CCE-15885-7 2010-10-04T15:45:07.030Z 2012-01-05T04:31:40.707Z The "Locked-Down Internet Zone Template" machine setting should be configured correctly. CCE-15828-7 2010-10-04T15:45:07.063Z 2012-01-05T04:31:40.753Z The "Turn on automatic detection of the intranet" machine setting should be configured correctly. CCE-16439-2 2010-10-04T15:45:07.093Z 2012-01-05T04:31:40.800Z The "Trusted Sites Zone Template" machine setting should be configured correctly. CCE-16644-7 2010-10-04T15:45:07.127Z 2012-01-05T04:31:40.847Z The "Locked-Down Intranet Zone Template" machine setting should be configured correctly. CCE-16657-9 2010-10-04T15:45:07.140Z 2012-01-05T04:31:40.893Z The "Restricted Sites Zone Template" machine setting should be configured correctly. CCE-16800-5 2010-10-04T15:45:07.173Z 2012-01-05T04:31:40.940Z The "Locked-Down Restricted Sites Zone Template" machine setting should be configured correctly. CCE-16255-2 2010-10-04T15:45:07.203Z 2012-01-05T04:31:40.987Z The "Locked-Down Local Machine Zone Template" machine setting should be configured correctly. CCE-16458-2 2010-10-04T15:45:07.233Z 2012-01-05T04:31:41.067Z The "Locked-Down Trusted Sites Zone Template" machine setting should be configured correctly. CCE-16630-6 2010-10-04T15:45:07.267Z 2012-01-05T04:31:41.157Z The "Intranet Sites: Include all sites that bypass the proxy server" machine setting should be configured correctly. CCE-15815-4 2010-10-04T15:45:07.280Z 2012-01-05T04:31:41.220Z The "Site to Zone Assignment List" machine setting should be configured correctly. CCE-16158-8 2010-10-04T15:45:07.313Z 2012-01-05T04:31:41.267Z The "Intranet Sites: Include all local (intranet) sites not listed in other zones" machine setting should be configured correctly. CCE-15829-5 2010-10-04T15:45:07.343Z 2012-01-05T04:31:41.317Z The "Turn on Information bar notification for intranet content" machine setting should be configured correctly. CCE-16780-9 2010-10-04T15:45:07.360Z 2012-01-05T04:31:41.363Z The "Turn on Warn about Certificate Address Mismatch" machine setting should be configured correctly. CCE-16384-0 2010-10-04T15:45:07.390Z 2012-01-05T04:31:41.407Z The "Internet Zone Template" machine setting should be configured correctly. CCE-15660-4 2010-10-04T15:45:07.423Z 2012-01-05T04:31:41.457Z The "Pop-up allow list" machine setting should be configured correctly. CCE-16166-1 2010-10-04T15:45:07.453Z 2012-01-05T04:31:41.517Z The "Turn off configuration of tabbed browsing pop-up behavior" machine setting should be configured correctly. CCE-15789-1 2010-10-04T15:45:07.467Z 2012-01-05T04:31:41.567Z The "Configure new tab page default behavior" machine setting should be configured correctly. CCE-16005-1 2010-10-04T15:45:07.500Z 2012-01-05T04:31:41.627Z The "Turn off the auto-complete feature for web addresses" machine setting should be configured correctly. CCE-16106-7 2010-10-04T15:45:07.530Z 2012-01-05T04:31:41.673Z The "Turn off tabbed browsing" machine setting should be configured correctly. CCE-16349-3 2010-10-04T15:45:07.563Z 2012-01-05T04:31:41.720Z The "Turn on Compatibility Logging" machine setting should be configured correctly. CCE-15563-0 2010-10-04T15:45:07.577Z 2012-01-05T04:31:41.767Z The "Turn off configuration of default behavior of new tab creation" machine setting should be configured correctly. CCE-15749-5 2010-10-04T15:45:07.610Z 2012-01-05T04:31:41.817Z The "Set tab process growth" machine setting should be configured correctly. CCE-16353-5 2010-10-04T15:45:07.640Z 2012-01-05T04:31:41.863Z The "Turn off displaying the Internet Explorer Help Menu" machine setting should be configured correctly. CCE-16388-1 2010-10-04T15:45:07.657Z 2012-01-05T04:31:41.923Z The "Restrict changing the default search provider" machine setting should be configured correctly. CCE-15397-3 2010-10-04T15:45:07.687Z 2012-01-05T04:31:41.970Z The "Turn on menu bar by default" machine setting should be configured correctly. CCE-16290-9 2010-10-04T15:45:07.717Z 2012-01-05T04:31:42.017Z The "Turn off suggestions for all user-installed providers" machine setting should be configured correctly. CCE-15704-0 2010-10-04T15:45:07.733Z 2012-01-05T04:31:42.067Z The "Turn off Favorites bar" machine setting should be configured correctly. CCE-15545-7 2010-10-04T15:45:07.767Z 2012-01-05T04:31:42.113Z The "Turn off the activation of the quick pick menu" machine setting should be configured correctly. CCE-15414-6 2010-10-04T15:45:07.797Z 2012-01-05T04:31:42.157Z The "Turn off Automatic Crash Recovery Prompt" machine setting should be configured correctly. CCE-16191-9 2010-10-04T15:45:07.827Z 2012-01-05T04:31:42.207Z The "Turn off configuration of window reuse" machine setting should be configured correctly. CCE-15419-5 2010-10-04T15:45:07.843Z 2012-01-05T04:31:42.253Z The "Turn off Quick Tabs functionality" machine setting should be configured correctly. CCE-16271-9 2010-10-04T15:45:07.877Z 2012-01-05T04:31:42.300Z The "Turn off Managing Pop-up Allow list" machine setting should be configured correctly. CCE-15655-4 2010-10-04T15:45:07.907Z 2012-01-05T04:31:42.347Z The "Add a specific list of search providers to the user's search provider list" machine setting should be configured correctly. CCE-15917-8 2010-10-04T15:45:07.937Z 2012-01-05T04:31:42.407Z The "Restrict search providers to a specific list of providers" machine setting should be configured correctly. CCE-16393-1 2010-10-04T15:45:07.967Z 2012-01-05T04:31:42.440Z The "Turn off page zooming functionality" machine setting should be configured correctly. CCE-16249-5 2010-10-04T15:45:07.983Z 2012-01-05T04:31:42.503Z The "Enforce Full Screen Mode" machine setting should be configured correctly. CCE-15403-9 2010-10-04T15:45:08.017Z 2012-01-05T04:31:42.550Z The "Customize User Agent String" machine setting should be configured correctly. CCE-15613-3 2010-10-04T15:45:08.047Z 2012-01-05T04:31:42.597Z The "Prevent Internet Explorer Search box from displaying" machine setting should be configured correctly. CCE-16378-2 2010-10-04T15:45:08.077Z 2012-01-05T04:31:42.643Z The "Turn off managing Pop-up filter level" machine setting should be configured correctly. CCE-16060-6 2010-10-04T15:45:08.093Z 2012-01-05T04:31:42.690Z The "Turn off Reopen Last Browsing Session" machine setting should be configured correctly. CCE-16148-9 2010-10-04T15:45:08.127Z 2012-01-05T04:31:42.737Z The "Turn off pop-up management" machine setting should be configured correctly. CCE-16309-7 2010-10-04T15:45:08.157Z 2012-01-05T04:31:42.783Z The "Turn off picture display" current user setting should be configured correctly. CCE-16573-8 2010-10-04T15:45:08.187Z 2012-01-05T04:31:42.847Z The "Turn off automatic image resizing" current user setting should be configured correctly. CCE-16569-6 2010-10-04T15:45:08.203Z 2012-01-05T04:31:42.893Z The "Allow the display of image download placeholders" current user setting should be configured correctly. CCE-16688-4 2010-10-04T15:45:08.233Z 2012-01-05T04:31:42.940Z The "Turn off smart image dithering" current user setting should be configured correctly. CCE-14923-7 2010-10-04T15:45:08.267Z 2012-01-05T04:31:42.987Z The "Turn off InPrivate Browsing" current user setting should be configured correctly. CCE-15465-8 2010-10-04T15:45:08.280Z 2012-01-05T04:31:43.050Z The "InPrivate Filtering Threshold" current user setting should be configured correctly. CCE-15725-5 2010-10-04T15:45:08.313Z 2012-01-05T04:31:43.097Z The "Do not collect InPrivate Filtering data" current user setting should be configured correctly. CCE-15855-0 2010-10-04T15:45:08.343Z 2012-01-05T04:31:43.143Z The "Disable toolbars and extensions when InPrivate Browsing starts" current user setting should be configured correctly. CCE-15337-9 2010-10-04T15:45:08.360Z 2012-01-05T04:31:43.190Z The "Turn off InPrivate Filtering" current user setting should be configured correctly. CCE-16928-4 2010-10-04T15:45:08.390Z 2012-01-05T04:31:43.237Z The "Turn off InPrivate Filtering" machine setting should be configured correctly. CCE-16810-4 2010-10-04T15:45:08.423Z 2012-01-05T04:31:43.300Z The "Disable toolbars and extensions when InPrivate Browsing starts" machine setting should be configured correctly. CCE-16171-1 2010-10-04T15:45:08.453Z 2012-01-05T04:31:43.347Z The "Do not collect InPrivate Filtering data" machine setting should be configured correctly. CCE-16164-6 2010-10-04T15:45:08.467Z 2012-01-05T04:31:43.393Z The "InPrivate Filtering Threshold" machine setting should be configured correctly. CCE-15910-3 2010-10-04T15:45:08.500Z 2012-01-05T04:31:43.440Z The "Prevent users from choosing default text size" current user setting should be configured correctly. CCE-16286-7 2010-10-04T15:45:08.530Z 2012-01-05T04:31:43.487Z The "Download unsigned ActiveX controls" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16693-4 2010-10-04T15:45:08.547Z 2012-01-05T04:31:43.533Z The "Allow Scriptlets" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16802-1 2010-10-04T15:45:08.577Z 2012-01-05T04:31:43.580Z The "Allow websites to prompt for information using scripted windows" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16701-5 2010-10-04T15:45:08.610Z 2012-01-05T04:31:43.627Z The "Allow binary and script behaviors" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16493-9 2010-10-04T15:45:08.640Z 2012-01-05T04:31:43.673Z The "Turn on Protected Mode" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16815-3 2010-10-04T15:45:08.673Z 2012-01-05T04:31:43.720Z The "Logon options" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16723-9 2010-10-04T15:45:08.687Z 2012-01-05T04:31:43.783Z The "Disable .NET Framework Setup" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16520-9 2010-10-04T15:45:08.717Z 2012-01-05T04:31:43.830Z The "Use Pop-up Blocker" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16313-9 2010-10-04T15:45:08.750Z 2012-01-05T04:31:43.877Z The "Do not prompt for client certificate selection when no certificates or only one certificate exists." current user setting should be configured correctly for the Trusted Sites Zone. CCE-16621-5 2010-10-04T15:45:08.780Z 2012-01-05T04:31:43.923Z The "Automatic prompting for file downloads" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16586-0 2010-10-04T15:45:08.797Z 2012-01-05T04:31:43.970Z The "Allow drag and drop or copy and paste files" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16308-9 2010-10-04T15:45:08.827Z 2012-01-05T04:31:44.017Z The "Allow installation of desktop items" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16731-2 2010-10-04T15:45:08.860Z 2012-01-05T04:31:44.067Z The "XPS documents" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16157-0 2010-10-04T15:45:08.890Z 2012-01-05T04:31:44.127Z The "Download signed ActiveX controls" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16506-8 2010-10-04T15:45:08.907Z 2012-01-05T04:31:44.207Z The "Allow websites to open windows without address or status bars" current user setting should be configured correctly for the Trusted Sites Zone. CCE-15852-7 2010-10-04T15:45:08.937Z 2012-01-05T04:31:44.253Z The "Loose XAML files" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16647-0 2010-10-04T15:45:08.967Z 2012-01-05T04:31:44.300Z The "Turn on Cross-Site Scripting (XSS) Filter" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16368-3 2010-10-04T15:45:09.000Z 2012-01-05T04:31:44.347Z The "Allow META REFRESH" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16048-1 2010-10-04T15:45:09.017Z 2012-01-05T04:31:44.393Z The "Submit non-encrypted form data" current user setting should be configured correctly for the Trusted Sites Zone. CCE-15833-7 2010-10-04T15:45:09.047Z 2012-01-05T04:31:44.440Z The "Run ActiveX controls and plugins" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16207-3 2010-10-04T15:45:09.077Z 2012-01-05T04:31:44.487Z The "Run .NET Framework-reliant components signed with Authenticode" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16634-8 2010-10-04T15:45:09.110Z 2012-01-05T04:31:44.550Z The "Userdata persistence" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16509-2 2010-10-04T15:45:09.127Z 2012-01-05T04:31:44.627Z The "XAML browser applications" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16747-8 2010-10-04T15:45:09.157Z 2012-01-05T04:31:44.673Z The "Automatic prompting for ActiveX controls" current user setting should be configured correctly for the Trusted Sites Zone. CCE-15845-1 2010-10-04T15:45:09.187Z 2012-01-05T04:31:44.720Z The "Web sites in less privileged Web content zones can navigate into this zone" current user setting should be configured correctly for the Trusted Sites Zone. CCE-15837-8 2010-10-04T15:45:09.217Z 2012-01-05T04:31:44.767Z The "Allow font downloads" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16289-1 2010-10-04T15:45:09.233Z 2012-01-05T04:31:44.817Z The "Allow file downloads" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16008-5 2010-10-04T15:45:09.267Z 2012-01-05T04:31:44.863Z The "Access data sources across domains" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16639-7 2010-10-04T15:45:09.297Z 2012-01-05T04:31:44.907Z The "Allow script-initiated windows without size or position constraints" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16355-0 2010-10-04T15:45:09.327Z 2012-01-05T04:31:44.957Z The "Turn Off First-Run Opt-In" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16766-8 2010-10-04T15:45:09.343Z 2012-01-05T04:31:45.003Z The "Initialize and script ActiveX controls not marked as safe" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16564-7 2010-10-04T15:45:09.390Z 2012-01-05T04:31:45.050Z The "Software channel permissions" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16791-6 2010-10-04T15:45:09.407Z 2012-01-05T04:31:45.097Z The "Allow video and animation on a Web page that uses a legacy media player" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16771-8 2010-10-04T15:45:09.437Z 2012-01-05T04:31:45.143Z The "Navigate windows and frames across different domains" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16084-6 2010-10-04T15:45:09.467Z 2012-01-05T04:31:45.207Z The "Allow cut, copy or paste operations from the clipboard via script" current user setting should be configured correctly for the Trusted Sites Zone. CCE-15835-2 2010-10-04T15:45:09.500Z 2012-01-05T04:31:45.253Z The "Scripting of Java applets" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16686-8 2010-10-04T15:45:09.530Z 2012-01-05T04:31:45.300Z The "Only allow approved domains to use ActiveX controls without prompt" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16021-8 2010-10-04T15:45:09.547Z 2012-01-05T04:31:45.347Z The "Open files based on content, not file extension" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16806-2 2010-10-04T15:45:09.577Z 2012-01-05T04:31:45.407Z The "Allow status bar updates via script" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16170-3 2010-10-04T15:45:09.610Z 2012-01-05T04:31:45.457Z The "Launching applications and files in an IFRAME" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16612-4 2010-10-04T15:45:09.640Z 2012-01-05T04:31:45.503Z The "Use SmartScreen Filter" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16038-2 2010-10-04T15:45:09.657Z 2012-01-05T04:31:45.567Z The "Run .NET Framework-reliant components not signed with Authenticode" current user setting should be configured correctly for the Trusted Sites Zone. CCE-15848-5 2010-10-04T15:45:09.687Z 2012-01-05T04:31:45.613Z The "Allow active content over restricted protocols to access my computer" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16277-6 2010-10-04T15:45:09.717Z 2012-01-05T04:31:45.673Z The "Allow scripting of Internet Explorer web browser control" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16377-4 2010-10-04T15:45:09.750Z 2012-01-05T04:31:45.707Z The "Allow active scripting" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16625-6 2010-10-04T15:45:09.780Z 2012-01-05T04:31:45.753Z The "Display mixed content" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16409-5 2010-10-04T15:45:09.797Z 2012-01-05T04:31:45.800Z The "Include local directory path when uploading files to a server" current user setting should be configured correctly for the Trusted Sites Zone. CCE-15965-7 2010-10-04T15:45:09.827Z 2012-01-05T04:31:45.863Z The "Script ActiveX controls marked safe for scripting" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16250-3 2010-10-04T15:45:09.860Z 2012-01-05T04:31:45.907Z The "Java permissions" current user setting should be configured correctly for the Trusted Sites Zone. CCE-16167-9 2010-10-04T15:45:09.890Z 2012-01-05T04:31:45.970Z The "Launching programs and unsafe files" current user setting should be configured correctly for the Trusted Sites Zone. CCE-15849-3 2010-10-04T15:45:09.907Z 2012-01-05T04:31:46.017Z The "Prevent the configuration of cipher strength update information URLs" machine setting should be configured correctly. CCE-15964-0 2010-10-04T15:45:09.937Z 2012-01-05T04:31:46.067Z The "Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt: Internet Explorer Processes" current user setting should be configured correctly. CCE-15991-3 2010-10-04T15:45:09.967Z 2012-01-05T04:31:46.113Z The "Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt: Process List" current user setting should be configured correctly. CCE-15969-9 2010-10-04T15:45:10.000Z 2012-01-05T04:31:46.157Z The "Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt: All Processes" current user setting should be configured correctly. CCE-16956-5 2010-10-04T15:45:10.030Z 2012-01-05T04:31:46.207Z The "Hide the Command Bar" current user setting should be configured correctly. CCE-16722-1 2010-10-04T15:45:10.047Z 2012-01-05T04:31:46.253Z The "Disable customizing browser toolbar buttons" current user setting should be configured correctly. CCE-16952-4 2010-10-04T15:45:10.077Z 2012-01-05T04:31:46.317Z The "Auto-hide the Toolbars" current user setting should be configured correctly. CCE-16051-5 2010-10-04T15:45:10.110Z 2012-01-05T04:31:46.347Z The "Customize Command Labels" current user setting should be configured correctly. CCE-16930-0 2010-10-04T15:45:10.140Z 2012-01-05T04:31:46.407Z The "Set location of Stop and Refresh buttons" current user setting should be configured correctly. CCE-16700-7 2010-10-04T15:45:10.173Z 2012-01-05T04:31:46.457Z The "Turn off Developer Tools" current user setting should be configured correctly. CCE-16863-3 2010-10-04T15:45:10.203Z 2012-01-05T04:31:46.503Z The "Turn off toolbar upgrade tool" current user setting should be configured correctly. CCE-16727-0 2010-10-04T15:45:10.233Z 2012-01-05T04:31:46.550Z The "Lock all Toolbars" current user setting should be configured correctly. CCE-16969-8 2010-10-04T15:45:10.267Z 2012-01-05T04:31:46.580Z The "Use large Icons for Command Buttons" current user setting should be configured correctly. CCE-16590-2 2010-10-04T15:45:10.280Z 2012-01-05T04:31:46.627Z The "Disable customizing browser toolbars" current user setting should be configured correctly. CCE-16868-2 2010-10-04T15:45:10.313Z 2012-01-05T04:31:46.673Z The "Hide the Status Bar" current user setting should be configured correctly. CCE-15060-7 2010-10-04T15:45:10.343Z 2012-01-05T04:31:46.720Z The "Network Protocol Lockdown: All Processes" machine setting should be configured correctly. CCE-15791-7 2010-10-04T15:45:10.377Z 2012-01-05T04:31:46.753Z The "Network Protocol Lockdown: Internet Explorer Processes" machine setting should be configured correctly. CCE-15817-0 2010-10-04T15:45:10.390Z 2012-01-05T04:31:46.800Z The "Network Protocol Lockdown: Process List" machine setting should be configured correctly. CCE-15296-7 2010-10-04T15:45:10.437Z 2012-01-05T04:31:46.877Z The "Intranet Zone Restricted Protocols" machine setting should be configured correctly. CCE-15529-1 2010-10-04T15:45:10.467Z 2012-01-05T04:31:46.940Z The "Trusted Sites Zone Restricted Protocols" machine setting should be configured correctly. CCE-15040-9 2010-10-04T15:45:10.500Z 2012-01-05T04:31:46.987Z The "Restricted Sites Zone Restricted Protocols" machine setting should be configured correctly. CCE-15890-7 2010-10-04T15:45:10.517Z 2012-01-05T04:31:47.080Z The "Local Machine Zone Restricted Protocols" machine setting should be configured correctly. CCE-15895-6 2010-10-04T15:45:10.547Z 2012-01-05T04:31:47.143Z The "Internet Zone Restricted Protocols" machine setting should be configured correctly. CCE-16175-2 2010-10-04T15:45:10.577Z 2012-01-05T04:31:47.173Z The "Local Machine Zone Lockdown Security: Process List" machine setting should be configured correctly. CCE-16669-4 2010-10-04T15:45:10.610Z 2012-01-05T04:31:47.220Z The "Local Machine Zone Lockdown Security: Internet Explorer Processes" machine setting should be configured correctly. CCE-16162-0 2010-10-04T15:45:10.640Z 2012-01-05T04:31:47.267Z The "Local Machine Zone Lockdown Security: All Processes" machine setting should be configured correctly. CCE-16061-4 2010-10-04T15:45:10.657Z 2012-01-05T04:31:47.317Z The "MK Protocol Security Restriction: Process List" current user setting should be configured correctly. CCE-16982-1 2010-10-04T15:45:10.687Z 2012-01-05T04:31:47.363Z The "MK Protocol Security Restriction: All Processes" current user setting should be configured correctly. CCE-16938-3 2010-10-04T15:45:10.717Z 2012-01-05T04:31:47.407Z The "MK Protocol Security Restriction: Internet Explorer Processes" current user setting should be configured correctly. CCE-16128-1 2010-10-04T15:45:10.750Z 2012-01-05T04:31:47.457Z The "Information Bar: Internet Explorer Processes" current user setting should be configured correctly. CCE-15726-3 2010-10-04T15:45:10.767Z 2012-01-05T04:31:47.503Z The "Information Bar: All Processes" current user setting should be configured correctly. CCE-15264-5 2010-10-04T15:45:10.797Z 2012-01-05T04:31:47.550Z The "Information Bar: Process List" current user setting should be configured correctly. CCE-17109-0 2010-10-04T15:45:10.827Z 2012-01-05T04:31:47.627Z The "Maximum number of connections per server (HTTP 1.0)" current user setting should be configured correctly. CCE-16161-2 2010-10-04T15:45:10.860Z 2012-01-05T04:31:47.707Z The "Turn off Cross Document Messaging" current user setting should be configured correctly. CCE-16743-7 2010-10-04T15:45:10.890Z 2012-01-05T04:31:47.753Z The "Maximum number of connections per server (HTTP 1.1)" current user setting should be configured correctly. CCE-17122-3 2010-10-04T15:45:10.907Z 2012-01-05T04:31:47.800Z The "Turn off the XDomainRequest Object" current user setting should be configured correctly. CCE-17113-2 2010-10-04T15:45:10.937Z 2012-01-05T04:31:47.830Z The "Enable Native XMLHttpRequest Support" current user setting should be configured correctly. CCE-15717-2 2010-10-04T15:45:10.967Z 2012-01-05T04:31:47.877Z The "Auto-hide the Toolbars" machine setting should be configured correctly. CCE-15950-9 2010-10-04T15:45:11.000Z 2012-01-05T04:31:47.923Z The "Turn off Developer Tools" machine setting should be configured correctly. CCE-15972-3 2010-10-04T15:45:11.030Z 2012-01-05T04:31:47.970Z The "Lock all Toolbars" machine setting should be configured correctly. CCE-15474-0 2010-10-04T15:45:11.063Z 2012-01-05T04:31:48.017Z The "Use large Icons for Command Buttons" machine setting should be configured correctly. CCE-15945-9 2010-10-04T15:45:11.077Z 2012-01-05T04:31:48.067Z The "Set location of Stop and Refresh buttons" machine setting should be configured correctly. CCE-15472-4 2010-10-04T15:45:11.110Z 2012-01-05T04:31:48.127Z The "Turn off toolbar upgrade tool" machine setting should be configured correctly. CCE-15874-1 2010-10-04T15:45:11.140Z 2012-01-05T04:31:48.173Z The "Hide the Command Bar" machine setting should be configured correctly. CCE-15471-6 2010-10-04T15:45:11.173Z 2012-01-05T04:31:48.237Z The "Customize Command Labels" machine setting should be configured correctly. CCE-15860-0 2010-10-04T15:45:11.187Z 2012-01-05T04:31:48.300Z The "Hide the Status Bar" machine setting should be configured correctly. CCE-16394-9 2010-10-04T15:45:11.217Z 2012-01-05T04:31:48.347Z The "Turn off the XDomainRequest Object" machine setting should be configured correctly. CCE-16244-6 2010-10-04T15:45:11.250Z 2012-01-05T04:31:48.393Z The "Maximum number of connections per server (HTTP 1.1)" machine setting should be configured correctly. CCE-16275-0 2010-10-04T15:45:11.280Z 2012-01-05T04:31:48.440Z The "Maximum number of connections per server (HTTP 1.0)" machine setting should be configured correctly. CCE-16372-5 2010-10-04T15:45:11.297Z 2012-01-05T04:31:48.487Z The "Turn off Cross Document Messaging" machine setting should be configured correctly. CCE-15496-3 2010-10-04T15:45:11.327Z 2012-01-05T04:31:48.517Z The "Enable Native XMLHttpRequest Support" machine setting should be configured correctly. CCE-16472-3 2010-10-04T15:45:11.360Z 2012-01-05T04:31:48.567Z The "Turn off Windows Search AutoComplete" current user setting should be configured correctly. CCE-16704-9 2010-10-04T15:45:11.390Z 2012-01-05T04:31:48.613Z The "Turn on inline AutoComplete for Web addresses" current user setting should be configured correctly. CCE-15484-9 2010-10-04T15:45:11.423Z 2012-01-05T04:31:48.657Z The "Consistent Mime Handling: All Processes" current user setting should be configured correctly. CCE-15836-0 2010-10-04T15:45:11.453Z 2012-01-05T04:31:48.707Z The "Consistent Mime Handling: Internet Explorer Processes" current user setting should be configured correctly. CCE-16087-9 2010-10-04T15:45:11.467Z 2012-01-05T04:31:48.783Z The "Consistent Mime Handling: Process List" current user setting should be configured correctly. CCE-16405-3 2010-10-04T15:45:11.500Z 2012-01-05T04:31:48.863Z The "Prevent Deleting Temporary Internet Files" current user setting should be configured correctly. CCE-16414-5 2010-10-04T15:45:11.530Z 2012-01-05T04:31:48.957Z The "Prevent Deleting Favorites Site Data" current user setting should be configured correctly. CCE-15670-3 2010-10-04T15:45:11.563Z 2012-01-05T04:31:49.017Z The "Turn off "Delete Browsing History" functionality" current user setting should be configured correctly. CCE-16427-7 2010-10-04T15:45:11.593Z 2012-01-05T04:31:49.067Z The "Prevent Deleting Form Data" current user setting should be configured correctly. CCE-15683-6 2010-10-04T15:45:11.627Z 2012-01-05T04:31:49.113Z The "Prevent Deleting Passwords" current user setting should be configured correctly. CCE-16432-7 2010-10-04T15:45:11.640Z 2012-01-05T04:31:49.157Z The "Disable "Configuring History"" current user setting should be configured correctly. CCE-15533-3 2010-10-04T15:45:11.673Z 2012-01-05T04:31:49.207Z The "Prevent Deleting Web sites that the User has Visited" current user setting should be configured correctly. CCE-15466-6 2010-10-04T15:45:11.703Z 2012-01-05T04:31:49.253Z The "Prevent Deleting Cookies" current user setting should be configured correctly. CCE-15925-1 2010-10-04T15:45:11.733Z 2012-01-05T04:31:49.300Z The "Prevent Deleting InPrivate Filtering data" current user setting should be configured correctly. CCE-16332-9 2010-10-04T15:45:11.767Z 2012-01-05T04:31:49.347Z The "Restrict File Download: All Processes" current user setting should be configured correctly. CCE-16337-8 2010-10-04T15:45:11.780Z 2012-01-05T04:31:49.393Z The "Restrict File Download: Internet Explorer Processes" current user setting should be configured correctly. CCE-16323-8 2010-10-04T15:45:11.813Z 2012-01-05T04:31:49.423Z The "Restrict File Download: Process List" current user setting should be configured correctly. CCE-16293-3 2010-10-04T15:45:11.843Z 2012-01-05T04:31:49.470Z The "Local Machine Zone Lockdown Security: Process List" current user setting should be configured correctly. CCE-16672-8 2010-10-04T15:45:11.877Z 2012-01-05T04:31:49.550Z The "Local Machine Zone Lockdown Security: Internet Explorer Processes" current user setting should be configured correctly. CCE-15799-0 2010-10-04T15:45:11.907Z 2012-01-05T04:31:49.627Z The "Local Machine Zone Lockdown Security: All Processes" current user setting should be configured correctly. CCE-16518-3 2010-10-04T15:45:11.923Z 2012-01-05T04:31:49.673Z The "Protection From Zone Elevation: Process List" machine setting should be configured correctly. CCE-16641-3 2010-10-04T15:45:11.953Z 2012-01-05T04:31:49.720Z The "Protection From Zone Elevation: All Processes" machine setting should be configured correctly. CCE-16862-5 2010-10-04T15:45:11.983Z 2012-01-05T04:31:49.767Z The "Disable the Programs page" machine setting should be configured correctly. CCE-16858-3 2010-10-04T15:45:12.017Z 2012-01-05T04:31:49.830Z The "Disable the Content page" machine setting should be configured correctly. CCE-16981-3 2010-10-04T15:45:12.047Z 2012-01-05T04:31:49.877Z The "Use UTF-8 for mailto links" machine setting should be configured correctly. CCE-16488-9 2010-10-04T15:45:12.077Z 2012-01-05T04:31:49.923Z The "Disable the General page" machine setting should be configured correctly. CCE-16990-4 2010-10-04T15:45:12.093Z 2012-01-05T04:31:49.970Z The "Send internationalized domain names" machine setting should be configured correctly. CCE-16598-5 2010-10-04T15:45:12.127Z 2012-01-05T04:31:50.017Z The "Disable the Connections page" machine setting should be configured correctly. CCE-16068-9 2010-10-04T15:45:12.157Z 2012-01-05T04:31:50.067Z The "Disable the Privacy page" machine setting should be configured correctly. CCE-16112-5 2010-10-04T15:45:12.187Z 2012-01-05T04:31:50.113Z The "Binary Behavior Security Restriction: All Processes" machine setting should be configured correctly. CCE-16389-9 2010-10-04T15:45:12.217Z 2012-01-05T04:31:50.173Z The "Admin-approved behaviors" machine setting should be configured correctly. CCE-15631-5 2010-10-04T15:45:12.250Z 2012-01-05T04:31:50.220Z The "Binary Behavior Security Restriction: Process List" machine setting should be configured correctly. CCE-16376-6 2010-10-04T15:45:12.280Z 2012-01-05T04:31:50.267Z The "Binary Behavior Security Restriction: Internet Explorer Processes" machine setting should be configured correctly. CCE-15410-4 2010-10-04T15:45:12.313Z 2012-01-05T04:31:50.317Z The "Turn on Automatic Signup" current user setting should be configured correctly. CCE-15951-7 2010-10-04T15:45:12.327Z 2012-01-05T04:31:50.363Z The "Microsoft Chat" current user setting should be configured correctly. CCE-16101-8 2010-10-04T15:45:12.360Z 2012-01-05T04:31:50.407Z The "Microsoft Agent" current user setting should be configured correctly. CCE-15867-5 2010-10-04T15:45:12.390Z 2012-01-05T04:31:50.457Z The "Shockwave Flash" current user setting should be configured correctly. CCE-15937-6 2010-10-04T15:45:12.423Z 2012-01-05T04:31:50.503Z The "Carpoint" current user setting should be configured correctly. CCE-15616-6 2010-10-04T15:45:12.453Z 2012-01-05T04:31:50.567Z The "Audio/Video Player" current user setting should be configured correctly. CCE-15224-9 2010-10-04T15:45:12.467Z 2012-01-05T04:31:50.613Z The "MSNBC" current user setting should be configured correctly. CCE-15140-7 2010-10-04T15:45:12.500Z 2012-01-05T04:31:50.657Z The "Investor" current user setting should be configured correctly. CCE-16000-2 2010-10-04T15:45:12.530Z 2012-01-05T04:31:50.707Z The "Microsoft Survey Control" current user setting should be configured correctly. CCE-16074-7 2010-10-04T15:45:12.563Z 2012-01-05T04:31:50.753Z The "Microsoft Scriptlet Component" current user setting should be configured correctly. CCE-16070-5 2010-10-04T15:45:12.593Z 2012-01-05T04:31:50.800Z The "NetShow File Transfer Control" current user setting should be configured correctly. CCE-15378-3 2010-10-04T15:45:12.627Z 2012-01-05T04:31:50.847Z The "DHTML Edit Control" current user setting should be configured correctly. CCE-15978-0 2010-10-04T15:45:12.657Z 2012-01-05T04:31:50.923Z The "Menu Controls" current user setting should be configured correctly. CCE-16037-4 2010-10-04T15:45:12.717Z 2012-01-05T04:31:51.003Z The "Disable Open in New Window menu option" current user setting should be configured correctly. CCE-15786-7 2010-10-04T15:45:12.750Z 2012-01-05T04:31:51.050Z The "Disable Context menu" current user setting should be configured correctly. CCE-15933-5 2010-10-04T15:45:12.780Z 2012-01-05T04:31:51.097Z The "File menu: Disable New menu option" current user setting should be configured correctly. CCE-15131-6 2010-10-04T15:45:12.813Z 2012-01-05T04:31:51.143Z The "Help menu: Remove 'Tour' menu option" current user setting should be configured correctly. CCE-15929-3 2010-10-04T15:45:12.843Z 2012-01-05T04:31:51.190Z The "Help menu: Remove 'Send Feedback' menu option" current user setting should be configured correctly. CCE-15905-3 2010-10-04T15:45:12.877Z 2012-01-05T04:31:51.220Z The "File menu: Disable Save As Web Page Complete" current user setting should be configured correctly. CCE-15955-8 2010-10-04T15:45:12.907Z 2012-01-05T04:31:51.267Z The "File menu: Disable Open menu option" current user setting should be configured correctly. CCE-15808-9 2010-10-04T15:45:12.937Z 2012-01-05T04:31:51.317Z The "View menu: Disable Source menu option" current user setting should be configured correctly. CCE-15125-8 2010-10-04T15:45:12.967Z 2012-01-05T04:31:51.363Z The "Turn off Print Menu" current user setting should be configured correctly. CCE-16042-4 2010-10-04T15:45:12.983Z 2012-01-05T04:31:51.407Z The "File menu: Disable closing the browser and Explorer windows" current user setting should be configured correctly. CCE-15302-3 2010-10-04T15:45:13.017Z 2012-01-05T04:31:51.457Z The "File menu: Disable Save As... menu option" current user setting should be configured correctly. CCE-15918-6 2010-10-04T15:45:13.047Z 2012-01-05T04:31:51.503Z The "View menu: Disable Full Screen menu option" current user setting should be configured correctly. CCE-15927-7 2010-10-04T15:45:13.077Z 2012-01-05T04:31:51.533Z The "Tools menu: Disable Internet Options... menu option" current user setting should be configured correctly. CCE-16052-3 2010-10-04T15:45:13.110Z 2012-01-05T04:31:51.580Z The "Hide Favorites menu" current user setting should be configured correctly. CCE-15923-6 2010-10-04T15:45:13.140Z 2012-01-05T04:31:51.627Z The "Scripted Window Security Restrictions: Process List" machine setting should be configured correctly. CCE-15928-5 2010-10-04T15:45:13.157Z 2012-01-05T04:31:51.673Z The "Scripted Window Security Restrictions: All Processes" machine setting should be configured correctly. CCE-17005-0 2010-10-04T15:45:13.187Z 2012-01-05T04:31:51.720Z The "MK Protocol Security Restriction: Process List" machine setting should be configured correctly. CCE-16763-5 2010-10-04T15:45:13.217Z 2012-01-05T04:31:51.767Z The "MK Protocol Security Restriction: All Processes" machine setting should be configured correctly. CCE-15341-1 2010-10-04T15:45:13.250Z 2012-01-05T04:31:51.817Z The "Object Caching Protection: Internet Explorer Processes" current user setting should be configured correctly. CCE-16214-9 2010-10-04T15:45:13.280Z 2012-01-05T04:31:51.863Z The "Object Caching Protection: All Processes" current user setting should be configured correctly. CCE-15844-4 2010-10-04T15:45:13.313Z 2012-01-05T04:31:51.907Z The "Object Caching Protection: Process List" current user setting should be configured correctly. CCE-15637-2 2010-10-04T15:45:13.343Z 2012-01-05T04:31:51.957Z The "Restricted Sites Zone Template" current user setting should be configured correctly. CCE-15316-3 2010-10-04T15:45:13.377Z 2012-01-05T04:31:52.003Z The "Turn on Warn about Certificate Address Mismatch" current user setting should be configured correctly. CCE-16301-4 2010-10-04T15:45:13.390Z 2012-01-05T04:31:52.050Z The "Intranet Sites: Include all sites that bypass the proxy server" current user setting should be configured correctly. CCE-16172-9 2010-10-04T15:45:13.423Z 2012-01-05T04:31:52.097Z The "Locked-Down Internet Zone Template" current user setting should be configured correctly. CCE-15887-3 2010-10-04T15:45:13.453Z 2012-01-05T04:31:52.143Z The "Trusted Sites Zone Template" current user setting should be configured correctly. CCE-16111-7 2010-10-04T15:45:13.483Z 2012-01-05T04:31:52.190Z The "Intranet Zone Template" current user setting should be configured correctly. CCE-16297-4 2010-10-04T15:45:13.517Z 2012-01-05T04:31:52.237Z The "Locked-Down Local Machine Zone Template" current user setting should be configured correctly. CCE-15865-9 2010-10-04T15:45:13.530Z 2012-01-05T04:31:52.300Z The "Internet Zone Template" current user setting should be configured correctly. CCE-16259-4 2010-10-04T15:45:13.577Z 2012-01-05T04:31:52.377Z The "Site to Zone Assignment List" current user setting should be configured correctly. CCE-16273-5 2010-10-04T15:45:13.593Z 2012-01-05T04:31:52.423Z The "Turn on Information bar notification for intranet content" current user setting should be configured correctly. CCE-16306-3 2010-10-04T15:45:13.627Z 2012-01-05T04:31:52.470Z The "Locked-Down Intranet Zone Template" current user setting should be configured correctly. CCE-16124-0 2010-10-04T15:45:13.657Z 2012-01-05T04:31:52.503Z The "Local Machine Zone Template" current user setting should be configured correctly. CCE-16284-2 2010-10-04T15:45:13.687Z 2012-01-05T04:31:52.550Z The "Turn on automatic detection of the intranet" current user setting should be configured correctly. CCE-16287-5 2010-10-04T15:45:13.717Z 2012-01-05T04:31:52.597Z The "Locked-Down Restricted Sites Zone Template" current user setting should be configured correctly. CCE-16310-5 2010-10-04T15:45:13.750Z 2012-01-05T04:31:52.657Z The "Locked-Down Trusted Sites Zone Template" current user setting should be configured correctly. CCE-16120-8 2010-10-04T15:45:13.767Z 2012-01-05T04:31:52.690Z The "Intranet Sites: Include all local (intranet) sites not listed in other zones" current user setting should be configured correctly. CCE-16049-9 2010-10-04T15:45:13.797Z 2012-01-05T04:31:52.737Z The "Intranet Sites: Include all network paths (UNCs)" current user setting should be configured correctly. CCE-16801-3 2010-10-04T15:45:13.827Z 2012-01-05T04:31:52.783Z The "Play sounds in web pages" current user setting should be configured correctly. CCE-15924-4 2010-10-04T15:45:13.860Z 2012-01-05T04:31:52.830Z The "Allow active content from CDs to run on user machines" current user setting should be configured correctly. CCE-16056-4 2010-10-04T15:45:13.890Z 2012-01-05T04:31:52.877Z The "Check for signatures on downloaded programs" current user setting should be configured correctly. CCE-15932-7 2010-10-04T15:45:13.923Z 2012-01-05T04:31:52.907Z The "Allow software to run or install even if the signature is invalid" current user setting should be configured correctly. CCE-15938-4 2010-10-04T15:45:13.937Z 2012-01-05T04:31:52.957Z The "Turn off Encryption Support" current user setting should be configured correctly. CCE-15940-0 2010-10-04T15:45:13.967Z 2012-01-05T04:31:53.003Z The "Empty Temporary Internet Files folder when browser is closed" current user setting should be configured correctly. CCE-16908-6 2010-10-04T15:45:14.000Z 2012-01-05T04:31:53.050Z The "Do not allow resetting Internet Explorer settings" current user setting should be configured correctly. CCE-16899-7 2010-10-04T15:45:14.030Z 2012-01-05T04:31:53.080Z The "Automatically check for Internet Explorer updates" current user setting should be configured correctly. CCE-16592-8 2010-10-04T15:45:14.063Z 2012-01-05T04:31:53.127Z The "Check for server certificate revocation" current user setting should be configured correctly. CCE-16920-1 2010-10-04T15:45:14.093Z 2012-01-05T04:31:53.173Z The "Play animations in web pages" current user setting should be configured correctly. CCE-16725-4 2010-10-04T15:45:14.127Z 2012-01-05T04:31:53.220Z The "Turn off ClearType" current user setting should be configured correctly. CCE-16742-9 2010-10-04T15:45:14.140Z 2012-01-05T04:31:53.253Z The "Turn on Caret Browsing support" current user setting should be configured correctly. CCE-16606-6 2010-10-04T15:45:14.173Z 2012-01-05T04:31:53.300Z The "Use HTTP 1.1 through proxy connections" current user setting should be configured correctly. CCE-15973-1 2010-10-04T15:45:14.203Z 2012-01-05T04:31:53.347Z The "Do not save encrypted pages to disk" current user setting should be configured correctly. CCE-16720-5 2010-10-04T15:45:14.233Z 2012-01-05T04:31:53.407Z The "Allow third-party browser extensions" current user setting should be configured correctly. CCE-16916-9 2010-10-04T15:45:14.267Z 2012-01-05T04:31:53.470Z The "Use HTTP 1.1" current user setting should be configured correctly. CCE-16383-2 2010-10-04T15:45:14.297Z 2012-01-05T04:31:53.517Z The "Turn on the hover color option" current user setting should be configured correctly. CCE-16515-9 2010-10-04T15:45:14.327Z 2012-01-05T04:31:53.567Z The "Prevent users from configuring the color of links that have already been clicked" current user setting should be configured correctly. CCE-16770-0 2010-10-04T15:45:14.360Z 2012-01-05T04:31:53.613Z The "Prevent users from configuring the hover color" current user setting should be configured correctly. CCE-15911-1 2010-10-04T15:45:14.390Z 2012-01-05T04:31:53.657Z The "Prevent users from configuring the color of links that have not yet been clicked" current user setting should be configured correctly. CCE-4283-8 2010-10-04T15:45:28.453Z 2010-10-04T15:45:28.467Z The "Allow access to e-mail attachments" setting should be configured correctly for Outlook 2007. CM-5 SI-8 CCE-5276-1 2010-10-04T15:45:28.483Z 2010-10-04T15:45:28.500Z The "Do not automatically sign replies" setting should be configured correctly for Outlook 2007. CM-6 CCE-4440-4 2010-10-04T15:45:28.517Z 2010-10-04T15:45:28.547Z The "Prompt user to choose security settings if default settings fail" setting should be configured correctly for Outlook 2007. CM-6 CCE-12740-7 2010-10-04T15:45:28.563Z 2012-01-05T04:32:25.487Z The "Default file location" PowerPoint setting should be configured correctly. CCE-14442-8 2010-10-04T15:45:28.577Z 2012-01-05T04:32:25.533Z The "Suppress file format compatibility dialog box for OpenDocument Presentation format" PowerPoint setting should be configured correctly. CCE-13502-0 2010-10-04T15:45:28.627Z 2012-01-05T04:32:25.580Z The "Keep the last AutoSaved versions of files for the next session" PowerPoint setting should be configured correctly. CCE-14536-7 2010-10-04T15:45:28.657Z 2012-01-05T04:32:25.627Z The "Disable Package For CD" PowerPoint setting should be configured correctly. CCE-12518-7 2010-10-04T15:45:28.687Z 2012-01-05T04:32:25.673Z The "Default file format" PowerPoint setting should be configured correctly. CCE-14211-7 2010-10-04T15:45:28.717Z 2012-01-05T04:32:25.720Z The "Save AutoRecover info" PowerPoint setting should be configured correctly. CCE-14709-0 2010-10-04T15:45:28.750Z 2012-01-05T04:32:25.767Z The "Disable commands" SharePoint Designer setting should be configured correctly. CCE-13391-8 2010-10-04T15:45:28.780Z 2012-01-05T04:32:25.830Z The "Disable commands" Access setting should be configured correctly. CCE-13995-6 2010-10-04T15:45:28.813Z 2012-01-05T04:32:25.877Z The "Disable shortcut keys" Access setting should be configured correctly. CCE-12301-8 2010-10-04T15:45:28.860Z 2012-01-05T04:32:25.923Z The "Places Bar Location 6" common setting should be configured correctly. CCE-12827-2 2010-10-04T15:45:28.890Z 2012-01-05T04:32:25.970Z The "Places Bar Location 5" common setting should be configured correctly. CCE-12268-9 2010-10-04T15:45:28.923Z 2012-01-05T04:32:26.017Z The "Places Bar Location 7" common setting should be configured correctly. CCE-13788-5 2010-10-04T15:45:28.953Z 2012-01-05T04:32:26.080Z The "Places Bar Location 3" common setting should be configured correctly. CCE-14116-8 2010-10-04T15:45:28.983Z 2012-01-05T04:32:26.127Z The "Places Bar Location 8" common setting should be configured correctly. CCE-14664-7 2010-10-04T15:45:29.030Z 2012-01-05T04:32:26.173Z The "Places Bar Location 1" common setting should be configured correctly. CCE-13104-5 2010-10-04T15:45:29.063Z 2012-01-05T04:32:26.220Z The "Places Bar Location 9" common setting should be configured correctly. CCE-12670-6 2010-10-04T15:45:29.093Z 2012-01-05T04:32:26.267Z The "Places Bar Location 4" common setting should be configured correctly. CCE-14216-6 2010-10-04T15:45:29.127Z 2012-01-05T04:32:26.317Z The "Places Bar Location 10" common setting should be configured correctly. CCE-13821-4 2010-10-04T15:45:29.157Z 2012-01-05T04:32:26.363Z The "Places Bar Location 2" common setting should be configured correctly. CCE-14642-3 2010-10-04T15:45:29.203Z 2012-01-05T04:32:26.407Z The "Project Guide Functionality and Layout page" Project setting should be configured correctly. CCE-14182-0 2010-10-04T15:45:29.233Z 2012-01-05T04:32:26.470Z The "Project Guide Content" Project setting should be configured correctly. CCE-12439-6 2010-10-04T15:45:29.267Z 2012-01-05T04:32:26.517Z The "Do not show data extraction options when opening corrupt workbooks" Excel setting should be configured correctly. CCE-12954-4 2010-10-04T15:45:29.297Z 2012-01-05T04:32:26.567Z The "Scroll Bars" Project setting should be configured correctly. CCE-12684-7 2010-10-04T15:45:29.327Z 2012-01-05T04:32:26.627Z The "Windows in Taskbar" Project setting should be configured correctly. CCE-14000-4 2010-10-04T15:45:29.377Z 2012-01-05T04:32:26.690Z The "Automatically add new items to the global project" Project setting should be configured correctly. CCE-13137-5 2010-10-04T15:45:29.407Z 2012-01-05T04:32:26.737Z The "Status Bar" Project setting should be configured correctly. CCE-13379-3 2010-10-04T15:45:29.437Z 2012-01-05T04:32:26.783Z The "OLE Link Indicators" Project setting should be configured correctly. CCE-13422-1 2010-10-04T15:45:29.467Z 2012-01-05T04:32:26.847Z The "Project Screentips" Project setting should be configured correctly. CCE-14898-1 2010-10-04T15:45:29.500Z 2012-01-05T04:32:26.893Z The "Entry Bar" Project setting should be configured correctly. CCE-12694-6 2010-10-04T15:45:29.530Z 2012-01-05T04:32:26.957Z The "Configure fast shutdown behavior for add-ins" Outlook setting should be configured correctly. CCE-14753-8 2010-10-04T15:45:29.577Z 2012-01-05T04:32:27.003Z The "Configure fast shutdown behavior" Outlook setting should be configured correctly. CCE-13326-4 2010-10-04T15:45:29.610Z 2012-01-05T04:32:27.050Z The "Prevent shutdown if external references exist" Outlook setting should be configured correctly. CCE-12263-0 2010-10-04T15:45:29.657Z 2012-01-05T04:32:27.097Z The "Set query items limit" common setting should be configured correctly. CCE-14648-0 2010-10-04T15:45:29.687Z 2012-01-05T04:32:27.143Z The "Set subscription refresh retry interval" common setting should be configured correctly. CCE-13913-9 2010-10-04T15:45:29.717Z 2012-01-05T04:32:27.190Z The "Set maximum number of retries when synchronization fails" common setting should be configured correctly. CCE-11838-0 2010-10-04T15:45:29.750Z 2012-01-05T04:32:27.237Z The "Set errors cleanup interval" common setting should be configured correctly. CCE-12076-6 2010-10-04T15:45:29.780Z 2012-01-05T04:32:27.283Z The "Set refresh frequency limit" common setting should be configured correctly. CCE-12431-3 2010-10-04T15:45:29.827Z 2012-01-05T04:32:27.330Z The "Set maximum sleep interval" common setting should be configured correctly. CCE-14603-5 2010-10-04T15:45:29.860Z 2012-01-05T04:32:27.393Z The "Set the cleanup interval" common setting should be configured correctly. CCE-13339-7 2010-10-04T15:45:29.890Z 2012-01-05T04:32:27.440Z The "Set query processing timeout limit" common setting should be configured correctly. CCE-14469-1 2010-10-04T15:45:29.923Z 2012-01-05T04:32:27.487Z The "Disable Trust Bar Notification for unsigned application add-ins" InfoPath setting should be configured correctly. CCE-14062-4 2010-10-04T15:45:29.953Z 2012-01-05T04:32:27.533Z The "Disable all application add-ins" InfoPath setting should be configured correctly. CCE-13173-0 2010-10-04T15:45:30.000Z 2012-01-05T04:32:27.567Z The "Turn off Data Execution Prevention" InfoPath setting should be configured correctly. CCE-12930-4 2010-10-04T15:45:30.030Z 2012-01-05T04:32:27.613Z The "Block cross-domain data form retrieval" InfoPath setting should be configured correctly. CCE-14318-0 2010-10-04T15:45:30.063Z 2012-01-05T04:32:27.673Z The "Require that application add-ins are signed by Trusted Publisher" InfoPath setting should be configured correctly. CCE-12900-7 2010-10-04T15:45:30.110Z 2012-01-05T04:32:27.720Z The "Disable all trusted locations" InfoPath setting should be configured correctly. CCE-14388-3 2010-10-04T15:45:30.140Z 2012-01-05T04:32:27.767Z The "Turn off file synchronization via SOAP over HTTP" common setting should be configured correctly. CCE-13407-2 2010-10-04T15:45:30.173Z 2012-01-05T04:32:27.817Z The "Insertions color" Word setting should be configured correctly. CCE-11640-0 2010-10-04T15:45:30.203Z 2012-01-05T04:32:27.863Z The "Table compare colors" Word setting should be configured correctly. CCE-14418-8 2010-10-04T15:45:30.250Z 2012-01-05T04:32:27.907Z The "Balloons" Word setting should be configured correctly. CCE-14294-3 2010-10-04T15:45:30.280Z 2012-01-05T04:32:27.957Z The "Deletions color" Word setting should be configured correctly. CCE-12261-4 2010-10-04T15:45:30.313Z 2012-01-05T04:32:28.003Z The "Compare resulting document" Word setting should be configured correctly. CCE-13210-0 2010-10-04T15:45:30.343Z 2012-01-05T04:32:28.050Z The "Ignore White Space" Word setting should be configured correctly. CCE-14762-9 2010-10-04T15:45:30.377Z 2012-01-05T04:32:28.097Z The "Disable Outlook send email to OneNote option" OneNote setting should be configured correctly. CCE-12847-0 2010-10-04T15:45:30.423Z 2012-01-05T04:32:28.143Z The "Offline data cached per form template" InfoPath setting should be configured correctly. CCE-13583-0 2010-10-04T15:45:30.453Z 2012-01-05T04:32:28.220Z The "Offline Mode cache size" InfoPath setting should be configured correctly. CCE-14778-5 2010-10-04T15:45:30.483Z 2012-01-05T04:32:28.317Z The "Offline Mode status" InfoPath setting should be configured correctly. CCE-13852-9 2010-10-04T15:45:30.517Z 2012-01-05T04:32:28.423Z The "Include new rows and columns in table" Excel setting should be configured correctly. CCE-14307-3 2010-10-04T15:45:30.547Z 2012-01-05T04:32:28.503Z The "Internet and network paths as hyperlinks" Excel setting should be configured correctly. CCE-13893-3 2010-10-04T15:45:30.593Z 2012-01-05T04:32:28.550Z The "Hyperlink color" Access setting should be configured correctly. CCE-11891-9 2010-10-04T15:45:30.627Z 2012-01-05T04:32:28.580Z The "Underline hyperlinks" Access setting should be configured correctly. CCE-12063-4 2010-10-04T15:45:30.657Z 2012-01-05T04:32:28.627Z The "Followed hyperlink color" Access setting should be configured correctly. CCE-13843-8 2010-10-04T15:45:30.687Z 2012-01-05T04:32:28.673Z The "Open last file on startup" Project setting should be configured correctly. CCE-13317-3 2010-10-04T15:45:30.733Z 2012-01-05T04:32:28.737Z The "Prompt for project info for new projects" Project setting should be configured correctly. CCE-12786-0 2010-10-04T15:45:30.767Z 2012-01-05T04:32:28.783Z The "Recently used file list (MRU)" Project setting should be configured correctly. CCE-13871-9 2010-10-04T15:45:30.797Z 2012-01-05T04:32:28.830Z The "Set AutoFilter on for new projects" Project setting should be configured correctly. CCE-14003-8 2010-10-04T15:45:30.827Z 2012-01-05T04:32:28.877Z The "List of error messages to customize" Visio setting should be configured correctly. CCE-13416-3 2010-10-04T15:45:30.860Z 2012-01-05T04:32:28.923Z The "Disable user from setting personal site as default location" common setting should be configured correctly. CCE-12182-2 2010-10-04T15:45:30.890Z 2012-01-05T04:32:28.970Z The "Automatic Discovery" setting should be configured correctly. CCE-14134-1 2010-10-04T15:45:30.923Z 2012-01-05T04:32:29.017Z The "OLAP PivotTable User Defined Function (UDF) security setting" Excel setting should be configured correctly. CCE-12329-9 2010-10-04T15:45:30.967Z 2012-01-05T04:32:29.067Z The "Do not cache network files locally" Excel setting should be configured correctly. CCE-12419-8 2010-10-04T15:45:31.000Z 2012-01-05T04:32:29.113Z The "Graph gallery path" setting should be configured correctly. CCE-14578-9 2010-10-04T15:45:31.030Z 2012-01-05T04:32:29.157Z The "Enable four-digit year display" Excel setting should be configured correctly. CCE-13845-3 2010-10-04T15:45:31.063Z 2012-01-05T04:32:29.207Z The "Set maximum number of trusted documents" Excel setting should be configured correctly. CCE-14047-5 2010-10-04T15:45:31.093Z 2012-01-05T04:32:29.253Z The "Disable all application add-ins" Excel setting should be configured correctly. CCE-13607-7 2010-10-04T15:45:31.127Z 2012-01-05T04:32:29.300Z The "Set maximum number of trust records to preserve" Excel setting should be configured correctly. CCE-12798-5 2010-10-04T15:45:31.173Z 2012-01-05T04:32:29.347Z The "Require that application add-ins are signed by Trusted Publisher" Excel setting should be configured correctly. CCE-12426-3 2010-10-04T15:45:31.203Z 2012-01-05T04:32:29.393Z The "VBA Macro Notification Settings" Excel setting should be configured correctly. CCE-13641-6 2010-10-04T15:45:31.233Z 2012-01-05T04:32:29.440Z The "Store macro in Personal Macro Workbook by default" Excel setting should be configured correctly. CCE-12214-3 2010-10-04T15:45:31.267Z 2012-01-05T04:32:29.487Z The "Trust access to Visual Basic Project" Excel setting should be configured correctly. CCE-12673-0 2010-10-04T15:45:31.297Z 2012-01-05T04:32:29.533Z The "Turn off Trusted Documents on the network" Excel setting should be configured correctly. CCE-12641-7 2010-10-04T15:45:31.327Z 2012-01-05T04:32:29.580Z The "Turn off Data Execution Prevention" Excel setting should be configured correctly. CCE-13761-2 2010-10-04T15:45:31.377Z 2012-01-05T04:32:29.627Z The "Disable Trust Bar Notification for unsigned application add-ins and block them" Excel setting should be configured correctly. CCE-12179-8 2010-10-04T15:45:31.407Z 2012-01-05T04:32:29.673Z The "Turn off trusted documents" Excel setting should be configured correctly. CCE-14869-2 2010-10-04T15:45:31.453Z 2012-01-05T04:32:29.720Z The "Show scheduling messages" Project setting should be configured correctly. CCE-13818-0 2010-10-04T15:45:31.483Z 2012-01-05T04:32:29.783Z The "Show assignment units as" Project setting should be configured correctly. CCE-12623-5 2010-10-04T15:45:31.517Z 2012-01-05T04:32:29.830Z The "Primary Editing Language" common setting should be configured correctly. CCE-14486-5 2010-10-04T15:45:31.547Z 2012-01-05T04:32:29.877Z The "Turn off CAD/DWG functionality" Visio setting should be configured correctly. CCE-14507-8 2010-10-04T15:45:31.577Z 2012-01-05T04:32:29.923Z The "Set refresh time for Calendar information for the person name action" common setting should be configured correctly. CCE-12298-6 2010-10-04T15:45:31.610Z 2012-01-05T04:32:29.987Z The "Disable the Send Mail item in the person name actions menu." common setting should be configured correctly. CCE-12280-4 2010-10-04T15:45:31.657Z 2012-01-05T04:32:30.050Z The "Disable all person name actions menu items" common setting should be configured correctly. CCE-14106-9 2010-10-04T15:45:31.687Z 2012-01-05T04:32:30.097Z The "Disable the Manager item in the person name actions menu." common setting should be configured correctly. CCE-14756-1 2010-10-04T15:45:31.717Z 2012-01-05T04:32:30.143Z The "Disable the Office Location item in the person name actions menu." common setting should be configured correctly. CCE-11839-8 2010-10-04T15:45:31.750Z 2012-01-05T04:32:30.190Z The "Disable the Messaging item in the person name actions menu." common setting should be configured correctly. CCE-14066-5 2010-10-04T15:45:31.780Z 2012-01-05T04:32:30.237Z The "Disable the Phone Number item in the person name actions menu." common setting should be configured correctly. CCE-13378-5 2010-10-04T15:45:31.813Z 2012-01-05T04:32:30.283Z The "Disable the Registered Person item in the person name actions menu." common setting should be configured correctly. CCE-14713-2 2010-10-04T15:45:31.843Z 2012-01-05T04:32:30.330Z The "Disable the Free/Busy item in the person name actions menu." common setting should be configured correctly. CCE-12935-3 2010-10-04T15:45:31.890Z 2012-01-05T04:32:30.377Z The "Disable person name actions for my messaging contacts in Word and Excel" common setting should be configured correctly. CCE-11836-4 2010-10-04T15:45:31.923Z 2012-01-05T04:32:30.423Z The "Disable the Add/Open Outlook Contacts item in the person name actions menu." common setting should be configured correctly. CCE-13712-5 2010-10-04T15:45:31.953Z 2012-01-05T04:32:30.470Z The "Disable the Outlook Properties item in the person name actions menu." common setting should be configured correctly. CCE-13772-9 2010-10-04T15:45:31.983Z 2012-01-05T04:32:30.517Z The "Disable the Online Status item in the person name actions menu." common setting should be configured correctly. CCE-12779-5 2010-10-04T15:45:32.030Z 2012-01-05T04:32:30.567Z The "Disable Create Rule item in the person name actions menu." common setting should be configured correctly. CCE-14453-5 2010-10-04T15:45:32.063Z 2012-01-05T04:32:30.613Z The "Disable Internet Fax feature" common setting should be configured correctly. CCE-14235-6 2010-10-04T15:45:32.093Z 2012-01-05T04:32:30.657Z The "Disallow custom cover sheet" common setting should be configured correctly. CCE-12961-9 2010-10-04T15:45:32.140Z 2012-01-05T04:32:30.707Z The "Plain text options" common setting should be configured correctly. CCE-14117-6 2010-10-04T15:45:32.173Z 2012-01-05T04:32:30.753Z The "Outlook Rich Text options" Outlook setting should be configured correctly. CCE-11893-5 2010-10-04T15:45:32.203Z 2012-01-05T04:32:30.800Z The "Warn before permanently deleting items" Outlook setting should be configured correctly. CCE-11978-4 2010-10-04T15:45:32.233Z 2012-01-05T04:32:30.847Z The "Minimize Outlook to the system tray" Outlook setting should be configured correctly. CCE-12865-2 2010-10-04T15:45:32.280Z 2012-01-05T04:32:30.893Z The "Do not allow Outlook object model scripts to run for shared folders" Outlook setting should be configured correctly. CCE-13380-1 2010-10-04T15:45:32.313Z 2012-01-05T04:32:30.957Z The "Use Unicode format when dragging e-mail message to file system" Outlook setting should be configured correctly. CCE-14303-2 2010-10-04T15:45:32.343Z 2012-01-05T04:32:31.003Z The "Save calendar sync conflicts" Outlook setting should be configured correctly. CCE-14044-2 2010-10-04T15:45:32.377Z 2012-01-05T04:32:31.050Z The "Turn on logging for all conflicts" Outlook setting should be configured correctly. CCE-13934-5 2010-10-04T15:45:32.407Z 2012-01-05T04:32:31.097Z The "Save RSS conflicts" Outlook setting should be configured correctly. CCE-13039-3 2010-10-04T15:45:32.437Z 2012-01-05T04:32:31.143Z The "Enable mail logging (troubleshooting)" Outlook setting should be configured correctly. CCE-14390-9 2010-10-04T15:45:32.483Z 2012-01-05T04:32:31.207Z The "Do not allow Outlook object model scripts to run for public folders" Outlook setting should be configured correctly. CCE-13726-5 2010-10-04T15:45:32.517Z 2012-01-05T04:32:31.253Z The "Do not allow folders in non-default stores to be set as folder home pages" Outlook setting should be configured correctly. CCE-14422-0 2010-10-04T15:45:32.547Z 2012-01-05T04:32:31.300Z The "Prevent saving sync conflicts" Outlook setting should be configured correctly. CCE-13968-3 2010-10-04T15:45:32.577Z 2012-01-05T04:32:31.347Z The "Configure CNG cipher chaining mode" OneNote setting should be configured correctly. CCE-13397-5 2010-10-04T15:45:32.610Z 2012-01-05T04:32:31.393Z The "Set CNG password spin count" OneNote setting should be configured correctly. CCE-14130-9 2010-10-04T15:45:32.640Z 2012-01-05T04:32:31.440Z The "Set CNG cipher algorithm" OneNote setting should be configured correctly. CCE-13041-9 2010-10-04T15:45:32.673Z 2012-01-05T04:32:31.487Z The "Specify encryption compatibility" OneNote setting should be configured correctly. CCE-13600-2 2010-10-04T15:45:32.717Z 2012-01-05T04:32:31.533Z The "Set parameters for CNG context" OneNote setting should be configured correctly. CCE-13771-1 2010-10-04T15:45:32.750Z 2012-01-05T04:32:31.597Z The "Set CNG cipher key length" OneNote setting should be configured correctly. CCE-12980-9 2010-10-04T15:45:32.780Z 2012-01-05T04:32:31.643Z The "Specify CNG hash algorithm" OneNote setting should be configured correctly. CCE-13929-5 2010-10-04T15:45:32.827Z 2012-01-05T04:32:31.690Z The "Specify CNG random number generator algorithm" OneNote setting should be configured correctly. CCE-13340-5 2010-10-04T15:45:32.860Z 2012-01-05T04:32:31.737Z The "Specify CNG salt length" OneNote setting should be configured correctly. CCE-13736-4 2010-10-04T15:45:32.890Z 2012-01-05T04:32:31.783Z The "Set Outlook object model custom actions execution prompt" Outlook setting should be configured correctly. CCE-14048-3 2010-10-04T15:45:32.923Z 2012-01-05T04:32:31.847Z The "Allow scripts in one-off Outlook forms" Outlook setting should be configured correctly. CCE-11862-0 2010-10-04T15:45:32.967Z 2012-01-05T04:32:31.893Z The "AutoArchive Settings" Outlook setting should be configured correctly. CCE-13029-4 2010-10-04T15:45:33.000Z 2012-01-05T04:32:31.940Z The "Disable File|Archive" Outlook setting should be configured correctly. CCE-14863-5 2010-10-04T15:45:33.030Z 2012-01-05T04:32:31.987Z The "Prevent co-authoring" PowerPoint setting should be configured correctly. CCE-12609-4 2010-10-04T15:45:33.063Z 2012-01-05T04:32:32.050Z The "Disable Internal ID Matching" Project setting should be configured correctly. CCE-12474-3 2010-10-04T15:45:33.093Z 2012-01-05T04:32:32.097Z The "Disable shortcut keys" PowerPoint setting should be configured correctly. CCE-14135-8 2010-10-04T15:45:33.140Z 2012-01-05T04:32:32.143Z The "Disable commands" PowerPoint setting should be configured correctly. CCE-12386-9 2010-10-04T15:45:33.173Z 2012-01-05T04:32:32.190Z The "Force selection of account before sending" Outlook setting should be configured correctly. CCE-12130-1 2010-10-04T15:45:33.203Z 2012-01-05T04:32:32.237Z The "Default servers and data for Meeting Workspaces" setting should be configured correctly. CCE-14154-9 2010-10-04T15:45:33.233Z 2012-01-05T04:32:32.283Z The "Disable user entries to server list" setting should be configured correctly. CCE-14395-8 2010-10-04T15:45:33.267Z 2012-01-05T04:32:32.347Z The "Do not display Meeting Workspace button on the Meeting Request form" setting should be configured correctly. CCE-14389-1 2010-10-04T15:45:33.297Z 2012-01-05T04:32:32.393Z The "Trust Center: Trusted Location #8" PowerPoint setting should be configured correctly. CCE-13140-9 2010-10-04T15:45:33.343Z 2012-01-05T04:32:32.457Z The "Allow Trusted Locations on the network" PowerPoint setting should be configured correctly. CCE-11969-3 2010-10-04T15:45:33.377Z 2012-01-05T04:32:32.503Z The "Trust Center: Trusted Location #13" PowerPoint setting should be configured correctly. CCE-13628-3 2010-10-04T15:45:33.407Z 2012-01-05T04:32:32.550Z The "Trust Center: Trusted Location #1" PowerPoint setting should be configured correctly. CCE-14665-4 2010-10-04T15:45:33.437Z 2012-01-05T04:32:32.613Z The "Trust Center: Trusted Location #16" PowerPoint setting should be configured correctly. CCE-13523-6 2010-10-04T15:45:33.483Z 2012-01-05T04:32:32.657Z The "Disable all trusted locations" PowerPoint setting should be configured correctly. CCE-12824-9 2010-10-04T15:45:33.517Z 2012-01-05T04:32:32.707Z The "Trust Center: Trusted Location #3" PowerPoint setting should be configured correctly. CCE-13812-3 2010-10-04T15:45:33.547Z 2012-01-05T04:32:32.753Z The "Trust Center: Trusted Location #19" PowerPoint setting should be configured correctly. CCE-13625-9 2010-10-04T15:45:33.593Z 2012-01-05T04:32:32.800Z The "Trust Center: Trusted Location #17" PowerPoint setting should be configured correctly. CCE-14623-3 2010-10-04T15:45:33.627Z 2012-01-05T04:32:32.847Z The "Trust Center: Trusted Location #4" PowerPoint setting should be configured correctly. CCE-12272-1 2010-10-04T15:45:33.657Z 2012-01-05T04:32:32.893Z The "Trust Center: Trusted Location #14" PowerPoint setting should be configured correctly. CCE-12904-9 2010-10-04T15:45:33.687Z 2012-01-05T04:32:32.940Z The "Trust Center: Trusted Location #2" PowerPoint setting should be configured correctly. CCE-12744-9 2010-10-04T15:45:33.733Z 2012-01-05T04:32:32.987Z The "Trust Center: Trusted Location #18" PowerPoint setting should be configured correctly. CCE-13764-6 2010-10-04T15:45:33.767Z 2012-01-05T04:32:33.033Z The "Trust Center: Trusted Location #6" PowerPoint setting should be configured correctly. CCE-13599-6 2010-10-04T15:45:33.797Z 2012-01-05T04:32:33.080Z The "Trust Center: Trusted Location #15" PowerPoint setting should be configured correctly. CCE-12434-7 2010-10-04T15:45:33.827Z 2012-01-05T04:32:33.127Z The "Trust Center: Trusted Location #11" PowerPoint setting should be configured correctly. CCE-12836-3 2010-10-04T15:45:33.877Z 2012-01-05T04:32:33.207Z The "Trust Center: Trusted Location #10" PowerPoint setting should be configured correctly. CCE-12867-8 2010-10-04T15:45:33.907Z 2012-01-05T04:32:33.283Z The "Trust Center: Trusted Location #5" PowerPoint setting should be configured correctly. CCE-13106-0 2010-10-04T15:45:33.937Z 2012-01-05T04:32:33.347Z The "Trust Center: Trusted Location #12" PowerPoint setting should be configured correctly. CCE-13411-4 2010-10-04T15:45:33.967Z 2012-01-05T04:32:33.407Z The "Trust Center: Trusted Location #7" PowerPoint setting should be configured correctly. CCE-12450-3 2010-10-04T15:45:34.017Z 2012-01-05T04:32:33.457Z The "Trust Center: Trusted Location #20" PowerPoint setting should be configured correctly. CCE-12327-3 2010-10-04T15:45:34.047Z 2012-01-05T04:32:33.503Z The "Trust Center: Trusted Location #9" PowerPoint setting should be configured correctly. CCE-11949-5 2010-10-04T15:45:34.077Z 2012-01-05T04:32:33.550Z The "Email message for 'Send To' commands" Visio setting should be configured correctly. CCE-13697-8 2010-10-04T15:45:34.127Z 2012-01-05T04:32:33.597Z The "Use sequence checking" Publisher setting should be configured correctly. CCE-13005-4 2010-10-04T15:45:34.157Z 2012-01-05T04:32:33.657Z The "Default Publisher direction" Publisher setting should be configured correctly. CCE-13616-8 2010-10-04T15:45:34.187Z 2012-01-05T04:32:33.707Z The "Use type and replace" Publisher setting should be configured correctly. CCE-13744-8 2010-10-04T15:45:34.233Z 2012-01-05T04:32:33.753Z The "Stop checking for blank table rows and columns" Word setting should be configured correctly. CCE-12459-4 2010-10-04T15:45:34.267Z 2012-01-05T04:32:33.800Z The "Stop checking for table header accessibility information" Word setting should be configured correctly. CCE-14240-6 2010-10-04T15:45:34.297Z 2012-01-05T04:32:33.847Z The "Stop checking for alt text accessibility information" Word setting should be configured correctly. CCE-14101-0 2010-10-04T15:45:34.327Z 2012-01-05T04:32:33.893Z The "Stop checking for tables used for layout" Word setting should be configured correctly. CCE-14551-6 2010-10-04T15:45:34.360Z 2012-01-05T04:32:33.940Z The "Stop checking for merged and split cells" Word setting should be configured correctly. CCE-13488-2 2010-10-04T15:45:34.407Z 2012-01-05T04:32:33.987Z The "Stop checking to ensure hyperlink text is meaningful" Word setting should be configured correctly. CCE-12048-5 2010-10-04T15:45:34.437Z 2012-01-05T04:32:34.033Z The "Stop checking for image watermarks" Word setting should be configured correctly. CCE-13802-4 2010-10-04T15:45:34.467Z 2012-01-05T04:32:34.080Z The "Stop checking to ensure styles have been used frequently" Word setting should be configured correctly. CCE-13841-2 2010-10-04T15:45:34.500Z 2012-01-05T04:32:34.127Z The "Stop checking to ensure documents allow programmatic access" Word setting should be configured correctly. CCE-13725-7 2010-10-04T15:45:34.530Z 2012-01-05T04:32:34.173Z The "Stop checking to ensure long documents use styles for structure" Word setting should be configured correctly. CCE-13255-5 2010-10-04T15:45:34.577Z 2012-01-05T04:32:34.220Z The "Stop checking whether objects are floating" Word setting should be configured correctly. CCE-13798-4 2010-10-04T15:45:34.610Z 2012-01-05T04:32:34.267Z The "Stop checking whether blank characters are used for formatting" Word setting should be configured correctly. CCE-12647-4 2010-10-04T15:45:34.640Z 2012-01-05T04:32:34.317Z The "Stop checking to ensure heading styles do not skip style level" Word setting should be configured correctly. CCE-12033-7 2010-10-04T15:45:34.673Z 2012-01-05T04:32:34.363Z The "Stop checking to ensure headings are succinct" Word setting should be configured correctly. CCE-12102-0 2010-10-04T15:45:34.717Z 2012-01-05T04:32:34.407Z The "Turn off automatic search index reconciliation" Outlook setting should be configured correctly. CCE-14560-7 2010-10-04T15:45:34.750Z 2012-01-05T04:32:34.457Z The "Do not display search results as the user types" Outlook setting should be configured correctly. CCE-13498-1 2010-10-04T15:45:34.780Z 2012-01-05T04:32:34.503Z The "Do not include the Online Archive in All Mail Item search" Outlook setting should be configured correctly. CCE-13575-6 2010-10-04T15:45:34.827Z 2012-01-05T04:32:34.550Z The "Change color used to highlight search matches" Outlook setting should be configured correctly. CCE-13560-8 2010-10-04T15:45:34.860Z 2012-01-05T04:32:34.613Z The "Expand scope of searches" Outlook setting should be configured correctly. CCE-13785-1 2010-10-04T15:45:34.907Z 2012-01-05T04:32:34.657Z The "Do not display hit highlights in search results" Outlook setting should be configured correctly. CCE-12933-8 2010-10-04T15:45:34.937Z 2012-01-05T04:32:34.707Z The "Prevent clear signed message and attachment indexing" setting should be configured correctly. CCE-13717-4 2010-10-04T15:45:34.967Z 2012-01-05T04:32:34.753Z The "Prevent installation prompts when Windows Desktop Search component is not present" Outlook setting should be configured correctly. CCE-13263-9 2010-10-04T15:45:35.017Z 2012-01-05T04:32:34.817Z The "Open e-mail attachments in Full Screen Reading view" Word setting should be configured correctly. CCE-13090-6 2010-10-04T15:45:35.047Z 2012-01-05T04:32:34.863Z The "Show Mini Toolbar on selection" common setting should be configured correctly. CCE-13387-6 2010-10-04T15:45:35.077Z 2012-01-05T04:32:34.907Z The "Enable Live Preview" Word setting should be configured correctly. CCE-14961-7 2010-10-04T15:45:35.110Z 2012-01-05T04:32:34.957Z The "Specify CNG random number generator algorithm" Project setting should be configured correctly. CCE-13777-8 2010-10-04T15:45:35.140Z 2012-01-05T04:32:35.017Z The "Specify CNG salt length" Project setting should be configured correctly. CCE-11827-3 2010-10-04T15:45:35.187Z 2012-01-05T04:32:35.080Z The "Set CNG cipher key length" Project setting should be configured correctly. CCE-12340-6 2010-10-04T15:45:35.217Z 2012-01-05T04:32:35.143Z The "Set parameters for CNG context" Project setting should be configured correctly. CCE-12589-8 2010-10-04T15:45:35.250Z 2012-01-05T04:32:35.190Z The "Specify CNG hash algorithm" Project setting should be configured correctly. CCE-13142-5 2010-10-04T15:45:35.297Z 2012-01-05T04:32:35.237Z The "Configure CNG cipher chaining mode" Project setting should be configured correctly. CCE-13866-9 2010-10-04T15:45:35.327Z 2012-01-05T04:32:35.283Z The "Set CNG password spin count" Project setting should be configured correctly. CCE-14734-8 2010-10-04T15:45:35.360Z 2012-01-05T04:32:35.330Z The "Set CNG cipher algorithm" Project setting should be configured correctly. CCE-14864-3 2010-10-04T15:45:35.407Z 2012-01-05T04:32:35.377Z The "Always create backup copy" Word setting should be configured correctly. CCE-14872-6 2010-10-04T15:45:35.437Z 2012-01-05T04:32:35.440Z The "Show measurements in units of" Word setting should be configured correctly. CCE-12306-7 2010-10-04T15:45:35.467Z 2012-01-05T04:32:35.487Z The "Prompt to update style" Word setting should be configured correctly. CCE-12527-8 2010-10-04T15:45:35.517Z 2012-01-05T04:32:35.533Z The "Print on front of the sheet for duplex printing" Word setting should be configured correctly. CCE-12291-1 2010-10-04T15:45:35.547Z 2012-01-05T04:32:35.597Z The "Month names" Word setting should be configured correctly. CCE-12634-2 2010-10-04T15:45:35.577Z 2012-01-05T04:32:35.643Z The "Confirm file format conversion on open" Word setting should be configured correctly. CCE-12841-3 2010-10-04T15:45:35.627Z 2012-01-05T04:32:35.690Z The "Cursor movement" Word setting should be configured correctly. CCE-13399-1 2010-10-04T15:45:35.657Z 2012-01-05T04:32:35.737Z The "Show control characters" Word setting should be configured correctly. CCE-13236-5 2010-10-04T15:45:35.687Z 2012-01-05T04:32:35.783Z The "Use draft font in Draft and Outline views" Word setting should be configured correctly. CCE-12643-3 2010-10-04T15:45:35.717Z 2012-01-05T04:32:35.863Z The "Print pages in reverse order" Word setting should be configured correctly. CCE-13943-6 2010-10-04T15:45:35.767Z 2012-01-05T04:32:35.923Z The "Enable click and type" Word setting should be configured correctly. CCE-14360-2 2010-10-04T15:45:35.797Z 2012-01-05T04:32:35.970Z The "When selecting, automatically select entire word" Word setting should be configured correctly. CCE-13635-8 2010-10-04T15:45:35.827Z 2012-01-05T04:32:36.033Z The "Add control characters in Cut and Copy" Word setting should be configured correctly. CCE-11548-5 2010-10-04T15:45:35.877Z 2012-01-05T04:32:36.097Z The "English Word 6.0/95 documents" Word setting should be configured correctly. CCE-12453-7 2010-10-04T15:45:35.907Z 2012-01-05T04:32:36.143Z The "Add Bi-Directional Marks when saving Text files" Word setting should be configured correctly. CCE-12420-6 2010-10-04T15:45:35.937Z 2012-01-05T04:32:36.207Z The "Left scroll bar" Word setting should be configured correctly. CCE-14542-5 2010-10-04T15:45:35.983Z 2012-01-05T04:32:36.253Z The "Automatically create drawing canvas when inserting AutoShapes" Word setting should be configured correctly. CCE-13854-5 2010-10-04T15:45:36.017Z 2012-01-05T04:32:36.300Z The "Number of documents in the Recent Documents list" Word setting should be configured correctly. CCE-12971-8 2010-10-04T15:45:36.047Z 2012-01-05T04:32:36.347Z The "Show vertical scroll bar" Word setting should be configured correctly. CCE-14732-2 2010-10-04T15:45:36.077Z 2012-01-05T04:32:36.407Z The "Numeral" Word setting should be configured correctly. CCE-13624-2 2010-10-04T15:45:36.127Z 2012-01-05T04:32:36.457Z The "Use CTRL + Click to follow hyperlink" Word setting should be configured correctly. CCE-13413-0 2010-10-04T15:45:36.157Z 2012-01-05T04:32:36.503Z The "Print in background" Word setting should be configured correctly. CCE-11766-3 2010-10-04T15:45:36.187Z 2012-01-05T04:32:36.550Z The "Show vertical ruler in Print Layout view" Word setting should be configured correctly. CCE-13060-9 2010-10-04T15:45:36.217Z 2012-01-05T04:32:36.597Z The "Allow text to be dragged and dropped" Word setting should be configured correctly. CCE-13202-7 2010-10-04T15:45:36.267Z 2012-01-05T04:32:36.643Z The "Set number of places in the Recent Places list" Word setting should be configured correctly. CCE-13201-9 2010-10-04T15:45:36.297Z 2012-01-05T04:32:36.690Z The "Typing replaces selected text" Word setting should be configured correctly. CCE-14111-9 2010-10-04T15:45:36.343Z 2012-01-05T04:32:36.737Z The "Type and replace" Word setting should be configured correctly. CCE-14133-3 2010-10-04T15:45:36.377Z 2012-01-05T04:32:36.783Z The "Show horizontal scroll bar" Word setting should be configured correctly. CCE-14371-9 2010-10-04T15:45:36.407Z 2012-01-05T04:32:36.830Z The "Auto-Keyboard switching" Word setting should be configured correctly. CCE-13001-3 2010-10-04T15:45:36.437Z 2012-01-05T04:32:36.863Z The "IME Control Active" Word setting should be configured correctly. CCE-12890-0 2010-10-04T15:45:36.483Z 2012-01-05T04:32:36.907Z The "Mark formatting inconsistencies" setting should be configured correctly. CCE-14115-0 2010-10-04T15:45:36.517Z 2012-01-05T04:32:36.957Z The "Add double quote for Hebrew alphabet numbering" Word setting should be configured correctly. CCE-12777-9 2010-10-04T15:45:36.547Z 2012-01-05T04:32:37.003Z The "Asian fonts also apply to Latin text" Word setting should be configured correctly. CCE-11503-0 2010-10-04T15:45:36.593Z 2012-01-05T04:32:37.033Z The "Show field codes instead of their values" Word setting should be configured correctly. CCE-12492-5 2010-10-04T15:45:36.627Z 2012-01-05T04:32:37.080Z The "Show pixels for HTML features" Word setting should be configured correctly. CCE-12416-4 2010-10-04T15:45:36.673Z 2012-01-05T04:32:37.127Z The "Use this color for diacritics" Word setting should be configured correctly. CCE-13451-0 2010-10-04T15:45:36.703Z 2012-01-05T04:32:37.173Z The "Use smart paragraph selection" Word setting should be configured correctly. CCE-12344-8 2010-10-04T15:45:36.733Z 2012-01-05T04:32:37.220Z The "Show picture placeholders" Word setting should be configured correctly. CCE-13043-5 2010-10-04T15:45:36.767Z 2012-01-05T04:32:37.267Z The "Keep track of formatting" Word setting should be configured correctly. CCE-13343-9 2010-10-04T15:45:36.797Z 2012-01-05T04:32:37.317Z The "Allow background saves" Word setting should be configured correctly. CCE-14622-5 2010-10-04T15:45:36.843Z 2012-01-05T04:32:37.363Z The "Provide feedback with animation" Word setting should be configured correctly. CCE-13692-9 2010-10-04T15:45:36.877Z 2012-01-05T04:32:37.407Z The "Update automatic links at Open" Word setting should be configured correctly. CCE-13669-7 2010-10-04T15:45:36.907Z 2012-01-05T04:32:37.457Z The "Use draft quality" Word setting should be configured correctly. CCE-13456-9 2010-10-04T15:45:36.953Z 2012-01-05T04:32:37.503Z The "Show all windows in the Taskbar" Word setting should be configured correctly. CCE-14419-6 2010-10-04T15:45:36.983Z 2012-01-05T04:32:37.550Z The "Show text boundaries" Word setting should be configured correctly. CCE-13476-7 2010-10-04T15:45:37.017Z 2012-01-05T04:32:37.613Z The "Style area pane width in Draft and Outline views" Word setting should be configured correctly. CCE-12133-5 2010-10-04T15:45:37.063Z 2012-01-05T04:32:37.657Z The "Diacritics" Word setting should be configured correctly. CCE-11783-8 2010-10-04T15:45:37.093Z 2012-01-05T04:32:37.707Z The "Show measurements in width of characters" Word setting should be configured correctly. CCE-12443-8 2010-10-04T15:45:37.127Z 2012-01-05T04:32:37.753Z The "Scale content for A4 or 8.5'' x 11'' paper sizes" Word setting should be configured correctly. CCE-12546-8 2010-10-04T15:45:37.173Z 2012-01-05T04:32:37.800Z The "Document view" Word setting should be configured correctly. CCE-13322-3 2010-10-04T15:45:37.203Z 2012-01-05T04:32:37.847Z The "Cursor visual selection" Word setting should be configured correctly. CCE-13698-6 2010-10-04T15:45:37.233Z 2012-01-05T04:32:37.893Z The "Copy remotely stored files onto your computer, and update the remote file when saving" Word setting should be configured correctly. CCE-13032-8 2010-10-04T15:45:37.267Z 2012-01-05T04:32:37.940Z The "IME TrueInLine" Word setting should be configured correctly. CCE-14806-4 2010-10-04T15:45:37.313Z 2012-01-05T04:32:38.003Z The "Show text wrapped within the document window" Word setting should be configured correctly. CCE-13848-7 2010-10-04T15:45:37.343Z 2012-01-05T04:32:38.050Z The "Field shading" Word setting should be configured correctly. CCE-12418-0 2010-10-04T15:45:37.390Z 2012-01-05T04:32:38.097Z The "Allow accented uppercase in French" Word setting should be configured correctly. CCE-11523-8 2010-10-04T15:45:37.423Z 2012-01-05T04:32:38.143Z The "Show text animation" Word setting should be configured correctly. CCE-12764-7 2010-10-04T15:45:37.453Z 2012-01-05T04:32:38.190Z The "Show drawings and text boxes on screen" Word setting should be configured correctly. CCE-12341-4 2010-10-04T15:45:37.500Z 2012-01-05T04:32:38.237Z The "Print on back of the sheet for duplex printing" Word setting should be configured correctly. CCE-13728-1 2010-10-04T15:45:37.530Z 2012-01-05T04:32:38.300Z The "Prompt before saving Normal template" Word setting should be configured correctly. CCE-14362-8 2010-10-04T15:45:37.563Z 2012-01-05T04:32:38.347Z The "Use the Insert key for paste" Word setting should be configured correctly. CCE-12844-7 2010-10-04T15:45:37.610Z 2012-01-05T04:32:38.393Z The "Show bookmarks" Word setting should be configured correctly. CCE-13916-2 2010-10-04T15:45:37.640Z 2012-01-05T04:32:38.440Z The "Use sequence checking" Word setting should be configured correctly. CCE-11644-2 2010-10-04T15:45:37.687Z 2012-01-05T04:32:38.487Z The "Disable commands" Visio setting should be configured correctly. CCE-12198-8 2010-10-04T15:45:37.717Z 2012-01-05T04:32:38.533Z The "Disable shortcut keys" Visio setting should be configured correctly. CCE-12509-6 2010-10-04T15:45:37.750Z 2012-01-05T04:32:38.580Z The "Enable Customer Experience Improvement Program" common setting should be configured correctly. CCE-13629-1 2010-10-04T15:45:37.780Z 2012-01-05T04:32:38.657Z The "Automatically receive small updates to improve reliability" common setting should be configured correctly. CCE-12238-2 2010-10-04T15:45:37.827Z 2012-01-05T04:32:38.707Z The "Disable Opt-in Wizard on first run" common setting should be configured correctly. CCE-11538-6 2010-10-04T15:45:37.860Z 2012-01-05T04:32:38.767Z The "Calculate all open projects" Project setting should be configured correctly. CCE-14311-5 2010-10-04T15:45:37.890Z 2012-01-05T04:32:38.817Z The "Automatic Calculation" Project setting should be configured correctly. CCE-12482-6 2010-10-04T15:45:37.923Z 2012-01-05T04:32:38.863Z The "Options" Outlook setting should be configured correctly. CCE-13801-6 2010-10-04T15:45:37.967Z 2012-01-05T04:32:38.907Z The "Internet Free/Busy Options" Outlook setting should be configured correctly. CCE-13787-7 2010-10-04T15:45:38.000Z 2012-01-05T04:32:38.957Z The "Disable shortcut keys" Outlook setting should be configured correctly. CCE-14533-4 2010-10-04T15:45:38.030Z 2012-01-05T04:32:39.003Z The "Disable command bar buttons and menu items" Outlook setting should be configured correctly. CCE-12645-8 2010-10-04T15:45:38.063Z 2012-01-05T04:32:39.050Z The "Store deleted items in owner's mailbox instead of delegate's mailbox" Outlook setting should be configured correctly. CCE-13611-9 2010-10-04T15:45:38.110Z 2012-01-05T04:32:39.113Z The "Check for new actions URL" common setting should be configured correctly. CCE-14878-3 2010-10-04T15:45:38.140Z 2012-01-05T04:32:39.157Z The "Enable additional actions in Excel" Excel setting should be configured correctly. CCE-13702-6 2010-10-04T15:45:38.173Z 2012-01-05T04:32:39.207Z The "More actions URL" common setting should be configured correctly. CCE-14286-9 2010-10-04T15:45:38.217Z 2012-01-05T04:32:39.253Z The "Graph gallery path" setting should be configured correctly. CCE-12579-9 2010-10-04T15:45:38.250Z 2012-01-05T04:32:39.300Z The "Enable MS Graph as Default Chart Tool in PowerPoint and Word" common setting should be configured correctly. CCE-14194-5 2010-10-04T15:45:38.280Z 2012-01-05T04:32:39.347Z The "Chart Templates Server Location" common setting should be configured correctly. CCE-13942-8 2010-10-04T15:45:38.313Z 2012-01-05T04:32:39.393Z The "Translation direction" setting should be configured correctly. CCE-12576-5 2010-10-04T15:45:38.360Z 2012-01-05T04:32:39.440Z The "Convert common terms" setting should be configured correctly. CCE-12606-0 2010-10-04T15:45:38.407Z 2012-01-05T04:32:39.503Z The "Use Taiwan, Hong Kong SAR and Macao SAR character variants" setting should be configured correctly. CCE-14527-6 2010-10-04T15:45:38.437Z 2012-01-05T04:32:39.597Z The "Local Project Cache Location" Project setting should be configured correctly. CCE-14006-1 2010-10-04T15:45:38.467Z 2012-01-05T04:32:39.643Z The "Local Project Cache Size Limit in MB" Project setting should be configured correctly. CCE-13930-3 2010-10-04T15:45:38.517Z 2012-01-05T04:32:39.690Z The "Edit directly in cell" Project setting should be configured correctly. CCE-14565-6 2010-10-04T15:45:38.547Z 2012-01-05T04:32:39.737Z The "Allow cell drag and drop" Project setting should be configured correctly. CCE-14747-0 2010-10-04T15:45:38.577Z 2012-01-05T04:32:39.800Z The "Ask to update automatic links" Project setting should be configured correctly. CCE-14097-0 2010-10-04T15:45:38.627Z 2012-01-05T04:32:39.847Z The "Move selection after enter" Project setting should be configured correctly. CCE-14067-3 2010-10-04T15:45:38.657Z 2012-01-05T04:32:39.893Z The "Set new tasks to be automatically scheduled" Project setting should be configured correctly. CCE-12586-4 2010-10-04T15:45:38.703Z 2012-01-05T04:32:39.940Z The "Tasks can be made inactive" Project setting should be configured correctly. CCE-13443-7 2010-10-04T15:45:38.733Z 2012-01-05T04:32:39.987Z The "Autolink inserted or moved tasks" Project setting should be configured correctly. CCE-13408-0 2010-10-04T15:45:38.767Z 2012-01-05T04:32:40.033Z The "Update manually scheduled tasks when editing links" Project setting should be configured correctly. CCE-12571-6 2010-10-04T15:45:38.797Z 2012-01-05T04:32:40.080Z The "New tasks are effort driven" Project setting should be configured correctly. CCE-14343-8 2010-10-04T15:45:38.843Z 2012-01-05T04:32:40.127Z The "New tasks" Project setting should be configured correctly. CCE-12030-3 2010-10-04T15:45:38.877Z 2012-01-05T04:32:40.173Z The "New tasks have estimated durations" Project setting should be configured correctly. CCE-13696-0 2010-10-04T15:45:38.907Z 2012-01-05T04:32:40.220Z The "Tasks will always honor their constraint dates" Project setting should be configured correctly. CCE-13805-7 2010-10-04T15:45:38.953Z 2012-01-05T04:32:40.267Z The "Default task type" Project setting should be configured correctly. CCE-12461-0 2010-10-04T15:45:38.983Z 2012-01-05T04:32:40.317Z The "Keep tasks on nearest working day" Project setting should be configured correctly. CCE-14774-4 2010-10-04T15:45:39.030Z 2012-01-05T04:32:40.377Z The "Show tasks schedule suggestions" Project setting should be configured correctly. CCE-11606-1 2010-10-04T15:45:39.063Z 2012-01-05T04:32:40.423Z The "Duration is entered in" Project setting should be configured correctly. CCE-14755-3 2010-10-04T15:45:39.110Z 2012-01-05T04:32:40.470Z The "Work is entered in" Project setting should be configured correctly. CCE-12975-9 2010-10-04T15:45:39.140Z 2012-01-05T04:32:40.517Z The "Set default start date for new tasks" Project setting should be configured correctly. CCE-13122-7 2010-10-04T15:45:39.173Z 2012-01-05T04:32:40.567Z The "Show that tasks have estimated durations" Project setting should be configured correctly. CCE-11775-4 2010-10-04T15:45:39.203Z 2012-01-05T04:32:40.613Z The "Show tasks schedule warnings" Project setting should be configured correctly. CCE-14242-2 2010-10-04T15:45:39.250Z 2012-01-05T04:32:40.657Z The "Split in-progress tasks" Project setting should be configured correctly. CCE-13590-5 2010-10-04T15:45:39.280Z 2012-01-05T04:32:40.707Z The "Function tooltips" Excel setting should be configured correctly. CCE-14238-0 2010-10-04T15:45:39.313Z 2012-01-05T04:32:40.767Z The "Number of documents in the Recent Workbooks list" Excel setting should be configured correctly. CCE-12977-5 2010-10-04T15:45:39.343Z 2012-01-05T04:32:40.817Z The "Transition navigation keys" Excel setting should be configured correctly. CCE-13781-0 2010-10-04T15:45:39.390Z 2012-01-05T04:32:40.863Z The "Edit directly in cell" Excel setting should be configured correctly. CCE-13296-9 2010-10-04T15:45:39.423Z 2012-01-05T04:32:40.923Z The "Ask to update automatic links" Excel setting should be configured correctly. CCE-12761-3 2010-10-04T15:45:39.453Z 2012-01-05T04:32:40.987Z The "Alternate startup file location" Excel setting should be configured correctly. CCE-12404-0 2010-10-04T15:45:39.500Z 2012-01-05T04:32:41.080Z The "Show Formula bar in Full View" Excel setting should be configured correctly. CCE-14570-6 2010-10-04T15:45:39.530Z 2012-01-05T04:32:41.143Z The "Zoom on roll with IntelliMouse" Excel setting should be configured correctly. CCE-13064-1 2010-10-04T15:45:39.563Z 2012-01-05T04:32:41.190Z The "Microsoft Excel menu or Help key" Excel setting should be configured correctly. CCE-11994-1 2010-10-04T15:45:39.610Z 2012-01-05T04:32:41.237Z The "Show Insert Options buttons" Excel setting should be configured correctly. CCE-12360-4 2010-10-04T15:45:39.640Z 2012-01-05T04:32:41.283Z The "Alert before overwriting cells" Excel setting should be configured correctly. CCE-11528-7 2010-10-04T15:45:39.673Z 2012-01-05T04:32:41.330Z The "Default sheet direction" Excel setting should be configured correctly. CCE-13979-0 2010-10-04T15:45:39.717Z 2012-01-05T04:32:41.377Z The "Show Formula bar in Normal View" Excel setting should be configured correctly. CCE-11525-3 2010-10-04T15:45:39.750Z 2012-01-05T04:32:41.423Z The "Provide feedback with Animation" Excel setting should be configured correctly. CCE-14083-0 2010-10-04T15:45:39.780Z 2012-01-05T04:32:41.470Z The "Show values" Excel setting should be configured correctly. CCE-14251-3 2010-10-04T15:45:39.827Z 2012-01-05T04:32:41.517Z The "Move selection after Enter direction" Excel setting should be configured correctly. CCE-12956-9 2010-10-04T15:45:39.860Z 2012-01-05T04:32:41.567Z The "Enable automatic percent entry" Excel setting should be configured correctly. CCE-14726-4 2010-10-04T15:45:39.907Z 2012-01-05T04:32:41.613Z The "Extend data range formats and formulas" Excel setting should be configured correctly. CCE-13549-1 2010-10-04T15:45:39.937Z 2012-01-05T04:32:41.657Z The "Enable AutoComplete for cell values" Excel setting should be configured correctly. CCE-12027-9 2010-10-04T15:45:39.967Z 2012-01-05T04:32:41.707Z The "Cursor movement" Excel setting should be configured correctly. CCE-12581-5 2010-10-04T15:45:40.017Z 2012-01-05T04:32:41.753Z The "Set number of places in the Recent Places list" Excel setting should be configured correctly. CCE-13190-4 2010-10-04T15:45:40.047Z 2012-01-05T04:32:41.800Z The "Enable fill handle and cell drag-and-drop" Excel setting should be configured correctly. CCE-12470-1 2010-10-04T15:45:40.077Z 2012-01-05T04:32:41.847Z The "Ignore other applications" Excel setting should be configured correctly. CCE-13392-6 2010-10-04T15:45:40.127Z 2012-01-05T04:32:41.893Z The "Show names" Excel setting should be configured correctly. CCE-13835-4 2010-10-04T15:45:40.157Z 2012-01-05T04:32:41.940Z The "Comments" Excel setting should be configured correctly. CCE-12907-2 2010-10-04T15:45:40.187Z 2012-01-05T04:32:42.003Z The "Show control characters" Excel setting should be configured correctly. CCE-12148-3 2010-10-04T15:45:40.233Z 2012-01-05T04:32:42.050Z The "Show Paste Options button when content is pasted" common setting should be configured correctly. CCE-13242-3 2010-10-04T15:45:40.267Z 2012-01-05T04:32:42.097Z The "Cut and copy objects with cells" Excel setting should be configured correctly. CCE-14973-2 2010-10-04T15:45:40.297Z 2012-01-05T04:32:42.127Z The "Automatically insert a decimal point" Excel setting should be configured correctly. CCE-14817-1 2010-10-04T15:45:40.343Z 2012-01-05T04:32:42.190Z The "Move selection after Enter" Excel setting should be configured correctly. CCE-13291-0 2010-10-04T15:45:40.377Z 2012-01-05T04:32:42.237Z The "Set maximum web service default timeout" common setting should be configured correctly. CCE-13328-0 2010-10-04T15:45:40.423Z 2012-01-05T04:32:42.283Z The "Set maximum web service return size limit" common setting should be configured correctly. CCE-13113-6 2010-10-04T15:45:40.453Z 2012-01-05T04:32:42.330Z The "Set web service default timeout" common setting should be configured correctly. CCE-13412-2 2010-10-04T15:45:40.500Z 2012-01-05T04:32:42.377Z The "Set web service default return size limit" common setting should be configured correctly. CCE-11780-4 2010-10-04T15:45:40.530Z 2012-01-05T04:32:42.423Z The "Require SuiteB algorithms for S/MIME operations" Outlook setting should be configured correctly. CCE-13256-3 2010-10-04T15:45:40.563Z 2012-01-05T04:32:42.470Z The "Fortezza certificate policies" Outlook setting should be configured correctly. CCE-14592-0 2010-10-04T15:45:40.610Z 2012-01-05T04:32:42.533Z The "Do not display 'Publish to GAL' button" Outlook setting should be configured correctly. CCE-11740-8 2010-10-04T15:45:40.640Z 2012-01-05T04:32:42.597Z The "Sign all e-mail messages" Outlook setting should be configured correctly. CCE-14608-4 2010-10-04T15:45:40.673Z 2012-01-05T04:32:42.643Z The "Minimum encryption settings" Outlook setting should be configured correctly. CCE-12486-7 2010-10-04T15:45:40.717Z 2012-01-05T04:32:42.690Z The "Enable Cryptography Icons" Outlook setting should be configured correctly. CCE-12367-9 2010-10-04T15:45:40.750Z 2012-01-05T04:32:42.737Z The "Replies or forwards to signed/encrypted messages are signed/encrypted" Outlook setting should be configured correctly. CCE-13095-5 2010-10-04T15:45:40.780Z 2012-01-05T04:32:42.783Z The "Always use TNEF formatting in S/MIME messages" Outlook setting should be configured correctly. CCE-12493-3 2010-10-04T15:45:40.813Z 2012-01-05T04:32:42.830Z The "Required Certificate Authority" Outlook setting should be configured correctly. CCE-13280-3 2010-10-04T15:45:40.860Z 2012-01-05T04:32:42.877Z The "S/MIME interoperability with external clients:" Outlook setting should be configured correctly. CCE-13582-2 2010-10-04T15:45:40.890Z 2012-01-05T04:32:42.923Z The "Do not provide Continue option on Encryption warning dialog boxes" Outlook setting should be configured correctly. CCE-14759-5 2010-10-04T15:45:40.923Z 2012-01-05T04:32:42.970Z The "Encrypt all e-mail messages" Outlook setting should be configured correctly. CCE-13073-2 2010-10-04T15:45:40.967Z 2012-01-05T04:32:43.003Z The "Send all signed messages as clear signed messages" Outlook setting should be configured correctly. CCE-12746-4 2010-10-04T15:45:41.000Z 2012-01-05T04:32:43.050Z The "Request an S/MIME receipt for all S/MIME signed messages" Outlook setting should be configured correctly. CCE-12276-2 2010-10-04T15:45:41.030Z 2012-01-05T04:32:43.097Z The "S/MIME receipt requests behavior" Outlook setting should be configured correctly. CCE-14601-9 2010-10-04T15:45:41.077Z 2012-01-05T04:32:43.143Z The "Do not check e-mail address against address of certificates being used" Outlook setting should be configured correctly. CCE-14381-8 2010-10-04T15:45:41.110Z 2012-01-05T04:32:43.207Z The "Ensure all S/MIME signed messages have a label" Outlook setting should be configured correctly. CCE-13251-4 2010-10-04T15:45:41.140Z 2012-01-05T04:32:43.267Z The "Signature Warning" Outlook setting should be configured correctly. CCE-13967-5 2010-10-04T15:45:41.173Z 2012-01-05T04:32:43.317Z The "Run in FIPS compliant mode" Outlook setting should be configured correctly. CCE-12407-3 2010-10-04T15:45:41.217Z 2012-01-05T04:32:43.363Z The "URL for S/MIME certificates" Outlook setting should be configured correctly. CCE-13383-5 2010-10-04T15:45:41.267Z 2012-01-05T04:32:43.407Z The "Message when Outlook cannot find the digital ID to decode a message" Outlook setting should be configured correctly. CCE-14206-7 2010-10-04T15:45:41.297Z 2012-01-05T04:32:43.470Z The "Message Formats" Outlook setting should be configured correctly. CCE-12721-7 2010-10-04T15:45:41.327Z 2012-01-05T04:32:43.517Z The "Run Programs" PowerPoint setting should be configured correctly. CCE-12072-5 2010-10-04T15:45:41.360Z 2012-01-05T04:32:43.567Z The "Unblock automatic download of linked images" PowerPoint setting should be configured correctly. CCE-13054-2 2010-10-04T15:45:41.407Z 2012-01-05T04:32:43.613Z The "Scan encrypted macros in PowerPoint Open XML presentations" PowerPoint setting should be configured correctly. CCE-12638-3 2010-10-04T15:45:41.437Z 2012-01-05T04:32:43.657Z The "Make hidden markup visible" PowerPoint setting should be configured correctly. CCE-13672-1 2010-10-04T15:45:41.483Z 2012-01-05T04:32:43.707Z The "Turn off file validation" PowerPoint setting should be configured correctly. CCE-13289-4 2010-10-04T15:45:41.517Z 2012-01-05T04:32:43.753Z The "List of error messages to customize" Excel setting should be configured correctly. CCE-14505-2 2010-10-04T15:45:41.547Z 2012-01-05T04:32:43.800Z The "Save new Web pages as Web archives" common setting should be configured correctly. CCE-12231-7 2010-10-04T15:45:41.593Z 2012-01-05T04:32:43.863Z The "Allow Web Archives to be saved in any HTML encoding" common setting should be configured correctly. CCE-13945-1 2010-10-04T15:45:41.627Z 2012-01-05T04:32:43.907Z The "Default format for 'Publish'" common setting should be configured correctly. CCE-14544-1 2010-10-04T15:45:41.657Z 2012-01-05T04:32:43.957Z The "PowerPoint: web page format compatibility" PowerPoint setting should be configured correctly. CCE-14019-4 2010-10-04T15:45:41.703Z 2012-01-05T04:32:44.003Z The "PowerPoint: Save an additional version of the presentation for older browsers" PowerPoint setting should be configured correctly. CCE-14233-1 2010-10-04T15:45:41.733Z 2012-01-05T04:32:44.080Z The "Save multiple credentials for basic authentication" Outlook setting should be configured correctly. CCE-14571-4 2010-10-04T15:45:41.767Z 2012-01-05T04:32:44.127Z The "Specify Offline Address Book path" Outlook setting should be configured correctly. CCE-13889-1 2010-10-04T15:45:41.813Z 2012-01-05T04:32:44.173Z The "Prevent saving credentials for Basic Authentication policy" Outlook setting should be configured correctly. CCE-12892-6 2010-10-04T15:45:41.843Z 2012-01-05T04:32:44.220Z The "Excel 2007 and later macro-enabled workbooks and templates" Excel setting should be configured correctly. CCE-14377-6 2010-10-04T15:45:41.877Z 2012-01-05T04:32:44.267Z The "Excel 2 worksheets" Excel setting should be configured correctly. CCE-12135-0 2010-10-04T15:45:41.923Z 2012-01-05T04:32:44.317Z The "OpenDocument Spreadsheet files" Excel setting should be configured correctly. CCE-12938-7 2010-10-04T15:45:41.953Z 2012-01-05T04:32:44.363Z The "Excel 3 macrosheets and add-in files" Excel setting should be configured correctly. CCE-14721-5 2010-10-04T15:45:42.000Z 2012-01-05T04:32:44.407Z The "Microsoft Office data connection files" Excel setting should be configured correctly. CCE-12882-7 2010-10-04T15:45:42.030Z 2012-01-05T04:32:44.457Z The "Web pages and Excel 2003 XML spreadsheets" Excel setting should be configured correctly. CCE-14450-1 2010-10-04T15:45:42.063Z 2012-01-05T04:32:44.503Z The "Excel 95-97 workbooks and templates" Excel setting should be configured correctly. CCE-12951-0 2010-10-04T15:45:42.110Z 2012-01-05T04:32:44.550Z The "Set default file block behavior" Excel setting should be configured correctly. CCE-13562-4 2010-10-04T15:45:42.140Z 2012-01-05T04:32:44.613Z The "dBase III / IV files" Excel setting should be configured correctly. CCE-14365-1 2010-10-04T15:45:42.173Z 2012-01-05T04:32:44.657Z The "Excel 2007 and later binary workbooks" Excel setting should be configured correctly. CCE-11549-3 2010-10-04T15:45:42.217Z 2012-01-05T04:32:44.707Z The "Excel 97-2003 add-in files" Excel setting should be configured correctly. CCE-14840-3 2010-10-04T15:45:42.250Z 2012-01-05T04:32:44.753Z The "Other data source files" Excel setting should be configured correctly. CCE-14760-3 2010-10-04T15:45:42.280Z 2012-01-05T04:32:44.800Z The "Offline cube files" Excel setting should be configured correctly. CCE-13944-4 2010-10-04T15:45:42.327Z 2012-01-05T04:32:44.847Z The "Excel add-in files" Excel setting should be configured correctly. CCE-13478-3 2010-10-04T15:45:42.360Z 2012-01-05T04:32:44.893Z The "Microsoft Office query files" Excel setting should be configured correctly. CCE-14017-8 2010-10-04T15:45:42.390Z 2012-01-05T04:32:44.940Z The "Legacy converters for Excel" Excel setting should be configured correctly. CCE-12679-7 2010-10-04T15:45:42.437Z 2012-01-05T04:32:44.987Z The "Excel 95 workbooks" Excel setting should be configured correctly. CCE-12605-2 2010-10-04T15:45:42.467Z 2012-01-05T04:32:45.033Z The "Microsoft Office Open XML converters for Excel" Excel setting should be configured correctly. CCE-12870-2 2010-10-04T15:45:42.517Z 2012-01-05T04:32:45.080Z The "Excel 2007 and later add-in files" Excel setting should be configured correctly. CCE-13205-0 2010-10-04T15:45:42.547Z 2012-01-05T04:32:45.127Z The "Excel 4 worksheets" Excel setting should be configured correctly. CCE-12920-5 2010-10-04T15:45:42.593Z 2012-01-05T04:32:45.173Z The "Text files" Excel setting should be configured correctly. CCE-14477-4 2010-10-04T15:45:42.627Z 2012-01-05T04:32:45.220Z The "XML files" Excel setting should be configured correctly. CCE-12771-2 2010-10-04T15:45:42.657Z 2012-01-05T04:32:45.267Z The "Excel 4 macrosheets and add-in files" Excel setting should be configured correctly. CCE-12590-6 2010-10-04T15:45:42.703Z 2012-01-05T04:32:45.317Z The "Excel 2007 and later workbooks and templates" Excel setting should be configured correctly. CCE-12560-9 2010-10-04T15:45:42.733Z 2012-01-05T04:32:45.363Z The "Excel 4 workbooks" Excel setting should be configured correctly. CCE-12374-5 2010-10-04T15:45:42.780Z 2012-01-05T04:32:45.407Z The "Excel 97-2003 workbooks and templates" Excel setting should be configured correctly. CCE-12923-9 2010-10-04T15:45:42.813Z 2012-01-05T04:32:45.470Z The "Excel 2 macrosheets and add-in files" Excel setting should be configured correctly. CCE-13238-1 2010-10-04T15:45:42.843Z 2012-01-05T04:32:45.517Z The "Dif and Sylk files" Excel setting should be configured correctly. CCE-13107-8 2010-10-04T15:45:42.890Z 2012-01-05T04:32:45.580Z The "Excel 3 worksheets" Excel setting should be configured correctly. CCE-12600-3 2010-10-04T15:45:42.923Z 2012-01-05T04:32:45.627Z The "Allow mix of policy and user locations" common setting should be configured correctly. CCE-14136-6 2010-10-04T15:45:42.953Z 2012-01-05T04:32:45.673Z The "Enable connector splitting" Visio setting should be configured correctly. CCE-12840-5 2010-10-04T15:45:43.000Z 2012-01-05T04:32:45.720Z The "Turn off smart delete behavior of connectors when deleting shapes" Visio setting should be configured correctly. CCE-12383-6 2010-10-04T15:45:43.030Z 2012-01-05T04:32:45.767Z The "Enable AutoConnect" Visio setting should be configured correctly. CCE-13228-2 2010-10-04T15:45:43.077Z 2012-01-05T04:32:45.817Z The "Turn off ShapeSheet Formula AutoComplete" Visio setting should be configured correctly. CCE-13958-4 2010-10-04T15:45:43.110Z 2012-01-05T04:32:45.877Z The "Turn off transitions" Visio setting should be configured correctly. CCE-14001-2 2010-10-04T15:45:43.140Z 2012-01-05T04:32:45.923Z The "Enable live dynamics" Visio setting should be configured correctly. CCE-13621-8 2010-10-04T15:45:43.187Z 2012-01-05T04:32:45.970Z The "Center selection on zoom" Visio setting should be configured correctly. CCE-12397-6 2010-10-04T15:45:43.217Z 2012-01-05T04:32:46.017Z The "Zoom on roll with IntelliMouse" Visio setting should be configured correctly. CCE-13176-3 2010-10-04T15:45:43.267Z 2012-01-05T04:32:46.067Z The "Show more handles on hover" Visio setting should be configured correctly. CCE-13981-6 2010-10-04T15:45:43.313Z 2012-01-05T04:32:46.113Z The "Select shapes partially within area" Visio setting should be configured correctly. CCE-11676-4 2010-10-04T15:45:43.343Z 2012-01-05T04:32:46.157Z The "Save Microsoft Project files as" Project setting should be configured correctly. CCE-13729-9 2010-10-04T15:45:43.377Z 2012-01-05T04:32:46.207Z The "Automatically add new resources and tasks" Project setting should be configured correctly. CCE-12759-7 2010-10-04T15:45:43.423Z 2012-01-05T04:32:46.267Z The "Default overtime rate" Project setting should be configured correctly. CCE-13178-9 2010-10-04T15:45:43.453Z 2012-01-05T04:32:46.330Z The "Default standard rate" Project setting should be configured correctly. CCE-14119-2 2010-10-04T15:45:43.500Z 2012-01-05T04:32:46.377Z The "Turn off file synchronization via SOAP over HTTP" common setting should be configured correctly. CCE-13662-2 2010-10-04T15:45:43.530Z 2012-01-05T04:32:46.423Z The "List of error messages to customize" Word setting should be configured correctly. CCE-12535-1 2010-10-04T15:45:43.563Z 2012-01-05T04:32:46.470Z The "Message handling" Outlook setting should be configured correctly. CCE-14293-5 2010-10-04T15:45:43.610Z 2012-01-05T04:32:46.517Z The "Do not use Conversation arrangement in Views" Outlook setting should be configured correctly. CCE-12958-5 2010-10-04T15:45:43.640Z 2012-01-05T04:32:46.567Z The "Configure Cross Folder Content in conversation view" Outlook setting should be configured correctly. CCE-13156-5 2010-10-04T15:45:43.673Z 2012-01-05T04:32:46.613Z The "Read e-mail as plain text" Outlook setting should be configured correctly. CCE-14771-0 2010-10-04T15:45:43.717Z 2012-01-05T04:32:46.673Z The "On replies and forwards" common setting should be configured correctly. CCE-13248-0 2010-10-04T15:45:43.750Z 2012-01-05T04:32:46.720Z The "Do not allow attachment previewing in Outlook" Outlook setting should be configured correctly. CCE-12098-0 2010-10-04T15:45:43.797Z 2012-01-05T04:32:46.783Z The "Change CTRL+ENTER shortcut behavior" Outlook setting should be configured correctly. CCE-13694-5 2010-10-04T15:45:43.827Z 2012-01-05T04:32:46.863Z The "Read signed e-mail as plain text" Outlook setting should be configured correctly. CCE-12868-6 2010-10-04T15:45:43.877Z 2012-01-05T04:32:46.907Z The "Set message format" Outlook setting should be configured correctly. CCE-13358-7 2010-10-04T15:45:43.907Z 2012-01-05T04:32:46.957Z The "Disable commands under File tab | Help" Word setting should be configured correctly. CCE-14587-0 2010-10-04T15:45:43.937Z 2012-01-05T04:32:47.003Z The "Configure Outlook object model prompt when executing Save As" Outlook setting should be configured correctly. CCE-14634-0 2010-10-04T15:45:43.983Z 2012-01-05T04:32:47.050Z The "Configure Outlook object model prompt when responding to meeting and task requests" Outlook setting should be configured correctly. CCE-14265-3 2010-10-04T15:45:44.017Z 2012-01-05T04:32:47.097Z The "Configure Outlook object model prompt When accessing the Formula property of a UserProperty object" Outlook setting should be configured correctly. CCE-12402-4 2010-10-04T15:45:44.063Z 2012-01-05T04:32:47.157Z The "Configure Outlook object model prompt when sending mail" Outlook setting should be configured correctly. CCE-14509-4 2010-10-04T15:45:44.093Z 2012-01-05T04:32:47.207Z The "Configure Outlook object model prompt when reading address information" Outlook setting should be configured correctly. CCE-12322-4 2010-10-04T15:45:44.140Z 2012-01-05T04:32:47.283Z The "Configure Outlook object model prompt when accessing an address book" Outlook setting should be configured correctly. CCE-14331-3 2010-10-04T15:45:44.173Z 2012-01-05T04:32:47.330Z The "Disable built-in graphics" common setting should be configured correctly. CCE-13807-3 2010-10-04T15:45:44.203Z 2012-01-05T04:32:47.377Z The "Log File Entries Number" common setting should be configured correctly. CCE-14987-2 2010-10-04T15:45:44.250Z 2012-01-05T04:32:47.423Z The "Disable Built-in Quick Styles" common setting should be configured correctly. CCE-14783-5 2010-10-04T15:45:44.280Z 2012-01-05T04:32:47.470Z The "Log File Maximum Size" common setting should be configured correctly. CCE-12713-4 2010-10-04T15:45:44.327Z 2012-01-05T04:32:47.517Z The "Disable built-in color variations" common setting should be configured correctly. CCE-13831-3 2010-10-04T15:45:44.360Z 2012-01-05T04:32:47.567Z The "Error Severity Level" common setting should be configured correctly. CCE-12425-5 2010-10-04T15:45:44.407Z 2012-01-05T04:32:47.613Z The "Configure CNG cipher chaining mode" Word setting should be configured correctly. CCE-13310-8 2010-10-04T15:45:44.437Z 2012-01-05T04:32:47.673Z The "Set CNG cipher key length" Word setting should be configured correctly. CCE-13984-0 2010-10-04T15:45:44.467Z 2012-01-05T04:32:47.720Z The "Set CNG password spin count" Word setting should be configured correctly. CCE-14021-0 2010-10-04T15:45:44.517Z 2012-01-05T04:32:47.767Z The "Specify CNG salt length" Word setting should be configured correctly. CCE-14396-6 2010-10-04T15:45:44.547Z 2012-01-05T04:32:47.817Z The "Specify encryption compatibility" Word setting should be configured correctly. CCE-12454-5 2010-10-04T15:45:44.577Z 2012-01-05T04:32:47.863Z The "Specify CNG hash algorithm" Word setting should be configured correctly. CCE-11887-7 2010-10-04T15:45:44.627Z 2012-01-05T04:32:47.907Z The "Set CNG cipher algorithm" Word setting should be configured correctly. CCE-14546-6 2010-10-04T15:45:44.657Z 2012-01-05T04:32:47.957Z The "Use new key on password change" Word setting should be configured correctly. CCE-14289-3 2010-10-04T15:45:44.703Z 2012-01-05T04:32:47.987Z The "Set parameters for CNG context" Word setting should be configured correctly. CCE-13350-4 2010-10-04T15:45:44.733Z 2012-01-05T04:32:48.050Z The "Specify CNG random number generator algorithm" Word setting should be configured correctly. CCE-12749-8 2010-10-04T15:45:44.780Z 2012-01-05T04:32:48.097Z The "Save Messages" Outlook setting should be configured correctly. CCE-12561-7 2010-10-04T15:45:44.813Z 2012-01-05T04:32:48.143Z The "When sending a message" Outlook setting should be configured correctly. CCE-13704-2 2010-10-04T15:45:44.860Z 2012-01-05T04:32:48.190Z The "More save messages" Outlook setting should be configured correctly. CCE-12763-9 2010-10-04T15:45:44.890Z 2012-01-05T04:32:48.237Z The "When new items arrive" Outlook setting should be configured correctly. CCE-14792-6 2010-10-04T15:45:44.923Z 2012-01-05T04:32:48.283Z The "Do not allow e-mail postmark functionality" Outlook setting should be configured correctly. CCE-13244-9 2010-10-04T15:45:44.967Z 2012-01-05T04:32:48.330Z The "Most Recently Used Template List Length" common setting should be configured correctly. CCE-13063-3 2010-10-04T15:45:45.000Z 2012-01-05T04:32:48.377Z The "Show Paste Options button when content is pasted" common setting should be configured correctly. CCE-11485-0 2010-10-04T15:45:45.047Z 2012-01-05T04:32:48.440Z The "Disable Clipboard Toolbar triggers" common setting should be configured correctly. CCE-12943-7 2010-10-04T15:45:45.077Z 2012-01-05T04:32:48.503Z The "Print ticket safe mode" common setting should be configured correctly. CCE-14096-2 2010-10-04T15:45:45.127Z 2012-01-05T04:32:48.567Z The "Set ScreenTip Language download location" common setting should be configured correctly. CCE-13862-8 2010-10-04T15:45:45.157Z 2012-01-05T04:32:48.627Z The "Disallow Convert Document (Excel, PowerPoint, Word)" common setting should be configured correctly. CCE-13092-2 2010-10-04T15:45:45.187Z 2012-01-05T04:32:48.673Z The "Disable web view in the Office file dialog boxes" common setting should be configured correctly. CCE-13925-3 2010-10-04T15:45:45.233Z 2012-01-05T04:32:48.720Z The "Enable Workflows on My Site" common setting should be configured correctly. CCE-13158-1 2010-10-04T15:45:45.267Z 2012-01-05T04:32:48.767Z The "Increase the visibility of Accessibility Checker violations" common setting should be configured correctly. CCE-13749-7 2010-10-04T15:45:45.313Z 2012-01-05T04:32:48.817Z The "Show Screen Tips" common setting should be configured correctly. CCE-13711-7 2010-10-04T15:45:45.360Z 2012-01-05T04:32:48.863Z The "Do not validate printers before using them" common setting should be configured correctly. CCE-14163-0 2010-10-04T15:45:45.390Z 2012-01-05T04:32:48.907Z The "Control Blogging" common setting should be configured correctly. CCE-12305-9 2010-10-04T15:45:45.437Z 2012-01-05T04:32:48.957Z The "Graphic filter legacy mode" setting should be configured correctly. CCE-13803-2 2010-10-04T15:45:45.467Z 2012-01-05T04:32:49.003Z The "Do not allow Save to Web integration" common setting should be configured correctly. CCE-14941-9 2010-10-04T15:45:45.517Z 2012-01-05T04:32:49.050Z The "Home Workflow Library" common setting should be configured correctly. CCE-12913-0 2010-10-04T15:45:45.547Z 2012-01-05T04:32:49.097Z The "Do not use hardware graphics acceleration" setting should be configured correctly. CCE-11968-5 2010-10-04T15:45:45.593Z 2012-01-05T04:32:49.143Z The "Enable Smart Resume" common setting should be configured correctly. CCE-12752-2 2010-10-04T15:45:45.627Z 2012-01-05T04:32:49.190Z The "Change destination URL for SharePoint hyperlink" common setting should be configured correctly. CCE-13061-7 2010-10-04T15:45:45.687Z 2012-01-05T04:32:49.237Z The "Disable hyperlinks to web templates in File | New and task panes" common setting should be configured correctly. CCE-12084-0 2010-10-04T15:45:45.717Z 2012-01-05T04:32:49.283Z The "Hide the Learn more about SharePoint Hyperlink" common setting should be configured correctly. CCE-14583-9 2010-10-04T15:45:45.767Z 2012-01-05T04:32:49.330Z The "Disable Microsoft Office shared drawing code for blip caching" common setting should be configured correctly. CCE-13735-6 2010-10-04T15:45:45.797Z 2012-01-05T04:32:49.377Z The "Do not emulate tabs with spaces when exporting HTML" common setting should be configured correctly. CCE-11981-8 2010-10-04T15:45:45.843Z 2012-01-05T04:32:49.423Z The "Change label of Save to SharePoint" common setting should be configured correctly. CCE-14366-9 2010-10-04T15:45:45.877Z 2012-01-05T04:32:49.470Z The "Do not display paths in alerts" common setting should be configured correctly. CCE-12222-6 2010-10-04T15:45:45.923Z 2012-01-05T04:32:49.517Z The "Provide feedback with sound" common setting should be configured correctly. CCE-12253-1 2010-10-04T15:45:45.953Z 2012-01-05T04:32:49.580Z The "Do not track document editing time" common setting should be configured correctly. CCE-13192-0 2010-10-04T15:45:46.000Z 2012-01-05T04:32:49.627Z The "Do not upload media files" common setting should be configured correctly. CCE-13956-8 2010-10-04T15:45:46.047Z 2012-01-05T04:32:49.673Z The "Disable Microsoft Office shared drawing code for metafile rendering" common setting should be configured correctly. CCE-13448-6 2010-10-04T15:45:46.077Z 2012-01-05T04:32:49.720Z The "Prevent access to Web-based file storage" common setting should be configured correctly. CCE-13820-6 2010-10-04T15:45:46.127Z 2012-01-05T04:32:49.800Z The "Undo Levels" Project setting should be configured correctly. CCE-13568-1 2010-10-04T15:45:46.157Z 2012-01-05T04:32:49.863Z The "Trust Center: Trusted Location #13" Access setting should be configured correctly. CCE-13155-7 2010-10-04T15:45:46.203Z 2012-01-05T04:32:49.923Z The "Trust Center: Trusted Location #5" Access setting should be configured correctly. CCE-11855-4 2010-10-04T15:45:46.233Z 2012-01-05T04:32:49.970Z The "Allow Trusted Locations on the network" Access setting should be configured correctly. CCE-14324-8 2010-10-04T15:45:46.280Z 2012-01-05T04:32:50.017Z The "Trust Center: Trusted Location #20" Access setting should be configured correctly. CCE-13937-8 2010-10-04T15:45:46.313Z 2012-01-05T04:32:50.067Z The "Disable all trusted locations" Access setting should be configured correctly. CCE-13642-4 2010-10-04T15:45:46.360Z 2012-01-05T04:32:50.113Z The "Trust Center: Trusted Location #19" Access setting should be configured correctly. CCE-12608-6 2010-10-04T15:45:46.390Z 2012-01-05T04:32:50.157Z The "Trust Center: Trusted Location #3" Access setting should be configured correctly. CCE-13021-1 2010-10-04T15:45:46.437Z 2012-01-05T04:32:50.190Z The "Trust Center: Trusted Location #16" Access setting should be configured correctly. CCE-14789-2 2010-10-04T15:45:46.467Z 2012-01-05T04:32:50.237Z The "Trust Center: Trusted Location #7" Access setting should be configured correctly. CCE-12675-5 2010-10-04T15:45:46.517Z 2012-01-05T04:32:50.283Z The "Trust Center: Trusted Location #4" Access setting should be configured correctly. CCE-12411-5 2010-10-04T15:45:46.547Z 2012-01-05T04:32:50.330Z The "Trust Center: Trusted Location #18" Access setting should be configured correctly. CCE-14162-2 2010-10-04T15:45:46.593Z 2012-01-05T04:32:50.377Z The "Trust Center: Trusted Location #11" Access setting should be configured correctly. CCE-12982-5 2010-10-04T15:45:46.627Z 2012-01-05T04:32:50.423Z The "Trust Center: Trusted Location #2" Access setting should be configured correctly. CCE-14221-6 2010-10-04T15:45:46.673Z 2012-01-05T04:32:50.470Z The "Trust Center: Trusted Location #10" Access setting should be configured correctly. CCE-13693-7 2010-10-04T15:45:46.703Z 2012-01-05T04:32:50.517Z The "Trust Center: Trusted Location #12" Access setting should be configured correctly. CCE-11480-1 2010-10-04T15:45:46.733Z 2012-01-05T04:32:50.580Z The "Trust Center: Trusted Location #15" Access setting should be configured correctly. CCE-12731-6 2010-10-04T15:45:46.780Z 2012-01-05T04:32:50.627Z The "Trust Center: Trusted Location #6" Access setting should be configured correctly. CCE-13690-3 2010-10-04T15:45:46.827Z 2012-01-05T04:32:50.673Z The "Trust Center: Trusted Location #8" Access setting should be configured correctly. CCE-12400-8 2010-10-04T15:45:46.860Z 2012-01-05T04:32:50.720Z The "Trust Center: Trusted Location #17" Access setting should be configured correctly. CCE-14740-5 2010-10-04T15:45:46.907Z 2012-01-05T04:32:50.783Z The "Trust Center: Trusted Location #1" Access setting should be configured correctly. CCE-12894-2 2010-10-04T15:45:46.937Z 2012-01-05T04:32:50.830Z The "Trust Center: Trusted Location #9" Access setting should be configured correctly. CCE-13518-6 2010-10-04T15:45:46.967Z 2012-01-05T04:32:50.877Z The "Trust Center: Trusted Location #14" Access setting should be configured correctly. CCE-14100-2 2010-10-04T15:45:47.017Z 2012-01-05T04:32:50.940Z The "Security Level" Project setting should be configured correctly. CCE-12498-2 2010-10-04T15:45:47.047Z 2012-01-05T04:32:50.987Z The "Specify CNG hash algorithm" Access setting should be configured correctly. CCE-12726-6 2010-10-04T15:45:47.093Z 2012-01-05T04:32:51.033Z The "Specify encryption compatibility" Access setting should be configured correctly. CCE-13902-2 2010-10-04T15:45:47.140Z 2012-01-05T04:32:51.080Z The "Set CNG cipher algorithm" Access setting should be configured correctly. CCE-12782-9 2010-10-04T15:45:47.173Z 2012-01-05T04:32:51.127Z The "Specify CNG salt length" Access setting should be configured correctly. CCE-14295-0 2010-10-04T15:45:47.203Z 2012-01-05T04:32:51.173Z The "Set CNG cipher key length" Access setting should be configured correctly. CCE-13584-8 2010-10-04T15:45:47.250Z 2012-01-05T04:32:51.267Z The "Set CNG password spin count" Access setting should be configured correctly. CCE-12986-6 2010-10-04T15:45:47.280Z 2012-01-05T04:32:51.347Z The "Set parameters for CNG context" Access setting should be configured correctly. CCE-13608-5 2010-10-04T15:45:47.327Z 2012-01-05T04:32:51.393Z The "Specify CNG random number generator algorithm" Access setting should be configured correctly. CCE-13721-6 2010-10-04T15:45:47.360Z 2012-01-05T04:32:51.440Z The "Configure CNG cipher chaining mode" Access setting should be configured correctly. CCE-12167-3 2010-10-04T15:45:47.407Z 2012-01-05T04:32:51.487Z The "Disable commands" Publisher setting should be configured correctly. CCE-13293-6 2010-10-04T15:45:47.437Z 2012-01-05T04:32:51.517Z The "Overwrite or Append Junk Mail Import List" Outlook setting should be configured correctly. CCE-12916-3 2010-10-04T15:45:47.483Z 2012-01-05T04:32:51.567Z The "Specify path to Safe Recipients list" Outlook setting should be configured correctly. CCE-13359-5 2010-10-04T15:45:47.530Z 2012-01-05T04:32:51.613Z The "Hide Junk Mail UI" Outlook setting should be configured correctly. CCE-13272-0 2010-10-04T15:45:47.563Z 2012-01-05T04:32:51.657Z The "Specify path to Blocked Senders list" Outlook setting should be configured correctly. CCE-14877-5 2010-10-04T15:45:47.610Z 2012-01-05T04:32:51.707Z The "Specify path to Safe Senders list" Outlook setting should be configured correctly. CCE-13462-7 2010-10-04T15:45:47.657Z 2012-01-05T04:32:51.753Z The "Add e-mail recipients to users' Safe Senders Lists" Outlook setting should be configured correctly. CCE-14452-7 2010-10-04T15:45:47.687Z 2012-01-05T04:32:51.800Z The "Junk E-mail protection level" Outlook setting should be configured correctly. CCE-12921-3 2010-10-04T15:45:47.733Z 2012-01-05T04:32:51.847Z The "Permanently delete Junk E-mail" Outlook setting should be configured correctly. CCE-14022-8 2010-10-04T15:45:47.767Z 2012-01-05T04:32:51.907Z The "Hide warnings about suspicious domain names in e-mail addresses" Outlook setting should be configured correctly. CCE-12912-2 2010-10-04T15:45:47.813Z 2012-01-05T04:32:51.957Z The "Trust e-mail from contacts" Outlook setting should be configured correctly. CCE-13270-4 2010-10-04T15:45:47.843Z 2012-01-05T04:32:52.003Z The "Max number of documents being reviewed using 'send for review'" common setting should be configured correctly. CCE-13445-2 2010-10-04T15:45:47.890Z 2012-01-05T04:32:52.050Z The "Outlook: Ad hoc reviewing" Outlook setting should be configured correctly. CCE-14433-7 2010-10-04T15:45:47.923Z 2012-01-05T04:32:52.113Z The "Prompt for sending reviewed document to author" common setting should be configured correctly. CCE-14302-4 2010-10-04T15:45:47.967Z 2012-01-05T04:32:52.173Z The "Default subject for a review request" common setting should be configured correctly. CCE-12845-4 2010-10-04T15:45:48.000Z 2012-01-05T04:32:52.220Z The "Do not prompt users to share Excel workbooks when sending for review" Excel setting should be configured correctly. CCE-13829-7 2010-10-04T15:45:48.047Z 2012-01-05T04:32:52.267Z The "Max number of documents being reviewed using ad hoc review" common setting should be configured correctly. CCE-14416-2 2010-10-04T15:45:48.077Z 2012-01-05T04:32:52.317Z The "Outlook: 'send for review'" Outlook setting should be configured correctly. CCE-13796-8 2010-10-04T15:45:48.110Z 2012-01-05T04:32:52.363Z The "Hide spelling errors" InfoPath setting should be configured correctly. CCE-12747-2 2010-10-04T15:45:48.157Z 2012-01-05T04:32:52.407Z The "Default or specific encoding" common setting should be configured correctly. CCE-13009-6 2010-10-04T15:45:48.203Z 2012-01-05T04:32:52.457Z The "Default file format" Word setting should be configured correctly. CCE-14325-5 2010-10-04T15:45:48.233Z 2012-01-05T04:32:52.503Z The "Set default compatibility mode on file creation" Word setting should be configured correctly. CCE-12208-5 2010-10-04T15:45:48.280Z 2012-01-05T04:32:52.580Z The "Save As Open XML in Compatibility Mode" Word setting should be configured correctly. CCE-12464-4 2010-10-04T15:45:48.327Z 2012-01-05T04:32:52.627Z The "Do not display file format compatibility dialog box for OpenDocument text format" Word setting should be configured correctly. CCE-12604-5 2010-10-04T15:45:48.360Z 2012-01-05T04:32:52.673Z The "Keep the last AutoSaved versions of files for the next session" Word setting should be configured correctly. CCE-13370-2 2010-10-04T15:45:48.407Z 2012-01-05T04:32:52.720Z The "Save AutoRecover info" Word setting should be configured correctly. CCE-14534-2 2010-10-04T15:45:48.437Z 2012-01-05T04:32:52.767Z The "Maximum number of recipients in an Outlook item to scan to determine the user's colleagues for recommendation" common setting should be configured correctly. CCE-14684-5 2010-10-04T15:45:48.483Z 2012-01-05T04:32:52.817Z The "Maximum number of items to scan from today to determine the user's colleagues for recommendation" common setting should be configured correctly. CCE-13237-3 2010-10-04T15:45:48.517Z 2012-01-05T04:32:52.863Z The "Minimum time to wait before rescanning the Outlook mailbox for new colleague recommendations" common setting should be configured correctly. CCE-13020-3 2010-10-04T15:45:48.563Z 2012-01-05T04:32:52.907Z The "Enable Colleague Import Outlook Add-in to work with Microsoft SharePoint Server" common setting should be configured correctly. CCE-13637-4 2010-10-04T15:45:48.610Z 2012-01-05T04:32:52.940Z The "Maximum number of days to scan from today to determine the user's colleagues for recommendation" common setting should be configured correctly. CCE-12210-1 2010-10-04T15:45:48.640Z 2012-01-05T04:32:52.987Z The "Maximum number of rows fetched per request while populating a lookup in the SharePoint list control" setting should be configured correctly. CCE-12089-9 2010-10-04T15:45:48.673Z 2012-01-05T04:32:53.050Z The "Minimum time before starting Colleague recommendation scan" common setting should be configured correctly. CCE-12620-1 2010-10-04T15:45:48.717Z 2012-01-05T04:32:53.080Z The "Closing style to letter closings" Word setting should be configured correctly. CCE-14276-0 2010-10-04T15:45:48.767Z 2012-01-05T04:32:53.127Z The "Tables" Word setting should be configured correctly. CCE-14841-1 2010-10-04T15:45:48.797Z 2012-01-05T04:32:53.173Z The "Border lines" Word setting should be configured correctly. CCE-12833-0 2010-10-04T15:45:48.843Z 2012-01-05T04:32:53.220Z The "Automatic numbered lists" Word setting should be configured correctly. CCE-14430-3 2010-10-04T15:45:48.877Z 2012-01-05T04:32:53.283Z The "Date style" Word setting should be configured correctly. CCE-13483-3 2010-10-04T15:45:48.923Z 2012-01-05T04:32:53.330Z The "Automatic bulleted lists" Word setting should be configured correctly. CCE-13510-3 2010-10-04T15:45:48.967Z 2012-01-05T04:32:53.377Z The "Headings" Word setting should be configured correctly. CCE-13159-9 2010-10-04T15:45:49.017Z 2012-01-05T04:32:53.423Z The "Default end time" Project setting should be configured correctly. CCE-14201-8 2010-10-04T15:45:49.047Z 2012-01-05T04:32:53.470Z The "Default start time" Project setting should be configured correctly. CCE-12021-2 2010-10-04T15:45:49.093Z 2012-01-05T04:32:53.517Z The "Days per month" Project setting should be configured correctly. CCE-14489-9 2010-10-04T15:45:49.140Z 2012-01-05T04:32:53.567Z The "Week starts on" Project setting should be configured correctly. CCE-13187-0 2010-10-04T15:45:49.173Z 2012-01-05T04:32:53.613Z The "Fiscal year starts in" Project setting should be configured correctly. CCE-12462-8 2010-10-04T15:45:49.217Z 2012-01-05T04:32:53.657Z The "Hours per day" Project setting should be configured correctly. CCE-13284-5 2010-10-04T15:45:49.250Z 2012-01-05T04:32:53.707Z The "Hours per week" Project setting should be configured correctly. CCE-12835-5 2010-10-04T15:45:49.297Z 2012-01-05T04:32:53.753Z The "Use starting year for FY numbering" Project setting should be configured correctly. CCE-12696-1 2010-10-04T15:45:49.343Z 2012-01-05T04:32:53.800Z The "Turn off Data Execution Prevention" Project setting should be configured correctly. CCE-12676-3 2010-10-04T15:45:49.377Z 2012-01-05T04:32:53.847Z The "Set document synchronization timeout" common setting should be configured correctly. CCE-13612-7 2010-10-04T15:45:49.423Z 2012-01-05T04:32:53.923Z The "Disable commands" SharePoint Designer setting should be configured correctly. CCE-13649-9 2010-10-04T15:45:49.453Z 2012-01-05T04:32:53.970Z The "Baseline for Earned Value calculations" Project setting should be configured correctly. CCE-12398-4 2010-10-04T15:45:49.500Z 2012-01-05T04:32:54.017Z The "Default task Earned Value method" Project setting should be configured correctly. CCE-12829-8 2010-10-04T15:45:49.530Z 2012-01-05T04:32:54.067Z The "Rewind from start of paragraph by the following number of seconds" OneNote setting should be configured correctly. CCE-12000-6 2010-10-04T15:45:49.577Z 2012-01-05T04:32:54.113Z The "Specify number of channels to record" OneNote setting should be configured correctly. CCE-12229-1 2010-10-04T15:45:49.610Z 2012-01-05T04:32:54.157Z The "Choose default codec to be used for Video notebook" OneNote setting should be configured correctly. CCE-13897-4 2010-10-04T15:45:49.673Z 2012-01-05T04:32:54.207Z The "Disable audio search" OneNote setting should be configured correctly. CCE-13739-8 2010-10-04T15:45:49.703Z 2012-01-05T04:32:54.253Z The "Specify rate to sample audio (bits/second)" OneNote setting should be configured correctly. CCE-13044-3 2010-10-04T15:45:49.750Z 2012-01-05T04:32:54.300Z The "Disable Linked Audio feature" OneNote setting should be configured correctly. CCE-13455-1 2010-10-04T15:45:49.780Z 2012-01-05T04:32:54.363Z The "Specify number of bits to sample when recording" OneNote setting should be configured correctly. CCE-13153-2 2010-10-04T15:45:49.827Z 2012-01-05T04:32:54.407Z The "Turn on purge when switching folders" Outlook setting should be configured correctly. CCE-12539-3 2010-10-04T15:45:49.860Z 2012-01-05T04:32:54.440Z The "Set signature verification level" common setting should be configured correctly. CCE-14040-0 2010-10-04T15:45:49.907Z 2012-01-05T04:32:54.503Z The "Disable All ActiveX" common setting should be configured correctly. CCE-14352-9 2010-10-04T15:45:49.937Z 2012-01-05T04:32:54.550Z The "Do not include XAdES reference object in the manifest" common setting should be configured correctly. CCE-14166-3 2010-10-04T15:45:49.983Z 2012-01-05T04:32:54.597Z The "Configure time stamping hashing algorithm" common setting should be configured correctly. CCE-12299-4 2010-10-04T15:45:50.017Z 2012-01-05T04:32:54.643Z The "Select digital signature hashing algorithm" common setting should be configured correctly. CCE-12689-6 2010-10-04T15:45:50.063Z 2012-01-05T04:32:54.707Z The "ActiveX Control Initialization" common setting should be configured correctly. CCE-11982-6 2010-10-04T15:45:50.093Z 2012-01-05T04:32:54.753Z The "Encryption type for password protected Office Open XML files" common setting should be configured correctly. CCE-13998-0 2010-10-04T15:45:50.140Z 2012-01-05T04:32:54.800Z The "Protect document metadata for rights managed Office Open XML Files" common setting should be configured correctly. CCE-13273-8 2010-10-04T15:45:50.173Z 2012-01-05T04:32:54.847Z The "Check the XAdES portions of a digital signature" common setting should be configured correctly. CCE-13658-0 2010-10-04T15:45:50.217Z 2012-01-05T04:32:54.893Z The "Disable password to open UI" common setting should be configured correctly. CCE-13597-0 2010-10-04T15:45:50.250Z 2012-01-05T04:32:54.940Z The "Require OCSP at signature generation time" common setting should be configured correctly. CCE-13878-4 2010-10-04T15:45:50.297Z 2012-01-05T04:32:54.987Z The "Set timestamp server timeout" common setting should be configured correctly. CCE-13734-9 2010-10-04T15:45:50.343Z 2012-01-05T04:32:55.033Z The "Set minimum password length" common setting should be configured correctly. CCE-13204-3 2010-10-04T15:45:50.377Z 2012-01-05T04:32:55.080Z The "Protect document metadata for password protected files" common setting should be configured correctly. CCE-12185-5 2010-10-04T15:45:50.423Z 2012-01-05T04:32:55.127Z The "Check Excel RTD servers" common setting should be configured correctly. CCE-13591-3 2010-10-04T15:45:50.467Z 2012-01-05T04:32:55.207Z The "Check OWC data source providers" common setting should be configured correctly. CCE-13844-6 2010-10-04T15:45:50.500Z 2012-01-05T04:32:55.267Z The "Requested XAdES level for signature generation" common setting should be configured correctly. CCE-14045-9 2010-10-04T15:45:50.547Z 2012-01-05T04:32:55.330Z The "Set password hash format as ISO-compliant" common setting should be configured correctly. CCE-14658-9 2010-10-04T15:45:50.593Z 2012-01-05T04:32:55.377Z The "Automation Security" common setting should be configured correctly. CCE-14561-5 2010-10-04T15:45:50.627Z 2012-01-05T04:32:55.423Z The "Prevent Word and Excel from loading managed code extensions" common setting should be configured correctly. CCE-14471-7 2010-10-04T15:45:50.657Z 2012-01-05T04:32:55.470Z The "Set password rules domain timeout" common setting should be configured correctly. CCE-13353-8 2010-10-04T15:45:50.703Z 2012-01-05T04:32:55.517Z The "Disable all Trust Bar notifications for security issues" common setting should be configured correctly. CCE-11675-6 2010-10-04T15:45:50.750Z 2012-01-05T04:32:55.567Z The "Disable VBA for Office applications" common setting should be configured correctly. CCE-11532-9 2010-10-04T15:45:50.780Z 2012-01-05T04:32:55.627Z The "Encrypt document properties" common setting should be configured correctly. CCE-14173-9 2010-10-04T15:45:50.827Z 2012-01-05T04:32:55.673Z The "Set password rules level" common setting should be configured correctly. CCE-12146-7 2010-10-04T15:45:50.860Z 2012-01-05T04:32:55.720Z The "Load Controls in Forms3" setting should be configured correctly. CCE-13030-2 2010-10-04T15:45:50.907Z 2012-01-05T04:32:55.767Z The "Encryption type for password protected Office 97-2003 files" common setting should be configured correctly. CCE-12055-0 2010-10-04T15:45:50.937Z 2012-01-05T04:32:55.817Z The "Check ActiveX objects" common setting should be configured correctly. CCE-13656-4 2010-10-04T15:45:50.983Z 2012-01-05T04:32:55.863Z The "Check OLE objects" common setting should be configured correctly. CCE-14199-4 2010-10-04T15:45:51.017Z 2012-01-05T04:32:55.907Z The "Do not allow expired certificates when validating signatures" common setting should be configured correctly. CCE-14476-6 2010-10-04T15:45:51.063Z 2012-01-05T04:32:55.957Z The "Use Protected View for attachments received from internal senders" Outlook setting should be configured correctly. CCE-14866-8 2010-10-04T15:45:51.110Z 2012-01-05T04:32:56.003Z The "Prompt user to choose security settings if default settings fail" Outlook setting should be configured correctly. CCE-12816-5 2010-10-04T15:45:51.157Z 2012-01-05T04:32:56.050Z The "Configure Add-In Trust Level" Outlook setting should be configured correctly. CCE-13784-4 2010-10-04T15:45:51.187Z 2012-01-05T04:32:56.097Z The "Allow Active X One Off Forms" Outlook setting should be configured correctly. CCE-14219-0 2010-10-04T15:45:51.233Z 2012-01-05T04:32:56.143Z The "Do not automatically sign replies" Outlook setting should be configured correctly. CCE-12618-5 2010-10-04T15:45:51.267Z 2012-01-05T04:32:56.190Z The "Disable 'Remember password' for Internet e-mail accounts" Outlook setting should be configured correctly. CCE-12962-7 2010-10-04T15:45:51.313Z 2012-01-05T04:32:56.220Z The "Prevent users from customizing attachment security settings" Outlook setting should be configured correctly. CCE-12444-6 2010-10-04T15:45:51.343Z 2012-01-05T04:32:56.267Z The "Disable Trust Bar Notification for unsigned application add-ins and block them" Visio setting should be configured correctly. CCE-12651-6 2010-10-04T15:45:51.390Z 2012-01-05T04:32:56.317Z The "Trust Center: Trusted Location #14" Visio setting should be configured correctly. CCE-12616-9 2010-10-04T15:45:51.423Z 2012-01-05T04:32:56.363Z The "Allow Trusted Locations on the network" Visio setting should be configured correctly. CCE-13409-8 2010-10-04T15:45:51.467Z 2012-01-05T04:32:56.407Z The "Set maximum number of trust records to preserve" Visio setting should be configured correctly. CCE-14637-3 2010-10-04T15:45:51.500Z 2012-01-05T04:32:56.457Z The "Disable all application add-ins" Visio setting should be configured correctly. CCE-13145-8 2010-10-04T15:45:51.547Z 2012-01-05T04:32:56.517Z The "Trust Center: Trusted Location #17" Visio setting should be configured correctly. CCE-13496-5 2010-10-04T15:45:51.593Z 2012-01-05T04:32:56.580Z The "Trust Center: Trusted Location #4" Visio setting should be configured correctly. CCE-13468-4 2010-10-04T15:45:51.627Z 2012-01-05T04:32:56.627Z The "Trust Center: Trusted Location #13" Visio setting should be configured correctly. CCE-12052-7 2010-10-04T15:45:51.673Z 2012-01-05T04:32:56.673Z The "VBA Macro Notification Settings" Visio setting should be configured correctly. CCE-13479-1 2010-10-04T15:45:51.703Z 2012-01-05T04:32:56.707Z The "Trust Center: Trusted Location #15" Visio setting should be configured correctly. CCE-11868-7 2010-10-04T15:45:51.750Z 2012-01-05T04:32:56.753Z The "Set maximum number of trusted documents" Visio setting should be configured correctly. CCE-12533-6 2010-10-04T15:45:51.797Z 2012-01-05T04:32:56.800Z The "Trust Center: Trusted Location #9" Visio setting should be configured correctly. CCE-12380-2 2010-10-04T15:45:51.827Z 2012-01-05T04:32:56.847Z The "Trust Center: Trusted Location #10" Visio setting should be configured correctly. CCE-13896-6 2010-10-04T15:45:51.877Z 2012-01-05T04:32:56.893Z The "Trust Center: Trusted Location #11" Visio setting should be configured correctly. CCE-13665-5 2010-10-04T15:45:51.923Z 2012-01-05T04:32:56.957Z The "Trust Center: Trusted Location #19" Visio setting should be configured correctly. CCE-13403-1 2010-10-04T15:45:51.953Z 2012-01-05T04:32:57.003Z The "Trust Center: Trusted Location #18" Visio setting should be configured correctly. CCE-12122-8 2010-10-04T15:45:52.000Z 2012-01-05T04:32:57.050Z The "Trust Center: Trusted Location #6" Visio setting should be configured correctly. CCE-12526-0 2010-10-04T15:45:52.030Z 2012-01-05T04:32:57.113Z The "Disable all trusted locations" Visio setting should be configured correctly. CCE-13010-4 2010-10-04T15:45:52.077Z 2012-01-05T04:32:57.157Z The "Trust Center: Trusted Location #1" Visio setting should be configured correctly. CCE-13390-0 2010-10-04T15:45:52.127Z 2012-01-05T04:32:57.207Z The "Trust Center: Trusted Location #3" Visio setting should be configured correctly. CCE-13988-1 2010-10-04T15:45:52.157Z 2012-01-05T04:32:57.253Z The "Trust Center: Trusted Location #5" Visio setting should be configured correctly. CCE-12218-4 2010-10-04T15:45:52.203Z 2012-01-05T04:32:57.300Z The "Turn off trusted documents" Visio setting should be configured correctly. CCE-12297-8 2010-10-04T15:45:52.233Z 2012-01-05T04:32:57.347Z The "Trust Center: Trusted Location #16" Visio setting should be configured correctly. CCE-13055-9 2010-10-04T15:45:52.280Z 2012-01-05T04:32:57.393Z The "Turn off Trusted Documents on the network" Visio setting should be configured correctly. CCE-14886-6 2010-10-04T15:45:52.313Z 2012-01-05T04:32:57.440Z The "Trust Center: Trusted Location #12" Visio setting should be configured correctly. CCE-11790-3 2010-10-04T15:45:52.360Z 2012-01-05T04:32:57.487Z The "Trust Center: Trusted Location #7" Visio setting should be configured correctly. CCE-12358-8 2010-10-04T15:45:52.390Z 2012-01-05T04:32:57.533Z The "Turn off Data Execution Prevention" Visio setting should be configured correctly. CCE-13414-8 2010-10-04T15:45:52.437Z 2012-01-05T04:32:57.580Z The "Trust Center: Trusted Location #8" Visio setting should be configured correctly. CCE-12558-3 2010-10-04T15:45:52.483Z 2012-01-05T04:32:57.627Z The "Require that application add-ins are signed by Trusted Publisher" Visio setting should be configured correctly. CCE-14178-8 2010-10-04T15:45:52.530Z 2012-01-05T04:32:57.673Z The "Trust Center: Trusted Location #20" Visio setting should be configured correctly. CCE-13791-9 2010-10-04T15:45:52.563Z 2012-01-05T04:32:57.720Z The "Trust Center: Trusted Location #2" Visio setting should be configured correctly. CCE-13206-8 2010-10-04T15:45:52.610Z 2012-01-05T04:32:57.767Z The "Load Microsoft Visual Basic for Applications projects from text" Visio setting should be configured correctly. CCE-12432-1 2010-10-04T15:45:52.640Z 2012-01-05T04:32:57.830Z The "Enable Microsoft Visual Basic for Applications project creation" Visio setting should be configured correctly. CCE-14473-3 2010-10-04T15:45:52.687Z 2012-01-05T04:32:57.893Z The "Do not show Mini Toolbar on selection of text" Visio setting should be configured correctly. CCE-13659-8 2010-10-04T15:45:52.717Z 2012-01-05T04:32:57.940Z The "Turn off Live Preview in the Shapes window" Visio setting should be configured correctly. CCE-13876-8 2010-10-04T15:45:52.767Z 2012-01-05T04:32:57.987Z The "Turn off Live Preview" Visio setting should be configured correctly. CCE-14123-4 2010-10-04T15:45:52.813Z 2012-01-05T04:32:58.033Z The "Number of backup copies to keep" OneNote setting should be configured correctly. CCE-14485-7 2010-10-04T15:45:52.843Z 2012-01-05T04:32:58.080Z The "Automatically back up my notebook..." OneNote setting should be configured correctly. CCE-14624-1 2010-10-04T15:45:52.890Z 2012-01-05T04:32:58.143Z The "Move start of remaining parts before status date forward to status date" Project setting should be configured correctly. CCE-11952-9 2010-10-04T15:45:52.923Z 2012-01-05T04:32:58.190Z The "Edits to total actual cost will be spread to the status date" Project setting should be configured correctly. CCE-13474-2 2010-10-04T15:45:52.967Z 2012-01-05T04:32:58.237Z The "And move end of completed parts forward to status date" Project setting should be configured correctly. CCE-13780-2 2010-10-04T15:45:53.000Z 2012-01-05T04:32:58.283Z The "Default fixed costs accrual" Project setting should be configured correctly. CCE-13765-3 2010-10-04T15:45:53.047Z 2012-01-05T04:32:58.330Z The "Calculate multiple critical paths" Project setting should be configured correctly. CCE-14184-6 2010-10-04T15:45:53.093Z 2012-01-05T04:32:58.377Z The "Edits to total task % complete will be spread to the status date" Project setting should be configured correctly. CCE-13146-6 2010-10-04T15:45:53.127Z 2012-01-05T04:32:58.440Z The "Move end of completed parts after status date back to status date" Project setting should be configured correctly. CCE-12184-8 2010-10-04T15:45:53.173Z 2012-01-05T04:32:58.487Z The "Tasks are critical if slack is less than or equal to" Project setting should be configured correctly. CCE-12530-2 2010-10-04T15:45:53.217Z 2012-01-05T04:32:58.533Z The "Updating task status updates resource status" Project setting should be configured correctly. CCE-12452-9 2010-10-04T15:45:53.250Z 2012-01-05T04:32:58.580Z The "And move start of remaining parts back to status date" Project setting should be configured correctly. CCE-13267-0 2010-10-04T15:45:53.297Z 2012-01-05T04:32:58.627Z The "Actual costs are always calculated by Microsoft Project" Project setting should be configured correctly. CCE-11826-5 2010-10-04T15:45:53.327Z 2012-01-05T04:32:58.673Z The "Inserted projects are calculated like summary tasks" Project setting should be configured correctly. CCE-13097-1 2010-10-04T15:45:53.377Z 2012-01-05T04:32:58.737Z The "Previous-version file formats" Project setting should be configured correctly. CCE-11859-6 2010-10-04T15:45:53.423Z 2012-01-05T04:32:58.800Z The "Ink Entry" common setting should be configured correctly. CCE-11562-6 2010-10-04T15:45:53.453Z 2012-01-05T04:32:58.847Z The "Display a shaded ink guide for handwriting" common setting should be configured correctly. CCE-12853-8 2010-10-04T15:45:53.500Z 2012-01-05T04:32:58.893Z The "Display a warning dialog box that user is entering text in Ink entry mode" common setting should be configured correctly. CCE-13827-1 2010-10-04T15:45:53.547Z 2012-01-05T04:32:58.940Z The "Enter milliseconds before recognizing handwriting" common setting should be configured correctly. CCE-14348-7 2010-10-04T15:45:53.577Z 2012-01-05T04:32:58.987Z The "Display Developer tab in the Ribbon" Project setting should be configured correctly. CCE-13557-4 2010-10-04T15:45:53.627Z 2012-01-05T04:32:59.050Z The "Do not automatically merge server and local document" Word setting should be configured correctly. CCE-12233-3 2010-10-04T15:45:53.657Z 2012-01-05T04:32:59.097Z The "Prevent co-authoring" Word setting should be configured correctly. CCE-13513-7 2010-10-04T15:45:53.703Z 2012-01-05T04:32:59.157Z The "Match hyu/iyu, byu/vyu" Word setting should be configured correctly. CCE-13265-4 2010-10-04T15:45:53.733Z 2012-01-05T04:32:59.207Z The "Match 'repeat character' marks" Word setting should be configured correctly. CCE-11607-9 2010-10-04T15:45:53.780Z 2012-01-05T04:32:59.253Z The "Match ki/ku (tekisuto/tekusuto)" Word setting should be configured correctly. CCE-13718-2 2010-10-04T15:45:53.827Z 2012-01-05T04:32:59.317Z The "Match full/half width form" Word setting should be configured correctly. CCE-13699-4 2010-10-04T15:45:53.860Z 2012-01-05T04:32:59.363Z The "Ignore whitespace characters" Word setting should be configured correctly. CCE-12304-2 2010-10-04T15:45:53.907Z 2012-01-05T04:32:59.440Z The "Match cho-on used for vowels" Word setting should be configured correctly. CCE-12997-3 2010-10-04T15:45:53.953Z 2012-01-05T04:32:59.487Z The "Match tsi/thi/chi, dhi/zi" Word setting should be configured correctly. CCE-13354-6 2010-10-04T15:45:54.000Z 2012-01-05T04:32:59.533Z The "Match se/she, ze/je" Word setting should be configured correctly. CCE-12330-7 2010-10-04T15:45:54.030Z 2012-01-05T04:32:59.597Z The "Match ba/va, ha/fa" Word setting should be configured correctly. CCE-13800-8 2010-10-04T15:45:54.077Z 2012-01-05T04:32:59.643Z The "Match variant-form kanji (itaiji)" Word setting should be configured correctly. CCE-14697-7 2010-10-04T15:45:54.110Z 2012-01-05T04:32:59.673Z The "Ignore punctuation characters" Word setting should be configured correctly. CCE-13766-1 2010-10-04T15:45:54.157Z 2012-01-05T04:32:59.720Z The "Match old kana forms" Word setting should be configured correctly. CCE-14070-7 2010-10-04T15:45:54.203Z 2012-01-05T04:32:59.767Z The "Match contractions (yo-on, sokuon)" Word setting should be configured correctly. CCE-12333-1 2010-10-04T15:45:54.233Z 2012-01-05T04:32:59.817Z The "Match di/zi, du/zu" Word setting should be configured correctly. CCE-13421-3 2010-10-04T15:45:54.280Z 2012-01-05T04:32:59.863Z The "Match case" Word setting should be configured correctly. CCE-12887-6 2010-10-04T15:45:54.313Z 2012-01-05T04:32:59.907Z The "Match ia/iya (piano/piyano)" Word setting should be configured correctly. CCE-12313-3 2010-10-04T15:45:54.360Z 2012-01-05T04:32:59.957Z The "Match hiragana/katakana" Word setting should be configured correctly. CCE-12315-8 2010-10-04T15:45:54.407Z 2012-01-05T04:33:00.003Z The "Match minus/dash/cho-on" Word setting should be configured correctly. CCE-14520-1 2010-10-04T15:45:54.437Z 2012-01-05T04:33:00.050Z The "Display Developer tab in the Ribbon" Publisher setting should be configured correctly. CCE-13969-1 2010-10-04T15:45:54.483Z 2012-01-05T04:33:00.097Z The "Default database folder" Access setting should be configured correctly. CCE-12440-4 2010-10-04T15:45:54.517Z 2012-01-05T04:33:00.143Z The "Number of documents in the Recent Documents list" Access setting should be configured correctly. CCE-12745-6 2010-10-04T15:45:54.563Z 2012-01-05T04:33:00.207Z The "Automatically download attachments" Outlook setting should be configured correctly. CCE-12902-3 2010-10-04T15:45:54.610Z 2012-01-05T04:33:00.253Z The "Override published sync interval" Outlook setting should be configured correctly. CCE-14207-5 2010-10-04T15:45:54.657Z 2012-01-05T04:33:00.300Z The "Default Internet Calendar subscriptions" Outlook setting should be configured correctly. CCE-13632-5 2010-10-04T15:45:54.687Z 2012-01-05T04:33:00.347Z The "Disable roaming of Internet Calendars" Outlook setting should be configured correctly. CCE-14936-9 2010-10-04T15:45:54.733Z 2012-01-05T04:33:00.393Z The "Do not include Internet Calendar integration in Outlook" Outlook setting should be configured correctly. CCE-13577-2 2010-10-04T15:45:54.780Z 2012-01-05T04:33:00.440Z The "Calendar Type" Project setting should be configured correctly. CCE-12825-6 2010-10-04T15:45:54.813Z 2012-01-05T04:33:00.487Z The "Path to shared Workgroup information file for secured MDB files" Access setting should be configured correctly. CCE-11815-8 2010-10-04T15:45:54.860Z 2012-01-05T04:33:00.533Z The "Display Developer tab in the Ribbon" Visio setting should be configured correctly. CCE-12925-4 2010-10-04T15:45:54.890Z 2012-01-05T04:33:00.613Z The "Disable OneNote COM API" OneNote setting should be configured correctly. CCE-13914-7 2010-10-04T15:45:54.937Z 2012-01-05T04:33:00.690Z The "Disable installed OneNote Add-ins" OneNote setting should be configured correctly. CCE-14376-8 2010-10-04T15:45:54.967Z 2012-01-05T04:33:00.753Z The "Default direction" Access setting should be configured correctly. CCE-13393-4 2010-10-04T15:45:55.017Z 2012-01-05T04:33:00.800Z The "Cursor movement" Access setting should be configured correctly. CCE-12417-2 2010-10-04T15:45:55.063Z 2012-01-05T04:33:00.847Z The "General Alignment" Access setting should be configured correctly. CCE-12654-0 2010-10-04T15:45:55.093Z 2012-01-05T04:33:00.893Z The "Stop checking for table header accessibility information" PowerPoint setting should be configured correctly. CCE-14823-9 2010-10-04T15:45:55.140Z 2012-01-05T04:33:00.940Z The "Stop checking for blank table rows and columns" PowerPoint setting should be configured correctly. CCE-13465-0 2010-10-04T15:45:55.173Z 2012-01-05T04:33:00.987Z The "Stop checking to ensure each slide has a unique title" PowerPoint setting should be configured correctly. CCE-13180-5 2010-10-04T15:45:55.217Z 2012-01-05T04:33:01.050Z The "Stop checking for merged and split cells" PowerPoint setting should be configured correctly. CCE-12286-1 2010-10-04T15:45:55.267Z 2012-01-05T04:33:01.097Z The "Stop checking for alt text accessibility information" PowerPoint setting should be configured correctly. CCE-14903-9 2010-10-04T15:45:55.297Z 2012-01-05T04:33:01.143Z The "Stop checking to ensure hyperlink text is meaningful" PowerPoint setting should be configured correctly. CCE-14428-7 2010-10-04T15:45:55.343Z 2012-01-05T04:33:01.207Z The "Stop checking to ensure a meaningful order of objects on slides" PowerPoint setting should be configured correctly. CCE-13570-7 2010-10-04T15:45:55.390Z 2012-01-05T04:33:01.253Z The "Stop checking for media files which might need captions" PowerPoint setting should be configured correctly. CCE-12984-1 2010-10-04T15:45:55.437Z 2012-01-05T04:33:01.300Z The "Stop checking to ensure presentations allow programmatic access" PowerPoint setting should be configured correctly. CCE-14349-5 2010-10-04T15:45:55.467Z 2012-01-05T04:33:01.347Z The "Stop checking that slide titles exist" PowerPoint setting should be configured correctly. CCE-12446-1 2010-10-04T15:45:55.517Z 2012-01-05T04:33:01.393Z The "Publisher Automation Security Level" common setting should be configured correctly. CCE-12353-9 2010-10-04T15:45:55.563Z 2012-01-05T04:33:01.440Z The "Prompt to allow fatally corrupt files to open instead of blocking them" Publisher setting should be configured correctly. CCE-13327-2 2010-10-04T15:45:55.593Z 2012-01-05T04:33:01.487Z The "Do not show ScreenTips on toolbars" common setting should be configured correctly. CCE-12212-7 2010-10-04T15:45:55.640Z 2012-01-05T04:33:01.567Z The "Menu animations" common setting should be configured correctly. CCE-12477-6 2010-10-04T15:45:55.673Z 2012-01-05T04:33:01.627Z The "List font names in their font" common setting should be configured correctly. CCE-13908-9 2010-10-04T15:45:55.717Z 2012-01-05T04:33:01.673Z The "Disable UI extending from documents and templates" common setting should be configured correctly. CCE-14252-1 2010-10-04T15:45:55.767Z 2012-01-05T04:33:01.753Z The "Allow roaming of all user customizations" common setting should be configured correctly. CCE-13646-5 2010-10-04T15:45:55.797Z 2012-01-05T04:33:01.800Z The "Show shortcut keys in ScreenTips" common setting should be configured correctly. CCE-14370-1 2010-10-04T15:45:55.843Z 2012-01-05T04:33:01.847Z The "Large icons" common setting should be configured correctly. CCE-13361-1 2010-10-04T15:45:55.890Z 2012-01-05T04:33:01.893Z The "Resource Assigments" Project setting should be configured correctly. CCE-14651-4 2010-10-04T15:45:55.937Z 2012-01-05T04:33:01.957Z The "Edits to work, units or duration" Project setting should be configured correctly. CCE-13754-7 2010-10-04T15:45:55.967Z 2012-01-05T04:33:02.003Z The "Edits to start and finish dates" Project setting should be configured correctly. CCE-13116-9 2010-10-04T15:45:56.017Z 2012-01-05T04:33:02.050Z The "Deletions in the Name column" Project setting should be configured correctly. CCE-13675-4 2010-10-04T15:45:56.063Z 2012-01-05T04:33:02.097Z The "Disable commands" InfoPath setting should be configured correctly. CCE-14556-5 2010-10-04T15:45:56.110Z 2012-01-05T04:33:02.143Z The "Prevent Token Activation dialog from closing" machine setting should be configured correctly. CCE-12252-3 2010-10-04T15:45:56.157Z 2012-01-05T04:33:02.190Z The "Use only Token Activation" machine setting should be configured correctly. CCE-13837-0 2010-10-04T15:45:56.187Z 2012-01-05T04:33:02.253Z The "Use contextual spelling" setting should be configured correctly. CCE-13886-7 2010-10-04T15:45:56.233Z 2012-01-05T04:33:02.300Z The "Check spelling as you type" PowerPoint setting should be configured correctly. CCE-13364-5 2010-10-04T15:45:56.267Z 2012-01-05T04:33:02.347Z The "Enable Automation events" Visio setting should be configured correctly. CCE-13716-6 2010-10-04T15:45:56.313Z 2012-01-05T04:33:02.393Z The "Put all settings in Windows registry" Visio setting should be configured correctly. CCE-14504-5 2010-10-04T15:45:56.360Z 2012-01-05T04:33:02.440Z The "Open each ShapeSheet in the same window" Visio setting should be configured correctly. CCE-12688-8 2010-10-04T15:45:56.390Z 2012-01-05T04:33:02.487Z The "Language for file conversion" Visio setting should be configured correctly. CCE-13630-9 2010-10-04T15:45:56.437Z 2012-01-05T04:33:02.533Z The "Show file open warnings" Visio setting should be configured correctly. CCE-12632-6 2010-10-04T15:45:56.467Z 2012-01-05T04:33:02.580Z The "Show file save warnings" Visio setting should be configured correctly. CCE-14064-0 2010-10-04T15:45:56.517Z 2012-01-05T04:33:02.627Z The "Do not show social network info-bars" Outlook setting should be configured correctly. CCE-13975-8 2010-10-04T15:45:56.563Z 2012-01-05T04:33:02.673Z The "Block network activity synchronization" Outlook setting should be configured correctly. CCE-11820-8 2010-10-04T15:45:56.610Z 2012-01-05T04:33:02.720Z The "Set GAL contact synchronization interval" Outlook setting should be configured correctly. CCE-12664-9 2010-10-04T15:45:56.640Z 2012-01-05T04:33:02.783Z The "Do not download photos from Active Directory" Outlook setting should be configured correctly. CCE-11989-1 2010-10-04T15:45:56.687Z 2012-01-05T04:33:02.863Z The "Do not allow on-demand activity synchronization" Outlook setting should be configured correctly. CCE-14899-9 2010-10-04T15:45:56.733Z 2012-01-05T04:33:02.907Z The "Block specific social network providers" Outlook setting should be configured correctly. CCE-14304-0 2010-10-04T15:45:56.767Z 2012-01-05T04:33:02.957Z The "Specify activity feed synchronization interval" Outlook setting should be configured correctly. CCE-14775-1 2010-10-04T15:45:56.813Z 2012-01-05T04:33:03.003Z The "Prevent social network connectivity" Outlook setting should be configured correctly. CCE-13834-7 2010-10-04T15:45:56.843Z 2012-01-05T04:33:03.113Z The "Block social network contact synchronization" Outlook setting should be configured correctly. CCE-13347-0 2010-10-04T15:45:56.890Z 2012-01-05T04:33:03.173Z The "Specify list of social network providers to load" Outlook setting should be configured correctly. CCE-14043-4 2010-10-04T15:45:56.937Z 2012-01-05T04:33:03.220Z The "Block Global Address List synchronization" Outlook setting should be configured correctly. CCE-12959-3 2010-10-04T15:45:56.983Z 2012-01-05T04:33:03.267Z The "Turn off Outlook Social Connector" Outlook setting should be configured correctly. CCE-13538-4 2010-10-04T15:45:57.017Z 2012-01-05T04:33:03.317Z The "List of error messages to customize" Outlook setting should be configured correctly. CCE-13851-1 2010-10-04T15:45:57.063Z 2012-01-05T04:33:03.363Z The "Insert closing phrase to match Japanese salutation" Word setting should be configured correctly. CCE-13512-9 2010-10-04T15:45:57.093Z 2012-01-05T04:33:03.407Z The "Auto space" Word setting should be configured correctly. CCE-13487-4 2010-10-04T15:45:57.140Z 2012-01-05T04:33:03.457Z The "Insert closing phrase to match memo style" Word setting should be configured correctly. CCE-13031-0 2010-10-04T15:45:57.187Z 2012-01-05T04:33:03.503Z The "Set left indent on tabs and backspace" Word setting should be configured correctly. CCE-12790-2 2010-10-04T15:45:57.217Z 2012-01-05T04:33:03.567Z The "Define styles based on your formatting" Word setting should be configured correctly. CCE-14693-6 2010-10-04T15:45:57.280Z 2012-01-05T04:33:03.613Z The "Format beginning of list item like the one before it" Word setting should be configured correctly. CCE-12939-5 2010-10-04T15:45:57.313Z 2012-01-05T04:33:03.657Z The "Match parentheses" Word setting should be configured correctly. CCE-13046-8 2010-10-04T15:45:57.360Z 2012-01-05T04:33:03.707Z The "Display Developer tab in the Ribbon" PowerPoint setting should be configured correctly. CCE-12026-1 2010-10-04T15:45:57.390Z 2012-01-05T04:33:03.753Z The "Disable task list" Outlook setting should be configured correctly. CCE-12500-5 2010-10-04T15:45:57.437Z 2012-01-05T04:33:03.800Z The "Do not display the To-Do Bar" Outlook setting should be configured correctly. CCE-12448-7 2010-10-04T15:45:57.467Z 2012-01-05T04:33:03.847Z The "To-Do Bar Date Navigators" Outlook setting should be configured correctly. CCE-14379-2 2010-10-04T15:45:57.517Z 2012-01-05T04:33:03.893Z The "Do not display Quick Contacts in the To-Do Bar" Outlook setting should be configured correctly. CCE-13622-6 2010-10-04T15:45:57.563Z 2012-01-05T04:33:03.940Z The "Disable shortcut keys" Excel setting should be configured correctly. CCE-14145-7 2010-10-04T15:45:57.593Z 2012-01-05T04:33:03.987Z The "Disable commands" Excel setting should be configured correctly. CCE-13108-6 2010-10-04T15:45:57.640Z 2012-01-05T04:33:04.050Z The "Disable features not supported by specified browsers" Word setting should be configured correctly. CCE-13218-3 2010-10-04T15:45:57.673Z 2012-01-05T04:33:04.097Z The "Groove Server Manager Name" SharePoint Workspace setting should be configured correctly. CCE-14596-1 2010-10-04T15:45:57.717Z 2012-01-05T04:33:04.143Z The "Outlook Today availability" Outlook setting should be configured correctly. CCE-14028-5 2010-10-04T15:45:57.767Z 2012-01-05T04:33:04.190Z The "URL for custom Outlook Today" Outlook setting should be configured correctly. CCE-13563-2 2010-10-04T15:45:57.813Z 2012-01-05T04:33:04.237Z The "Specify delay before sending people search request" common setting should be configured correctly. CCE-11937-0 2010-10-04T15:45:57.843Z 2012-01-05T04:33:04.283Z The "Do not show unread message count on Windows Welcome screen" Outlook setting should be configured correctly. CCE-12529-4 2010-10-04T15:45:57.890Z 2012-01-05T04:33:04.330Z The "Prevent users from making changes to Outlook profiles" Outlook setting should be configured correctly. CCE-13920-4 2010-10-04T15:45:57.923Z 2012-01-05T04:33:04.363Z The "Do not expand Contact Groups" Outlook setting should be configured correctly. CCE-14890-8 2010-10-04T15:45:57.967Z 2012-01-05T04:33:04.407Z The "Only show Auto Account Setup on first boot" Outlook setting should be configured correctly. CCE-12480-0 2010-10-04T15:45:58.017Z 2012-01-05T04:33:04.470Z The "Automatically show the Outlook Attachment pane when adding attachment" common setting should be configured correctly. CCE-12741-5 2010-10-04T15:45:58.063Z 2012-01-05T04:33:04.503Z The "Turn off fast people search" common setting should be configured correctly. CCE-12160-8 2010-10-04T15:45:58.110Z 2012-01-05T04:33:04.550Z The "Turn off SharePoint Portal Server Colleague Import" common setting should be configured correctly. CCE-14197-8 2010-10-04T15:45:58.140Z 2012-01-05T04:33:04.597Z The "Add new categories" Outlook setting should be configured correctly. CCE-14165-5 2010-10-04T15:45:58.187Z 2012-01-05T04:33:04.643Z The "Do not display "Open this task" button for workflow tasks" common setting should be configured correctly. CCE-13683-8 2010-10-04T15:45:58.217Z 2012-01-05T04:33:04.690Z The "Extend Outlook Autosave to include encrypted e-mail messages" common setting should be configured correctly. CCE-12555-9 2010-10-04T15:45:58.267Z 2012-01-05T04:33:04.720Z The "Prevent users from adding e-mail account types" Outlook setting should be configured correctly. CCE-14114-3 2010-10-04T15:45:58.297Z 2012-01-05T04:33:04.767Z The "Disable VLV Browsing on LDAP servers" Outlook setting should be configured correctly. CCE-12071-7 2010-10-04T15:45:58.343Z 2012-01-05T04:33:04.817Z The "Disable Windows event logging for Outlook add-ins" Outlook setting should be configured correctly. CCE-13655-6 2010-10-04T15:45:58.390Z 2012-01-05T04:33:04.877Z The "PAB Migration" Outlook setting should be configured correctly. CCE-12702-7 2010-10-04T15:45:58.437Z 2012-01-05T04:33:04.923Z The "Do not download rights permission license information for IRM e-mail during Exchange folder sync" common setting should be configured correctly. CCE-12151-7 2010-10-04T15:45:58.467Z 2012-01-05T04:33:04.970Z The "Managing Categories during e-mail exchanges" Outlook setting should be configured correctly. CCE-12428-9 2010-10-04T15:45:58.517Z 2012-01-05T04:33:05.017Z The "Prevent MAPI services from being added" Outlook setting should be configured correctly. CCE-14484-0 2010-10-04T15:45:58.547Z 2012-01-05T04:33:05.080Z The "Default Doctype" SharePoint Designer setting should be configured correctly. CCE-11915-6 2010-10-04T15:45:58.593Z 2012-01-05T04:33:05.127Z The "Default New Page Type on SharePoint" SharePoint Designer setting should be configured correctly. CCE-14521-9 2010-10-04T15:45:58.640Z 2012-01-05T04:33:05.173Z The "Default CSS Schema" SharePoint Designer setting should be configured correctly. CCE-12415-6 2010-10-04T15:45:58.687Z 2012-01-05T04:33:05.220Z The "Default New Page Type" SharePoint Designer setting should be configured correctly. CCE-12543-5 2010-10-04T15:45:58.733Z 2012-01-05T04:33:05.283Z The "Default Secondary Schema" SharePoint Designer setting should be configured correctly. CCE-13249-8 2010-10-04T15:45:58.767Z 2012-01-05T04:33:05.347Z The "Allow attendees to propose new times for meetings you organize" Outlook setting should be configured correctly. CCE-12569-0 2010-10-04T15:45:58.813Z 2012-01-05T04:33:05.393Z The "Hide lucky days when using Rokuyou (Japanese) calendar" Outlook setting should be configured correctly. CCE-14024-4 2010-10-04T15:45:58.843Z 2012-01-05T04:33:05.440Z The "Do not regenerate meetings" Outlook setting should be configured correctly. CCE-14408-9 2010-10-04T15:45:58.890Z 2012-01-05T04:33:05.487Z The "Show details of private appointments" Outlook setting should be configured correctly. CCE-13938-6 2010-10-04T15:45:58.937Z 2012-01-05T04:33:05.517Z The "Send Internet meeting requests using iCalendar format" Outlook setting should be configured correctly. CCE-12524-5 2010-10-04T15:45:58.967Z 2012-01-05T04:33:05.567Z The "Do not display reminders on Calendar items by default" Outlook setting should be configured correctly. CCE-14152-3 2010-10-04T15:45:59.017Z 2012-01-05T04:33:05.613Z The "Secondary calendar settings" Outlook setting should be configured correctly. CCE-13915-4 2010-10-04T15:45:59.063Z 2012-01-05T04:33:05.657Z The "Calendar item defaults" Outlook setting should be configured correctly. CCE-13124-3 2010-10-04T15:45:59.093Z 2012-01-05T04:33:05.707Z The "Working hours" Outlook setting should be configured correctly. CCE-12392-7 2010-10-04T15:45:59.140Z 2012-01-05T04:33:05.753Z The "Do not provide Click to Add feature in calendar" Outlook setting should be configured correctly. CCE-12342-2 2010-10-04T15:45:59.187Z 2012-01-05T04:33:05.800Z The "First day of the week" Outlook setting should be configured correctly. CCE-13966-7 2010-10-04T15:45:59.217Z 2012-01-05T04:33:05.830Z The "Include appointments only within working hours" Outlook setting should be configured correctly. CCE-12319-0 2010-10-04T15:45:59.267Z 2012-01-05T04:33:05.907Z The "First week of year" Outlook setting should be configured correctly. CCE-13318-1 2010-10-04T15:45:59.297Z 2012-01-05T04:33:05.957Z The "Work week" Outlook setting should be configured correctly. CCE-12496-6 2010-10-04T15:45:59.343Z 2012-01-05T04:33:06.003Z The "Control Calendar Sharing" Outlook setting should be configured correctly. CCE-12595-5 2010-10-04T15:45:59.390Z 2012-01-05T04:33:06.050Z The "Use this response when you propose new meeting times" Outlook setting should be configured correctly. CCE-13313-2 2010-10-04T15:45:59.437Z 2012-01-05T04:33:06.097Z The "Calendar week numbers" Outlook setting should be configured correctly. CCE-14098-8 2010-10-04T15:45:59.467Z 2012-01-05T04:33:06.143Z The "Hide Send Latest Version button" Outlook setting should be configured correctly. CCE-11613-7 2010-10-04T15:45:59.517Z 2012-01-05T04:33:06.190Z The "Open Hyperlinks to documents in Windows Internet Explorer" machine PowerPoint setting should be configured correctly. CCE-13540-0 2010-10-04T15:45:59.563Z 2012-01-05T04:33:06.220Z The "Frequency for polling the server to download published links" common setting should be configured correctly. CCE-13783-6 2010-10-04T15:45:59.593Z 2012-01-05T04:33:06.267Z The "Disable the user from setting the Personal Site URL" common setting should be configured correctly. CCE-12685-4 2010-10-04T15:45:59.640Z 2012-01-05T04:33:06.317Z The "Folder name for Published Links" common setting should be configured correctly. CCE-14167-1 2010-10-04T15:45:59.687Z 2012-01-05T04:33:06.393Z The "Length AD Attribute containing Personal Site URL" common setting should be configured correctly. CCE-13640-8 2010-10-04T15:45:59.717Z 2012-01-05T04:33:06.457Z The "Allow file synchronization via SOAP over HTTP only on domain networks" common setting should be configured correctly. CCE-12860-3 2010-10-04T15:45:59.767Z 2012-01-05T04:33:06.503Z The "Disable the Office client from polling the SharePoint Server for published links" common setting should be configured correctly. CCE-14606-8 2010-10-04T15:45:59.813Z 2012-01-05T04:33:06.550Z The "AD attribute containing Personal Site URL" common setting should be configured correctly. CCE-13381-9 2010-10-04T15:45:59.843Z 2012-01-05T04:33:06.597Z The "Suppress file format compatibility dialog box for OpenDocument Spreadsheet format" Excel setting should be configured correctly. CCE-13989-9 2010-10-04T15:45:59.890Z 2012-01-05T04:33:06.627Z The "AutoRecover delay" Excel setting should be configured correctly. CCE-13420-5 2010-10-04T15:45:59.937Z 2012-01-05T04:33:06.673Z The "Default file location" Excel setting should be configured correctly. CCE-14256-2 2010-10-04T15:45:59.967Z 2012-01-05T04:33:06.720Z The "Do not show AutoRepublish warning alert" Excel setting should be configured correctly. CCE-11502-2 2010-10-04T15:46:00.017Z 2012-01-05T04:33:06.767Z The "AutoRecover save location" Excel setting should be configured correctly. CCE-12441-2 2010-10-04T15:46:00.047Z 2012-01-05T04:33:06.817Z The "Save date and time values using ISO 8601 date format" Excel setting should be configured correctly. CCE-14355-2 2010-10-04T15:46:00.093Z 2012-01-05T04:33:06.863Z The "AutoRecover time" Excel setting should be configured correctly. CCE-14663-9 2010-10-04T15:46:00.140Z 2012-01-05T04:33:06.907Z The "Keep the last AutoSaved versions of files for the next session" Excel setting should be configured correctly. CCE-13822-2 2010-10-04T15:46:00.187Z 2012-01-05T04:33:06.957Z The "Save AutoRecover info" Excel setting should be configured correctly. CCE-12877-7 2010-10-04T15:46:00.233Z 2012-01-05T04:33:07.003Z The "Default file format" Excel setting should be configured correctly. CCE-13161-5 2010-10-04T15:46:00.267Z 2012-01-05T04:33:07.033Z The "Prompt for workbook properties" Excel setting should be configured correctly. CCE-12144-2 2010-10-04T15:46:00.313Z 2012-01-05T04:33:07.080Z The "Disable AutoRepublish" Excel setting should be configured correctly. CCE-14724-9 2010-10-04T15:46:00.343Z 2012-01-05T04:33:07.127Z The "Correct accidental usage of cAPS LOCK key" Word setting should be configured correctly. CCE-14497-2 2010-10-04T15:46:00.390Z 2012-01-05T04:33:07.173Z The "Correct TWo INitial CApitals" Word setting should be configured correctly. CCE-13842-0 2010-10-04T15:46:00.437Z 2012-01-05T04:33:07.220Z The "Capitalize names of days" Word setting should be configured correctly. CCE-12898-3 2010-10-04T15:46:00.483Z 2012-01-05T04:33:07.267Z The "Replace text as you type" Word setting should be configured correctly. CCE-14897-3 2010-10-04T15:46:00.530Z 2012-01-05T04:33:07.300Z The "Capitalize first letter of sentence" Word setting should be configured correctly. CCE-12101-2 2010-10-04T15:46:00.563Z 2012-01-05T04:33:07.347Z The "Correct keyboard setting" Word setting should be configured correctly. CCE-13324-9 2010-10-04T15:46:00.610Z 2012-01-05T04:33:07.393Z The "Outlook Security Mode" Outlook setting should be configured correctly. CCE-14248-9 2010-10-04T15:46:00.657Z 2012-01-05T04:33:07.440Z The "Stop checking to ensure hyperlink text is meaningful" Excel setting should be configured correctly. CCE-12412-3 2010-10-04T15:46:00.703Z 2012-01-05T04:33:07.487Z The "Stop checking for blank table rows used as formatting" Excel setting should be configured correctly. CCE-12429-7 2010-10-04T15:46:00.733Z 2012-01-05T04:33:07.517Z The "Stop checking for table header accessibility information" Excel setting should be configured correctly. CCE-13444-5 2010-10-04T15:46:00.780Z 2012-01-05T04:33:07.567Z The "Stop checking to ensure non-default sheet names" Excel setting should be configured correctly. CCE-13509-5 2010-10-04T15:46:00.827Z 2012-01-05T04:33:07.627Z The "Stop checking for alt text accessibility information" Excel setting should be configured correctly. CCE-13385-0 2010-10-04T15:46:00.877Z 2012-01-05T04:33:07.673Z The "Stop checking for merged cells" Excel setting should be configured correctly. CCE-12554-2 2010-10-04T15:46:00.907Z 2012-01-05T04:33:07.720Z The "Stop checking to ensure workbooks allow programmatic access" Excel setting should be configured correctly. CCE-12944-5 2010-10-04T15:46:00.953Z 2012-01-05T04:33:07.767Z The "Select the default setting for how to file new contacts" Outlook setting should be configured correctly. CCE-13528-5 2010-10-04T15:46:01.000Z 2012-01-05T04:33:07.817Z The "Show Contacts linking controls on all Forms" Outlook setting should be configured correctly. CCE-13767-9 2010-10-04T15:46:01.047Z 2012-01-05T04:33:07.877Z The "Turn off contact export" Outlook setting should be configured correctly. CCE-12201-0 2010-10-04T15:46:01.077Z 2012-01-05T04:33:07.923Z The "Determine order of sources for photos" Outlook setting should be configured correctly. CCE-12520-3 2010-10-04T15:46:01.127Z 2012-01-05T04:33:07.970Z The "Information Bar" machine setting should be configured correctly. CCE-13982-4 2010-10-04T15:46:01.173Z 2012-01-05T04:33:08.017Z The "Add-on Management" machine setting should be configured correctly. CCE-12359-6 2010-10-04T15:46:01.203Z 2012-01-05T04:33:08.067Z The "Restrict ActiveX Install" machine setting should be configured correctly. CCE-14125-9 2010-10-04T15:46:01.250Z 2012-01-05T04:33:08.113Z The "Saved from URL" machine setting should be configured correctly. CCE-14540-9 2010-10-04T15:46:01.297Z 2012-01-05T04:33:08.157Z The "Disable user name and password" machine setting should be configured correctly. CCE-14328-9 2010-10-04T15:46:01.327Z 2012-01-05T04:33:08.207Z The "Block popups" machine setting should be configured correctly. CCE-14172-1 2010-10-04T15:46:01.377Z 2012-01-05T04:33:08.253Z The "Consistent Mime Handling" machine setting should be configured correctly. CCE-14050-9 2010-10-04T15:46:01.423Z 2012-01-05T04:33:08.300Z The "Bind to object" machine setting should be configured correctly. CCE-13666-3 2010-10-04T15:46:01.453Z 2012-01-05T04:33:08.347Z The "Navigate URL" machine setting should be configured correctly. CCE-14358-6 2010-10-04T15:46:01.500Z 2012-01-05T04:33:08.393Z The "Object Caching Protection" machine setting should be configured correctly. CCE-12435-4 2010-10-04T15:46:01.547Z 2012-01-05T04:33:08.440Z The "Protection From Zone Elevation" machine setting should be configured correctly. CCE-13463-5 2010-10-04T15:46:01.593Z 2012-01-05T04:33:08.487Z The "Mime Sniffing Safety Feature" machine setting should be configured correctly. CCE-13709-1 2010-10-04T15:46:01.640Z 2012-01-05T04:33:08.517Z The "Restrict File Download" machine setting should be configured correctly. CCE-14574-8 2010-10-04T15:46:01.673Z 2012-01-05T04:33:08.567Z The "Scripted Window Security Restrictions" machine setting should be configured correctly. CCE-13193-8 2010-10-04T15:46:01.717Z 2012-01-05T04:33:08.613Z The "Local Machine Zone Lockdown Security" machine setting should be configured correctly. CCE-12710-0 2010-10-04T15:46:01.767Z 2012-01-05T04:33:08.657Z The "Replace AD attribute - "home phone"" common setting should be configured correctly. CCE-13332-2 2010-10-04T15:46:01.797Z 2012-01-05T04:33:08.707Z The "Replace Label - Location" common setting should be configured correctly. CCE-13957-6 2010-10-04T15:46:01.843Z 2012-01-05T04:33:08.753Z The "Replace MAPI property - "office location"" common setting should be configured correctly. CCE-13720-8 2010-10-04T15:46:01.890Z 2012-01-05T04:33:08.830Z The "Replace MAPI property - "work phone"" common setting should be configured correctly. CCE-13234-0 2010-10-04T15:46:01.923Z 2012-01-05T04:33:08.877Z The "Replace AD attribute - "location information"" common setting should be configured correctly. CCE-12351-3 2010-10-04T15:46:01.967Z 2012-01-05T04:33:08.907Z The "Replace AD attribute - "work phone"" common setting should be configured correctly. CCE-13316-5 2010-10-04T15:46:02.017Z 2012-01-05T04:33:08.957Z The "Replace Label - Work" common setting should be configured correctly. CCE-13301-7 2010-10-04T15:46:02.047Z 2012-01-05T04:33:09.003Z The "Move Calendar Line" common setting should be configured correctly. CCE-14015-2 2010-10-04T15:46:02.093Z 2012-01-05T04:33:09.050Z The "Replace AD attribute - "mobile phone"" common setting should be configured correctly. CCE-14013-7 2010-10-04T15:46:02.140Z 2012-01-05T04:33:09.097Z The "Replace AD attribute - "calendar free/busy information"" common setting should be configured correctly. CCE-11918-0 2010-10-04T15:46:02.173Z 2012-01-05T04:33:09.157Z The "Replace AD attribute - "title, department"" common setting should be configured correctly. CCE-11462-9 2010-10-04T15:46:02.217Z 2012-01-05T04:33:09.207Z The "Replace Label - E-mail" common setting should be configured correctly. CCE-14522-7 2010-10-04T15:46:02.267Z 2012-01-05T04:33:09.253Z The "Replace AD attribute - "office location"" common setting should be configured correctly. CCE-13243-1 2010-10-04T15:46:02.313Z 2012-01-05T04:33:09.300Z The "Replace MAPI property - "mobile phone"" common setting should be configured correctly. CCE-14049-1 2010-10-04T15:46:02.360Z 2012-01-05T04:33:09.363Z The "Replace MAPI property - "home phone"" common setting should be configured correctly. CCE-14628-2 2010-10-04T15:46:02.390Z 2012-01-05T04:33:09.407Z The "Replace Label - Mobile" common setting should be configured correctly. CCE-11894-3 2010-10-04T15:46:02.437Z 2012-01-05T04:33:09.487Z The "Replace MAPI property - "location information"" common setting should be configured correctly. CCE-13086-4 2010-10-04T15:46:02.483Z 2012-01-05T04:33:09.550Z The "Replace MAPI property - "calendar free/busy information"" common setting should be configured correctly. CCE-12469-3 2010-10-04T15:46:02.530Z 2012-01-05T04:33:09.597Z The "Replace MAPI property - "e-mail address"" common setting should be configured correctly. CCE-13740-6 2010-10-04T15:46:02.563Z 2012-01-05T04:33:09.643Z The "Replace Label - Office" common setting should be configured correctly. CCE-14492-3 2010-10-04T15:46:02.610Z 2012-01-05T04:33:09.690Z The "Replace Label - Title" common setting should be configured correctly. CCE-13069-0 2010-10-04T15:46:02.657Z 2012-01-05T04:33:09.737Z The "Replace AD attribute - "e-mail address"" common setting should be configured correctly. CCE-11979-2 2010-10-04T15:46:02.687Z 2012-01-05T04:33:09.800Z The "Replace MAPI property - "title,department"" common setting should be configured correctly. CCE-13900-6 2010-10-04T15:46:02.733Z 2012-01-05T04:33:09.847Z The "Move Location Line" common setting should be configured correctly. CCE-14148-1 2010-10-04T15:46:02.780Z 2012-01-05T04:33:09.893Z The "Replace Label - Home" common setting should be configured correctly. CCE-12331-5 2010-10-04T15:46:02.813Z 2012-01-05T04:33:09.957Z The "Replace Label - Calendar" common setting should be configured correctly. CCE-12188-9 2010-10-04T15:46:02.860Z 2012-01-05T04:33:10.003Z The "Disable commands" PowerPoint setting should be configured correctly. CCE-14687-8 2010-10-04T15:46:02.907Z 2012-01-05T04:33:10.080Z The "Disable shortcut keys" PowerPoint setting should be configured correctly. CCE-13503-8 2010-10-04T15:46:02.953Z 2012-01-05T04:33:10.127Z The "Hide built in table styles" PowerPoint setting should be configured correctly. CCE-12183-0 2010-10-04T15:46:02.983Z 2012-01-05T04:33:10.173Z The "Do not open files in unsafe locations in Protected View" Excel setting should be configured correctly. CCE-14828-8 2010-10-04T15:46:03.030Z 2012-01-05T04:33:10.237Z The "Set document behavior if file validation fails" Excel setting should be configured correctly. CCE-13024-5 2010-10-04T15:46:03.077Z 2012-01-05T04:33:10.283Z The "Do not open files from the Internet zone in Protected View" Excel setting should be configured correctly. CCE-11753-1 2010-10-04T15:46:03.127Z 2012-01-05T04:33:10.330Z The "Turn off Protected View for attachments opened from Outlook" Excel setting should be configured correctly. CCE-14204-2 2010-10-04T15:46:03.157Z 2012-01-05T04:33:10.393Z The "Open files on local Intranet UNC in Protected View" Excel setting should be configured correctly. CCE-12458-6 2010-10-04T15:46:03.203Z 2012-01-05T04:33:10.440Z The "Show Mini Toolbar on selection" common setting should be configured correctly. CCE-14754-6 2010-10-04T15:46:03.250Z 2012-01-05T04:33:10.487Z The "Enable Live Preview" PowerPoint setting should be configured correctly. CCE-13134-2 2010-10-04T15:46:03.280Z 2012-01-05T04:33:10.533Z The "Disable shortcut keys" Visio setting should be configured correctly. CCE-14131-7 2010-10-04T15:46:03.327Z 2012-01-05T04:33:10.580Z The "Disable commands" Visio setting should be configured correctly. CCE-13880-0 2010-10-04T15:46:03.377Z 2012-01-05T04:33:10.643Z The "Only containing an attachment" common setting should be configured correctly. CCE-13000-5 2010-10-04T15:46:03.423Z 2012-01-05T04:33:10.690Z The "Only containing a link" common setting should be configured correctly. CCE-11811-7 2010-10-04T15:46:03.453Z 2012-01-05T04:33:10.737Z The "Disable File Types association dialog box on first launch" setting should be configured correctly. CCE-12927-0 2010-10-04T15:46:03.500Z 2012-01-05T04:33:10.783Z The "Allow Trusted Locations on the network" Word setting should be configured correctly. CCE-12481-8 2010-10-04T15:46:03.547Z 2012-01-05T04:33:10.830Z The "Trust Center: Trusted Location #7" Word setting should be configured correctly. CCE-12972-6 2010-10-04T15:46:03.593Z 2012-01-05T04:33:10.877Z The "Trust Center: Trusted Location #10" Word setting should be configured correctly. CCE-13994-9 2010-10-04T15:46:03.640Z 2012-01-05T04:33:10.923Z The "Trust Center: Trusted Location #2" Word setting should be configured correctly. CCE-14297-6 2010-10-04T15:46:03.673Z 2012-01-05T04:33:10.970Z The "Trust Center: Trusted Location #17" Word setting should be configured correctly. CCE-12059-2 2010-10-04T15:46:03.717Z 2012-01-05T04:33:11.017Z The "Trust Center: Trusted Location #16" Word setting should be configured correctly. CCE-12704-3 2010-10-04T15:46:03.767Z 2012-01-05T04:33:11.067Z The "Trust Center: Trusted Location #9" Word setting should be configured correctly. CCE-13959-2 2010-10-04T15:46:03.813Z 2012-01-05T04:33:11.157Z The "Trust Center: Trusted Location #6" Word setting should be configured correctly. CCE-12767-0 2010-10-04T15:46:03.843Z 2012-01-05T04:33:11.220Z The "Trust Center: Trusted Location #15" Word setting should be configured correctly. CCE-13741-4 2010-10-04T15:46:03.890Z 2012-01-05T04:33:11.267Z The "Trust Center: Trusted Location #20" Word setting should be configured correctly. CCE-12438-8 2010-10-04T15:46:03.937Z 2012-01-05T04:33:11.317Z The "Trust Center: Trusted Location #13" Word setting should be configured correctly. CCE-13816-4 2010-10-04T15:46:03.983Z 2012-01-05T04:33:11.363Z The "Trust Center: Trusted Location #11" Word setting should be configured correctly. CCE-13300-9 2010-10-04T15:46:04.017Z 2012-01-05T04:33:11.407Z The "Trust Center: Trusted Location #14" Word setting should be configured correctly. CCE-13566-5 2010-10-04T15:46:04.063Z 2012-01-05T04:33:11.457Z The "Trust Center: Trusted Location #1" Word setting should be configured correctly. CCE-12970-0 2010-10-04T15:46:04.110Z 2012-01-05T04:33:11.503Z The "Trust Center: Trusted Location #4" Word setting should be configured correctly. CCE-11963-6 2010-10-04T15:46:04.140Z 2012-01-05T04:33:11.550Z The "Trust Center: Trusted Location #3" Word setting should be configured correctly. CCE-13903-0 2010-10-04T15:46:04.187Z 2012-01-05T04:33:11.597Z The "Trust Center: Trusted Location #19" Word setting should be configured correctly. CCE-14055-8 2010-10-04T15:46:04.233Z 2012-01-05T04:33:11.657Z The "Trust Center: Trusted Location #12" Word setting should be configured correctly. CCE-12177-2 2010-10-04T15:46:04.280Z 2012-01-05T04:33:11.707Z The "Trust Center: Trusted Location #5" Word setting should be configured correctly. CCE-13653-1 2010-10-04T15:46:04.327Z 2012-01-05T04:33:11.767Z The "Trust Center: Trusted Location #18" Word setting should be configured correctly. CCE-13367-8 2010-10-04T15:46:04.377Z 2012-01-05T04:33:11.817Z The "Trust Center: Trusted Location #8" Word setting should be configured correctly. CCE-13911-3 2010-10-04T15:46:04.407Z 2012-01-05T04:33:11.877Z The "Disable all trusted locations" Word setting should be configured correctly. CCE-13511-1 2010-10-04T15:46:04.453Z 2012-01-05T04:33:11.923Z The "Turn on an external converter as the default for a file extension" machine PowerPoint setting should be configured correctly. CCE-11459-5 2010-10-04T15:46:04.500Z 2012-01-05T04:33:11.970Z The "Disable InfoPath e-mail forms in Outlook" Outlook setting should be configured correctly. CCE-14879-1 2010-10-04T15:46:04.547Z 2012-01-05T04:33:12.017Z The "Disable merging InfoPath e-mail forms" InfoPath setting should be configured correctly. CCE-13695-2 2010-10-04T15:46:04.577Z 2012-01-05T04:33:12.067Z The "Disable e-mail forms from the Full Trust security zone" InfoPath setting should be configured correctly. CCE-13309-0 2010-10-04T15:46:04.627Z 2012-01-05T04:33:12.113Z The "Disable e-mail forms from the Intranet security zone" InfoPath setting should be configured correctly. CCE-12507-0 2010-10-04T15:46:04.673Z 2012-01-05T04:33:12.157Z The "Disable e-mail forms from the Internet security zone" InfoPath setting should be configured correctly. CCE-13356-1 2010-10-04T15:46:04.703Z 2012-01-05T04:33:12.220Z The "Disable sending InfoPath 2003 Forms as e-mail forms" InfoPath setting should be configured correctly. CCE-14069-9 2010-10-04T15:46:04.750Z 2012-01-05T04:33:12.300Z The "Disable sending form template with e-mail forms" InfoPath setting should be configured correctly. CCE-14549-0 2010-10-04T15:46:04.797Z 2012-01-05T04:33:12.363Z The "Disable e-mail forms running in restricted security level" InfoPath setting should be configured correctly. CCE-14200-0 2010-10-04T15:46:04.827Z 2012-01-05T04:33:12.407Z The "Disable exporting InfoPath e-mail forms to Excel" InfoPath setting should be configured correctly. CCE-14515-1 2010-10-04T15:46:04.877Z 2012-01-05T04:33:12.457Z The "Disable dynamic caching of the form template in InfoPath e-mail forms" InfoPath setting should be configured correctly. CCE-11457-9 2010-10-04T15:46:04.923Z 2012-01-05T04:33:12.503Z The "Disable export InfoPath e-mail forms" InfoPath setting should be configured correctly. CCE-12388-5 2010-10-04T15:46:04.967Z 2012-01-05T04:33:12.550Z The "Control behavior when opening InfoPath e-mail forms containing code or script" InfoPath setting should be configured correctly. CCE-12960-1 2010-10-04T15:46:05.017Z 2012-01-05T04:33:12.597Z The "Disable VBA for Office applications" machine common setting should be configured correctly. CCE-13260-5 2010-10-04T15:46:05.063Z 2012-01-05T04:33:12.643Z The "Graphics filter import" machine common setting should be configured correctly. CCE-12559-1 2010-10-04T15:46:05.093Z 2012-01-05T04:33:12.690Z The "Disable Password Caching" machine common setting should be configured correctly. CCE-12636-7 2010-10-04T15:46:05.140Z 2012-01-05T04:33:12.737Z The "Disable Package Repair" machine common setting should be configured correctly. CCE-13752-1 2010-10-04T15:46:05.187Z 2012-01-05T04:33:12.783Z The "Approve Locations" common setting should be configured correctly. CCE-13686-1 2010-10-04T15:46:05.217Z 2012-01-05T04:33:12.830Z The "Activate Restricted Browsing" common setting should be configured correctly. CCE-13546-7 2010-10-04T15:46:05.267Z 2012-01-05T04:33:12.877Z The "Turn off Send and Track feature" Outlook setting should be configured correctly. CCE-12365-3 2010-10-04T15:46:05.313Z 2012-01-05T04:33:12.940Z The "Options" Outlook setting should be configured correctly. CCE-13078-1 2010-10-04T15:46:05.360Z 2012-01-05T04:33:12.987Z The "Set User path for the label page size update files" common setting should be configured correctly. CCE-12194-7 2010-10-04T15:46:05.390Z 2012-01-05T04:33:13.033Z The "Shared themes path" common setting should be configured correctly. CCE-11975-0 2010-10-04T15:46:05.437Z 2012-01-05T04:33:13.097Z The "Set Workgroup path for label page size update files" common setting should be configured correctly. CCE-13436-1 2010-10-04T15:46:05.483Z 2012-01-05T04:33:13.157Z The "Site 1:" setting should be configured correctly. CCE-13184-7 2010-10-04T15:46:05.530Z 2012-01-05T04:33:13.207Z The "Search for:" Visio setting should be configured correctly. CCE-13706-7 2010-10-04T15:46:05.563Z 2012-01-05T04:33:13.267Z The "Show Shape Search pane" Visio setting should be configured correctly. CCE-13907-1 2010-10-04T15:46:05.610Z 2012-01-05T04:33:13.317Z The "Open results new window" Visio setting should be configured correctly. CCE-14404-8 2010-10-04T15:46:05.657Z 2012-01-05T04:33:13.363Z The "Search results" Visio setting should be configured correctly. CCE-14676-1 2010-10-04T15:46:05.703Z 2012-01-05T04:33:13.407Z The "Disable shortcut keys" Word setting should be configured correctly. CCE-13953-5 2010-10-04T15:46:05.750Z 2012-01-05T04:33:13.457Z The "Disable commands" Word setting should be configured correctly. CCE-13072-4 2010-10-04T15:46:05.780Z 2012-01-05T04:33:13.517Z The "Delete files from Office Document Cache" common setting should be configured correctly. CCE-12111-1 2010-10-04T15:46:05.827Z 2012-01-05T04:33:13.567Z The "Check-out to local disk" common setting should be configured correctly. CCE-14636-5 2010-10-04T15:46:05.877Z 2012-01-05T04:33:13.613Z The "Office document cache location" common setting should be configured correctly. CCE-12422-2 2010-10-04T15:46:05.907Z 2012-01-05T04:33:13.657Z The "Open documents from Office Document Cache first" common setting should be configured correctly. CCE-14743-9 2010-10-04T15:46:05.953Z 2012-01-05T04:33:13.707Z The "SharePoint Workspace Account Configuration Code Required" SharePoint Workspace setting should be configured correctly. CCE-14728-0 2010-10-04T15:46:06.000Z 2012-01-05T04:33:13.783Z The "List of blocked Groove relay servers" SharePoint Workspace setting should be configured correctly. CCE-13700-0 2010-10-04T15:46:06.047Z 2012-01-05T04:33:13.830Z The "Prohibit Groove workspaces and Shared Folders" SharePoint Workspace setting should be configured correctly. CCE-13276-1 2010-10-04T15:46:06.077Z 2012-01-05T04:33:13.893Z The "Enable IPv6" SharePoint Workspace setting should be configured correctly. CCE-14099-6 2010-10-04T15:46:06.127Z 2012-01-05T04:33:13.923Z The "Set maximum number of proxy connection failures" SharePoint Workspace setting should be configured correctly. CCE-12597-1 2010-10-04T15:46:06.173Z 2012-01-05T04:33:13.970Z The "Prefer IPv4" SharePoint Workspace setting should be configured correctly. CCE-13225-8 2010-10-04T15:46:06.217Z 2012-01-05T04:33:14.033Z The "Groove Server Manager Valid Link Security" SharePoint Workspace setting should be configured correctly. CCE-14895-7 2010-10-04T15:46:06.250Z 2012-01-05T04:33:14.080Z The "VBA Macro Notification Settings" Access setting should be configured correctly. CCE-13027-8 2010-10-04T15:46:06.297Z 2012-01-05T04:33:14.127Z The "Turn off trusted documents" Access setting should be configured correctly. CCE-13222-5 2010-10-04T15:46:06.343Z 2012-01-05T04:33:14.173Z The "Turn off Data Execution Prevention" Access setting should be configured correctly. CCE-13459-3 2010-10-04T15:46:06.390Z 2012-01-05T04:33:14.220Z The "Set maximum number of trusted documents" Access setting should be configured correctly. CCE-13471-8 2010-10-04T15:46:06.437Z 2012-01-05T04:33:14.267Z The "Turn off Trusted Documents on the network" Access setting should be configured correctly. CCE-13014-6 2010-10-04T15:46:06.467Z 2012-01-05T04:33:14.330Z The "Set maximum number of trust records to preserve" Access setting should be configured correctly. CCE-13868-5 2010-10-04T15:46:06.517Z 2012-01-05T04:33:14.377Z The "Disable Trust Bar Notification for unsigned application add-ins and block them" Access setting should be configured correctly. CCE-14916-1 2010-10-04T15:46:06.563Z 2012-01-05T04:33:14.423Z The "Disable all application add-ins" Access setting should be configured correctly. CCE-13220-9 2010-10-04T15:46:06.610Z 2012-01-05T04:33:14.470Z The "Require that application add-ins are signed by Trusted Publisher" Access setting should be configured correctly. CCE-14180-4 2010-10-04T15:46:06.640Z 2012-01-05T04:33:14.517Z The "Reminders" Outlook setting should be configured correctly. CCE-12861-1 2010-10-04T15:46:06.687Z 2012-01-05T04:33:14.597Z The "Save checked-out files to" Visio setting should be configured correctly. CCE-12619-3 2010-10-04T15:46:06.733Z 2012-01-05T04:33:14.643Z The "Disable Quick Steps Gallery" Outlook setting should be configured correctly. CCE-13460-1 2010-10-04T15:46:06.767Z 2012-01-05T04:33:14.690Z The "Hide 'Shared Collections'" setting should be configured correctly. CCE-13480-9 2010-10-04T15:46:06.813Z 2012-01-05T04:33:14.737Z The "Hide 'Office Collections'" setting should be configured correctly. CCE-13840-4 2010-10-04T15:46:06.860Z 2012-01-05T04:33:14.783Z The "Disable menu item: File | Add Clips To Organizer | From Scanner or Camera" setting should be configured correctly. CCE-13587-1 2010-10-04T15:46:06.907Z 2012-01-05T04:33:14.830Z The "Prevent changes to primary collection" setting should be configured correctly. CCE-13581-4 2010-10-04T15:46:06.953Z 2012-01-05T04:33:14.877Z The "Clip Organizer Online URL" setting should be configured correctly. CCE-12849-6 2010-10-04T15:46:07.000Z 2012-01-05T04:33:14.923Z The "Enable preview of sound and motion on Terminal Server" setting should be configured correctly. CCE-12335-6 2010-10-04T15:46:07.030Z 2012-01-05T04:33:14.970Z The "Search for clip art based on this language" setting should be configured correctly. CCE-13551-7 2010-10-04T15:46:07.093Z 2012-01-05T04:33:15.017Z The "Prevent access to online clip art" setting should be configured correctly. CCE-12468-5 2010-10-04T15:46:07.140Z 2012-01-05T04:33:15.067Z The "Hide 'My Collections'" setting should be configured correctly. CCE-13481-7 2010-10-04T15:46:07.173Z 2012-01-05T04:33:15.113Z The "Prevent users from importing new clips" setting should be configured correctly. CCE-12957-7 2010-10-04T15:46:07.217Z 2012-01-05T04:33:15.157Z The "EKU filtering" common setting should be configured correctly. CCE-14208-3 2010-10-04T15:46:07.267Z 2012-01-05T04:33:15.220Z The "Set default image directory" common setting should be configured correctly. CCE-14301-6 2010-10-04T15:46:07.297Z 2012-01-05T04:33:15.267Z The "Legacy format signatures" common setting should be configured correctly. CCE-13019-5 2010-10-04T15:46:07.343Z 2012-01-05T04:33:15.317Z The "Key Usage Filtering" common setting should be configured correctly. CCE-14906-2 2010-10-04T15:46:07.390Z 2012-01-05T04:33:15.363Z The "Set download location for Microsoft .NET Framework 2.0 Language Pack" common setting should be configured correctly. CCE-14516-9 2010-10-04T15:46:07.437Z 2012-01-05T04:33:15.407Z The "Set download location for Microsoft .NET Framework 2.0" common setting should be configured correctly. CCE-13424-7 2010-10-04T15:46:07.483Z 2012-01-05T04:33:15.457Z The "Set download location for Workflow component" common setting should be configured correctly. CCE-12928-8 2010-10-04T15:46:07.530Z 2012-01-05T04:33:15.517Z The "Hide missing component download hyperlinks" common setting should be configured correctly. CCE-12471-9 2010-10-04T15:46:07.577Z 2012-01-05T04:33:15.567Z The "Customize Active Directory search field for home phone lookup" common setting should be configured correctly. CCE-14008-7 2010-10-04T15:46:07.610Z 2012-01-05T04:33:15.627Z The "Customize Active Directory search field for primary telephone lookup" common setting should be configured correctly. CCE-14005-3 2010-10-04T15:46:07.657Z 2012-01-05T04:33:15.673Z The "Customize Active Directory search field for e-mail address lookup" common setting should be configured correctly. CCE-12801-7 2010-10-04T15:46:07.703Z 2012-01-05T04:33:15.737Z The "Disable Active Directory lookups for the person name action" common setting should be configured correctly. CCE-12302-6 2010-10-04T15:46:07.750Z 2012-01-05T04:33:15.783Z The "Customize Active Directory search field for office location lookup" common setting should be configured correctly. CCE-12290-3 2010-10-04T15:46:07.797Z 2012-01-05T04:33:15.830Z The "Customize Active Directory search field for mobile phone lookup" common setting should be configured correctly. CCE-12521-1 2010-10-04T15:46:07.843Z 2012-01-05T04:33:15.877Z The "Customize Active Directory search field for manager lookup" common setting should be configured correctly. CCE-12940-3 2010-10-04T15:46:07.877Z 2012-01-05T04:33:15.923Z The "Run rules on RSS items" Outlook setting should be configured correctly. CCE-13174-8 2010-10-04T15:46:07.923Z 2012-01-05T04:33:15.970Z The "Synchronize Outlook RSS Feeds with Common Feed List" Outlook setting should be configured correctly. CCE-13111-0 2010-10-04T15:46:07.967Z 2012-01-05T04:33:16.017Z The "Automatically download enclosures" Outlook setting should be configured correctly. CCE-13446-0 2010-10-04T15:46:08.017Z 2012-01-05T04:33:16.067Z The "Turn off RSS feature" Outlook setting should be configured correctly. CCE-13703-4 2010-10-04T15:46:08.063Z 2012-01-05T04:33:16.113Z The "Override published sync interval" Outlook setting should be configured correctly. CCE-13382-7 2010-10-04T15:46:08.093Z 2012-01-05T04:33:16.157Z The "Do not roam users' RSS Feeds" Outlook setting should be configured correctly. CCE-12748-0 2010-10-04T15:46:08.140Z 2012-01-05T04:33:16.207Z The "Default RSS Feeds" Outlook setting should be configured correctly. CCE-14770-2 2010-10-04T15:46:08.187Z 2012-01-05T04:33:16.253Z The "Download full text of articles as HTML attachments" Outlook setting should be configured correctly. CCE-12091-5 2010-10-04T15:46:08.233Z 2012-01-05T04:33:16.317Z The "Word 2007 and later documents and templates" Word setting should be configured correctly. CCE-14247-1 2010-10-04T15:46:08.280Z 2012-01-05T04:33:16.363Z The "Legacy converters for Word" Word setting should be configured correctly. CCE-12278-8 2010-10-04T15:46:08.313Z 2012-01-05T04:33:16.407Z The "RTF files" Word setting should be configured correctly. CCE-13680-4 2010-10-04T15:46:08.360Z 2012-01-05T04:33:16.457Z The "Word 2007 and later binary documents and templates" Word setting should be configured correctly. CCE-13311-6 2010-10-04T15:46:08.407Z 2012-01-05T04:33:16.503Z The "Word 2003 and plain XML documents" Word setting should be configured correctly. CCE-12995-7 2010-10-04T15:46:08.453Z 2012-01-05T04:33:16.550Z The "Word 2000 binary documents and templates" Word setting should be configured correctly. CCE-12769-6 2010-10-04T15:46:08.500Z 2012-01-05T04:33:16.597Z The "Office Open XML converters for Word" Word setting should be configured correctly. CCE-13774-5 2010-10-04T15:46:08.547Z 2012-01-05T04:33:16.643Z The "Set default file block behavior" Word setting should be configured correctly. CCE-11535-2 2010-10-04T15:46:08.593Z 2012-01-05T04:33:16.707Z The "Word 95 binary documents and templates" Word setting should be configured correctly. CCE-14333-9 2010-10-04T15:46:08.640Z 2012-01-05T04:33:16.753Z The "Word 2 and earlier binary documents and templates" Word setting should be configured correctly. CCE-12612-8 2010-10-04T15:46:08.673Z 2012-01-05T04:33:16.817Z The "Word 2003 binary documents and templates" Word setting should be configured correctly. CCE-13057-5 2010-10-04T15:46:08.717Z 2012-01-05T04:33:16.877Z The "OpenDocument Text files" Word setting should be configured correctly. CCE-12153-3 2010-10-04T15:46:08.767Z 2012-01-05T04:33:16.923Z The "Web pages" Word setting should be configured correctly. CCE-13323-1 2010-10-04T15:46:08.813Z 2012-01-05T04:33:16.987Z The "Word beta converters" Word setting should be configured correctly. CCE-13565-7 2010-10-04T15:46:08.860Z 2012-01-05T04:33:17.033Z The "Word XP binary documents and templates" Word setting should be configured correctly. CCE-12715-9 2010-10-04T15:46:08.907Z 2012-01-05T04:33:17.080Z The "Word 6.0 binary documents and templates" Word setting should be configured correctly. CCE-13548-3 2010-10-04T15:46:08.967Z 2012-01-05T04:33:17.127Z The "Word beta files" Word setting should be configured correctly. CCE-13262-1 2010-10-04T15:46:09.000Z 2012-01-05T04:33:17.173Z The "Word 97 binary documents and templates" Word setting should be configured correctly. CCE-12239-0 2010-10-04T15:46:09.047Z 2012-01-05T04:33:17.220Z The "Plain text files" Word setting should be configured correctly. CCE-12766-2 2010-10-04T15:46:09.093Z 2012-01-05T04:33:17.267Z The "Print TrueType fonts as graphics" PowerPoint setting should be configured correctly. CCE-12929-6 2010-10-04T15:46:09.140Z 2012-01-05T04:33:17.317Z The "When selecting, automatically select entire word" PowerPoint setting should be configured correctly. CCE-14339-6 2010-10-04T15:46:09.187Z 2012-01-05T04:33:17.363Z The "Use smart cut and paste" PowerPoint setting should be configured correctly. CCE-12245-7 2010-10-04T15:46:09.233Z 2012-01-05T04:33:17.407Z The "End with black slide" PowerPoint setting should be configured correctly. CCE-11786-1 2010-10-04T15:46:09.267Z 2012-01-05T04:33:17.470Z The "Print in background" PowerPoint setting should be configured correctly. CCE-12267-1 2010-10-04T15:46:09.313Z 2012-01-05T04:33:17.533Z The "Show all windows in the Taskbar" PowerPoint setting should be configured correctly. CCE-13172-2 2010-10-04T15:46:09.360Z 2012-01-05T04:33:17.580Z The "Show popup toolbar" PowerPoint setting should be configured correctly. CCE-14456-8 2010-10-04T15:46:09.407Z 2012-01-05T04:33:17.627Z The "Print inserted objects at printer resolution" PowerPoint setting should be configured correctly. CCE-12707-6 2010-10-04T15:46:09.453Z 2012-01-05T04:33:17.673Z The "Set default number of documents in the Recent Documents list" PowerPoint setting should be configured correctly. CCE-12556-7 2010-10-04T15:46:09.483Z 2012-01-05T04:33:17.720Z The "Show vertical ruler" PowerPoint setting should be configured correctly. CCE-13426-2 2010-10-04T15:46:09.530Z 2012-01-05T04:33:17.767Z The "Show menu on right mouse click" PowerPoint setting should be configured correctly. CCE-12698-7 2010-10-04T15:46:09.577Z 2012-01-05T04:33:17.817Z The "Allow text to be dragged and dropped" PowerPoint setting should be configured correctly. CCE-13713-3 2010-10-04T15:46:09.627Z 2012-01-05T04:33:17.877Z The "Maximum number of undos" PowerPoint setting should be configured correctly. CCE-14128-3 2010-10-04T15:46:09.673Z 2012-01-05T04:33:17.923Z The "Set number of places in the Recent Places list" PowerPoint setting should be configured correctly. CCE-12211-9 2010-10-04T15:46:09.703Z 2012-01-05T04:33:17.987Z The "Rely on VML for displaying graphics in browsers" common setting should be configured correctly. CCE-13571-5 2010-10-04T15:46:09.750Z 2012-01-05T04:33:18.033Z The "Allow PNG as an output format" common setting should be configured correctly. CCE-13477-5 2010-10-04T15:46:09.813Z 2012-01-05T04:33:18.080Z The "Default unit of measurement used in OneNote" OneNote setting should be configured correctly. CCE-12281-2 2010-10-04T15:46:09.843Z 2012-01-05T04:33:18.127Z The "Disable embedded files" OneNote setting should be configured correctly. CCE-14222-4 2010-10-04T15:46:09.890Z 2012-01-05T04:33:18.173Z The "Add OneNote icon to notification area" OneNote setting should be configured correctly. CCE-13286-0 2010-10-04T15:46:09.937Z 2012-01-05T04:33:18.220Z The "Load a notebook on first boot" OneNote setting should be configured correctly. CCE-13433-8 2010-10-04T15:46:09.983Z 2012-01-05T04:33:18.267Z The "Disable OneNote screen clipping notifications" OneNote setting should be configured correctly. CCE-13211-8 2010-10-04T15:46:10.030Z 2012-01-05T04:33:18.317Z The "Disable OneNote Screen Clippings" OneNote setting should be configured correctly. CCE-12897-5 2010-10-04T15:46:10.077Z 2012-01-05T04:33:18.363Z The "Number of days before warning that server is inaccessible" OneNote setting should be configured correctly. CCE-13533-5 2010-10-04T15:46:10.127Z 2012-01-05T04:33:18.407Z The "Embedded Files Blocked Extensions" OneNote setting should be configured correctly. CCE-14478-2 2010-10-04T15:46:10.157Z 2012-01-05T04:33:18.457Z The "Disable OCR" OneNote setting should be configured correctly. CCE-14409-7 2010-10-04T15:46:10.203Z 2012-01-05T04:33:18.503Z The "SharePoint sync interval for notebooks stored on SharePoint" OneNote setting should be configured correctly. CCE-13070-8 2010-10-04T15:46:10.250Z 2012-01-05T04:33:18.550Z The "Turn off OneNote auto-linked note taking" OneNote setting should be configured correctly. CCE-14518-5 2010-10-04T15:46:10.297Z 2012-01-05T04:33:18.597Z The "Set UNC interval to poll for changes on file servers" OneNote setting should be configured correctly. CCE-12644-1 2010-10-04T15:46:10.343Z 2012-01-05T04:33:18.643Z The "Do not permit download of content from safe zones" Outlook setting should be configured correctly. CCE-12126-9 2010-10-04T15:46:10.390Z 2012-01-05T04:33:18.690Z The "Include Intranet in Safe Zones for Automatic Picture Download" Outlook setting should be configured correctly. CCE-13002-1 2010-10-04T15:46:10.423Z 2012-01-05T04:33:18.753Z The "Display pictures and external content in HTML e-mail" Outlook setting should be configured correctly. CCE-14157-2 2010-10-04T15:46:10.467Z 2012-01-05T04:33:18.817Z The "Include Internet in Safe Zones for Automatic Picture Download" Outlook setting should be configured correctly. CCE-14610-0 2010-10-04T15:46:10.530Z 2012-01-05T04:33:18.863Z The "Automatically download content for e-mail from people in Safe Senders and Safe Recipients Lists" Outlook setting should be configured correctly. CCE-12621-9 2010-10-04T15:46:10.577Z 2012-01-05T04:33:18.907Z The "Block Trusted Zones" Outlook setting should be configured correctly. CCE-14065-7 2010-10-04T15:46:10.610Z 2012-01-05T04:33:18.957Z The "Change the limit for the number of characters in Friendly Name" Outlook setting should be configured correctly. CCE-13951-9 2010-10-04T15:46:10.657Z 2012-01-05T04:33:19.017Z The "Change the limit for the number of recipients" Outlook setting should be configured correctly. CCE-14441-0 2010-10-04T15:46:10.703Z 2012-01-05T04:33:19.080Z The "Change the limit for the number of MIME body parts" Outlook setting should be configured correctly. CCE-13768-7 2010-10-04T15:46:10.750Z 2012-01-05T04:33:19.127Z The "Change the limit for the number of MIME headers" Outlook setting should be configured correctly. CCE-13949-3 2010-10-04T15:46:10.797Z 2012-01-05T04:33:19.190Z The "Change the limit for the number of nested embedded messages" Outlook setting should be configured correctly. CCE-12683-9 2010-10-04T15:46:10.843Z 2012-01-05T04:33:19.237Z The "Font" Excel setting should be configured correctly. CCE-14875-9 2010-10-04T15:46:10.890Z 2012-01-05T04:33:19.283Z The "Show Mini Toolbar on selection" common setting should be configured correctly. CCE-13266-2 2010-10-04T15:46:10.923Z 2012-01-05T04:33:19.347Z The "Show all windows in the Taskbar" Excel setting should be configured correctly. CCE-13406-4 2010-10-04T15:46:10.967Z 2012-01-05T04:33:19.393Z The "Default Sheets" Excel setting should be configured correctly. CCE-12949-4 2010-10-04T15:46:11.017Z 2012-01-05T04:33:19.440Z The "Enable Live Preview" Excel setting should be configured correctly. CCE-12427-1 2010-10-04T15:46:11.063Z 2012-01-05T04:33:19.487Z The "Access to published calendars" Outlook setting should be configured correctly. CCE-13449-4 2010-10-04T15:46:11.110Z 2012-01-05T04:33:19.533Z The "Prevent publishing to Office.com" Outlook setting should be configured correctly. CCE-12379-4 2010-10-04T15:46:11.140Z 2012-01-05T04:33:19.580Z The "Publish interval" Outlook setting should be configured correctly. CCE-13431-2 2010-10-04T15:46:11.187Z 2012-01-05T04:33:19.627Z The "Path to DAV server" Outlook setting should be configured correctly. CCE-13555-8 2010-10-04T15:46:11.233Z 2012-01-05T04:33:19.673Z The "Prevent publishing to a DAV server" Outlook setting should be configured correctly. CCE-14129-1 2010-10-04T15:46:11.280Z 2012-01-05T04:33:19.737Z The "Restrict upload method" Outlook setting should be configured correctly. CCE-13058-3 2010-10-04T15:46:11.327Z 2012-01-05T04:33:19.783Z The "Restrict level of calendar details users can publish" Outlook setting should be configured correctly. CCE-12324-0 2010-10-04T15:46:11.377Z 2012-01-05T04:33:19.830Z The "Turn off file validation" Excel setting should be configured correctly. CCE-12405-7 2010-10-04T15:46:11.407Z 2012-01-05T04:33:19.877Z The "Perform file validation on pivot caches" Excel setting should be configured correctly. CCE-12387-7 2010-10-04T15:46:11.453Z 2012-01-05T04:33:19.923Z The "Scan encrypted macros in Excel Open XML workbooks" Excel setting should be configured correctly. CCE-14532-6 2010-10-04T15:46:11.500Z 2012-01-05T04:33:19.970Z The "Force file extension to match file type" Excel setting should be configured correctly. CCE-12648-2 2010-10-04T15:46:11.547Z 2012-01-05T04:33:20.017Z The "Allow file types as attachments to forms" InfoPath setting should be configured correctly. CCE-12369-5 2010-10-04T15:46:11.593Z 2012-01-05T04:33:20.067Z The "Disable fully trusted solutions full access to computer" InfoPath setting should be configured correctly. CCE-12436-2 2010-10-04T15:46:11.627Z 2012-01-05T04:33:20.127Z The "Control behavior for Microsoft SharePoint Foundation gradual upgrade" InfoPath setting should be configured correctly. CCE-13438-7 2010-10-04T15:46:11.703Z 2012-01-05T04:33:20.220Z The "Block specific file types as attachments to forms" InfoPath setting should be configured correctly. CCE-12719-1 2010-10-04T15:46:11.733Z 2012-01-05T04:33:20.267Z The "Beaconing UI for forms opened in InfoPath" InfoPath setting should be configured correctly. CCE-12808-2 2010-10-04T15:46:11.780Z 2012-01-05T04:33:20.317Z The "Display a warning that a form is digitally signed" InfoPath setting should be configured correctly. CCE-12906-4 2010-10-04T15:46:11.827Z 2012-01-05T04:33:20.363Z The "Beaconing UI for forms opened in InfoPath Filler ActiveX" InfoPath setting should be configured correctly. CCE-13157-3 2010-10-04T15:46:11.877Z 2012-01-05T04:33:20.407Z The "Disable opening of solutions from the Internet security zone" InfoPath setting should be configured correctly. CCE-12285-3 2010-10-04T15:46:11.923Z 2012-01-05T04:33:20.457Z The "Disable opening forms with managed code from the Internet security zone" InfoPath setting should be configured correctly. CCE-12668-0 2010-10-04T15:46:11.967Z 2012-01-05T04:33:20.503Z The "Allow the use of ActiveX Custom Controls in InfoPath forms" InfoPath setting should be configured correctly. CCE-13473-4 2010-10-04T15:46:12.017Z 2012-01-05T04:33:20.550Z The "Prevent users from allowing unsafe file types to be attached to forms" InfoPath setting should be configured correctly. CCE-13489-0 2010-10-04T15:46:12.063Z 2012-01-05T04:33:20.597Z The "Detect language automatically" Word setting should be configured correctly. CCE-13191-2 2010-10-04T15:46:12.110Z 2012-01-05T04:33:20.643Z The "List of error messages to customize" Access setting should be configured correctly. CCE-14458-4 2010-10-04T15:46:12.157Z 2012-01-05T04:33:20.690Z The "Turn off file synchronization via SOAP over HTTP" common setting should be configured correctly. CCE-14315-6 2010-10-04T15:46:12.187Z 2012-01-05T04:33:20.737Z The "Auto Keyboard Switching" OneNote setting should be configured correctly. CCE-13179-7 2010-10-04T15:46:12.233Z 2012-01-05T04:33:20.783Z The "Auto Numbering Recognition" OneNote setting should be configured correctly. CCE-12573-2 2010-10-04T15:46:12.280Z 2012-01-05T04:33:20.830Z The "Default Font Size" OneNote setting should be configured correctly. CCE-13435-3 2010-10-04T15:46:12.327Z 2012-01-05T04:33:20.877Z The "Turn off link creation with [[ ]]" OneNote setting should be configured correctly. CCE-14078-0 2010-10-04T15:46:12.377Z 2012-01-05T04:33:20.923Z The "Show Paste Options buttons" OneNote setting should be configured correctly. CCE-13855-2 2010-10-04T15:46:12.423Z 2012-01-05T04:33:20.970Z The "Turn off auto calculator" OneNote setting should be configured correctly. CCE-13077-3 2010-10-04T15:46:12.467Z 2012-01-05T04:33:21.017Z The "Auto Bullet Recognition" OneNote setting should be configured correctly. CCE-13492-4 2010-10-04T15:46:12.517Z 2012-01-05T04:33:21.080Z The "Include link to source when pasting from the Internet" OneNote setting should be configured correctly. CCE-13253-0 2010-10-04T15:46:12.547Z 2012-01-05T04:33:21.143Z The "Default Font Name" OneNote setting should be configured correctly. CCE-13232-4 2010-10-04T15:46:12.593Z 2012-01-05T04:33:21.190Z The "Polling Out-of-office Web service" Outlook setting should be configured correctly. CCE-12476-8 2010-10-04T15:46:12.640Z 2012-01-05T04:33:21.253Z The "Do not display the reading pane" Outlook setting should be configured correctly. CCE-14198-6 2010-10-04T15:46:12.687Z 2012-01-05T04:33:21.330Z The "Make Outlook the default program for E-mail, Contacts, and Calendar" Outlook setting should be configured correctly. CCE-14353-7 2010-10-04T15:46:12.733Z 2012-01-05T04:33:21.377Z The "Do not download photos from the Active Directory" Outlook setting should be configured correctly. CCE-13164-9 2010-10-04T15:46:12.780Z 2012-01-05T04:33:21.423Z The "Print dark categories" Outlook setting should be configured correctly. CCE-13126-8 2010-10-04T15:46:12.827Z 2012-01-05T04:33:21.470Z The "Empty the Deleted Items folder when Outlook closes" Outlook setting should be configured correctly. CCE-12629-2 2010-10-04T15:46:12.877Z 2012-01-05T04:33:21.517Z The "Reading Pane" Outlook setting should be configured correctly. CCE-12919-7 2010-10-04T15:46:12.923Z 2012-01-05T04:33:21.567Z The "Hide photo link" Outlook setting should be configured correctly. CCE-13203-5 2010-10-04T15:46:12.967Z 2012-01-05T04:33:21.613Z The "Show Mini Toolbar on selection" common setting should be configured correctly. CCE-13525-1 2010-10-04T15:46:13.000Z 2012-01-05T04:33:21.673Z The "Enter seconds to wait to download changes from server" Outlook setting should be configured correctly. CCE-14659-7 2010-10-04T15:46:13.047Z 2012-01-05T04:33:21.720Z The "Enter seconds to wait to upload changes to server" Outlook setting should be configured correctly. CCE-11927-1 2010-10-04T15:46:13.093Z 2012-01-05T04:33:21.767Z The "Disallow Download Full Items" Outlook setting should be configured correctly. CCE-13517-8 2010-10-04T15:46:13.140Z 2012-01-05T04:33:21.817Z The "Download Public Folder Favorites" Outlook setting should be configured correctly. CCE-13631-7 2010-10-04T15:46:13.187Z 2012-01-05T04:33:21.877Z The "Disallow Download Headers" Outlook setting should be configured correctly. CCE-12789-4 2010-10-04T15:46:13.233Z 2012-01-05T04:33:21.923Z The "Enter maximum seconds to wait to sync changes" Outlook setting should be configured correctly. CCE-12660-7 2010-10-04T15:46:13.280Z 2012-01-05T04:33:21.970Z The "Cached Exchange Mode (File | Cached Exchange Mode)" Outlook setting should be configured correctly. CCE-14920-3 2010-10-04T15:46:13.327Z 2012-01-05T04:33:22.017Z The "Disallow Download Headers then Full Items" Outlook setting should be configured correctly. CCE-12279-6 2010-10-04T15:46:13.377Z 2012-01-05T04:33:22.067Z The "Download shared non-mail folders" Outlook setting should be configured correctly. CCE-13087-2 2010-10-04T15:46:13.423Z 2012-01-05T04:33:22.113Z The "Use Cached Exchange Mode for new and existing Outlook profiles" Outlook setting should be configured correctly. CCE-14060-8 2010-10-04T15:46:13.467Z 2012-01-05T04:33:22.157Z The "Do not sync in Cached Exchange mode when users click Send/Receive or F9" Outlook setting should be configured correctly. CCE-14702-5 2010-10-04T15:46:13.500Z 2012-01-05T04:33:22.207Z The "Disallow On Slow Connections Only Download Headers" Outlook setting should be configured correctly. CCE-13687-9 2010-10-04T15:46:13.547Z 2012-01-05T04:33:22.267Z The "Specify ScreenTips to appear" Visio setting should be configured correctly. CCE-14218-2 2010-10-04T15:46:13.593Z 2012-01-05T04:33:22.317Z The "Prevent showing New screen on launch" Visio setting should be configured correctly. CCE-14364-4 2010-10-04T15:46:13.640Z 2012-01-05T04:33:22.393Z The "Stencil window ScreenTips" Visio setting should be configured correctly. CCE-14650-6 2010-10-04T15:46:13.687Z 2012-01-05T04:33:22.470Z The "Actions" Visio setting should be configured correctly. CCE-13417-1 2010-10-04T15:46:13.733Z 2012-01-05T04:33:22.517Z The "Duration" Visio setting should be configured correctly. CCE-12856-1 2010-10-04T15:46:13.780Z 2012-01-05T04:33:22.567Z The "Always offer 'Metric' and 'US units' for new blank drawings and stencils" Visio setting should be configured correctly. CCE-14057-4 2010-10-04T15:46:13.827Z 2012-01-05T04:33:22.613Z The "Angle" Visio setting should be configured correctly. CCE-14332-1 2010-10-04T15:46:13.860Z 2012-01-05T04:33:22.657Z The "Text" Visio setting should be configured correctly. CCE-12659-9 2010-10-04T15:46:13.907Z 2012-01-05T04:33:22.720Z The "Save Visio files as" Visio setting should be configured correctly. CCE-12501-3 2010-10-04T15:46:13.953Z 2012-01-05T04:33:22.767Z The "Prompt for document properties on first save" Visio setting should be configured correctly. CCE-14689-4 2010-10-04T15:46:14.000Z 2012-01-05T04:33:22.817Z The "Followed hyperlink color" Project setting should be configured correctly. CCE-13524-4 2010-10-04T15:46:14.047Z 2012-01-05T04:33:22.863Z The "Hyperlink color" Project setting should be configured correctly. CCE-14347-9 2010-10-04T15:46:14.093Z 2012-01-05T04:33:22.907Z The "Underline hyperlinks" Project setting should be configured correctly. CCE-13144-1 2010-10-04T15:46:14.140Z 2012-01-05T04:33:22.970Z The "Rely on CSS for font formatting" common setting should be configured correctly. CCE-13357-9 2010-10-04T15:46:14.187Z 2012-01-05T04:33:23.017Z The "Configure trusted add-ins" Outlook setting should be configured correctly. CCE-13352-0 2010-10-04T15:46:14.233Z 2012-01-05T04:33:23.067Z The "Use legacy Change Password authentication dialog boxes" Outlook setting should be configured correctly. CCE-12537-7 2010-10-04T15:46:14.280Z 2012-01-05T04:33:23.113Z The "Exchange Unicode Mode - Turn off ANSI mode" Outlook setting should be configured correctly. CCE-13083-1 2010-10-04T15:46:14.327Z 2012-01-05T04:33:23.157Z The "Set maximum number of Exchange accounts per profile" setting should be configured correctly. CCE-13241-5 2010-10-04T15:46:14.377Z 2012-01-05T04:33:23.207Z The "Authentication with Exchange Server" Outlook setting should be configured correctly. CCE-12768-8 2010-10-04T15:46:14.407Z 2012-01-05T04:33:23.253Z The "Restrict legacy Exchange account" setting should be configured correctly. CCE-14888-2 2010-10-04T15:46:14.453Z 2012-01-05T04:33:23.300Z The "Exchange Unicode Mode - Ignore OST Format" Outlook setting should be configured correctly. CCE-13778-6 2010-10-04T15:46:14.500Z 2012-01-05T04:33:23.347Z The "Do not allow users to change permissions on folders" Outlook setting should be configured correctly. CCE-12372-9 2010-10-04T15:46:14.547Z 2012-01-05T04:33:23.440Z The "Do not display Folder Size button on folder properties dialog box" Outlook setting should be configured correctly. CCE-13278-7 2010-10-04T15:46:14.593Z 2012-01-05T04:33:23.517Z The "Synchronizing data in shared folders" Outlook setting should be configured correctly. CCE-13714-1 2010-10-04T15:46:14.640Z 2012-01-05T04:33:23.567Z The "Specify exceptions for DisableCrossAccountCopy" Outlook setting should be configured correctly. CCE-11504-8 2010-10-04T15:46:14.687Z 2012-01-05T04:33:23.613Z The "Cached Exchange low bandwidth threshold" Outlook setting should be configured correctly. CCE-13667-1 2010-10-04T15:46:14.717Z 2012-01-05T04:33:23.657Z The "Automatically configure profile based on Active Directory Primary SMTP address" Outlook setting should be configured correctly. CCE-13233-2 2010-10-04T15:46:14.767Z 2012-01-05T04:33:23.707Z The "Do not allow an OST file to be created" Outlook setting should be configured correctly. CCE-13674-7 2010-10-04T15:46:14.827Z 2012-01-05T04:33:23.753Z The "Enable RPC encryption" Outlook setting should be configured correctly. CCE-13335-5 2010-10-04T15:46:14.877Z 2012-01-05T04:33:23.800Z The "Do not validate personal Contact Groups when sending e-mail messages" Outlook setting should be configured correctly. CCE-13152-4 2010-10-04T15:46:14.923Z 2012-01-05T04:33:23.877Z The "Exchange Unicode Mode - Silent OST format change" Outlook setting should be configured correctly. CCE-12547-6 2010-10-04T15:46:14.967Z 2012-01-05T04:33:23.940Z The "Configure Outlook Anywhere user interface options" Outlook setting should be configured correctly. CCE-13150-8 2010-10-04T15:46:15.017Z 2012-01-05T04:33:24.003Z The "Prevent copying or moving items between accounts" Outlook setting should be configured correctly. CCE-13970-9 2010-10-04T15:46:15.047Z 2012-01-05T04:33:24.050Z The "Set default file block behavior" PowerPoint setting should be configured correctly. CCE-14523-5 2010-10-04T15:46:15.093Z 2012-01-05T04:33:24.097Z The "PowerPoint 97-2003 presentations, shows, templates and add-in files" PowerPoint setting should be configured correctly. CCE-13402-3 2010-10-04T15:46:15.140Z 2012-01-05T04:33:24.143Z The "Outline files" PowerPoint setting should be configured correctly. CCE-12093-1 2010-10-04T15:46:15.187Z 2012-01-05T04:33:24.190Z The "PowerPoint beta converters" PowerPoint setting should be configured correctly. CCE-13302-5 2010-10-04T15:46:15.233Z 2012-01-05T04:33:24.237Z The "Microsoft Office Open XML converters for PowerPoint" PowerPoint setting should be configured correctly. CCE-14467-5 2010-10-04T15:46:15.280Z 2012-01-05T04:33:24.283Z The "Web Pages" PowerPoint setting should be configured correctly. CCE-13430-4 2010-10-04T15:46:15.327Z 2012-01-05T04:33:24.330Z The "PowerPoint beta files" PowerPoint setting should be configured correctly. CCE-13336-3 2010-10-04T15:46:15.360Z 2012-01-05T04:33:24.377Z The "Graphic Filters" PowerPoint setting should be configured correctly. CCE-13722-4 2010-10-04T15:46:15.407Z 2012-01-05T04:33:24.440Z The "Legacy converters for PowerPoint" PowerPoint setting should be configured correctly. CCE-14382-6 2010-10-04T15:46:15.453Z 2012-01-05T04:33:24.487Z The "OpenDocument Presentation files" PowerPoint setting should be configured correctly. CCE-11830-7 2010-10-04T15:46:15.517Z 2012-01-05T04:33:24.533Z The "PowerPoint 2007 and later presentations, shows, templates, themes and add-in files" PowerPoint setting should be configured correctly. CCE-13875-0 2010-10-04T15:46:15.563Z 2012-01-05T04:33:24.597Z The "Merge formatting when pasting from PowerPoint" Word setting should be configured correctly. CCE-12992-4 2010-10-04T15:46:15.610Z 2012-01-05T04:33:24.643Z The "Adjust formatting when pasting from Microsoft Excel" Word setting should be configured correctly. CCE-12552-6 2010-10-04T15:46:15.657Z 2012-01-05T04:33:24.690Z The "Adjust table formatting and alignment on paste" Word setting should be configured correctly. CCE-12041-0 2010-10-04T15:46:15.687Z 2012-01-05T04:33:24.767Z The "Smart style behavior" Word setting should be configured correctly. CCE-11680-6 2010-10-04T15:46:15.733Z 2012-01-05T04:33:24.817Z The "Merge pasted lists with surrounding lists" Word setting should be configured correctly. CCE-14717-3 2010-10-04T15:46:15.780Z 2012-01-05T04:33:24.877Z The "Adjust sentence and word spacing automatically" Word setting should be configured correctly. CCE-11803-4 2010-10-04T15:46:15.827Z 2012-01-05T04:33:24.923Z The "Adjust paragraph spacing on paste" Word setting should be configured correctly. CCE-14314-9 2010-10-04T15:46:15.877Z 2012-01-05T04:33:24.970Z The "Disable password protected sections" OneNote setting should be configured correctly. CCE-11550-1 2010-10-04T15:46:15.923Z 2012-01-05T04:33:25.017Z The "Lock password protected sections after user hasn't worked on them for a time" OneNote setting should be configured correctly. CCE-12207-7 2010-10-04T15:46:15.967Z 2012-01-05T04:33:25.067Z The "Lock password protected sections as soon as I navigate away from them" OneNote setting should be configured correctly. CCE-14531-8 2010-10-04T15:46:16.017Z 2012-01-05T04:33:25.113Z The "Disallows add-ons access to password protected sections" OneNote setting should be configured correctly. CCE-12368-7 2010-10-04T15:46:16.063Z 2012-01-05T04:33:25.157Z The "Trust access to Visual Basic Project" Word setting should be configured correctly. CCE-13294-4 2010-10-04T15:46:16.110Z 2012-01-05T04:33:25.207Z The "Scan encrypted macros in Word Open XML documents" Word setting should be configured correctly. CCE-13769-5 2010-10-04T15:46:16.157Z 2012-01-05T04:33:25.253Z The "Disable all application add-ins" Word setting should be configured correctly. CCE-13268-8 2010-10-04T15:46:16.187Z 2012-01-05T04:33:25.317Z The "Require that application add-ins are signed by Trusted Publisher" Word setting should be configured correctly. CCE-14035-0 2010-10-04T15:46:16.250Z 2012-01-05T04:33:25.363Z The "Set maximum number of trusted documents" Word setting should be configured correctly. CCE-12577-3 2010-10-04T15:46:16.297Z 2012-01-05T04:33:25.407Z The "Turn off Data Execution Prevention" Word setting should be configured correctly. CCE-13887-5 2010-10-04T15:46:16.343Z 2012-01-05T04:33:25.457Z The "Set maximum number of trust records to preserve" Word setting should be configured correctly. CCE-13182-1 2010-10-04T15:46:16.390Z 2012-01-05T04:33:25.503Z The "VBA Macro Notification Settings" Word setting should be configured correctly. CCE-14249-7 2010-10-04T15:46:16.423Z 2012-01-05T04:33:25.550Z The "Turn off trusted documents" Word setting should be configured correctly. CCE-14053-3 2010-10-04T15:46:16.467Z 2012-01-05T04:33:25.597Z The "Turn off Trusted Documents on the network" Word setting should be configured correctly. CCE-13705-9 2010-10-04T15:46:16.517Z 2012-01-05T04:33:25.673Z The "Disable Trust Bar Notification for unsigned application add-ins and block them" Word setting should be configured correctly. CCE-12578-1 2010-10-04T15:46:16.563Z 2012-01-05T04:33:25.720Z The "Resize graphics to fit browser window" PowerPoint setting should be configured correctly. CCE-12820-7 2010-10-04T15:46:16.610Z 2012-01-05T04:33:25.767Z The "Slide navigation" PowerPoint setting should be configured correctly. CCE-13579-8 2010-10-04T15:46:16.657Z 2012-01-05T04:33:25.830Z The "Show slide animation while browsing" PowerPoint setting should be configured correctly. CCE-11619-4 2010-10-04T15:46:16.703Z 2012-01-05T04:33:25.877Z The "Offline Address Book: Limit manual OAB downloads" setting should be configured correctly. CCE-13110-2 2010-10-04T15:46:16.750Z 2012-01-05T04:33:25.923Z The "Turn off Hierarchical Address Book search" Outlook setting should be configured correctly. CCE-14203-4 2010-10-04T15:46:16.797Z 2012-01-05T04:33:25.970Z The "Return e-mail alias if it exactly matches the provided e-mail address when searching OAB" setting should be configured correctly. CCE-14500-3 2010-10-04T15:46:16.843Z 2012-01-05T04:33:26.017Z The "Offline Address Book: Limit number of incremental OAB downloads" setting should be configured correctly. CCE-12128-5 2010-10-04T15:46:16.890Z 2012-01-05T04:33:26.113Z The "Display option for downloading OAB changes since last Send/Receive" setting should be configured correctly. CCE-14912-0 2010-10-04T15:46:16.937Z 2012-01-05T04:33:26.173Z The "Offline Address Book: Prompt before Downloading Full OAB" setting should be configured correctly. CCE-13325-6 2010-10-04T15:46:16.983Z 2012-01-05T04:33:26.220Z The "Turn off Hierarchical Address Book" Outlook setting should be configured correctly. CCE-13860-2 2010-10-04T15:46:17.030Z 2012-01-05T04:33:26.267Z The "Turn off Hierarchical Address Book department selection" Outlook setting should be configured correctly. CCE-12513-8 2010-10-04T15:46:17.077Z 2012-01-05T04:33:26.317Z The "Use only OAB v4" setting should be configured correctly. CCE-12364-6 2010-10-04T15:46:17.127Z 2012-01-05T04:33:26.363Z The "Mail account options" Outlook setting should be configured correctly. CCE-12931-2 2010-10-04T15:46:17.173Z 2012-01-05T04:33:26.423Z The "Dial-up options" Outlook setting should be configured correctly. CCE-13440-3 2010-10-04T15:46:17.217Z 2012-01-05T04:33:26.470Z The "Smiley faces and arrows with special symbols" Visio setting should be configured correctly. CCE-12901-5 2010-10-04T15:46:17.267Z 2012-01-05T04:33:26.517Z The "Ordinals with superscript" Visio setting should be configured correctly. CCE-14745-4 2010-10-04T15:46:17.297Z 2012-01-05T04:33:26.567Z The "Fractions with fraction character" Visio setting should be configured correctly. CCE-12377-8 2010-10-04T15:46:17.343Z 2012-01-05T04:33:26.613Z The "Hyphens with dash" Visio setting should be configured correctly. CCE-12976-7 2010-10-04T15:46:17.390Z 2012-01-05T04:33:26.657Z The "Straight quotes with smart quotes" Visio setting should be configured correctly. CCE-13652-3 2010-10-04T15:46:17.437Z 2012-01-05T04:33:26.707Z The "Turn off auto-switching from horizontal to vertical layout" Outlook setting should be configured correctly. CCE-13048-4 2010-10-04T15:46:17.483Z 2012-01-05T04:33:26.767Z The "Turn off Legacy Group Calendar migration" Outlook setting should be configured correctly. CCE-13290-2 2010-10-04T15:46:17.530Z 2012-01-05T04:33:26.830Z The "Prevent My Department Calendar from appearing" Outlook setting should be configured correctly. CCE-11909-9 2010-10-04T15:46:17.577Z 2012-01-05T04:33:26.877Z The "Turn off sharing recommendation" Outlook setting should be configured correctly. CCE-12283-8 2010-10-04T15:46:17.610Z 2012-01-05T04:33:26.923Z The "Prevent Reporting Line Group Calendar from appearing" Outlook setting should be configured correctly. CCE-12751-4 2010-10-04T15:46:17.673Z 2012-01-05T04:33:26.987Z The "Do not allow horizontal calendar view" Outlook setting should be configured correctly. CCE-13595-4 2010-10-04T15:46:17.717Z 2012-01-05T04:33:27.067Z The "Turn off auto-switching from vertical to horizontal layout" Outlook setting should be configured correctly. CCE-13177-1 2010-10-04T15:46:17.767Z 2012-01-05T04:33:27.113Z The "Prevent Other Department Calendar from appearing" Outlook setting should be configured correctly. CCE-13504-6 2010-10-04T15:46:17.813Z 2012-01-05T04:33:27.157Z The "Maximum number of once-per-day version history items kept" OneNote setting should be configured correctly. CCE-13277-9 2010-10-04T15:46:17.843Z 2012-01-05T04:33:27.207Z The "Turn off Versions and Notebook Recycle Bin in shared notebooks" OneNote setting should be configured correctly. CCE-12591-4 2010-10-04T15:46:17.890Z 2012-01-05T04:33:27.267Z The "Do not prune versions over time" OneNote setting should be configured correctly. CCE-12857-9 2010-10-04T15:46:17.937Z 2012-01-05T04:33:27.317Z The "Days back to keep items in recycle bin" OneNote setting should be configured correctly. CCE-13342-1 2010-10-04T15:46:17.983Z 2012-01-05T04:33:27.363Z The "Days of hourly versions not to prune after Days Back" OneNote setting should be configured correctly. CCE-14372-7 2010-10-04T15:46:18.030Z 2012-01-05T04:33:27.407Z The "Days back to keep in version history" OneNote setting should be configured correctly. CCE-14189-5 2010-10-04T15:46:18.063Z 2012-01-05T04:33:27.457Z The "Enter text direction for new forms" InfoPath setting should be configured correctly. CCE-12381-0 2010-10-04T15:46:18.110Z 2012-01-05T04:33:27.503Z The "Email Forms Beaconing UI" InfoPath setting should be configured correctly. CCE-14012-9 2010-10-04T15:46:18.157Z 2012-01-05T04:33:27.550Z The "Allow users to turn on and off printing of background colors." InfoPath setting should be configured correctly. CCE-14641-5 2010-10-04T15:46:18.203Z 2012-01-05T04:33:27.613Z The "Disable Microsoft InfoPath Filler Control" InfoPath setting should be configured correctly. CCE-14406-3 2010-10-04T15:46:18.250Z 2012-01-05T04:33:27.657Z The "Turn off InfoPath Designer mode" InfoPath setting should be configured correctly. CCE-13965-9 2010-10-04T15:46:18.297Z 2012-01-05T04:33:27.707Z The "Enter URL of location where template parts are stored" InfoPath setting should be configured correctly. CCE-12403-2 2010-10-04T15:46:18.343Z 2012-01-05T04:33:27.753Z The "Clipart pictures" Word setting should be configured correctly. CCE-13181-3 2010-10-04T15:46:18.390Z 2012-01-05T04:33:27.817Z The "Tools" Word setting should be configured correctly. CCE-13598-8 2010-10-04T15:46:18.437Z 2012-01-05T04:33:27.893Z The "AutoRecover files" Word setting should be configured correctly. CCE-12294-5 2010-10-04T15:46:18.483Z 2012-01-05T04:33:27.957Z The "Startup" Word setting should be configured correctly. CCE-11816-6 2010-10-04T15:46:18.530Z 2012-01-05T04:33:28.003Z The "Default File Location" Word setting should be configured correctly. CCE-12225-9 2010-10-04T15:46:18.577Z 2012-01-05T04:33:28.050Z The "Block opening of pre-release versions of file formats new to Word 2010 through the Compatibility Pack for Office 2010 and Word 2010 Open XML/Word 97-2003 Format Converter" Word setting should be configured correctly. CCE-14865-0 2010-10-04T15:46:18.627Z 2012-01-05T04:33:28.097Z The "Block opening of pre-release versions of file formats new to Excel 2010 through the Compatibility Pack for Office 2010 and Excel 2010 Converter" Excel setting should be configured correctly. CCE-14239-8 2010-10-04T15:46:18.673Z 2012-01-05T04:33:28.157Z The "Block opening of pre-release versions of file formats new to PowerPoint 2010 through the Compatibility Pack for Office 2010 and PowerPoint 2010 Converter" PowerPoint setting should be configured correctly. CCE-11655-8 2010-10-04T15:46:18.717Z 2012-01-05T04:33:28.207Z The "Add file extensions to block as Level 1" Outlook setting should be configured correctly. CCE-11682-2 2010-10-04T15:46:18.767Z 2012-01-05T04:33:28.253Z The "Display OLE package objects" Outlook setting should be configured correctly. CCE-14037-6 2010-10-04T15:46:18.797Z 2012-01-05T04:33:28.300Z The "Add file extensions to block as Level 2" Outlook setting should be configured correctly. CCE-13450-2 2010-10-04T15:46:18.843Z 2012-01-05T04:33:28.347Z The "Do not prompt about Level 1 attachments when sending an item" Outlook setting should be configured correctly. CCE-13559-0 2010-10-04T15:46:18.890Z 2012-01-05T04:33:28.393Z The "Allow users to demote attachments to Level 2" Outlook setting should be configured correctly. CCE-13004-7 2010-10-04T15:46:18.937Z 2012-01-05T04:33:28.440Z The "Remove file extensions blocked as Level 2" Outlook setting should be configured correctly. CCE-12197-0 2010-10-04T15:46:18.983Z 2012-01-05T04:33:28.503Z The "Do not prompt about Level 1 attachments when closing an item" Outlook setting should be configured correctly. CCE-13121-9 2010-10-04T15:46:19.030Z 2012-01-05T04:33:28.550Z The "Remove file extensions blocked as Level 1" Outlook setting should be configured correctly. CCE-14802-3 2010-10-04T15:46:19.077Z 2012-01-05T04:33:28.597Z The "Display Level 1 attachments" Outlook setting should be configured correctly. CCE-13103-7 2010-10-04T15:46:19.127Z 2012-01-05T04:33:28.643Z The "Display Developer tab in the Ribbon" Outlook setting should be configured correctly. CCE-13458-5 2010-10-04T15:46:19.173Z 2012-01-05T04:33:28.690Z The "Match minus, dash, cho" InfoPath setting should be configured correctly. CCE-13333-0 2010-10-04T15:46:19.217Z 2012-01-05T04:33:28.753Z The "Set EA line breaking" InfoPath setting should be configured correctly. CCE-12247-3 2010-10-04T15:46:19.267Z 2012-01-05T04:33:28.800Z The "Match full/half width forms" InfoPath setting should be configured correctly. CCE-13776-0 2010-10-04T15:46:19.313Z 2012-01-05T04:33:28.847Z The "Match cho-on used for vowels" InfoPath setting should be configured correctly. CCE-12087-3 2010-10-04T15:46:19.343Z 2012-01-05T04:33:28.893Z The "Check if Office is the default editor for Web pages created in Office" common setting should be configured correctly. CCE-11507-1 2010-10-04T15:46:19.390Z 2012-01-05T04:33:28.957Z The "Organize supporting files in a folder" common setting should be configured correctly. CCE-12053-5 2010-10-04T15:46:19.437Z 2012-01-05T04:33:29.017Z The "Open Office document directly in Office application" common setting should be configured correctly. CCE-14832-0 2010-10-04T15:46:19.483Z 2012-01-05T04:33:29.067Z The "Open Office documents as read/write while browsing" common setting should be configured correctly. CCE-14750-4 2010-10-04T15:46:19.530Z 2012-01-05T04:33:29.113Z The "Prompt user to setup printer" Publisher setting should be configured correctly. CCE-13825-5 2010-10-04T15:46:19.577Z 2012-01-05T04:33:29.157Z The "Add double quotes in Hebrew alphabet numbering" Publisher setting should be configured correctly. CCE-14682-9 2010-10-04T15:46:19.627Z 2012-01-05T04:33:29.207Z The "Navigation bar appears on the right" OneNote setting should be configured correctly. CCE-12658-1 2010-10-04T15:46:19.673Z 2012-01-05T04:33:29.253Z The "Show Note Containers" OneNote setting should be configured correctly. CCE-14320-6 2010-10-04T15:46:19.717Z 2012-01-05T04:33:29.300Z The "Page tabs appear on the left" OneNote setting should be configured correctly. CCE-14446-9 2010-10-04T15:46:19.767Z 2012-01-05T04:33:29.363Z The "Vertical scroll bar appears on left" OneNote setting should be configured correctly. CCE-12348-9 2010-10-04T15:46:19.813Z 2012-01-05T04:33:29.407Z The "Turn off Trusted Documents on the network" PowerPoint setting should be configured correctly. CCE-13123-5 2010-10-04T15:46:19.860Z 2012-01-05T04:33:29.470Z The "VBA Macro Notification Settings" PowerPoint setting should be configured correctly. CCE-12451-1 2010-10-04T15:46:19.890Z 2012-01-05T04:33:29.517Z The "Set maximum number of trust records to preserve" PowerPoint setting should be configured correctly. CCE-12525-2 2010-10-04T15:46:19.937Z 2012-01-05T04:33:29.567Z The "Disable Trust Bar Notification for unsigned application add-ins and block them" PowerPoint setting should be configured correctly. CCE-12203-6 2010-10-04T15:46:19.983Z 2012-01-05T04:33:29.627Z The "Require that application add-ins are signed by Trusted Publisher" PowerPoint setting should be configured correctly. CCE-11735-8 2010-10-04T15:46:20.030Z 2012-01-05T04:33:29.673Z The "Trust access to Visual Basic Project" PowerPoint setting should be configured correctly. CCE-12254-9 2010-10-04T15:46:20.077Z 2012-01-05T04:33:29.720Z The "Turn off Data Execution Prevention" PowerPoint setting should be configured correctly. CCE-14790-0 2010-10-04T15:46:20.127Z 2012-01-05T04:33:29.767Z The "Disable all application add-ins" PowerPoint setting should be configured correctly. CCE-12874-4 2010-10-04T15:46:20.173Z 2012-01-05T04:33:29.830Z The "Set maximum number of trusted documents" PowerPoint setting should be configured correctly. CCE-14612-6 2010-10-04T15:46:20.217Z 2012-01-05T04:33:29.877Z The "Turn off trusted documents" PowerPoint setting should be configured correctly. CCE-12028-7 2010-10-04T15:46:20.267Z 2012-01-05T04:33:29.940Z The "Change or delete link to the proofing tools download site" common setting should be configured correctly. CCE-13151-6 2010-10-04T15:46:20.313Z 2012-01-05T04:33:29.987Z The "Display help in" common setting should be configured correctly. CCE-12138-4 2010-10-04T15:46:20.360Z 2012-01-05T04:33:30.067Z The "Change or delete link to language pack download site" common setting should be configured correctly. CCE-11776-2 2010-10-04T15:46:20.407Z 2012-01-05T04:33:30.127Z The "Display menus and dialog boxes in" common setting should be configured correctly. CCE-12985-8 2010-10-04T15:46:20.453Z 2012-01-05T04:33:30.173Z The "Configure form regions permissions" Outlook setting should be configured correctly. CCE-12667-2 2010-10-04T15:46:20.500Z 2012-01-05T04:33:30.220Z The "Locked form regions" Outlook setting should be configured correctly. CCE-13710-9 2010-10-04T15:46:20.547Z 2012-01-05T04:33:30.283Z The "Office.com" common setting should be configured correctly. CCE-13992-3 2010-10-04T15:46:20.577Z 2012-01-05T04:33:30.330Z The "Use online translation dictionaries" common setting should be configured correctly. CCE-13873-5 2010-10-04T15:46:20.627Z 2012-01-05T04:33:30.377Z The "Tools | Compare and Merge Documents, Legal blackline" Word setting should be configured correctly. CCE-13556-6 2010-10-04T15:46:20.673Z 2012-01-05T04:33:30.423Z The "Alternate revision bar position in printed document" Word setting should be configured correctly. CCE-12125-1 2010-10-04T15:46:20.717Z 2012-01-05T04:33:30.470Z The "Disable MRU list in font dropdown" Word setting should be configured correctly. CCE-14250-5 2010-10-04T15:46:20.767Z 2012-01-05T04:33:30.533Z The "Volume preference" Word setting should be configured correctly. CCE-14423-8 2010-10-04T15:46:20.813Z 2012-01-05T04:33:30.580Z The "Do not use online machine translation" common setting should be configured correctly. CCE-12538-5 2010-10-04T15:46:20.860Z 2012-01-05T04:33:30.627Z The "Set comment fields for Outlook Contacts Dictionary" setting should be configured correctly. CCE-13200-1 2010-10-04T15:46:20.907Z 2012-01-05T04:33:30.690Z The "Set update interval for Outlook Global Address List Dictionary" setting should be configured correctly. CCE-13964-2 2010-10-04T15:46:20.937Z 2012-01-05T04:33:30.737Z The "Restrict character code range of conversion" setting should be configured correctly. CCE-13850-3 2010-10-04T15:46:20.983Z 2012-01-05T04:33:30.783Z The "Set comment fields for Outlook Global Address List Dictionary" setting should be configured correctly. CCE-12854-6 2010-10-04T15:46:21.030Z 2012-01-05T04:33:30.847Z The "Set update interval for Outlook Contacts Dictionary" setting should be configured correctly. CCE-13235-7 2010-10-04T15:46:21.077Z 2012-01-05T04:33:30.893Z The "Do not include Non-Publishing Standard Glyph in the candidate list" setting should be configured correctly. CCE-12680-5 2010-10-04T15:46:21.127Z 2012-01-05T04:33:30.940Z The "Spanish (Peru)" common setting should be configured correctly. CCE-13085-6 2010-10-04T15:46:21.173Z 2012-01-05T04:33:30.987Z The "Welsh" common setting should be configured correctly. CCE-13138-3 2010-10-04T15:46:21.217Z 2012-01-05T04:33:31.080Z The "Workflow Cache 13" common setting should be configured correctly. CCE-13932-9 2010-10-04T15:46:21.267Z 2012-01-05T04:33:31.143Z The "Trust Center: Trusted Location #20" common setting should be configured correctly. CCE-12141-8 2010-10-04T15:46:21.313Z 2012-01-05T04:33:31.190Z The "Telugu" common setting should be configured correctly. CCE-13526-9 2010-10-04T15:46:21.360Z 2012-01-05T04:33:31.237Z The "Turkish" common setting should be configured correctly. CCE-12966-8 2010-10-04T15:46:21.407Z 2012-01-05T04:33:31.283Z The "Suppress hyperlink warnings" common setting should be configured correctly. CCE-12437-0 2010-10-04T15:46:21.437Z 2012-01-05T04:33:31.347Z The "Trust Center: Trusted Location #1" common setting should be configured correctly. CCE-12165-7 2010-10-04T15:46:21.483Z 2012-01-05T04:33:31.393Z The "Turn Off Office Live Workspace Integration" common setting should be configured correctly. CCE-13532-7 2010-10-04T15:46:21.530Z 2012-01-05T04:33:31.440Z The "Tamazight (Arabic, Morocco)" common setting should be configured correctly. CCE-13312-4 2010-10-04T15:46:21.577Z 2012-01-05T04:33:31.487Z The "Unsafe Location #7" common setting should be configured correctly. CCE-13689-5 2010-10-04T15:46:21.627Z 2012-01-05T04:33:31.533Z The "Stop reporting non-critical errors" common setting should be configured correctly. CCE-12593-0 2010-10-04T15:46:21.673Z 2012-01-05T04:33:31.580Z The "Workflow Cache 2" common setting should be configured correctly. CCE-12019-6 2010-10-04T15:46:21.703Z 2012-01-05T04:33:31.643Z The "Workflow Cache 4" common setting should be configured correctly. CCE-12512-0 2010-10-04T15:46:21.767Z 2012-01-05T04:33:31.690Z The "Tigrigna (Ethiopia)" common setting should be configured correctly. CCE-13567-3 2010-10-04T15:46:21.813Z 2012-01-05T04:33:31.737Z The "Tajik" common setting should be configured correctly. CCE-14812-2 2010-10-04T15:46:21.860Z 2012-01-05T04:33:31.800Z The "Trust Center: Trusted Location #19" common setting should be configured correctly. CCE-13983-2 2010-10-04T15:46:21.890Z 2012-01-05T04:33:31.847Z The "Trust Center: Trusted Location #11" common setting should be configured correctly. CCE-11996-6 2010-10-04T15:46:21.937Z 2012-01-05T04:33:31.893Z The "Suppress Office Signing Providers" common setting should be configured correctly. CCE-12979-1 2010-10-04T15:46:21.983Z 2012-01-05T04:33:31.940Z The "Unsafe Location #8" common setting should be configured correctly. CCE-13743-0 2010-10-04T15:46:22.030Z 2012-01-05T04:33:32.003Z The "Ukrainian" common setting should be configured correctly. CCE-14512-8 2010-10-04T15:46:22.077Z 2012-01-05T04:33:32.050Z The "Suppress external signature services menu item" common setting should be configured correctly. CCE-11683-0 2010-10-04T15:46:22.127Z 2012-01-05T04:33:32.097Z The "Wolof" common setting should be configured correctly. CCE-13165-6 2010-10-04T15:46:22.173Z 2012-01-05T04:33:32.173Z The "Unsafe Location #13" common setting should be configured correctly. CCE-12320-8 2010-10-04T15:46:22.217Z 2012-01-05T04:33:32.220Z The "Sutu (South Africa)" common setting should be configured correctly. CCE-12275-4 2010-10-04T15:46:22.250Z 2012-01-05T04:33:32.283Z The "Spanish (Spain)" common setting should be configured correctly. CCE-12805-8 2010-10-04T15:46:22.297Z 2012-01-05T04:33:32.330Z The "Unsafe Location #2" common setting should be configured correctly. CCE-11760-6 2010-10-04T15:46:22.343Z 2012-01-05T04:33:32.377Z The "Use Office 2003 New Document dialog box" common setting should be configured correctly. CCE-12872-8 2010-10-04T15:46:22.390Z 2012-01-05T04:33:32.423Z The "Trust Center: Trusted Location #5" common setting should be configured correctly. CCE-14338-8 2010-10-04T15:46:22.437Z 2012-01-05T04:33:32.470Z The "URL for location of document templates displayed when applications do not recognize rights-managed documents" common setting should be configured correctly. CCE-12978-3 2010-10-04T15:46:22.483Z 2012-01-05T04:33:32.517Z The "Unsafe Location #12" common setting should be configured correctly. CCE-12601-1 2010-10-04T15:46:22.530Z 2012-01-05T04:33:32.580Z The "Trust Center: Trusted Location #16" common setting should be configured correctly. CCE-13558-2 2010-10-04T15:46:22.577Z 2012-01-05T04:33:32.657Z The "Workgroup building blocks path" common setting should be configured correctly. CCE-13254-8 2010-10-04T15:46:22.627Z 2012-01-05T04:33:32.720Z The "Vietnamese" common setting should be configured correctly. CCE-11931-3 2010-10-04T15:46:22.673Z 2012-01-05T04:33:32.767Z The "Workflow Cache 1" common setting should be configured correctly. CCE-12382-8 2010-10-04T15:46:22.717Z 2012-01-05T04:33:32.817Z The "Trust Center: Trusted Location #6" common setting should be configured correctly. CCE-12626-8 2010-10-04T15:46:22.767Z 2012-01-05T04:33:32.863Z The "Trust Center: Trusted Location #14" common setting should be configured correctly. CCE-12206-9 2010-10-04T15:46:22.797Z 2012-01-05T04:33:32.923Z The "Trust Center: Trusted Location #13" common setting should be configured correctly. CCE-12941-1 2010-10-04T15:46:22.843Z 2012-01-05T04:33:32.970Z The "With a Web discussions link" common setting should be configured correctly. CCE-13418-9 2010-10-04T15:46:22.890Z 2012-01-05T04:33:33.017Z The "Trust Center: Trusted Location #15" common setting should be configured correctly. CCE-14451-9 2010-10-04T15:46:22.937Z 2012-01-05T04:33:33.067Z The "Turkmen" common setting should be configured correctly. CCE-13661-4 2010-10-04T15:46:22.983Z 2012-01-05T04:33:33.113Z The "Unsafe Location #6" common setting should be configured correctly. CCE-13314-0 2010-10-04T15:46:23.030Z 2012-01-05T04:33:33.157Z The "Swedish (Sweden)" common setting should be configured correctly. CCE-13670-5 2010-10-04T15:46:23.077Z 2012-01-05T04:33:33.220Z The "Unsafe Location #20" common setting should be configured correctly. CCE-12851-2 2010-10-04T15:46:23.110Z 2012-01-05T04:33:33.317Z The "Turn off presence integration" common setting should be configured correctly. CCE-14736-3 2010-10-04T15:46:23.173Z 2012-01-05T04:33:33.393Z The "Workflow Cache 8" common setting should be configured correctly. CCE-12023-8 2010-10-04T15:46:23.217Z 2012-01-05T04:33:33.457Z The "Unsafe Location #15" common setting should be configured correctly. CCE-12175-6 2010-10-04T15:46:23.267Z 2012-01-05T04:33:33.503Z The "Upper Sorbian" common setting should be configured correctly. CCE-13398-3 2010-10-04T15:46:23.313Z 2012-01-05T04:33:33.550Z The "Turn off click to telephone" common setting should be configured correctly. CCE-12738-1 2010-10-04T15:46:23.360Z 2012-01-05T04:33:33.597Z The "Spanish (Puerto Rico)" common setting should be configured correctly. CCE-14175-4 2010-10-04T15:46:23.407Z 2012-01-05T04:33:33.643Z The "Spanish (United States)" common setting should be configured correctly. CCE-11895-0 2010-10-04T15:46:23.453Z 2012-01-05T04:33:33.690Z The "Update links on save" common setting should be configured correctly. CCE-12802-5 2010-10-04T15:46:23.500Z 2012-01-05T04:33:33.753Z The "Trust Center: Trusted Location #8" common setting should be configured correctly. CCE-14607-6 2010-10-04T15:46:23.547Z 2012-01-05T04:33:33.830Z The "Workflow Cache 5" common setting should be configured correctly. CCE-12478-4 2010-10-04T15:46:23.610Z 2012-01-05T04:33:33.877Z The "Trust Local Solution" common setting should be configured correctly. CCE-13216-7 2010-10-04T15:46:23.640Z 2012-01-05T04:33:33.923Z The "Unsafe Location #10" common setting should be configured correctly. CCE-13947-7 2010-10-04T15:46:23.717Z 2012-01-05T04:33:33.970Z The "With a link and an attachment" common setting should be configured correctly. CCE-13076-5 2010-10-04T15:46:23.767Z 2012-01-05T04:33:34.017Z The "Swahili" common setting should be configured correctly. CCE-12564-1 2010-10-04T15:46:23.827Z 2012-01-05T04:33:34.067Z The "Workflow Cache 6" common setting should be configured correctly. CCE-13506-1 2010-10-04T15:46:23.890Z 2012-01-05T04:33:34.113Z The "Turn off PDF encryption setting UI" common setting should be configured correctly. CCE-13229-0 2010-10-04T15:46:23.937Z 2012-01-05T04:33:34.157Z The "Turn off Information Rights Management user interface" common setting should be configured correctly. CCE-13011-2 2010-10-04T15:46:23.983Z 2012-01-05T04:33:34.207Z The "Trust Center: Trusted Location #9" common setting should be configured correctly. CCE-13224-1 2010-10-04T15:46:24.030Z 2012-01-05T04:33:34.253Z The "Tatar" common setting should be configured correctly. CCE-12316-6 2010-10-04T15:46:24.093Z 2012-01-05T04:33:34.330Z The "Thai" common setting should be configured correctly. CCE-14780-1 2010-10-04T15:46:24.140Z 2012-01-05T04:33:34.423Z The "Target monitor" common setting should be configured correctly. CCE-11696-2 2010-10-04T15:46:24.203Z 2012-01-05T04:33:34.470Z The "Uyghur (PRC)" common setting should be configured correctly. CCE-13096-3 2010-10-04T15:46:24.250Z 2012-01-05T04:33:34.533Z The "Specify Permission Policy Path" common setting should be configured correctly. CCE-13274-6 2010-10-04T15:46:24.313Z 2012-01-05T04:33:34.580Z The "With a Web discussions link and an attachment" common setting should be configured correctly. CCE-12687-0 2010-10-04T15:46:24.360Z 2012-01-05T04:33:34.627Z The "With just a simple Web discussions link" common setting should be configured correctly. CCE-12781-1 2010-10-04T15:46:24.407Z 2012-01-05T04:33:34.673Z The "Web Folders: Managing pairs of Web pages and folders" setting should be configured correctly. CCE-14464-2 2010-10-04T15:46:24.453Z 2012-01-05T04:33:34.720Z The "Unsafe Location #18" common setting should be configured correctly. CCE-13442-9 2010-10-04T15:46:24.500Z 2012-01-05T04:33:34.767Z The "Use long file names whenever possible" common setting should be configured correctly. CCE-13320-7 2010-10-04T15:46:24.547Z 2012-01-05T04:33:34.830Z The "Trust Center: Trusted Location #17" common setting should be configured correctly. CCE-13008-8 2010-10-04T15:46:24.593Z 2012-01-05T04:33:34.877Z The "Spanish (Panama)" common setting should be configured correctly. CCE-12223-4 2010-10-04T15:46:24.657Z 2012-01-05T04:33:34.923Z The "Workflow Cache 12" common setting should be configured correctly. CCE-12174-9 2010-10-04T15:46:24.703Z 2012-01-05T04:33:34.970Z The "Workgroup templates path" common setting should be configured correctly. CCE-14031-9 2010-10-04T15:46:24.750Z 2012-01-05T04:33:35.033Z The "Turn off Open Extended Dictionary" setting should be configured correctly. CCE-14243-0 2010-10-04T15:46:24.797Z 2012-01-05T04:33:35.080Z The "With a simple Web discussions link and an attachment" common setting should be configured correctly. CCE-13529-3 2010-10-04T15:46:24.843Z 2012-01-05T04:33:35.127Z The "Workflow Cache 9" common setting should be configured correctly. CCE-14557-3 2010-10-04T15:46:24.907Z 2012-01-05T04:33:35.190Z The "Turn off error reporting for files that fail file validation" common setting should be configured correctly. CCE-12570-8 2010-10-04T15:46:24.953Z 2012-01-05T04:33:35.237Z The "Suggest from main dictionary only" setting should be configured correctly. CCE-13022-9 2010-10-04T15:46:25.017Z 2012-01-05T04:33:35.283Z The "Tamil" common setting should be configured correctly. CCE-12189-7 2010-10-04T15:46:25.063Z 2012-01-05T04:33:35.330Z The "Turn off Internet search integration" setting should be configured correctly. CCE-14330-5 2010-10-04T15:46:25.110Z 2012-01-05T04:33:35.393Z The "Spanish (Venezuela)" common setting should be configured correctly. CCE-12773-8 2010-10-04T15:46:25.157Z 2012-01-05T04:33:35.440Z The "Turn off predictive input" setting should be configured correctly. CCE-14401-4 2010-10-04T15:46:25.203Z 2012-01-05T04:33:35.503Z The "Workflow Cache 14" common setting should be configured correctly. CCE-14392-5 2010-10-04T15:46:25.250Z 2012-01-05T04:33:35.580Z The "Specify timestamp server name" common setting should be configured correctly. CCE-13986-5 2010-10-04T15:46:25.297Z 2012-01-05T04:33:35.627Z The "Turn off click to IM option" common setting should be configured correctly. CCE-13838-8 2010-10-04T15:46:25.343Z 2012-01-05T04:33:35.673Z The "Turn off SharePoint dictionary" setting should be configured correctly. CCE-11956-0 2010-10-04T15:46:25.407Z 2012-01-05T04:33:35.720Z The "Unsafe Location #11" common setting should be configured correctly. CCE-13348-8 2010-10-04T15:46:25.453Z 2012-01-05T04:33:35.783Z The "Specify minimum XAdES level for digital signature generation" common setting should be configured correctly. CCE-12095-6 2010-10-04T15:46:25.500Z 2012-01-05T04:33:35.817Z The "Unsafe Location #9" common setting should be configured correctly. CCE-12391-9 2010-10-04T15:46:25.547Z 2012-01-05T04:33:35.877Z The "When choosing 'Send for Review...'" common setting should be configured correctly. CCE-13997-2 2010-10-04T15:46:25.593Z 2012-01-05T04:33:35.923Z The "Trust Center: Trusted Location #18" common setting should be configured correctly. CCE-12893-4 2010-10-04T15:46:25.657Z 2012-01-05T04:33:35.970Z The "Workflow Cache 7" common setting should be configured correctly. CCE-13895-8 2010-10-04T15:46:25.717Z 2012-01-05T04:33:36.017Z The "Tsonga" common setting should be configured correctly. CCE-13626-7 2010-10-04T15:46:25.767Z 2012-01-05T04:33:36.067Z The "Workflow Cache 11" common setting should be configured correctly. CCE-13715-8 2010-10-04T15:46:25.813Z 2012-01-05T04:33:36.113Z The "Trust Center: Trusted Location #10" common setting should be configured correctly. CCE-11565-9 2010-10-04T15:46:25.860Z 2012-01-05T04:33:36.157Z The "Unsafe Location #1" common setting should be configured correctly. CCE-13036-9 2010-10-04T15:46:25.907Z 2012-01-05T04:33:36.207Z The "Turn on file synchronization via SOAP over HTTP" common setting should be configured correctly. CCE-12905-6 2010-10-04T15:46:25.953Z 2012-01-05T04:33:36.267Z The "Trust Center: Trusted Location #4" common setting should be configured correctly. CCE-14836-1 2010-10-04T15:46:26.000Z 2012-01-05T04:33:36.317Z The "Yoruba" common setting should be configured correctly. CCE-14797-5 2010-10-04T15:46:26.047Z 2012-01-05T04:33:36.363Z The "Suppress recommended settings dialog" common setting should be configured correctly. CCE-12610-2 2010-10-04T15:46:26.093Z 2012-01-05T04:33:36.407Z The "Venda" common setting should be configured correctly. CCE-14373-5 2010-10-04T15:46:26.140Z 2012-01-05T04:33:36.470Z The "Syriac" common setting should be configured correctly. CCE-14483-2 2010-10-04T15:46:26.187Z 2012-01-05T04:33:36.517Z The "Web Archive encoding" common setting should be configured correctly. CCE-12950-2 2010-10-04T15:46:26.250Z 2012-01-05T04:33:36.567Z The "Use auto-change list" Word setting should be configured correctly. CCE-13099-7 2010-10-04T15:46:26.297Z 2012-01-05T04:33:36.613Z The "Turn on misconversion logging for misconversion report" setting should be configured correctly. CCE-12821-5 2010-10-04T15:46:26.360Z 2012-01-05T04:33:36.657Z The "Uzbek (Latin)" common setting should be configured correctly. CCE-14110-1 2010-10-04T15:46:26.407Z 2012-01-05T04:33:36.737Z The "User queries path" common setting should be configured correctly. CCE-12899-1 2010-10-04T15:46:26.453Z 2012-01-05T04:33:36.783Z The "Web Query dialog box home page" Excel setting should be configured correctly. CCE-13730-7 2010-10-04T15:46:26.517Z 2012-01-05T04:33:36.863Z The "Use ClearType" common setting should be configured correctly. CCE-14482-4 2010-10-04T15:46:26.563Z 2012-01-05T04:33:36.957Z The "Turn off custom dictionary" setting should be configured correctly. CCE-11805-9 2010-10-04T15:46:26.610Z 2012-01-05T04:33:37.003Z The "Trust Center: Trusted Location #3" common setting should be configured correctly. CCE-13453-6 2010-10-04T15:46:26.657Z 2012-01-05T04:33:37.067Z The "Turn off saving input history data for predictive input to file" setting should be configured correctly. CCE-14657-1 2010-10-04T15:46:26.717Z 2012-01-05T04:33:37.113Z The "Swedish (Finland)" common setting should be configured correctly. CCE-13593-9 2010-10-04T15:46:26.767Z 2012-01-05T04:33:37.157Z The "User templates path" common setting should be configured correctly. CCE-12607-8 2010-10-04T15:46:26.813Z 2012-01-05T04:33:37.237Z The "Turn off screen clipping" common setting should be configured correctly. CCE-11926-3 2010-10-04T15:46:26.860Z 2012-01-05T04:33:37.330Z The "Tigrigna (Eritrea)" common setting should be configured correctly. CCE-14038-4 2010-10-04T15:46:26.923Z 2012-01-05T04:33:37.393Z The "Tibetan (PRC)" common setting should be configured correctly. CCE-14327-1 2010-10-04T15:46:26.983Z 2012-01-05T04:33:37.440Z The "Spanish (Nicaragua)" common setting should be configured correctly. CCE-14487-3 2010-10-04T15:46:27.030Z 2012-01-05T04:33:37.503Z The "With a Web discussions link" common setting should be configured correctly. CCE-13376-9 2010-10-04T15:46:27.093Z 2012-01-05T04:33:37.550Z The "Urdu" common setting should be configured correctly. CCE-13758-8 2010-10-04T15:46:27.140Z 2012-01-05T04:33:37.597Z The "Stop reporting error messages" common setting should be configured correctly. CCE-14380-0 2010-10-04T15:46:27.203Z 2012-01-05T04:33:37.643Z The "Tamazight (Latin, Algeria)" common setting should be configured correctly. CCE-12357-0 2010-10-04T15:46:27.267Z 2012-01-05T04:33:37.690Z The "Spanish (Paraguay)" common setting should be configured correctly. CCE-14342-0 2010-10-04T15:46:27.313Z 2012-01-05T04:33:37.737Z The "Yi (PRC)" common setting should be configured correctly. CCE-12969-2 2010-10-04T15:46:27.377Z 2012-01-05T04:33:37.800Z The "Use system font instead of the Office default UI font" common setting should be configured correctly. CCE-12031-1 2010-10-04T15:46:27.423Z 2012-01-05T04:33:37.863Z The "Tooltip for disabled toolbar buttons and menu items" common setting should be configured correctly. CCE-13194-6 2010-10-04T15:46:27.467Z 2012-01-05T04:33:37.907Z The "Trust Center: Trusted Location #2" common setting should be configured correctly. CCE-14528-4 2010-10-04T15:46:27.530Z 2012-01-05T04:33:37.970Z The "Workflow Cache 15" common setting should be configured correctly. CCE-14046-7 2010-10-04T15:46:27.577Z 2012-01-05T04:33:38.017Z The "Trust Center: Trusted Location #12" common setting should be configured correctly. CCE-12491-7 2010-10-04T15:46:27.627Z 2012-01-05T04:33:38.080Z The "With a simple Web discussions link" common setting should be configured correctly. CCE-11886-9 2010-10-04T15:46:27.687Z 2012-01-05T04:33:38.127Z The "Yiddish" common setting should be configured correctly. CCE-14258-8 2010-10-04T15:46:27.750Z 2012-01-05T04:33:38.173Z The "Turn off user customizations via UI" common setting should be configured correctly. CCE-13101-1 2010-10-04T15:46:27.797Z 2012-01-05T04:33:38.237Z The "Unsafe Location #3" common setting should be configured correctly. CCE-13578-0 2010-10-04T15:46:27.843Z 2012-01-05T04:33:38.283Z The "Turn off all user customizations" common setting should be configured correctly. CCE-12236-6 2010-10-04T15:46:27.890Z 2012-01-05T04:33:38.330Z The "Trust Center: Trusted Location #7" common setting should be configured correctly. CCE-14310-7 2010-10-04T15:46:27.937Z 2012-01-05T04:33:38.377Z The "Unsafe Location #16" common setting should be configured correctly. CCE-12599-7 2010-10-04T15:46:27.983Z 2012-01-05T04:33:38.440Z The "Turn off Outlook name dictionaries" setting should be configured correctly. CCE-11792-9 2010-10-04T15:46:28.030Z 2012-01-05T04:33:38.487Z The "Turn off saving auto-tuning data to file" setting should be configured correctly. CCE-12542-7 2010-10-04T15:46:28.077Z 2012-01-05T04:33:38.533Z The "With just an attachment" common setting should be configured correctly. CCE-14196-0 2010-10-04T15:46:28.127Z 2012-01-05T04:33:38.580Z The "Spanish (Uruguay)" common setting should be configured correctly. CCE-14319-8 2010-10-04T15:46:28.173Z 2012-01-05T04:33:38.643Z The "Unsafe Location #5" common setting should be configured correctly. CCE-13154-0 2010-10-04T15:46:28.217Z 2012-01-05T04:33:38.690Z The "Unsafe Location #19" common setting should be configured correctly. CCE-13141-7 2010-10-04T15:46:28.267Z 2012-01-05T04:33:38.753Z The "Unsafe Location #14" common setting should be configured correctly. CCE-12859-5 2010-10-04T15:46:28.297Z 2012-01-05T04:33:38.800Z The "With a simple Web discussions link" common setting should be configured correctly. CCE-14014-5 2010-10-04T15:46:28.343Z 2012-01-05T04:33:38.863Z The "Unsafe Location #4" common setting should be configured correctly. CCE-14983-1 2010-10-04T15:46:28.390Z 2012-01-05T04:33:38.907Z The "Uzbek (Cyrillic)" common setting should be configured correctly. CCE-14337-0 2010-10-04T15:46:28.437Z 2012-01-05T04:33:38.970Z The "Unsafe Location #17" common setting should be configured correctly. CCE-12505-4 2010-10-04T15:46:28.483Z 2012-01-05T04:33:39.017Z The "Yakut" common setting should be configured correctly. CCE-13285-2 2010-10-04T15:46:28.530Z 2012-01-05T04:33:39.067Z The "Workflow Cache 10" common setting should be configured correctly. CCE-12050-1 2010-10-04T15:46:28.577Z 2012-01-05T04:33:39.127Z The "Do not record listed Outlook items in Journal" Outlook setting should be configured correctly. CCE-13147-4 2010-10-04T15:46:28.627Z 2012-01-05T04:33:39.173Z The "Automatically journal these items" Outlook setting should be configured correctly. CCE-14730-6 2010-10-04T15:46:28.717Z 2012-01-05T04:33:39.237Z The "Journal entry options" Outlook setting should be configured correctly. CCE-12110-3 2010-10-04T15:46:28.767Z 2012-01-05T04:33:39.330Z The "Hide missing component download hyperlinks" common setting should be configured correctly. CCE-14547-4 2010-10-04T15:46:28.813Z 2012-01-05T04:33:39.377Z The "Set download location for Microsoft .NET Framework 3.5 SP1" common setting should be configured correctly. CCE-12156-6 2010-10-04T15:46:28.860Z 2012-01-05T04:33:39.423Z The "Enable AutoRecover" InfoPath setting should be configured correctly. CCE-14808-0 2010-10-04T15:46:28.907Z 2012-01-05T04:33:39.487Z The "AutoRecover Interval" InfoPath setting should be configured correctly. CCE-14357-8 2010-10-04T15:46:28.953Z 2012-01-05T04:33:39.533Z The "Disable Common Language Runtime errors when filling out forms" InfoPath setting should be configured correctly. CCE-14105-1 2010-10-04T15:46:29.000Z 2012-01-05T04:33:39.580Z The "Online content options" common setting should be configured correctly. CCE-12113-7 2010-10-04T15:46:29.047Z 2012-01-05T04:33:39.627Z The "Show the New template gallery when starting Publisher" Publisher setting should be configured correctly. CCE-13219-1 2010-10-04T15:46:29.093Z 2012-01-05T04:33:39.673Z The "Disable Slide Update" PowerPoint setting should be configured correctly. CCE-12964-3 2010-10-04T15:46:29.140Z 2012-01-05T04:33:39.720Z The "Disable commands" Word setting should be configured correctly. CCE-12776-1 2010-10-04T15:46:29.187Z 2012-01-05T04:33:39.767Z The "Disable shortcut keys" Word setting should be configured correctly. CCE-13114-4 2010-10-04T15:46:29.233Z 2012-01-05T04:33:39.830Z The "Disable commands" Publisher setting should be configured correctly. CCE-12303-4 2010-10-04T15:46:29.280Z 2012-01-05T04:33:39.877Z The "Afrikaans" common setting should be configured correctly. CCE-12760-5 2010-10-04T15:46:29.327Z 2012-01-05T04:33:39.923Z The "Greek" common setting should be configured correctly. CCE-12624-3 2010-10-04T15:46:29.377Z 2012-01-05T04:33:39.970Z The "Maori" common setting should be configured correctly. CCE-13292-8 2010-10-04T15:46:29.423Z 2012-01-05T04:33:40.017Z The "Amharic" common setting should be configured correctly. CCE-12140-0 2010-10-04T15:46:29.467Z 2012-01-05T04:33:40.067Z The "Alsatian" common setting should be configured correctly. CCE-12430-5 2010-10-04T15:46:29.517Z 2012-01-05T04:33:40.113Z The "Assamese (India)" common setting should be configured correctly. CCE-14662-1 2010-10-04T15:46:29.563Z 2012-01-05T04:33:40.157Z The "Russian (Moldova)" common setting should be configured correctly. CCE-12323-2 2010-10-04T15:46:29.610Z 2012-01-05T04:33:40.220Z The "Bengali (Bangladesh)" common setting should be configured correctly. CCE-13419-7 2010-10-04T15:46:29.657Z 2012-01-05T04:33:40.267Z The "Romanian (Moldova)" common setting should be configured correctly. CCE-12195-4 2010-10-04T15:46:29.703Z 2012-01-05T04:33:40.317Z The "Gaelic (United Kingdom)" common setting should be configured correctly. CCE-14605-0 2010-10-04T15:46:29.750Z 2012-01-05T04:33:40.377Z The "Kazakh" common setting should be configured correctly. CCE-13038-5 2010-10-04T15:46:29.797Z 2012-01-05T04:33:40.423Z The "Chinese (Hong Kong S.A.R.)" common setting should be configured correctly. CCE-13457-7 2010-10-04T15:46:29.843Z 2012-01-05T04:33:40.470Z The "Spanish (El Salvador)" common setting should be configured correctly. CCE-13250-6 2010-10-04T15:46:29.907Z 2012-01-05T04:33:40.517Z The "Armenian (Armenia)" common setting should be configured correctly. CCE-14602-7 2010-10-04T15:46:29.953Z 2012-01-05T04:33:40.597Z The "Inuktitut (Latin)" common setting should be configured correctly. CCE-12310-9 2010-10-04T15:46:30.000Z 2012-01-05T04:33:40.657Z The "Korean" common setting should be configured correctly. CCE-12349-7 2010-10-04T15:46:30.047Z 2012-01-05T04:33:40.720Z The "Serbian (Latin, Serbia and Montenegro (Former))" common setting should be configured correctly. CCE-11993-3 2010-10-04T15:46:30.093Z 2012-01-05T04:33:40.767Z The "Georgian" common setting should be configured correctly. CCE-12490-9 2010-10-04T15:46:30.140Z 2012-01-05T04:33:40.817Z The "Serbian (Latin, Serbia)" common setting should be configured correctly. CCE-12355-4 2010-10-04T15:46:30.187Z 2012-01-05T04:33:40.863Z The "Quechua (Bolivia)" common setting should be configured correctly. CCE-12216-8 2010-10-04T15:46:30.233Z 2012-01-05T04:33:40.907Z The "Igbo" common setting should be configured correctly. CCE-12809-0 2010-10-04T15:46:30.297Z 2012-01-05T04:33:40.957Z The "Sami, Southern (Sweden)" common setting should be configured correctly. CCE-13330-6 2010-10-04T15:46:30.343Z 2012-01-05T04:33:40.987Z The "Romanian (Romania)" common setting should be configured correctly. CCE-14260-4 2010-10-04T15:46:30.390Z 2012-01-05T04:33:41.033Z The "Spanish (Guatemala)" common setting should be configured correctly. CCE-12942-9 2010-10-04T15:46:30.437Z 2012-01-05T04:33:41.080Z The "Papiamentu" common setting should be configured correctly. CCE-14187-9 2010-10-04T15:46:30.500Z 2012-01-05T04:33:41.127Z The "Fulfulde" common setting should be configured correctly. CCE-13849-5 2010-10-04T15:46:30.547Z 2012-01-05T04:33:41.173Z The "Hawaiian" common setting should be configured correctly. CCE-12883-5 2010-10-04T15:46:30.593Z 2012-01-05T04:33:41.237Z The "Arabic (Yemen)" common setting should be configured correctly. CCE-14426-1 2010-10-04T15:46:30.640Z 2012-01-05T04:33:41.283Z The "Setswana" common setting should be configured correctly. CCE-13701-8 2010-10-04T15:46:30.703Z 2012-01-05T04:33:41.330Z The "Mongolian (Traditional Mongolian)" common setting should be configured correctly. CCE-12396-8 2010-10-04T15:46:30.750Z 2012-01-05T04:33:41.393Z The "Sami, Skolt (Finland)" common setting should be configured correctly. CCE-14168-9 2010-10-04T15:46:30.797Z 2012-01-05T04:33:41.440Z The "English (Belize)" common setting should be configured correctly. CCE-12588-0 2010-10-04T15:46:30.860Z 2012-01-05T04:33:41.487Z The "Serbian (Latin, Montenegro)" common setting should be configured correctly. CCE-11586-5 2010-10-04T15:46:30.907Z 2012-01-05T04:33:41.550Z The "Arabic (Algeria)" common setting should be configured correctly. CCE-13681-2 2010-10-04T15:46:30.953Z 2012-01-05T04:33:41.627Z The "Spanish (Honduras)" common setting should be configured correctly. CCE-12734-0 2010-10-04T15:46:31.017Z 2012-01-05T04:33:41.690Z The "Lithuanian" common setting should be configured correctly. CCE-12199-6 2010-10-04T15:46:31.063Z 2012-01-05T04:33:41.753Z The "Bosnian (Cyrillic, Bosnia and Herzegovina)" common setting should be configured correctly. CCE-13604-4 2010-10-04T15:46:31.110Z 2012-01-05T04:33:41.817Z The "Macedonian (FYROM)" common setting should be configured correctly. CCE-13369-4 2010-10-04T15:46:31.157Z 2012-01-05T04:33:41.863Z The "Azeri (Latin)" common setting should be configured correctly. CCE-12550-0 2010-10-04T15:46:31.203Z 2012-01-05T04:33:41.907Z The "Konkani" common setting should be configured correctly. CCE-13792-7 2010-10-04T15:46:31.250Z 2012-01-05T04:33:41.957Z The "French (Haiti)" common setting should be configured correctly. CCE-13762-0 2010-10-04T15:46:31.297Z 2012-01-05T04:33:42.003Z The "Hungarian" common setting should be configured correctly. CCE-12770-4 2010-10-04T15:46:31.343Z 2012-01-05T04:33:42.050Z The "Sindhi (Devanagari)" common setting should be configured correctly. CCE-14245-5 2010-10-04T15:46:31.390Z 2012-01-05T04:33:42.097Z The "Dutch (Netherlands)" common setting should be configured correctly. CCE-12445-3 2010-10-04T15:46:31.437Z 2012-01-05T04:33:42.143Z The "Inuktitut (Syllabics)" common setting should be configured correctly. CCE-14275-2 2010-10-04T15:46:31.483Z 2012-01-05T04:33:42.190Z The "Oriya" common setting should be configured correctly. CCE-13239-9 2010-10-04T15:46:31.530Z 2012-01-05T04:33:42.253Z The "French (Cameroon)" common setting should be configured correctly. CCE-13773-7 2010-10-04T15:46:31.577Z 2012-01-05T04:33:42.300Z The "Sinhala" common setting should be configured correctly. CCE-13207-6 2010-10-04T15:46:31.627Z 2012-01-05T04:33:42.347Z The "Quechua (Ecuador)" common setting should be configured correctly. CCE-14742-1 2010-10-04T15:46:31.687Z 2012-01-05T04:33:42.393Z The "Mongolian (Cyrillic)" common setting should be configured correctly. CCE-13770-3 2010-10-04T15:46:31.733Z 2012-01-05T04:33:42.457Z The "Croatian (Bosnia and Herzegovina)" common setting should be configured correctly. CCE-13166-4 2010-10-04T15:46:31.780Z 2012-01-05T04:33:42.503Z The "English (Hong Kong S.A.R.)" common setting should be configured correctly. CCE-13861-0 2010-10-04T15:46:31.827Z 2012-01-05T04:33:42.550Z The "Danish" common setting should be configured correctly. CCE-12361-2 2010-10-04T15:46:31.877Z 2012-01-05T04:33:42.613Z The "English (Ireland)" common setting should be configured correctly. CCE-13315-7 2010-10-04T15:46:31.923Z 2012-01-05T04:33:42.657Z The "French (Monaco)" common setting should be configured correctly. CCE-11897-6 2010-10-04T15:46:31.967Z 2012-01-05T04:33:42.707Z The "Azeri (Cyrillic)" common setting should be configured correctly. CCE-13623-4 2010-10-04T15:46:32.017Z 2012-01-05T04:33:42.767Z The "Chinese (Singapore)" common setting should be configured correctly. CCE-12523-7 2010-10-04T15:46:32.063Z 2012-01-05T04:33:42.817Z The "Spanish (Dominican Republic)" common setting should be configured correctly. CCE-12317-4 2010-10-04T15:46:32.110Z 2012-01-05T04:33:42.863Z The "Spanish (Argentina)" common setting should be configured correctly. CCE-13056-7 2010-10-04T15:46:32.157Z 2012-01-05T04:33:42.907Z The "Kannada" common setting should be configured correctly. CCE-12742-3 2010-10-04T15:46:32.203Z 2012-01-05T04:33:42.957Z The "Catalan" common setting should be configured correctly. CCE-12727-4 2010-10-04T15:46:32.250Z 2012-01-05T04:33:43.067Z The "Arabic (Egypt)" common setting should be configured correctly. CCE-12615-1 2010-10-04T15:46:32.297Z 2012-01-05T04:33:43.113Z The "Slovak" common setting should be configured correctly. CCE-13684-6 2010-10-04T15:46:32.360Z 2012-01-05T04:33:43.173Z The "Portuguese (Brazil)" common setting should be configured correctly. CCE-12574-0 2010-10-04T15:46:32.407Z 2012-01-05T04:33:43.220Z The "Kashmiri (Devanagari)" common setting should be configured correctly. CCE-14137-4 2010-10-04T15:46:32.453Z 2012-01-05T04:33:43.267Z The "Chinese (PRC)" common setting should be configured correctly. CCE-12735-7 2010-10-04T15:46:32.517Z 2012-01-05T04:33:43.330Z The "Finnish" common setting should be configured correctly. CCE-13501-2 2010-10-04T15:46:32.563Z 2012-01-05T04:33:43.377Z The "Kanuri" common setting should be configured correctly. CCE-11924-8 2010-10-04T15:46:32.627Z 2012-01-05T04:33:43.423Z The "French (Canada)" common setting should be configured correctly. CCE-12695-3 2010-10-04T15:46:32.687Z 2012-01-05T04:33:43.470Z The "Maltese" common setting should be configured correctly. CCE-12409-9 2010-10-04T15:46:32.733Z 2012-01-05T04:33:43.517Z The "Arabic (Saudi Arabia)" common setting should be configured correctly. CCE-12515-3 2010-10-04T15:46:32.797Z 2012-01-05T04:33:43.567Z The "Guarani" common setting should be configured correctly. CCE-12424-8 2010-10-04T15:46:32.843Z 2012-01-05T04:33:43.613Z The "Malay (Brunei Darussalam)" common setting should be configured correctly. CCE-13441-1 2010-10-04T15:46:32.907Z 2012-01-05T04:33:43.657Z The "English (Indonesia)" common setting should be configured correctly. CCE-11590-7 2010-10-04T15:46:32.953Z 2012-01-05T04:33:43.707Z The "Spanish (Bolivia)" common setting should be configured correctly. CCE-14234-9 2010-10-04T15:46:33.000Z 2012-01-05T04:33:43.753Z The "Punjabi" common setting should be configured correctly. CCE-12534-4 2010-10-04T15:46:33.063Z 2012-01-05T04:33:43.800Z The "Portuguese (Portugal)" common setting should be configured correctly. CCE-13830-5 2010-10-04T15:46:33.110Z 2012-01-05T04:33:43.863Z The "English (Trinidad and Tobago)" common setting should be configured correctly. CCE-13117-7 2010-10-04T15:46:33.187Z 2012-01-05T04:33:43.923Z The "Arabic (Tunisia)" common setting should be configured correctly. CCE-14929-4 2010-10-04T15:46:33.233Z 2012-01-05T04:33:43.970Z The "Bashkir" common setting should be configured correctly. CCE-13217-5 2010-10-04T15:46:33.297Z 2012-01-05T04:33:44.017Z The "Arabic (Morocco)" common setting should be configured correctly. CCE-14104-4 2010-10-04T15:46:33.343Z 2012-01-05T04:33:44.080Z The "French (France)" common setting should be configured correctly. CCE-14280-2 2010-10-04T15:46:33.407Z 2012-01-05T04:33:44.127Z The "Sami, Lule (Sweden)" common setting should be configured correctly. CCE-13651-5 2010-10-04T15:46:33.453Z 2012-01-05T04:33:44.173Z The "Sanskrit" common setting should be configured correctly. CCE-13341-3 2010-10-04T15:46:33.500Z 2012-01-05T04:33:44.237Z The "Sami, Southern (Norway)" common setting should be configured correctly. CCE-12622-7 2010-10-04T15:46:33.563Z 2012-01-05T04:33:44.283Z The "Mohawk" common setting should be configured correctly. CCE-14151-5 2010-10-04T15:46:33.610Z 2012-01-05T04:33:44.363Z The "Dari" common setting should be configured correctly. CCE-14706-6 2010-10-04T15:46:33.717Z 2012-01-05T04:33:44.423Z The "Kinyarwanda" common setting should be configured correctly. CCE-12765-4 2010-10-04T15:46:33.767Z 2012-01-05T04:33:44.470Z The "Hausa (Latin)" common setting should be configured correctly. CCE-13018-7 2010-10-04T15:46:33.827Z 2012-01-05T04:33:44.517Z The "French (West Indies)" common setting should be configured correctly. CCE-13415-5 2010-10-04T15:46:33.877Z 2012-01-05T04:33:44.567Z The "Arabic (Jordan)" common setting should be configured correctly. CCE-12934-6 2010-10-04T15:46:33.937Z 2012-01-05T04:33:44.613Z The "Chinese (Macao S.A.R.)" common setting should be configured correctly. CCE-13811-5 2010-10-04T15:46:33.983Z 2012-01-05T04:33:44.657Z The "Estonian" common setting should be configured correctly. CCE-11546-9 2010-10-04T15:46:34.047Z 2012-01-05T04:33:44.707Z The "Punjabi (Pakistan)" common setting should be configured correctly. CCE-14548-2 2010-10-04T15:46:34.093Z 2012-01-05T04:33:44.753Z The "Arabic (Syria)" common setting should be configured correctly. CCE-12406-5 2010-10-04T15:46:34.140Z 2012-01-05T04:33:44.817Z The "English (Philippines)" common setting should be configured correctly. CCE-14674-6 2010-10-04T15:46:34.203Z 2012-01-05T04:33:44.877Z The "English (U.S.)" common setting should be configured correctly. CCE-11684-8 2010-10-04T15:46:34.250Z 2012-01-05T04:33:44.940Z The "Icelandic" common setting should be configured correctly. CCE-13819-8 2010-10-04T15:46:34.313Z 2012-01-05T04:33:44.987Z The "Sami, Inari (Finland)" common setting should be configured correctly. CCE-14585-4 2010-10-04T15:46:34.360Z 2012-01-05T04:33:45.033Z The "German (Luxembourg)" common setting should be configured correctly. CCE-12834-8 2010-10-04T15:46:34.423Z 2012-01-05T04:33:45.080Z The "English (Canada)" common setting should be configured correctly. CCE-11970-1 2010-10-04T15:46:34.483Z 2012-01-05T04:33:45.143Z The "Albanian" common setting should be configured correctly. CCE-13620-0 2010-10-04T15:46:34.530Z 2012-01-05T04:33:45.207Z The "Lao" common setting should be configured correctly. CCE-13360-3 2010-10-04T15:46:34.593Z 2012-01-05T04:33:45.253Z The "Italian (Italy)" common setting should be configured correctly. CCE-11521-2 2010-10-04T15:46:34.640Z 2012-01-05T04:33:45.300Z The "French (Switzerland)" common setting should be configured correctly. CCE-12228-3 2010-10-04T15:46:34.703Z 2012-01-05T04:33:45.347Z The "French (Reunion)" common setting should be configured correctly. CCE-12544-3 2010-10-04T15:46:34.750Z 2012-01-05T04:33:45.407Z The "Greenlandic" common setting should be configured correctly. CCE-13100-3 2010-10-04T15:46:34.797Z 2012-01-05T04:33:45.457Z The "Polish" common setting should be configured correctly. CCE-12213-5 2010-10-04T15:46:34.860Z 2012-01-05T04:33:45.503Z The "isiXhosa" common setting should be configured correctly. CCE-14723-1 2010-10-04T15:46:34.923Z 2012-01-05T04:33:45.550Z The "Arabic (Qatar)" common setting should be configured correctly. CCE-12826-4 2010-10-04T15:46:34.967Z 2012-01-05T04:33:45.627Z The "Spanish (Costa Rica)" common setting should be configured correctly. CCE-14397-4 2010-10-04T15:46:35.017Z 2012-01-05T04:33:45.720Z The "Occitan" common setting should be configured correctly. CCE-12318-2 2010-10-04T15:46:35.077Z 2012-01-05T04:33:45.800Z The "Filipino" common setting should be configured correctly. CCE-13199-5 2010-10-04T15:46:35.127Z 2012-01-05T04:33:45.863Z The "Serbian (Cyrillic, Serbia and Montenegro (Former))" common setting should be configured correctly. CCE-12756-3 2010-10-04T15:46:35.187Z 2012-01-05T04:33:45.907Z The "Indonesian" common setting should be configured correctly. CCE-14918-7 2010-10-04T15:46:35.233Z 2012-01-05T04:33:45.957Z The "Oromo" common setting should be configured correctly. CCE-12837-1 2010-10-04T15:46:35.313Z 2012-01-05T04:33:46.003Z The "Breton" common setting should be configured correctly. CCE-14727-2 2010-10-04T15:46:35.360Z 2012-01-05T04:33:46.050Z The "Malay (Malaysia)" common setting should be configured correctly. CCE-14562-3 2010-10-04T15:46:35.407Z 2012-01-05T04:33:46.113Z The "Burmese (Myanmar)" common setting should be configured correctly. CCE-13349-6 2010-10-04T15:46:35.467Z 2012-01-05T04:33:46.157Z The "Corsican" common setting should be configured correctly. CCE-14144-0 2010-10-04T15:46:35.517Z 2012-01-05T04:33:46.207Z The "Sami, Lule (Norway)" common setting should be configured correctly. CCE-13572-3 2010-10-04T15:46:35.563Z 2012-01-05T04:33:46.253Z The "Croatian (Croatia)" common setting should be configured correctly. CCE-12433-9 2010-10-04T15:46:35.627Z 2012-01-05T04:33:46.317Z The "Slovenian" common setting should be configured correctly. CCE-12864-5 2010-10-04T15:46:35.673Z 2012-01-05T04:33:46.363Z The "Latin" common setting should be configured correctly. CCE-12981-7 2010-10-04T15:46:35.733Z 2012-01-05T04:33:46.407Z The "German (Liechtenstein)" common setting should be configured correctly. CCE-14124-2 2010-10-04T15:46:35.780Z 2012-01-05T04:33:46.470Z The "Sesotho sa Leboa" common setting should be configured correctly. CCE-12467-7 2010-10-04T15:46:35.843Z 2012-01-05T04:33:46.517Z The "Khmer" common setting should be configured correctly. CCE-14273-7 2010-10-04T15:46:35.890Z 2012-01-05T04:33:46.567Z The "Spanish (Chile)" common setting should be configured correctly. CCE-12642-5 2010-10-04T15:46:35.937Z 2012-01-05T04:33:46.613Z The "Gujarati" common setting should be configured correctly. CCE-13756-2 2010-10-04T15:46:36.000Z 2012-01-05T04:33:46.657Z The "Irish (Ireland)" common setting should be configured correctly. CCE-14185-3 2010-10-04T15:46:36.047Z 2012-01-05T04:33:46.720Z The "Serbian (Cyrillic, Serbia)" common setting should be configured correctly. CCE-12385-1 2010-10-04T15:46:36.110Z 2012-01-05T04:33:46.767Z The "English (Jamaica)" common setting should be configured correctly. CCE-14493-1 2010-10-04T15:46:36.173Z 2012-01-05T04:33:46.847Z The "Sami, Northern (Norway)" common setting should be configured correctly. CCE-13183-9 2010-10-04T15:46:36.217Z 2012-01-05T04:33:46.923Z The "Japanese" common setting should be configured correctly. CCE-13678-8 2010-10-04T15:46:36.267Z 2012-01-05T04:33:46.970Z The "Sami, Northern (Finland)" common setting should be configured correctly. CCE-13948-5 2010-10-04T15:46:36.327Z 2012-01-05T04:33:47.017Z The "German (Switzerland)" common setting should be configured correctly. CCE-14502-9 2010-10-04T15:46:36.390Z 2012-01-05T04:33:47.080Z The "Faeroese" common setting should be configured correctly. CCE-12788-6 2010-10-04T15:46:36.437Z 2012-01-05T04:33:47.127Z The "Basque" common setting should be configured correctly. CCE-13541-8 2010-10-04T15:46:36.483Z 2012-01-05T04:33:47.173Z The "Arabic (Kuwait)" common setting should be configured correctly. CCE-12132-7 2010-10-04T15:46:36.547Z 2012-01-05T04:33:47.237Z The "Spanish (Mexico)" common setting should be configured correctly. CCE-12499-0 2010-10-04T15:46:36.593Z 2012-01-05T04:33:47.283Z The "Russian (Russia)" common setting should be configured correctly. CCE-14749-6 2010-10-04T15:46:36.640Z 2012-01-05T04:33:47.330Z The "Serbian (Cyrillic, Bosnia and Herzegovina)" common setting should be configured correctly. CCE-13732-3 2010-10-04T15:46:36.703Z 2012-01-05T04:33:47.377Z The "Marathi" common setting should be configured correctly. CCE-12655-7 2010-10-04T15:46:36.750Z 2012-01-05T04:33:47.423Z The "English (India)" common setting should be configured correctly. CCE-12674-8 2010-10-04T15:46:36.813Z 2012-01-05T04:33:47.470Z The "English (Malaysia)" common setting should be configured correctly. CCE-13644-0 2010-10-04T15:46:36.860Z 2012-01-05T04:33:47.517Z The "Cherokee" common setting should be configured correctly. CCE-14020-2 2010-10-04T15:46:36.923Z 2012-01-05T04:33:47.567Z The "Italian (Switzerland)" common setting should be configured correctly. CCE-12162-4 2010-10-04T15:46:36.983Z 2012-01-05T04:33:47.613Z The "isiZulu" common setting should be configured correctly. CCE-12326-5 2010-10-04T15:46:37.047Z 2012-01-05T04:33:47.673Z The "Nepali (India)" common setting should be configured correctly. CCE-14462-6 2010-10-04T15:46:37.093Z 2012-01-05T04:33:47.720Z The "Chinese (Taiwan)" common setting should be configured correctly. CCE-12075-8 2010-10-04T15:46:37.157Z 2012-01-05T04:33:47.767Z The "K'iche" common setting should be configured correctly. CCE-14788-4 2010-10-04T15:46:37.203Z 2012-01-05T04:33:47.817Z The "Arabic (Lebanon)" common setting should be configured correctly. CCE-13790-1 2010-10-04T15:46:37.267Z 2012-01-05T04:33:47.863Z The "French (Cote d'Ivoire)" common setting should be configured correctly. CCE-12758-9 2010-10-04T15:46:37.313Z 2012-01-05T04:33:47.923Z The "Lower Sorbian" common setting should be configured correctly. CCE-12224-2 2010-10-04T15:46:37.377Z 2012-01-05T04:33:47.970Z The "Latvian" common setting should be configured correctly. CCE-14668-8 2010-10-04T15:46:37.423Z 2012-01-05T04:33:48.017Z The "Romansh (Switzerland)" common setting should be configured correctly. CCE-13507-9 2010-10-04T15:46:37.467Z 2012-01-05T04:33:48.067Z The "Bosnian (Latin, Bosnia and Herzegovina)" common setting should be configured correctly. CCE-12172-3 2010-10-04T15:46:37.530Z 2012-01-05T04:33:48.113Z The "English (Zimbabwe)" common setting should be configured correctly. CCE-12362-0 2010-10-04T15:46:37.577Z 2012-01-05T04:33:48.157Z The "English (New Zealand)" common setting should be configured correctly. CCE-14786-8 2010-10-04T15:46:37.640Z 2012-01-05T04:33:48.207Z The "French (Mali)" common setting should be configured correctly. CCE-12100-4 2010-10-04T15:46:37.687Z 2012-01-05T04:33:48.253Z The "English (U.K.)" common setting should be configured correctly. CCE-13212-6 2010-10-04T15:46:37.750Z 2012-01-05T04:33:48.300Z The "Spanish (Ecuador)" common setting should be configured correctly. CCE-12669-8 2010-10-04T15:46:37.780Z 2012-01-05T04:33:48.347Z The "Dutch (Belgium)" common setting should be configured correctly. CCE-12109-5 2010-10-04T15:46:37.843Z 2012-01-05T04:33:48.393Z The "German (Austria)" common setting should be configured correctly. CCE-13891-7 2010-10-04T15:46:37.890Z 2012-01-05T04:33:48.457Z The "Bulgarian" common setting should be configured correctly. CCE-12338-0 2010-10-04T15:46:37.953Z 2012-01-05T04:33:48.503Z The "French (Luxembourg)" common setting should be configured correctly. CCE-13003-9 2010-10-04T15:46:38.000Z 2012-01-05T04:33:48.550Z The "English (Singapore)" common setting should be configured correctly. CCE-13912-1 2010-10-04T15:46:38.063Z 2012-01-05T04:33:48.597Z The "Somali" common setting should be configured correctly. CCE-12270-5 2010-10-04T15:46:38.110Z 2012-01-05T04:33:48.643Z The "Hebrew (Israel)" common setting should be configured correctly. CCE-13112-8 2010-10-04T15:46:38.173Z 2012-01-05T04:33:48.690Z The "Kyrgyz" common setting should be configured correctly. CCE-14538-3 2010-10-04T15:46:38.217Z 2012-01-05T04:33:48.737Z The "Arabic (Bahrain)" common setting should be configured correctly. CCE-12259-8 2010-10-04T15:46:38.267Z 2012-01-05T04:33:48.783Z The "Sami, Northern (Sweden)" common setting should be configured correctly. CCE-12366-1 2010-10-04T15:46:38.313Z 2012-01-05T04:33:48.830Z The "Galician" common setting should be configured correctly. CCE-12363-8 2010-10-04T15:46:38.360Z 2012-01-05T04:33:48.877Z The "Serbian (Cyrillic, Montenegro)" common setting should be configured correctly. CCE-14902-1 2010-10-04T15:46:38.407Z 2012-01-05T04:33:48.940Z The "English (Caribbean)" common setting should be configured correctly. CCE-13434-6 2010-10-04T15:46:38.453Z 2012-01-05T04:33:48.987Z The "French (Morocco)" common setting should be configured correctly. CCE-12503-9 2010-10-04T15:46:38.500Z 2012-01-05T04:33:49.033Z The "Sindhi (Arabic)" common setting should be configured correctly. CCE-13603-6 2010-10-04T15:46:38.547Z 2012-01-05T04:33:49.080Z The "German (Germany)" common setting should be configured correctly. CCE-14436-0 2010-10-04T15:46:38.593Z 2012-01-05T04:33:49.143Z The "Luxembourgish (Luxembourg)" common setting should be configured correctly. CCE-12484-2 2010-10-04T15:46:38.657Z 2012-01-05T04:33:49.190Z The "Mapudungun" common setting should be configured correctly. CCE-12967-6 2010-10-04T15:46:38.703Z 2012-01-05T04:33:49.237Z The "Manipuri" common setting should be configured correctly. CCE-14410-5 2010-10-04T15:46:38.750Z 2012-01-05T04:33:49.283Z The "French (Congo (DRC))" common setting should be configured correctly. CCE-14018-6 2010-10-04T15:46:38.797Z 2012-01-05T04:33:49.330Z The "Hindi" common setting should be configured correctly. CCE-13007-0 2010-10-04T15:46:38.843Z 2012-01-05T04:33:49.393Z The "Frisian (Netherlands)" common setting should be configured correctly. CCE-13763-8 2010-10-04T15:46:38.890Z 2012-01-05T04:33:49.440Z The "French (Senegal)" common setting should be configured correctly. CCE-13882-6 2010-10-04T15:46:38.937Z 2012-01-05T04:33:49.487Z The "Spanish (Colombia)" common setting should be configured correctly. CCE-12652-4 2010-10-04T15:46:38.983Z 2012-01-05T04:33:49.533Z The "Kashmiri (Arabic)" common setting should be configured correctly. CCE-14956-7 2010-10-04T15:46:39.030Z 2012-01-05T04:33:49.580Z The "French (Belgium)" common setting should be configured correctly. CCE-12230-9 2010-10-04T15:46:39.077Z 2012-01-05T04:33:49.627Z The "Malayalam" common setting should be configured correctly. CCE-11541-0 2010-10-04T15:46:39.127Z 2012-01-05T04:33:49.673Z The "Norwegian (Nynorsk)" common setting should be configured correctly. CCE-13552-5 2010-10-04T15:46:39.173Z 2012-01-05T04:33:49.720Z The "Quechua (Peru)" common setting should be configured correctly. CCE-12884-3 2010-10-04T15:46:39.217Z 2012-01-05T04:33:49.783Z The "Ibibio" common setting should be configured correctly. CCE-12946-0 2010-10-04T15:46:39.280Z 2012-01-05T04:33:49.830Z The "Arabic (Oman)" common setting should be configured correctly. CCE-14074-9 2010-10-04T15:46:39.327Z 2012-01-05T04:33:49.877Z The "English (South Africa)" common setting should be configured correctly. CCE-12875-1 2010-10-04T15:46:39.377Z 2012-01-05T04:33:49.957Z The "Norwegian (Bokmål)" common setting should be configured correctly. CCE-11910-7 2010-10-04T15:46:39.423Z 2012-01-05T04:33:50.017Z The "Arabic (Libya)" common setting should be configured correctly. CCE-13757-0 2010-10-04T15:46:39.467Z 2012-01-05T04:33:50.080Z The "Arabic (Iraq)" common setting should be configured correctly. CCE-12785-2 2010-10-04T15:46:39.517Z 2012-01-05T04:33:50.127Z The "Pashto" common setting should be configured correctly. CCE-14283-6 2010-10-04T15:46:39.563Z 2012-01-05T04:33:50.190Z The "English (Australia)" common setting should be configured correctly. CCE-14142-4 2010-10-04T15:46:39.610Z 2012-01-05T04:33:50.253Z The "Bengali (India)" common setting should be configured correctly. CCE-13872-7 2010-10-04T15:46:39.657Z 2012-01-05T04:33:50.317Z The "Czech" common setting should be configured correctly. CCE-13475-9 2010-10-04T15:46:39.703Z 2012-01-05T04:33:50.393Z The "Divehi" common setting should be configured correctly. CCE-13384-3 2010-10-04T15:46:39.750Z 2012-01-05T04:33:50.457Z The "Arabic (U.A.E.)" common setting should be configured correctly. CCE-13865-1 2010-10-04T15:46:39.827Z 2012-01-05T04:33:50.517Z The "Persian" common setting should be configured correctly. CCE-12823-1 2010-10-04T15:46:39.877Z 2012-01-05T04:33:50.567Z The "Nepali (Nepal)" common setting should be configured correctly. CCE-12947-8 2010-10-04T15:46:39.923Z 2012-01-05T04:33:50.613Z The "Serbian (Latin, Bosnia and Herzegovina)" common setting should be configured correctly. CCE-13186-2 2010-10-04T15:46:39.967Z 2012-01-05T04:33:50.673Z The "Edo" common setting should be configured correctly. CCE-12300-0 2010-10-04T15:46:40.030Z 2012-01-05T04:33:50.720Z The "Belarusian" common setting should be configured correctly. CCE-13452-8 2010-10-04T15:46:40.077Z 2012-01-05T04:33:50.783Z The "Straight quotes with smart quotes" Word setting should be configured correctly. CCE-14346-1 2010-10-04T15:46:40.127Z 2012-01-05T04:33:50.830Z The "Ordinals (1st) with superscript" Word setting should be configured correctly. CCE-11650-9 2010-10-04T15:46:40.173Z 2012-01-05T04:33:50.877Z The "Dash-like characters" Word setting should be configured correctly. CCE-11878-6 2010-10-04T15:46:40.217Z 2012-01-05T04:33:50.923Z The "*Bold* and _italic_ with real formatting" Word setting should be configured correctly. CCE-13877-6 2010-10-04T15:46:40.267Z 2012-01-05T04:33:51.003Z The "Symbol characters (--) with symbols" Word setting should be configured correctly. CCE-13447-8 2010-10-04T15:46:40.313Z 2012-01-05T04:33:51.050Z The "First line indent" Word setting should be configured correctly. CCE-14508-6 2010-10-04T15:46:40.377Z 2012-01-05T04:33:51.097Z The "Fractions (1/2) with fraction character" Word setting should be configured correctly. CCE-12671-4 2010-10-04T15:46:40.423Z 2012-01-05T04:33:51.143Z The "Load pictures from Web pages not created in Excel" Excel setting should be configured correctly. CCE-12311-7 2010-10-04T15:46:40.467Z 2012-01-05T04:33:51.190Z The "Prevent users from adding new content to existing PST files" Outlook setting should be configured correctly. CCE-14494-9 2010-10-04T15:46:40.517Z 2012-01-05T04:33:51.237Z The "Upgrade only the default store" Outlook setting should be configured correctly. CCE-14004-6 2010-10-04T15:46:40.563Z 2012-01-05T04:33:51.283Z The "Do not send meeting forward notifications" Outlook setting should be configured correctly. CCE-13372-8 2010-10-04T15:46:40.627Z 2012-01-05T04:33:51.347Z The "Default location for OST files" Outlook setting should be configured correctly. CCE-13053-4 2010-10-04T15:46:40.673Z 2012-01-05T04:33:51.423Z The "Prevent users from adding PSTs to Outlook profiles and/or prevent using Sharing-Exclusive PSTs" Outlook setting should be configured correctly. CCE-12006-3 2010-10-04T15:46:40.717Z 2012-01-05T04:33:51.487Z The "Permanently remove all deleted content from PST and OST files" Outlook setting should be configured correctly. CCE-14036-8 2010-10-04T15:46:40.767Z 2012-01-05T04:33:51.533Z The "Large PST: Size to disable adding new content" Outlook setting should be configured correctly. CCE-13466-8 2010-10-04T15:46:40.827Z 2012-01-05T04:33:51.580Z The "Legacy PST: Absolute maximum size" Outlook setting should be configured correctly. CCE-13098-9 2010-10-04T15:46:40.877Z 2012-01-05T04:33:51.643Z The "Default location for PST files" Outlook setting should be configured correctly. CCE-12370-3 2010-10-04T15:46:40.923Z 2012-01-05T04:33:51.690Z The "Preferred PST Mode (Unicode/ANSI)" Outlook setting should be configured correctly. CCE-13885-9 2010-10-04T15:46:40.967Z 2012-01-05T04:33:51.737Z The "Large PST: Absolute maximum size" Outlook setting should be configured correctly. CCE-14072-3 2010-10-04T15:46:41.017Z 2012-01-05T04:33:51.800Z The "Legacy PST: Size to disable adding new content" Outlook setting should be configured correctly. CCE-11701-0 2010-10-04T15:46:41.077Z 2012-01-05T04:33:51.863Z The "List of error messages to customize" PowerPoint setting should be configured correctly. CCE-14919-5 2010-10-04T15:46:41.127Z 2012-01-05T04:33:51.907Z The "R1C1 reference style" Excel setting should be configured correctly. CCE-13755-4 2010-10-04T15:46:41.173Z 2012-01-05T04:33:51.957Z The "Missing root certificates" Outlook setting should be configured correctly. CCE-12202-8 2010-10-04T15:46:41.217Z 2012-01-05T04:33:52.017Z The "Retrieving CRLs (Certificate Revocation Lists)" Outlook setting should be configured correctly. CCE-12227-5 2010-10-04T15:46:41.267Z 2012-01-05T04:33:52.067Z The "Missing CRLs" Outlook setting should be configured correctly. CCE-11802-6 2010-10-04T15:46:41.327Z 2012-01-05T04:33:52.113Z The "Attachment Secure Temporary Folder" Outlook setting should be configured correctly. CCE-11692-1 2010-10-04T15:46:41.377Z 2012-01-05T04:33:52.157Z The "Promote Level 2 errors as errors, not warnings" Outlook setting should be configured correctly. CCE-12780-3 2010-10-04T15:46:41.423Z 2012-01-05T04:33:52.207Z The "Check if Word is the default editor for all other Web pages" common setting should be configured correctly. CCE-13634-1 2010-10-04T15:46:41.467Z 2012-01-05T04:33:52.267Z The "Most Recently Used Template List Length" common setting should be configured correctly. CCE-11939-6 2010-10-04T15:46:41.530Z 2012-01-05T04:33:52.317Z The "Document Information Panel Beaconing UI" common setting should be configured correctly. CCE-14882-5 2010-10-04T15:46:41.577Z 2012-01-05T04:33:52.363Z The "Disable Document Information Panel" common setting should be configured correctly. CCE-11572-5 2010-10-04T15:46:41.627Z 2012-01-05T04:33:52.407Z The "Offline Mode for Document Information Panel" common setting should be configured correctly. CCE-12911-4 2010-10-04T15:46:41.673Z 2012-01-05T04:33:52.470Z The "Turn off Data Execution Prevention" OneNote setting should be configured correctly. CCE-13396-7 2010-10-04T15:46:41.717Z 2012-01-05T04:33:52.517Z The "Specify CNG hash algorithm" Excel setting should be configured correctly. CCE-13168-0 2010-10-04T15:46:41.780Z 2012-01-05T04:33:52.567Z The "Set parameters for CNG context" Excel setting should be configured correctly. CCE-12613-6 2010-10-04T15:46:41.827Z 2012-01-05T04:33:52.597Z The "Specify encryption compatibility" Excel setting should be configured correctly. CCE-14368-5 2010-10-04T15:46:41.877Z 2012-01-05T04:33:52.643Z The "Specify CNG salt length" Excel setting should be configured correctly. CCE-13682-0 2010-10-04T15:46:41.923Z 2012-01-05T04:33:52.707Z The "Use new key on password change" Excel setting should be configured correctly. CCE-11967-7 2010-10-04T15:46:41.967Z 2012-01-05T04:33:52.753Z The "Set CNG password spin count" Excel setting should be configured correctly. CCE-12665-6 2010-10-04T15:46:42.030Z 2012-01-05T04:33:52.800Z The "Configure CNG cipher chaining mode" Excel setting should be configured correctly. CCE-12843-9 2010-10-04T15:46:42.077Z 2012-01-05T04:33:52.863Z The "Specify CNG random number generator algorithm" Excel setting should be configured correctly. CCE-12690-4 2010-10-04T15:46:42.140Z 2012-01-05T04:33:52.940Z The "Set CNG cipher algorithm" Excel setting should be configured correctly. CCE-12575-7 2010-10-04T15:46:42.187Z 2012-01-05T04:33:53.003Z The "Set CNG cipher key length" Excel setting should be configured correctly. CCE-12187-1 2010-10-04T15:46:42.233Z 2012-01-05T04:33:53.080Z The "Replace text as you type" common setting should be configured correctly. CCE-14784-3 2010-10-04T15:46:42.280Z 2012-01-05T04:33:53.173Z The "Correct TWo INitial CApitals" common setting should be configured correctly. CCE-13464-3 2010-10-04T15:46:42.327Z 2012-01-05T04:33:53.237Z The "Capitalize first letter of sentence" common setting should be configured correctly. CCE-13724-0 2010-10-04T15:46:42.377Z 2012-01-05T04:33:53.283Z The "Capitalize names of days" common setting should be configured correctly. CCE-12862-9 2010-10-04T15:46:42.437Z 2012-01-05T04:33:53.330Z The "Correct accidental use of cAPS LOCK key" common setting should be configured correctly. CCE-14030-1 2010-10-04T15:46:42.483Z 2012-01-05T04:33:53.377Z The "Show AutoCorrect Options buttons" common setting should be configured correctly. CCE-14539-1 2010-10-04T15:46:42.530Z 2012-01-05T04:33:53.440Z The "Modal Trust Decision Only" Access setting should be configured correctly. CCE-12896-7 2010-10-04T15:46:42.593Z 2012-01-05T04:33:53.487Z The "Base URL" common setting should be configured correctly. CCE-11602-0 2010-10-04T15:46:42.640Z 2012-01-05T04:33:53.550Z The "Default save prompt text" common setting should be configured correctly. CCE-14579-7 2010-10-04T15:46:42.703Z 2012-01-05T04:33:53.597Z The "List of error messages to customize" common setting should be configured correctly. CCE-13118-5 2010-10-04T15:46:42.750Z 2012-01-05T04:33:53.643Z The "Default button text" common setting should be configured correctly. CCE-12987-4 2010-10-04T15:46:42.797Z 2012-01-05T04:33:53.690Z The "Notes appearance" Outlook setting should be configured correctly. CCE-13793-5 2010-10-04T15:46:42.843Z 2012-01-05T04:33:53.737Z The "Do not allow Home Page URL to be set in folder Properties" Outlook setting should be configured correctly. CCE-13052-6 2010-10-04T15:46:42.890Z 2012-01-05T04:33:53.800Z The "Notes Folder Home Page" Outlook setting should be configured correctly. CCE-13960-0 2010-10-04T15:46:42.953Z 2012-01-05T04:33:53.847Z The "Inbox Folder Home Page" Outlook setting should be configured correctly. CCE-14949-2 2010-10-04T15:46:43.000Z 2012-01-05T04:33:53.893Z The "Drafts Folder Home Page" Outlook setting should be configured correctly. CCE-14016-0 2010-10-04T15:46:43.047Z 2012-01-05T04:33:53.970Z The "Deleted Items Folder Home Page" Outlook setting should be configured correctly. CCE-12472-7 2010-10-04T15:46:43.093Z 2012-01-05T04:33:54.033Z The "Contacts Folder Home Page" Outlook setting should be configured correctly. CCE-14299-2 2010-10-04T15:46:43.140Z 2012-01-05T04:33:54.080Z The "Sent Items Folder Home Page" Outlook setting should be configured correctly. CCE-13362-9 2010-10-04T15:46:43.203Z 2012-01-05T04:33:54.127Z The "Journal Folder Home Page" Outlook setting should be configured correctly. CCE-14323-0 2010-10-04T15:46:43.250Z 2012-01-05T04:33:54.190Z The "Outbox Folder Home Page" Outlook setting should be configured correctly. CCE-13585-5 2010-10-04T15:46:43.297Z 2012-01-05T04:33:54.237Z The "Tasks Folder Home Page" Outlook setting should be configured correctly. CCE-14290-1 2010-10-04T15:46:43.360Z 2012-01-05T04:33:54.283Z The "RSS Folder Home Page" Outlook setting should be configured correctly. CCE-14827-0 2010-10-04T15:46:43.407Z 2012-01-05T04:33:54.347Z The "Calendar Folder Home Page" Outlook setting should be configured correctly. CCE-12314-1 2010-10-04T15:46:43.453Z 2012-01-05T04:33:54.440Z The "Modify number of changed items included in SharePoint client page download" Outlook setting should be configured correctly. CCE-12309-1 2010-10-04T15:46:43.500Z 2012-01-05T04:33:54.487Z The "Log SharePoint sync requests and responses" Outlook setting should be configured correctly. CCE-12932-0 2010-10-04T15:46:43.547Z 2012-01-05T04:33:54.567Z The "Default SharePoint lists" Outlook setting should be configured correctly. CCE-12722-5 2010-10-04T15:46:43.610Z 2012-01-05T04:33:54.613Z The "Define custom label for SharePoint store" common setting should be configured correctly. CCE-11685-5 2010-10-04T15:46:43.657Z 2012-01-05T04:33:54.657Z The "Sharepoint folder sync interval" Outlook setting should be configured correctly. CCE-14589-6 2010-10-04T15:46:43.703Z 2012-01-05T04:33:54.707Z The "Do not allow Sharepoint-Outlook integration" Outlook setting should be configured correctly. CCE-13650-7 2010-10-04T15:46:43.750Z 2012-01-05T04:33:54.753Z The "Override published sync interval" Outlook setting should be configured correctly. CCE-13589-7 2010-10-04T15:46:43.813Z 2012-01-05T04:33:54.800Z The "Do not roam users' SharePoint lists" Outlook setting should be configured correctly. CCE-13663-0 2010-10-04T15:46:43.860Z 2012-01-05T04:33:54.863Z The "Layout Options" Outlook setting should be configured correctly. CCE-12528-6 2010-10-04T15:46:43.907Z 2012-01-05T04:33:54.893Z The "Never allow users to specify groups when restricting permission for documents" common setting should be configured correctly. CCE-13535-0 2010-10-04T15:46:43.953Z 2012-01-05T04:33:54.957Z The "Allow users with earlier versions of Office to read with browsers..." common setting should be configured correctly. CCE-13093-0 2010-10-04T15:46:44.000Z 2012-01-05T04:33:55.003Z The "Additional permissions request URL" common setting should be configured correctly. CCE-12221-8 2010-10-04T15:46:44.063Z 2012-01-05T04:33:55.050Z The "Disable Microsoft Passport service for content with restricted permission" common setting should be configured correctly. CCE-13864-4 2010-10-04T15:46:44.110Z 2012-01-05T04:33:55.097Z The "Active Directory timeout for querying one entry for group expansion" common setting should be configured correctly. CCE-14356-0 2010-10-04T15:46:44.173Z 2012-01-05T04:33:55.143Z The "Always require users to connect to verify permission" common setting should be configured correctly. CCE-12171-5 2010-10-04T15:46:44.217Z 2012-01-05T04:33:55.173Z The "Always expand groups in Office when restricting permission for documents" common setting should be configured correctly. CCE-12152-5 2010-10-04T15:46:44.267Z 2012-01-05T04:33:55.237Z The "Prevent users from changing permissions on rights managed content" common setting should be configured correctly. CCE-14076-4 2010-10-04T15:46:44.313Z 2012-01-05T04:33:55.283Z The "Disable template downloads from the client and from Office.com" common setting should be configured correctly. CCE-14686-0 2010-10-04T15:46:44.377Z 2012-01-05T04:33:55.330Z The "Disable access to updates, add-ins, and patches on Office.com" common setting should be configured correctly. CCE-11843-0 2010-10-04T15:46:44.423Z 2012-01-05T04:33:55.363Z The "Disable Clip Art and Media downloads from the client and from Office.com" common setting should be configured correctly. CCE-13894-1 2010-10-04T15:46:44.467Z 2012-01-05T04:33:55.407Z The "Prevents users from uploading document templates to the Office.com Community." common setting should be configured correctly. CCE-14656-3 2010-10-04T15:46:44.517Z 2012-01-05T04:33:55.457Z The "Disable training practice downloads from Office.com" common setting should be configured correctly. CCE-12717-5 2010-10-04T15:46:44.577Z 2012-01-05T04:33:55.503Z The "Disable customer-submitted templates downloads from Office.com" common setting should be configured correctly. CCE-13133-4 2010-10-04T15:46:44.627Z 2012-01-05T04:33:55.580Z The "Display Developer tab in the Ribbon" Excel setting should be configured correctly. CCE-14080-6 2010-10-04T15:46:44.703Z 2012-01-05T04:33:55.627Z The "Disable shortcut keys" InfoPath setting should be configured correctly. CCE-14598-7 2010-10-04T15:46:44.767Z 2012-01-05T04:33:55.690Z The "Disable commands" InfoPath setting should be configured correctly. CCE-12373-7 2010-10-04T15:46:44.827Z 2012-01-05T04:33:55.753Z The "Ignore words with numbers" setting should be configured correctly. CCE-14033-5 2010-10-04T15:46:44.877Z 2012-01-05T04:33:55.800Z The "Arabic modes" Word setting should be configured correctly. CCE-13338-9 2010-10-04T15:46:44.937Z 2012-01-05T04:33:55.893Z The "Hebrew mode" Word setting should be configured correctly. CCE-13527-7 2010-10-04T15:46:44.983Z 2012-01-05T04:33:55.957Z The "Combine aux verb/adj." Word setting should be configured correctly. CCE-13519-4 2010-10-04T15:46:45.030Z 2012-01-05T04:33:56.003Z The "Allow accented uppercase in French" setting should be configured correctly. CCE-13863-6 2010-10-04T15:46:45.077Z 2012-01-05T04:33:56.050Z The "Ignore Internet and file addresses" setting should be configured correctly. CCE-14455-0 2010-10-04T15:46:45.127Z 2012-01-05T04:33:56.097Z The "Process compound nouns" Word setting should be configured correctly. CCE-13919-6 2010-10-04T15:46:45.187Z 2012-01-05T04:33:56.143Z The "German: Use post-reform rules" setting should be configured correctly. CCE-14517-7 2010-10-04T15:46:45.233Z 2012-01-05T04:33:56.190Z The "French Language Options" setting should be configured correctly. CCE-13987-3 2010-10-04T15:46:45.280Z 2012-01-05T04:33:56.237Z The "Ignore words in UPPERCASE" setting should be configured correctly. CCE-11626-9 2010-10-04T15:46:45.327Z 2012-01-05T04:33:56.283Z The "Flag Repeated Words" setting should be configured correctly. CCE-13279-5 2010-10-04T15:46:45.377Z 2012-01-05T04:33:56.330Z The "Display Developer tab in the Ribbon" Word setting should be configured correctly. CCE-14232-3 2010-10-04T15:46:45.437Z 2012-01-05T04:33:56.377Z The "InfoPath APTCA Assembly allowable list" machine InfoPath setting should be configured correctly. CCE-13853-7 2010-10-04T15:46:45.483Z 2012-01-05T04:33:56.423Z The "InfoPath APTCA Assembly Allowable List Enforcement" machine InfoPath setting should be configured correctly. CCE-13131-8 2010-10-04T15:46:45.530Z 2012-01-05T04:33:56.457Z The "Windows Internet Explorer Feature Control Opt-In" machine InfoPath setting should be configured correctly. CCE-11595-6 2010-10-04T15:46:45.593Z 2012-01-05T04:33:56.503Z The "Disable default service" PowerPoint setting should be configured correctly. CCE-12814-0 2010-10-04T15:46:45.640Z 2012-01-05T04:33:56.550Z The "Prevent access to user-specified services" PowerPoint setting should be configured correctly. CCE-14761-1 2010-10-04T15:46:45.687Z 2012-01-05T04:33:56.597Z The "Disable programmatic access" PowerPoint setting should be configured correctly. CCE-12813-2 2010-10-04T15:46:45.733Z 2012-01-05T04:33:56.627Z The "Trust Center: Trusted Location #15" Excel setting should be configured correctly. CCE-13068-2 2010-10-04T15:46:45.797Z 2012-01-05T04:33:56.673Z The "Trust Center: Trusted Location #5" Excel setting should be configured correctly. CCE-12017-0 2010-10-04T15:46:45.843Z 2012-01-05T04:33:56.720Z The "Trust Center: Trusted Location #8" Excel setting should be configured correctly. CCE-14029-3 2010-10-04T15:46:45.890Z 2012-01-05T04:33:56.767Z The "Trust Center: Trusted Location #6" Excel setting should be configured correctly. CCE-13991-5 2010-10-04T15:46:45.937Z 2012-01-05T04:33:56.817Z The "Trust Center: Trusted Location #16" Excel setting should be configured correctly. CCE-14034-3 2010-10-04T15:46:46.000Z 2012-01-05T04:33:56.863Z The "Trust Center: Trusted Location #11" Excel setting should be configured correctly. CCE-13428-8 2010-10-04T15:46:46.047Z 2012-01-05T04:33:56.907Z The "Trust Center: Trusted Location #7" Excel setting should be configured correctly. CCE-12566-6 2010-10-04T15:46:46.093Z 2012-01-05T04:33:56.957Z The "Trust Center: Trusted Location #13" Excel setting should be configured correctly. CCE-13334-8 2010-10-04T15:46:46.140Z 2012-01-05T04:33:56.987Z The "Trust Center: Trusted Location #19" Excel setting should be configured correctly. CCE-11512-1 2010-10-04T15:46:46.203Z 2012-01-05T04:33:57.033Z The "Trust Center: Trusted Location #20" Excel setting should be configured correctly. CCE-12277-0 2010-10-04T15:46:46.250Z 2012-01-05T04:33:57.080Z The "Trust Center: Trusted Location #4" Excel setting should be configured correctly. CCE-13047-6 2010-10-04T15:46:46.313Z 2012-01-05T04:33:57.143Z The "Allow Trusted Locations on the network" Excel setting should be configured correctly. CCE-13685-3 2010-10-04T15:46:46.360Z 2012-01-05T04:33:57.190Z The "Trust Center: Trusted Location #12" Excel setting should be configured correctly. CCE-14329-7 2010-10-04T15:46:46.407Z 2012-01-05T04:33:57.237Z The "Trust Center: Trusted Location #18" Excel setting should be configured correctly. CCE-14086-3 2010-10-04T15:46:46.453Z 2012-01-05T04:33:57.267Z The "Trust Center: Trusted Location #2" Excel setting should be configured correctly. CCE-11624-4 2010-10-04T15:46:46.500Z 2012-01-05T04:33:57.330Z The "Trust Center: Trusted Location #9" Excel setting should be configured correctly. CCE-12762-1 2010-10-04T15:46:46.563Z 2012-01-05T04:33:57.377Z The "Trust Center: Trusted Location #14" Excel setting should be configured correctly. CCE-13223-3 2010-10-04T15:46:46.610Z 2012-01-05T04:33:57.423Z The "Trust Center: Trusted Location #1" Excel setting should be configured correctly. CCE-14819-7 2010-10-04T15:46:46.657Z 2012-01-05T04:33:57.470Z The "Trust Center: Trusted Location #17" Excel setting should be configured correctly. CCE-12936-1 2010-10-04T15:46:46.703Z 2012-01-05T04:33:57.517Z The "Trust Center: Trusted Location #3" Excel setting should be configured correctly. CCE-14375-0 2010-10-04T15:46:46.767Z 2012-01-05T04:33:57.567Z The "Trust Center: Trusted Location #10" Excel setting should be configured correctly. CCE-14524-3 2010-10-04T15:46:46.813Z 2012-01-05T04:33:57.613Z The "Disable all trusted locations" Excel setting should be configured correctly. CCE-14127-5 2010-10-04T15:46:46.860Z 2012-01-05T04:33:57.657Z The "Do not promote InfoPath forms properties into Outlook properties" InfoPath setting should be configured correctly. CCE-12356-2 2010-10-04T15:46:46.923Z 2012-01-05T04:33:57.690Z The "Stationery Fonts" common setting should be configured correctly. CCE-13275-3 2010-10-04T15:46:46.967Z 2012-01-05T04:33:57.753Z The "Improve Proofing Tools" common setting should be configured correctly. CCE-13962-6 2010-10-04T15:46:47.030Z 2012-01-05T04:33:57.800Z The "Enable untrusted intranet zone access to Project server" Project setting should be configured correctly. CCE-12614-4 2010-10-04T15:46:47.077Z 2012-01-05T04:33:57.847Z The "Help" Visio setting should be configured correctly. CCE-13832-1 2010-10-04T15:46:47.127Z 2012-01-05T04:33:57.893Z The "Stencils" Visio setting should be configured correctly. CCE-12720-9 2010-10-04T15:46:47.173Z 2012-01-05T04:33:57.940Z The "Add-ons" Visio setting should be configured correctly. CCE-14316-4 2010-10-04T15:46:47.233Z 2012-01-05T04:33:57.987Z The "Start-up" Visio setting should be configured correctly. CCE-13423-9 2010-10-04T15:46:47.280Z 2012-01-05T04:33:58.033Z The "Drawings" Visio setting should be configured correctly. CCE-11719-2 2010-10-04T15:46:47.327Z 2012-01-05T04:33:58.080Z The "Favorites Stencil Name" Visio setting should be configured correctly. CCE-14868-4 2010-10-04T15:46:47.377Z 2012-01-05T04:33:58.127Z The "Templates" Visio setting should be configured correctly. CCE-13042-7 2010-10-04T15:46:47.423Z 2012-01-05T04:33:58.173Z The "My Shapes" Visio setting should be configured correctly. CCE-13196-1 2010-10-04T15:46:47.483Z 2012-01-05T04:33:58.220Z The "Configure broadcast service 6" PowerPoint setting should be configured correctly. CCE-12701-9 2010-10-04T15:46:47.530Z 2012-01-05T04:33:58.283Z The "Configure broadcast service 4" PowerPoint setting should be configured correctly. CCE-12540-1 2010-10-04T15:46:47.593Z 2012-01-05T04:33:58.317Z The "Configure broadcast service 2" PowerPoint setting should be configured correctly. CCE-12866-0 2010-10-04T15:46:47.640Z 2012-01-05T04:33:58.377Z The "Configure broadcast service 9" PowerPoint setting should be configured correctly. CCE-12983-3 2010-10-04T15:46:47.703Z 2012-01-05T04:33:58.423Z The "Configure broadcast service 7" PowerPoint setting should be configured correctly. CCE-13500-4 2010-10-04T15:46:47.750Z 2012-01-05T04:33:58.470Z The "Configure broadcast service 10" PowerPoint setting should be configured correctly. CCE-14635-7 2010-10-04T15:46:47.797Z 2012-01-05T04:33:58.517Z The "Configure broadcast service 5" PowerPoint setting should be configured correctly. CCE-13609-3 2010-10-04T15:46:47.843Z 2012-01-05T04:33:58.567Z The "Configure broadcast service 1" PowerPoint setting should be configured correctly. CCE-13884-2 2010-10-04T15:46:47.907Z 2012-01-05T04:33:58.613Z The "Configure broadcast service 3" PowerPoint setting should be configured correctly. CCE-11782-0 2010-10-04T15:46:47.953Z 2012-01-05T04:33:58.657Z The "Configure broadcast service 8" PowerPoint setting should be configured correctly. CCE-12793-6 2010-10-04T15:46:48.000Z 2012-01-05T04:33:58.707Z The "Spaces" Word setting should be configured correctly. CCE-12611-0 2010-10-04T15:46:48.047Z 2012-01-05T04:33:58.753Z The "Optional breaks" Word setting should be configured correctly. CCE-13149-0 2010-10-04T15:46:48.110Z 2012-01-05T04:33:58.800Z The "Optional hyphens" Word setting should be configured correctly. CCE-11653-3 2010-10-04T15:46:48.157Z 2012-01-05T04:33:58.863Z The "Update fields before printing" Word setting should be configured correctly. CCE-14779-3 2010-10-04T15:46:48.203Z 2012-01-05T04:33:58.923Z The "Show white space between pages in Print Layout view" Word setting should be configured correctly. CCE-14192-9 2010-10-04T15:46:48.250Z 2012-01-05T04:33:58.970Z The "Tab characters" Word setting should be configured correctly. CCE-13395-9 2010-10-04T15:46:48.313Z 2012-01-05T04:33:59.017Z The "Update linked data before printing" Word setting should be configured correctly. CCE-14155-6 2010-10-04T15:46:48.377Z 2012-01-05T04:33:59.067Z The "Show document tooltips on hover" Word setting should be configured correctly. CCE-11706-9 2010-10-04T15:46:48.423Z 2012-01-05T04:33:59.113Z The "Print drawings created in Word" Word setting should be configured correctly. CCE-14278-6 2010-10-04T15:46:48.467Z 2012-01-05T04:33:59.173Z The "Hidden text" Word setting should be configured correctly. CCE-14039-2 2010-10-04T15:46:48.517Z 2012-01-05T04:33:59.220Z The "Print document properties" Word setting should be configured correctly. CCE-12241-6 2010-10-04T15:46:48.563Z 2012-01-05T04:33:59.267Z The "Show highlighter marks" Word setting should be configured correctly. CCE-13789-3 2010-10-04T15:46:48.627Z 2012-01-05T04:33:59.317Z The "Paragraph marks" Word setting should be configured correctly. CCE-11781-2 2010-10-04T15:46:48.673Z 2012-01-05T04:33:59.363Z The "Object anchors" Word setting should be configured correctly. CCE-14611-8 2010-10-04T15:46:48.717Z 2012-01-05T04:33:59.423Z The "Do not enable additional actions in the right-click menu" Word setting should be configured correctly. CCE-13671-3 2010-10-04T15:46:48.767Z 2012-01-05T04:33:59.487Z The "Writing style" Word setting should be configured correctly. CCE-13963-4 2010-10-04T15:46:48.827Z 2012-01-05T04:33:59.533Z The "Delay before starting other proofing tools" Word setting should be configured correctly. CCE-13331-4 2010-10-04T15:46:48.877Z 2012-01-05T04:33:59.580Z The "Delay before starting background spelling checker" Word setting should be configured correctly. CCE-12743-1 2010-10-04T15:46:48.937Z 2012-01-05T04:33:59.627Z The "Show readability statistics" Word setting should be configured correctly. CCE-12666-4 2010-10-04T15:46:48.983Z 2012-01-05T04:33:59.673Z The "Mark grammar errors as you type" setting should be configured correctly. CCE-11796-0 2010-10-04T15:46:49.047Z 2012-01-05T04:33:59.720Z The "Check grammar with spelling" Word setting should be configured correctly. CCE-13561-6 2010-10-04T15:46:49.093Z 2012-01-05T04:33:59.783Z The "Use Access 2007 compatible cache" Access setting should be configured correctly. CCE-13129-2 2010-10-04T15:46:49.157Z 2012-01-05T04:33:59.830Z The "Clear cache on close" Access setting should be configured correctly. CCE-14359-4 2010-10-04T15:46:49.203Z 2012-01-05T04:33:59.877Z The "Never cache data" Access setting should be configured correctly. CCE-12871-0 2010-10-04T15:46:49.250Z 2012-01-05T04:33:59.923Z The "Do not prompt to convert older databases" Access setting should be configured correctly. CCE-12811-6 2010-10-04T15:46:49.297Z 2012-01-05T04:33:59.987Z The "Default file format" Access setting should be configured correctly. CCE-14704-1 2010-10-04T15:46:49.360Z 2012-01-05T04:34:00.033Z The "Age out documents older than n days" machine common setting should be configured correctly. CCE-13167-2 2010-10-04T15:46:49.407Z 2012-01-05T04:34:00.097Z The "Set the max size of the Office Document Cache" machine common setting should be configured correctly. CCE-12346-3 2010-10-04T15:46:49.453Z 2012-01-05T04:34:00.127Z The "Open Directly in Office Client Application" machine common setting should be configured correctly. CCE-13941-0 2010-10-04T15:46:49.517Z 2012-01-05T04:34:00.173Z The "File Previewing" machine common setting should be configured correctly. CCE-11672-3 2010-10-04T15:46:49.563Z 2012-01-05T04:34:00.220Z The "Prevent document inspectors from running" machine common setting should be configured correctly. CCE-13601-0 2010-10-04T15:46:49.610Z 2012-01-05T04:34:00.267Z The "Do not allow signatures for e-mail messages" common setting should be configured correctly. CCE-12155-8 2010-10-04T15:46:49.673Z 2012-01-05T04:34:00.317Z The "VBA Macro Notification Settings" Publisher setting should be configured correctly. CCE-13388-4 2010-10-04T15:46:49.717Z 2012-01-05T04:34:00.423Z The "Disable Trust Bar Notification for unsigned application add-ins" Publisher setting should be configured correctly. CCE-14150-7 2010-10-04T15:46:49.767Z 2012-01-05T04:34:00.487Z The "Block application add-ins loading" Publisher setting should be configured correctly. CCE-13906-3 2010-10-04T15:46:49.827Z 2012-01-05T04:34:00.533Z The "Turn off Data Execution Prevention" Publisher setting should be configured correctly. CCE-12489-1 2010-10-04T15:46:49.877Z 2012-01-05T04:34:00.580Z The "Require that application add-ins are signed by Trusted Publisher" Publisher setting should be configured correctly. CCE-12371-1 2010-10-04T15:46:49.923Z 2012-01-05T04:34:00.627Z The "Create all new pages with rule lines" OneNote setting should be configured correctly. CCE-13924-6 2010-10-04T15:46:49.967Z 2012-01-05T04:34:00.673Z The "Automatically switch between Pen and Selection Tool" OneNote setting should be configured correctly. CCE-13404-9 2010-10-04T15:46:50.030Z 2012-01-05T04:34:00.720Z The "Use pen pressure sensitivity" OneNote setting should be configured correctly. CCE-14661-3 2010-10-04T15:46:50.077Z 2012-01-05T04:34:00.767Z The "Show Tablet PC Input Panel on OneNote pages" OneNote setting should be configured correctly. CCE-13795-0 2010-10-04T15:46:50.127Z 2012-01-05T04:34:00.817Z The "Disable scratch out" OneNote setting should be configured correctly. CCE-12937-9 2010-10-04T15:46:50.187Z 2012-01-05T04:34:00.847Z The "Set CNG cipher key length" PowerPoint setting should be configured correctly. CCE-11649-1 2010-10-04T15:46:50.233Z 2012-01-05T04:34:00.893Z The "Use new key on password change" PowerPoint setting should be configured correctly. CCE-13708-3 2010-10-04T15:46:50.297Z 2012-01-05T04:34:00.940Z The "Set CNG password spin count" PowerPoint setting should be configured correctly. CCE-13917-0 2010-10-04T15:46:50.343Z 2012-01-05T04:34:00.987Z The "Specify CNG random number generator algorithm" PowerPoint setting should be configured correctly. CCE-11489-2 2010-10-04T15:46:50.390Z 2012-01-05T04:34:01.033Z The "Set CNG cipher algorithm" PowerPoint setting should be configured correctly. CCE-12998-1 2010-10-04T15:46:50.453Z 2012-01-05T04:34:01.080Z The "Specify CNG salt length" PowerPoint setting should be configured correctly. CCE-12617-7 2010-10-04T15:46:50.500Z 2012-01-05T04:34:01.143Z The "Specify encryption compatibility" PowerPoint setting should be configured correctly. CCE-12797-7 2010-10-04T15:46:50.547Z 2012-01-05T04:34:01.190Z The "Specify CNG hash algorithm" PowerPoint setting should be configured correctly. CCE-14552-4 2010-10-04T15:46:50.610Z 2012-01-05T04:34:01.237Z The "Configure CNG cipher chaining mode" PowerPoint setting should be configured correctly. CCE-12582-3 2010-10-04T15:46:50.657Z 2012-01-05T04:34:01.283Z The "Set parameters for CNG context" PowerPoint setting should be configured correctly. CCE-13857-8 2010-10-04T15:46:50.703Z 2012-01-05T04:34:01.330Z The "Disable commands" Access setting should be configured correctly. CCE-13935-2 2010-10-04T15:46:50.767Z 2012-01-05T04:34:01.377Z The "Disable shortcut keys" Access setting should be configured correctly. CCE-12457-8 2010-10-04T15:46:50.813Z 2012-01-05T04:34:01.423Z The "Auto-select encoding for outgoing messages" Outlook setting should be configured correctly. CCE-14270-3 2010-10-04T15:46:50.877Z 2012-01-05T04:34:01.470Z The "Disable Internationalized Domain Names (IDN) in Outlook" Outlook setting should be configured correctly. CCE-14391-7 2010-10-04T15:46:50.923Z 2012-01-05T04:34:01.517Z The "Euro encoding for outgoing messages" Outlook setting should be configured correctly. CCE-12352-1 2010-10-04T15:46:50.983Z 2012-01-05T04:34:01.567Z The "Encoding for outgoing messages" Outlook setting should be configured correctly. CCE-13522-8 2010-10-04T15:46:51.030Z 2012-01-05T04:34:01.613Z The "English message headers and flags" Outlook setting should be configured correctly. CCE-13636-6 2010-10-04T15:46:51.077Z 2012-01-05T04:34:01.657Z The "Rely on CSS for font formatting" common setting should be configured correctly. CCE-12639-1 2010-10-04T15:46:51.140Z 2012-01-05T04:34:01.720Z The "Specify default location of Desktop Alert" common setting should be configured correctly. CCE-13283-7 2010-10-04T15:46:51.187Z 2012-01-05T04:34:01.767Z The "Specify duration of fade out (in milliseconds)" common setting should be configured correctly. CCE-12442-0 2010-10-04T15:46:51.233Z 2012-01-05T04:34:01.817Z The "Specify duration of fade in (in milliseconds)" common setting should be configured correctly. CCE-13974-1 2010-10-04T15:46:51.297Z 2012-01-05T04:34:01.863Z The "Specify duration of Desktop Alert on mouse over (in milliseconds)" common setting should be configured correctly. CCE-12794-4 2010-10-04T15:46:51.343Z 2012-01-05T04:34:01.923Z The "Specify duration of Desktop Alert before fade (in milliseconds)" common setting should be configured correctly. CCE-13321-5 2010-10-04T15:46:51.390Z 2012-01-05T04:34:02.017Z The "Specify opacity at start of fade in" common setting should be configured correctly. CCE-12447-9 2010-10-04T15:46:51.453Z 2012-01-05T04:34:02.067Z The "Specify opacity of Desktop Alert" common setting should be configured correctly. CCE-14503-7 2010-10-04T15:46:51.500Z 2012-01-05T04:34:02.113Z The "Do not display New Mail alert for users" Outlook setting should be configured correctly. CCE-13750-5 2010-10-04T15:46:51.547Z 2012-01-05T04:34:02.157Z The "Store random number to improve merge accuracy" Word setting should be configured correctly. CCE-12250-7 2010-10-04T15:46:51.610Z 2012-01-05T04:34:02.207Z The "Make hidden markup visible" Word setting should be configured correctly. CCE-14525-0 2010-10-04T15:46:51.657Z 2012-01-05T04:34:02.253Z The "Turn off file validation" Word setting should be configured correctly. CCE-12532-8 2010-10-04T15:46:51.717Z 2012-01-05T04:34:02.300Z The "Warn before printing, saving or sending a file that contains tracked changes or comments" Word setting should be configured correctly. CCE-12256-4 2010-10-04T15:46:51.767Z 2012-01-05T04:34:02.347Z The "Replace straight quotes with smart quotes" PowerPoint setting should be configured correctly. CCE-14677-9 2010-10-04T15:46:51.827Z 2012-01-05T04:34:02.393Z The "AutoFit title text to placeholder" PowerPoint setting should be configured correctly. CCE-13673-9 2010-10-04T15:46:51.877Z 2012-01-05T04:34:02.440Z The "AutoFit body text to placeholder" PowerPoint setting should be configured correctly. CCE-12395-0 2010-10-04T15:46:51.923Z 2012-01-05T04:34:02.487Z The "Save Active Project only" Project setting should be configured correctly. CCE-14212-5 2010-10-04T15:46:51.983Z 2012-01-05T04:34:02.533Z The "Prompt before saving" Project setting should be configured correctly. CCE-12149-1 2010-10-04T15:46:52.030Z 2012-01-05T04:34:02.580Z The "Auto Save every" Project setting should be configured correctly. CCE-13130-0 2010-10-04T15:46:52.077Z 2012-01-05T04:34:02.627Z The "Save Interval" Project setting should be configured correctly. CCE-12909-8 2010-10-04T15:46:52.140Z 2012-01-05T04:34:02.673Z The "Days" Project setting should be configured correctly. CCE-11961-0 2010-10-04T15:46:52.187Z 2012-01-05T04:34:02.720Z The "Hours" Project setting should be configured correctly. CCE-14126-7 2010-10-04T15:46:52.233Z 2012-01-05T04:34:02.753Z The "Weeks" Project setting should be configured correctly. CCE-13337-1 2010-10-04T15:46:52.280Z 2012-01-05T04:34:02.800Z The "Years" Project setting should be configured correctly. CCE-12807-4 2010-10-04T15:46:52.343Z 2012-01-05T04:34:02.863Z The "Months" Project setting should be configured correctly. CCE-12423-0 2010-10-04T15:46:52.390Z 2012-01-05T04:34:02.907Z The "Add space before label" Project setting should be configured correctly. CCE-12880-1 2010-10-04T15:46:52.453Z 2012-01-05T04:34:02.957Z The "Minutes" Project setting should be configured correctly. CCE-13401-5 2010-10-04T15:46:52.500Z 2012-01-05T04:34:03.003Z The "Check spelling as you type" setting should be configured correctly. CCE-13950-1 2010-10-04T15:46:52.563Z 2012-01-05T04:34:03.050Z The "Automatically substitute font for missing East Asian characters" Publisher setting should be configured correctly. CCE-14087-1 2010-10-04T15:46:52.610Z 2012-01-05T04:34:03.097Z The "When formatting, automatically format entire word" Publisher setting should be configured correctly. CCE-12963-5 2010-10-04T15:46:52.657Z 2012-01-05T04:34:03.143Z The "Prompt user when reapplying a style" Publisher setting should be configured correctly. CCE-13067-4 2010-10-04T15:46:52.717Z 2012-01-05T04:34:03.190Z The "Use XPS-enhanced print path" Publisher setting should be configured correctly. CCE-13633-3 2010-10-04T15:46:52.767Z 2012-01-05T04:34:03.237Z The "Allow text to be dragged and dropped" Publisher setting should be configured correctly. CCE-13547-5 2010-10-04T15:46:52.827Z 2012-01-05T04:34:03.283Z The "Enable incremental publish to Web" Publisher setting should be configured correctly. CCE-13898-2 2010-10-04T15:46:52.877Z 2012-01-05T04:34:03.330Z The "Show ScreenTips on objects" Publisher setting should be configured correctly. CCE-12649-0 2010-10-04T15:46:52.953Z 2012-01-05T04:34:03.377Z The "When selecting, automatically select entire word" Publisher setting should be configured correctly. CCE-14241-4 2010-10-04T15:46:53.000Z 2012-01-05T04:34:03.423Z The "Use Chinese font sizes" Publisher setting should be configured correctly. CCE-14215-8 2010-10-04T15:46:53.063Z 2012-01-05T04:34:03.487Z The "Automatically switch keyboard to match the language of surrounding text" Publisher setting should be configured correctly. CCE-13961-8 2010-10-04T15:46:53.127Z 2012-01-05T04:34:03.567Z The "Automatically hyphenate in new text boxes" Publisher setting should be configured correctly. CCE-14077-2 2010-10-04T15:46:53.173Z 2012-01-05T04:34:03.613Z The "Send entire publication as a single JPEG image" Publisher setting should be configured correctly. CCE-12463-6 2010-10-04T15:46:53.233Z 2012-01-05T04:34:03.657Z The "Set maximum number of MRU items to display" Publisher setting should be configured correctly. CCE-13742-2 2010-10-04T15:46:53.280Z 2012-01-05T04:34:03.707Z The "Turn off drag preview" Publisher setting should be configured correctly. CCE-13808-1 2010-10-04T15:46:53.327Z 2012-01-05T04:34:03.753Z The "Set default text flow direction" Publisher setting should be configured correctly. CCE-13638-2 2010-10-04T15:46:53.390Z 2012-01-05T04:34:03.817Z The "Allow background saves" Publisher setting should be configured correctly. CCE-12495-8 2010-10-04T15:46:53.437Z 2012-01-05T04:34:03.863Z The "Save AutoRecover info every (minutes)" Publisher setting should be configured correctly. CCE-14529-2 2010-10-04T15:46:53.483Z 2012-01-05T04:34:03.907Z The "Date Format" Project setting should be configured correctly. CCE-14120-0 2010-10-04T15:46:53.547Z 2012-01-05T04:34:03.957Z The "Project Summary Task" Project setting should be configured correctly. CCE-13775-2 2010-10-04T15:46:53.593Z 2012-01-05T04:34:04.003Z The "Default View" Project setting should be configured correctly. CCE-13486-6 2010-10-04T15:46:53.657Z 2012-01-05T04:34:04.050Z The "Default Project Currency" Project setting should be configured correctly. CCE-14429-5 2010-10-04T15:46:53.717Z 2012-01-05T04:34:04.097Z The "Keep Search Folders in Exchange online" Outlook setting should be configured correctly. CCE-12134-3 2010-10-04T15:46:53.767Z 2012-01-05T04:34:04.143Z The "Maximum Number of Online Search Folders per mailbox" Outlook setting should be configured correctly. CCE-11553-5 2010-10-04T15:46:53.813Z 2012-01-05T04:34:04.190Z The "Keep Search Folders offline" Outlook setting should be configured correctly. CCE-13297-7 2010-10-04T15:46:53.877Z 2012-01-05T04:34:04.237Z The "Do not create default Search Folders when users start Outlook" Outlook setting should be configured correctly. CCE-14799-1 2010-10-04T15:46:53.923Z 2012-01-05T04:34:04.283Z The "Disable commands" Excel setting should be configured correctly. CCE-12830-6 2010-10-04T15:46:53.967Z 2012-01-05T04:34:04.330Z The "Disable shortcut keys" Excel setting should be configured correctly. CCE-12996-5 2010-10-04T15:46:54.030Z 2012-01-05T04:34:04.377Z The "Display Project Guide" Project setting should be configured correctly. CCE-13143-3 2010-10-04T15:46:54.077Z 2012-01-05T04:34:04.423Z The "Number of documents in the Recent documents list" InfoPath setting should be configured correctly. CCE-12243-2 2010-10-04T15:46:54.140Z 2012-01-05T04:34:04.470Z The "Disable Microsoft Save As PDF and XPS add-ins" common setting should be configured correctly. CCE-14288-5 2010-10-04T15:46:54.187Z 2012-01-05T04:34:04.517Z The "Enforce PDF compliance with ISO 19005-1 (PDF/A)" common setting should be configured correctly. CCE-12410-7 2010-10-04T15:46:54.233Z 2012-01-05T04:34:04.567Z The "Disable inclusion of document properties in PDF and XPS output" common setting should be configured correctly. CCE-11536-0 2010-10-04T15:46:54.297Z 2012-01-05T04:34:04.613Z The "Display legacy GAL dialog" common setting should be configured correctly. CCE-14711-6 2010-10-04T15:46:54.343Z 2012-01-05T04:34:04.657Z The "Do not display photograph" common setting should be configured correctly. CCE-12209-3 2010-10-04T15:46:54.407Z 2012-01-05T04:34:04.707Z The "Do not display Hover Menu" common setting should be configured correctly. CCE-13990-7 2010-10-04T15:46:54.453Z 2012-01-05T04:34:04.753Z The "Remove Member Of tab" common setting should be configured correctly. CCE-12772-0 2010-10-04T15:46:54.500Z 2012-01-05T04:34:04.800Z The "Remove Organization tab" common setting should be configured correctly. CCE-14715-7 2010-10-04T15:46:54.563Z 2012-01-05T04:34:04.847Z The "Configure presence icons" common setting should be configured correctly. CCE-14893-2 2010-10-04T15:46:54.610Z 2012-01-05T04:34:04.893Z The "Use this signature for OneNote email" OneNote setting should be configured correctly. CCE-13484-1 2010-10-04T15:46:54.673Z 2012-01-05T04:34:04.940Z The "Add signature to OneNote email messages" OneNote setting should be configured correctly. CCE-11666-5 2010-10-04T15:46:54.717Z 2012-01-05T04:34:04.987Z The "Attach embedded files to the email message as separate files" OneNote setting should be configured correctly. CCE-13520-2 2010-10-04T15:46:54.780Z 2012-01-05T04:34:05.050Z The "Allow OneNote e-mail attachments" OneNote setting should be configured correctly. CCE-12876-9 2010-10-04T15:46:54.843Z 2012-01-05T04:34:05.097Z The "Trust Center: Trusted Location #16" InfoPath setting should be configured correctly. CCE-12307-5 2010-10-04T15:46:54.890Z 2012-01-05T04:34:05.143Z The "Trust Center: Trusted Location #18" InfoPath setting should be configured correctly. CCE-12421-4 2010-10-04T15:46:54.953Z 2012-01-05T04:34:05.190Z The "Trust Center: Trusted Location #17" InfoPath setting should be configured correctly. CCE-12455-2 2010-10-04T15:46:55.000Z 2012-01-05T04:34:05.237Z The "Trust Center: Trusted Location #8" InfoPath setting should be configured correctly. CCE-13062-5 2010-10-04T15:46:55.063Z 2012-01-05T04:34:05.283Z The "Trust Center: Trusted Location #9" InfoPath setting should be configured correctly. CCE-14228-1 2010-10-04T15:46:55.110Z 2012-01-05T04:34:05.330Z The "Trust Center: Trusted Location #14" InfoPath setting should be configured correctly. CCE-12069-1 2010-10-04T15:46:55.173Z 2012-01-05T04:34:05.377Z The "Trust Center: Trusted Location #13" InfoPath setting should be configured correctly. CCE-11670-7 2010-10-04T15:46:55.217Z 2012-01-05T04:34:05.423Z The "Trust Center: Trusted Location #3" InfoPath setting should be configured correctly. CCE-12852-0 2010-10-04T15:46:55.267Z 2012-01-05T04:34:05.470Z The "Trust Center: Trusted Location #7" InfoPath setting should be configured correctly. CCE-12536-9 2010-10-04T15:46:55.327Z 2012-01-05T04:34:05.517Z The "Trust Center: Trusted Location #10" InfoPath setting should be configured correctly. CCE-13836-2 2010-10-04T15:46:55.377Z 2012-01-05T04:34:05.567Z The "Trust Center: Trusted Location #5" InfoPath setting should be configured correctly. CCE-13252-2 2010-10-04T15:46:55.423Z 2012-01-05T04:34:05.613Z The "Trust Center: Trusted Location #19" InfoPath setting should be configured correctly. CCE-12475-0 2010-10-04T15:46:55.483Z 2012-01-05T04:34:05.657Z The "Trust Center: Trusted Location #20" InfoPath setting should be configured correctly. CCE-11738-2 2010-10-04T15:46:55.530Z 2012-01-05T04:34:05.707Z The "Trust Center: Trusted Location #15" InfoPath setting should be configured correctly. CCE-13588-9 2010-10-04T15:46:55.593Z 2012-01-05T04:34:05.767Z The "Trust Center: Trusted Location #1" InfoPath setting should be configured correctly. CCE-11552-7 2010-10-04T15:46:55.640Z 2012-01-05T04:34:05.817Z The "Trust Center: Trusted Location #12" InfoPath setting should be configured correctly. CCE-13521-0 2010-10-04T15:46:55.703Z 2012-01-05T04:34:05.863Z The "Trust Center: Trusted Location #2" InfoPath setting should be configured correctly. CCE-12803-3 2010-10-04T15:46:55.750Z 2012-01-05T04:34:05.907Z The "Trust Center: Trusted Location #11" InfoPath setting should be configured correctly. CCE-13208-4 2010-10-04T15:46:55.813Z 2012-01-05T04:34:05.957Z The "Trust Center: Trusted Location #6" InfoPath setting should be configured correctly. CCE-12603-7 2010-10-04T15:46:55.877Z 2012-01-05T04:34:06.003Z The "Trust Center: Trusted Location #4" InfoPath setting should be configured correctly. CCE-13719-0 2010-10-04T15:46:55.923Z 2012-01-05T04:34:06.050Z The "Open Hyperlinks to documents in Windows Internet Explorer" machine Visio setting should be configured correctly. CCE-12234-1 2010-10-04T15:46:55.983Z 2012-01-05T04:34:06.097Z The "Set maximum database instances limit" common setting should be configured correctly. CCE-12488-3 2010-10-04T15:46:56.030Z 2012-01-05T04:34:06.143Z The "Set the database default timeout" common setting should be configured correctly. CCE-13890-9 2010-10-04T15:46:56.093Z 2012-01-05T04:34:06.190Z The "Set maximum database timeout limit" common setting should be configured correctly. CCE-14321-4 2010-10-04T15:46:56.140Z 2012-01-05T04:34:06.237Z The "Set the database default instances limit" common setting should be configured correctly. CCE-13368-6 2010-10-04T15:46:56.203Z 2012-01-05T04:34:06.300Z The "Meeting Planner" Outlook setting should be configured correctly. CCE-12678-9 2010-10-04T15:46:56.250Z 2012-01-05T04:34:06.347Z The "Do not open files in unsafe locations in Protected View" PowerPoint setting should be configured correctly. CCE-12107-9 2010-10-04T15:46:56.297Z 2012-01-05T04:34:06.393Z The "Do not open files from the Internet zone in Protected View" PowerPoint setting should be configured correctly. CCE-13247-2 2010-10-04T15:46:56.360Z 2012-01-05T04:34:06.440Z The "Set document behavior if file validation fails" PowerPoint setting should be configured correctly. CCE-14427-9 2010-10-04T15:46:56.407Z 2012-01-05T04:34:06.503Z The "Turn off Protected View for attachments opened from Outlook" PowerPoint setting should be configured correctly. CCE-14102-8 2010-10-04T15:46:56.467Z 2012-01-05T04:34:06.550Z The "Open files on local Intranet UNC in Protected View" PowerPoint setting should be configured correctly. CCE-13198-7 2010-10-04T15:46:56.517Z 2012-01-05T04:34:06.627Z The "OneNote Spelling Options" setting should be configured correctly. CCE-13363-7 2010-10-04T15:46:56.577Z 2012-01-05T04:34:06.673Z The "Location of Backup Folder" OneNote setting should be configured correctly. CCE-14399-0 2010-10-04T15:46:56.640Z 2012-01-05T04:34:06.720Z The "Location of unfiled notes section" OneNote setting should be configured correctly. CCE-12394-3 2010-10-04T15:46:56.687Z 2012-01-05T04:34:06.767Z The "Notebook Root" OneNote setting should be configured correctly. CCE-12024-6 2010-10-04T15:46:56.733Z 2012-01-05T04:34:06.817Z The "Enable ability to optimize OneNote files..." OneNote setting should be configured correctly. CCE-11896-8 2010-10-04T15:46:56.797Z 2012-01-05T04:34:06.863Z The "Percentage of unused disk space to allow in sections" OneNote setting should be configured correctly. CCE-13858-6 2010-10-04T15:46:56.843Z 2012-01-05T04:34:06.907Z The "General" Outlook setting should be configured correctly. CCE-13074-0 2010-10-04T15:46:56.907Z 2012-01-05T04:34:06.970Z The "Projects" Project setting should be configured correctly. CCE-13996-4 2010-10-04T15:46:56.967Z 2012-01-05T04:34:07.017Z The "User Templates" Project setting should be configured correctly. CCE-14394-1 2010-10-04T15:46:57.017Z 2012-01-05T04:34:07.067Z The "Copy items when moving them" OneNote setting should be configured correctly. CCE-11513-9 2010-10-04T15:46:57.063Z 2012-01-05T04:34:07.113Z The "Show dimmed tagged notes in the Tags Summary task pane" OneNote setting should be configured correctly. CCE-13287-8 2010-10-04T15:46:57.127Z 2012-01-05T04:34:07.157Z The "Set document behavior if file validation fails" Word setting should be configured correctly. CCE-12265-5 2010-10-04T15:46:57.173Z 2012-01-05T04:34:07.207Z The "Turn off Protected View for attachments opened from Outlook" Word setting should be configured correctly. CCE-13677-0 2010-10-04T15:46:57.217Z 2012-01-05T04:34:07.253Z The "Do not open files from the Internet zone in Protected View" Word setting should be configured correctly. CCE-14210-9 2010-10-04T15:46:57.280Z 2012-01-05T04:34:07.300Z The "Open files on local Intranet UNC in Protected View" Word setting should be configured correctly. CCE-13815-6 2010-10-04T15:46:57.343Z 2012-01-05T04:34:07.377Z The "Do not open files in unsafe locations in Protected View" Word setting should be configured correctly. CCE-13132-6 2010-10-04T15:46:57.390Z 2012-01-05T04:34:07.440Z The "Turn off Data Execution Prevention" Outlook setting should be configured correctly. CCE-13707-5 2010-10-04T15:46:57.437Z 2012-01-05T04:34:07.487Z The "Apply macro security settings to macros, add-ins and additional actions" Outlook setting should be configured correctly. CCE-12810-8 2010-10-04T15:46:57.500Z 2012-01-05T04:34:07.533Z The "Security setting for macros" Outlook setting should be configured correctly. CCE-12466-9 2010-10-04T15:46:57.547Z 2012-01-05T04:34:07.580Z The "Allow hyperlinks in suspected phishing e-mail messages" Outlook setting should be configured correctly. CCE-13240-7 2010-10-04T15:46:57.593Z 2012-01-05T04:34:07.627Z The "Disable Smart Document's use of manifests" common setting should be configured correctly. CCE-13094-8 2010-10-04T15:46:57.640Z 2012-01-05T04:34:07.673Z The "Completely disable the Smart Documents feature in Word and Excel" common setting should be configured correctly. CCE-14113-5 2010-10-04T15:47:32.187Z 2010-10-04T15:47:32.217Z The minimum number of digits required for new passwords should be set as appropriate. IA-5 CCE-14672-0 2010-10-04T15:47:32.267Z 2010-10-04T15:47:32.313Z The minimum number of upper case characters required for new passwords should be set as appropriate. IA-5 CCE-14712-4 2010-10-04T15:47:32.343Z 2010-10-04T15:47:32.390Z The minimum number of lower case characters required for new passwords should be set as appropriate. IA-5 CCE-14122-6 2010-10-04T15:47:32.437Z 2010-10-04T15:47:32.483Z The minimum number of special characters required for new passwords should be set as appropriate. IA-5 CCE-14412-1 2010-10-04T15:47:32.530Z 2010-10-04T15:47:32.577Z The nodev option should be enabled or disabled as appropriate for /tmp. CM-7 MP-2 CCE-15007-8 2010-10-04T15:47:32.627Z 2010-10-04T15:47:32.673Z The nodev option should be enabled or disabled for /dev/shm. CM-7 MP-2 CCE-14161-4 2010-10-04T15:47:32.703Z 2010-10-04T15:47:32.750Z /tmp should be configured on an appropriate filesystem partition. CM-6 CCE-14777-7 2010-10-04T15:47:32.797Z 2010-10-04T15:47:32.843Z /var should be configured on an appropriate filesystem partition. CM-6 CCE-14011-1 2010-10-04T15:47:32.890Z 2010-10-04T15:47:32.923Z /var/log should be configured on an appropriate filesystem partition. AU-9 CM-6 CCE-14171-3 2010-10-04T15:47:32.967Z 2010-10-04T15:47:33.017Z /var/log/audit should be configured on an appropriate filesystem partition. AU-9 CM-6 CCE-14559-9 2010-10-04T15:47:33.047Z 2010-10-04T15:47:33.093Z /home should be configured on an appropriate filesystem partition. CM-6 CCE-14440-2 2010-10-04T15:47:33.140Z 2010-10-04T15:47:33.173Z The GPG Key for Red Hat Network should be installed or uninstalled as appropriate. SC-1 SI-2 SI-7 CCE-14914-6 2010-10-04T15:47:33.203Z 2010-10-04T15:47:33.250Z Package signature checking should be globally activated or deactivated as appropriate. SI-7 CCE-14813-0 2010-10-04T15:47:33.297Z 2010-10-04T15:47:33.327Z Package signature checking should be activated or deactivated as appropriate for all configured repositories. SI-7 CCE-14931-0 2010-10-04T15:47:33.377Z 2010-10-04T15:47:33.407Z All installed software packages verify or do not verify against the package database. SI-7 CCE-14940-1 2010-10-04T15:47:33.467Z 2012-01-05T04:34:27.597Z The nosuid option should be enabled or disabled as appropriate for /tmp. CM-7 MP-2 CCE-14927-8 2010-10-04T15:47:33.547Z 2010-10-04T15:47:33.577Z The noexec option should be enabled or disabled as appropriate for /tmp. CM-7 MP-2 CCE-14306-5 2010-10-04T15:47:33.627Z 2010-10-04T15:47:33.657Z The nosuid option should be enabled or disabled for /dev/shm. CM-7 MP-2 CCE-14703-3 2010-10-04T15:47:33.687Z 2010-10-04T15:47:33.733Z The noexec option should be enabled or disabled for /dev/shm. CM-7 MP-2 CCE-14584-7 2010-10-04T15:47:33.767Z 2010-10-04T15:47:33.813Z /var/tmp should be configured on an appropriate filesystem partition. CM-6 CCE-14089-7 2010-10-04T15:47:33.860Z 2010-10-04T15:47:33.890Z Support for cramfs filesystems should be enabeld or disabled as appropriate. CM-6 CM-7 CCE-14457-6 2010-10-04T15:47:33.937Z 2010-10-04T15:47:34.000Z Support for freevxfs filesystems should be enabeld or disabled as appropriate. CM-6 CM-7 CCE-15087-0 2010-10-04T15:47:34.047Z 2010-10-04T15:47:34.093Z Support for hfs filesystems should be enabeld or disabled as appropriate. CM-6 CM-7 CCE-14093-9 2010-10-04T15:47:34.127Z 2010-10-04T15:47:34.173Z Support for hfsplus filesystems should be enabeld or disabled as appropriate. CM-6 CM-7 CCE-14853-6 2010-10-04T15:47:34.217Z 2010-10-04T15:47:34.250Z Support for jffs2 filesystems should be enabeld or disabled as appropriate. CM-6 CM-7 CCE-14118-4 2010-10-04T15:47:34.280Z 2010-10-04T15:47:34.327Z Support for squashfs filesystems should be enabeld or disabled as appropriate. CM-6 CM-7 CCE-14871-8 2010-10-04T15:47:34.360Z 2010-10-04T15:47:34.407Z Support for udf filesystems should be enabeld or disabled as appropriate. CM-6 CM-7 CCE-14794-2 2010-10-04T15:47:34.437Z 2010-10-04T15:47:34.467Z All world-writable directories should be owned by an appropriate user. AC-3 CM-6 CCE-14300-8 2010-10-04T15:47:34.530Z 2010-10-04T15:47:34.577Z Password hashes are shadowed or not shadowed for all accounts in /etc/passwd as appropriate. IA-5 CCE-14675-3 2010-10-04T15:47:34.627Z 2010-10-04T15:47:34.673Z NIS file inclusions should be set appropriately in the /etc/group file CM-6 CM-7 CCE-14071-5 2010-10-04T15:47:34.703Z 2010-10-04T15:47:34.733Z NIS file inclusions should be set appropriately in the /etc/shadow file CM-6 CM-7 CCE-14701-7 2010-10-04T15:47:34.780Z 2010-10-04T15:47:34.827Z The password strength parameters should require new passwords to differ from old ones by the appropriate minimum number of characters. IA-5 CCE-14063-2 2010-10-04T15:47:34.860Z 2010-10-04T15:47:34.907Z The password hashing algorithm should be configured as appropriate. IA-5 CCE-14939-3 2010-10-04T15:47:34.953Z 2010-10-04T15:47:35.000Z The "password reuse" policy should meet minimum requirements. IA-5 CCE-14340-4 2010-10-04T15:47:35.063Z 2010-10-04T15:47:35.127Z Files with the setuid attribute enabled should be reviewed as appropriate to determine whether that condition is correct. AC-3 CM-6 CCE-14970-8 2010-10-04T15:47:35.173Z 2010-10-04T15:47:35.217Z Files with the setgid attribute enabled should be reviewed as appropriate to determine whether that condition is correct. AC-3 CM-6 CCE-14957-5 2010-10-04T15:47:35.267Z 2010-10-04T15:47:35.313Z The PATH variable for root includes or does not include any world-writable or group-writable directories as appropriate. CM-6 CM-7 CCE-14107-7 2010-10-04T15:47:35.377Z 2010-10-04T15:47:35.423Z The default umask for all users should be set correctly in /etc/login.defs CM-6 CM-7 CCE-14860-1 2010-10-04T15:47:35.483Z 2012-01-05T04:34:28.237Z DEPRECATED in favor of CCE-14107-7. Was: The default umask for all users should be set correctly in /etc/login.defs CCE-14847-8 2010-10-04T15:47:35.577Z 2010-10-04T15:47:35.627Z The default umask for all users should be set correctly in /etc/profile CM-6 CM-7 CCE-14604-3 2010-10-04T15:47:35.673Z 2010-10-04T15:47:35.717Z The gnome desktop screensaver should be enabled or disabled as appropriate as a mandatory setting for all users. CM-6 CM-7 CCE-14023-6 2010-10-04T15:47:35.767Z 2010-10-04T15:47:35.813Z The screen lock (password protection) function of the gnome desktop screensaver should be enabled or disabled as appropriate as a mandatory setting for all users. AC-1 AC-3 CM-6 CM-7 CCE-14735-5 2010-10-04T15:47:35.860Z 2010-10-04T15:47:35.890Z The screen blanking function of the gnome desktop screensaver should be enabled or disabled as appropriate as a mandatory setting for all users. CM-6 CM-7 CCE-14991-4 2010-10-04T15:47:35.937Z 2010-10-04T15:47:35.967Z The system includes or does not include any device files with the unlabeled SELinux type. CM-6 CM-7 CCE-15013-6 2010-10-04T15:47:36.017Z 2010-10-04T15:47:36.063Z The system should act as a network sniffer or not as appropriate. CM-6 CCE-14264-6 2010-10-04T15:47:36.093Z 2010-10-04T15:47:36.140Z The default policy for iptables INPUT table should be set as appropriate. AC-4 CM-6 CCE-14268-7 2010-10-04T15:47:36.173Z 2010-10-04T15:47:36.217Z Disable or enable support for DCCP as appropriate. CM-6 CM-7 CCE-14132-5 2010-10-04T15:47:36.267Z 2010-10-04T15:47:36.297Z Disable or enable support for SCTP as appropriate. CM-6 CM-7 CCE-14027-7 2010-10-04T15:47:36.327Z 2010-10-04T15:47:36.377Z Disable or enable support for RDS as appropriate. CM-6 CM-7 CCE-14911-2 2010-10-04T15:47:36.423Z 2010-10-04T15:47:36.453Z Disable or enable support for TIPC as appropriate. CM-6 CM-7 CCE-15026-8 2010-10-04T15:47:36.500Z 2010-10-04T15:47:36.547Z The kernel arguments should enable or disable auditing early in the boot process as appropriate. AU-2 CCE-14051-7 2010-10-04T15:47:36.593Z 2010-10-04T15:47:36.640Z Auditing should be configured to record date and time modification events as appropriate. AU-2 CCE-14829-6 2010-10-04T15:47:36.673Z 2010-10-04T15:47:36.717Z Auditing should be configured to record user/group information modification events as appropriate. AU-2 CCE-14816-3 2010-10-04T15:47:36.767Z 2010-10-04T15:47:36.813Z Auditing should be configured to record changes to the system network environment as appropriate. AU-2 CCE-14821-3 2010-10-04T15:47:36.827Z 2010-10-04T15:47:36.877Z Auditing should be configured to record changes to the system's mandatory access controls as appropriate. AU-2 CCE-14904-7 2010-10-04T15:47:36.923Z 2010-10-04T15:47:36.953Z Auditing should be configured to record logon and logout events as appropriate. AU-2 CCE-14679-5 2010-10-04T15:47:36.983Z 2010-10-04T15:47:37.030Z Auditing should be configured to record process and session initiation events as appropriate. AU-2 CCE-14058-2 2010-10-04T15:47:37.063Z 2010-10-04T15:47:37.110Z Auditing should be configured to record changes to discretionary access control permissions as appropriate. AU-2 CCE-14917-9 2010-10-04T15:47:37.140Z 2010-10-04T15:47:37.187Z Auditing should be configured to record unauthorized attempts to access files as appropriate. AU-2 CCE-14296-8 2010-10-04T15:47:37.217Z 2010-10-04T15:47:37.250Z Auditing should be configured to record use of privileged commands as appropriate. AU-2 CCE-14569-8 2010-10-04T15:47:37.297Z 2010-10-04T15:47:37.327Z Auditing should be configured to record data export to media events as appropriate. AU-2 CCE-14820-5 2010-10-04T15:47:37.377Z 2010-10-04T15:47:37.423Z Auditing should be configured to record file and program deletion events as appropriate. AU-2 CCE-14824-7 2010-10-04T15:47:37.467Z 2010-10-04T15:47:37.500Z Auditing should be configured to record administrator and security personnel action events as appropriate. AU-2 CCE-14688-6 2010-10-04T15:47:37.547Z 2010-10-04T15:47:37.577Z Auditing should be configured to record kernel module loading and unloading events as appropriate. AU-2 CCE-14692-8 2010-10-04T15:47:37.610Z 2010-10-04T15:47:37.640Z Auditing should be configured to make auditd configuration immutable as appropriate. AU-2 CCE-14948-4 2010-10-04T15:47:37.687Z 2010-10-04T15:47:37.733Z Bluetooth kernel modules should be enabled or disabled as appropriate. CCE-14825-4 2010-10-04T15:47:37.767Z 2010-10-04T15:47:37.813Z The isdn4k-utils package should installed or uninstalled as appropriate. CM-7 CCE-14054-1 2010-10-04T15:47:37.860Z 2010-10-04T15:47:37.907Z Zeroconf networking should be enabled or disabled as appropriate. CM-6 CM-7 CCE-14466-7 2010-10-04T15:47:37.953Z 2010-10-04T15:47:37.983Z The at daemon should be enabled or disabled as appropriate. CM-6 CM-7 CCE-14061-6 2010-10-04T15:47:38.030Z 2010-10-04T15:47:38.077Z The SSH 'keep alive' message count should be set to an appropriate value. SC-1 CCE-14716-5 2010-10-04T15:47:38.110Z 2010-10-04T15:47:38.173Z Users should be allowed or not allowed to set environment options for SSH as appropriate. CM-7 CCE-14491-5 2010-10-04T15:47:38.233Z 2010-10-04T15:47:38.267Z Appropriate ciphers should be used for SSH. SC-1 CCE-14495-6 2010-10-04T15:47:38.313Z 2010-10-04T15:47:38.343Z The sendmail package should be installed or uninstalled as appropriate. CM-7 CCE-14068-1 2010-10-04T15:47:38.377Z 2010-10-04T15:47:38.407Z The postfix package should be installed or uninstalled as appropriate. CM-7 CCE-15018-5 2010-10-04T15:47:38.437Z 2010-10-04T15:47:38.467Z Postfix network listening should be enabled or disabled for as appropriate. CM-6 CM-7 CCE-14894-0 2010-10-04T15:47:38.530Z 2010-10-04T15:47:38.577Z LDAP client requires or does not require LDAP servers to use TLS for SSL communications as appropriate. CM-6 SC-9 CCE-14881-7 2010-10-04T15:47:38.627Z 2010-10-04T15:47:38.673Z The vsftpd package should be installed or uninstalled as appropriate. CM-6 CM-7 CCE-14075-6 2010-10-04T15:47:38.703Z 2010-10-04T15:47:38.750Z Client SMB packet signing should be required or not required for smbclient as appropriate. SC-8 CCE-15029-2 2010-10-04T15:47:38.813Z 2010-10-04T15:47:38.860Z Client SMB packet signing should be required or not required for mount.cifs as appropriate. SC-8 CCE-14081-4 2010-10-04T15:47:38.890Z 2010-10-04T15:47:38.923Z The net-snmpd package should be installed or uninstalled as appropriate. CM-7 CCE-14088-9 2010-10-04T15:47:38.967Z 2010-10-04T15:47:39.000Z The 'wheel' group should exist or not as appropriate AC-2 CCE-15047-4 2010-10-04T15:47:39.030Z 2010-10-04T15:47:39.063Z Access to the root account via su should be restricted to the wheel group or not as appropriate. AC-3 CM-6 CCE-15054-0 2010-10-04T15:47:39.110Z 2010-10-04T15:47:39.140Z The number of times a user is prompted to provide a new password if it fails to meet configured password strength requirements (also known as the retry value) should be set appropriately. IA-5 CCE-17933-3 2010-10-04T15:49:12.343Z 2011-12-03T04:35:02.087Z Set the "Complete Message Timeout" appropriately for each server. CCE-18113-1 2010-10-04T15:49:12.423Z 2010-10-04T15:49:12.467Z Enable or disable the "FIPS- compliant cryptographic module". CCE-17853-3 2010-10-04T15:49:12.517Z 2010-10-04T15:49:12.547Z Enable or disable the "Allow Unencrypted Null Cipher" as appropriate for each server. CCE-17743-6 2010-10-04T15:49:12.577Z 2010-10-04T15:49:12.627Z Determine the appropriate "Maximum Message Size" for each server. CCE-17760-0 2010-10-04T15:49:12.657Z 2012-01-05T04:35:06.613Z Determine the appropriate "Security Interoperability Mode" setting. CCE-17888-9 2010-10-04T15:49:12.717Z 2010-10-04T15:49:12.750Z The Oracle WebLogic Server should be run by the appropriate account. CCE-17155-3 2010-10-04T15:49:12.780Z 2010-10-04T15:49:12.827Z Define the "Severity" field as appropriate. CCE-17181-9 2010-10-04T15:49:12.860Z 2010-10-04T15:49:12.890Z Enable or disable the Active Context Handler "servlet.HttpServletResponse" as appropriate. CCE-17171-0 2010-10-04T15:49:12.937Z 2010-10-04T15:49:12.967Z Enable or disable the Active Context Handler "wli.Message" as appropriate. CCE-17572-9 2010-10-04T15:49:13.000Z 2010-10-04T15:49:13.030Z Enable or disable the Active Context Handler "channel.Port" as appropriate. CCE-17740-2 2010-10-04T15:49:13.063Z 2010-10-04T15:49:13.110Z Enable or disable the Active Context Handler "channel.PublicPort" as appropriate. CCE-17652-9 2010-10-04T15:49:13.140Z 2010-10-04T15:49:13.173Z Enable or disable the Active Context Handler "servlet.HttpServletResponse" as appropriate. CCE-17167-8 2010-10-04T15:49:13.203Z 2010-10-04T15:49:13.233Z Enable or disable the Active Context Handler "servlet.HttpServletResponse" as appropriate. CCE-18007-5 2010-10-04T15:49:13.267Z 2010-10-04T15:49:13.313Z Enable or disable the Active Context Handler "channel.RemotePort"as appropriate. CCE-17825-1 2010-10-04T15:49:13.343Z 2010-10-04T15:49:13.377Z Enable or disable the Active Context Handler "channel.Protocol" as appropriate. CCE-17877-2 2010-10-04T15:49:13.407Z 2010-10-04T15:49:13.437Z Enable or disable the Active Context Handler "channel.Address" as appropriate. CCE-17176-9 2010-10-04T15:49:13.483Z 2010-10-04T15:49:13.517Z Enable or disable the Active Context Handler "channel.PublicAddress" as appropriate. CCE-18120-6 2010-10-04T15:49:13.547Z 2010-10-04T15:49:13.577Z Enable or disable the Active Context Handler "channel.RemoteAddress" as appropriate. CCE-17812-9 2010-10-04T15:49:13.610Z 2010-10-04T15:49:13.657Z Enable or disable the Active Context Handler "channel.ChannelName" as appropriate. CCE-18009-1 2010-10-04T15:49:13.687Z 2010-10-04T15:49:13.717Z Enable or disable the Active Context Handler "channel.Secure" as appropriate. CCE-17296-5 2010-10-04T15:49:13.750Z 2010-10-04T15:49:13.780Z Enable or disable the Active Context Handler "ejb20.Parameter" as appropriate. CCE-17798-0 2010-10-04T15:49:13.827Z 2010-10-04T15:49:13.860Z Enable or disable the Active Context Handler "wsee.SOAPmessage" as appropriate. CCE-17335-1 2010-10-04T15:49:13.890Z 2010-10-04T15:49:13.923Z Enable or disable the Active Context Handler "entitlement.EAuxilaryID" as appropriate. CCE-17736-0 2010-10-04T15:49:13.953Z 2010-10-04T15:49:13.983Z Enable or disable the Active Context Handler "security.ChainPrevalidatedBySSL" as appropriate. CCE-18023-2 2010-10-04T15:49:14.017Z 2010-10-04T15:49:14.063Z Enable or disable the Active Context Handler "xml.SecurityToken" as appropriate. CCE-17789-9 2010-10-04T15:49:14.093Z 2010-10-04T15:49:14.127Z Enable or disable the Active Context Handler "webservice.Integrity" as appropriate. CCE-17287-4 2010-10-04T15:49:14.173Z 2010-10-04T15:49:14.203Z Enable or disable the Active Context Handler "saml.SSLClientCertificateChain" as appropriate. CCE-17948-1 2010-10-04T15:49:14.233Z 2010-10-04T15:49:14.267Z Enable or disable the Active Context Handler "saml.SSLClientCertificateChain" as appropriate. CCE-17970-5 2010-10-04T15:49:14.297Z 2010-10-04T15:49:14.327Z Enable or disable the Active Context Handler "saml.MessageSignerCerficate" as appropriate. CCE-17304-7 2010-10-04T15:49:14.377Z 2010-10-04T15:49:14.407Z Enable or disable the Active Context Handler "saml.subject.ConfirmationMethod" as appropriate. CCE-18088-5 2010-10-04T15:49:14.437Z 2010-10-04T15:49:14.467Z Enable or disable the Active Context Handler "saml.subject.dom.KeyInfo" as appropriate. CCE-17179-3 2010-10-04T15:49:14.500Z 2010-10-04T15:49:14.547Z Enable or disable the Active Context Handler "jmx.ObjectName" as appropriate. CCE-17893-9 2010-10-04T15:49:14.577Z 2010-10-04T15:49:14.610Z Enable or disable the Active Context Handler "jmx.ShortName" as appropriate. CCE-17558-8 2010-10-04T15:49:14.640Z 2010-10-04T15:49:14.673Z Enable or disable the Active Context Handle "jmx.Parameters" as appropriate CCE-17713-9 2010-10-04T15:49:14.703Z 2010-10-04T15:49:14.750Z Enable or disable the Active Context Handler "jmx.Signature" as appropriate. CCE-17805-3 2010-10-04T15:49:14.780Z 2010-10-04T15:49:14.813Z Enable or disable the Active Context Handle "jmx.AuditProtectedArgInfo" as appropriate. CCE-18091-9 2010-10-04T15:49:14.843Z 2010-10-04T15:49:14.890Z Enable or disable the Active Context Handler "jmx.OldAttributeValue" as appropriate. CCE-17738-6 2010-10-04T15:49:14.923Z 2010-10-04T15:49:14.953Z Set the "minimum password length" field appropriately. CCE-17254-4 2010-10-04T15:49:14.983Z 2010-10-04T15:49:15.017Z Enable or disable the "Reject if Password Contains the User Name" attribute as appropriate. CCE-18038-0 2010-10-04T15:49:15.047Z 2010-10-04T15:49:15.077Z Enable or disable the "Reject if Password Contains the User Name Reversed" setting. CCE-17182-7 2010-10-04T15:49:15.127Z 2010-10-04T15:49:15.157Z Set the "maximum password length" field appropriately. CCE-17601-6 2010-10-04T15:49:15.187Z 2010-10-04T15:49:15.217Z Set the "minimum password length" field appropriately. CCE-17892-1 2010-10-04T15:49:15.250Z 2010-10-04T15:49:15.297Z Set the "maximum instances of any character" field appropriately. CCE-18028-1 2010-10-04T15:49:15.327Z 2010-10-04T15:49:15.360Z Set the "maximum consecutive characters" field appropriately. CCE-17183-5 2010-10-04T15:49:15.390Z 2010-10-04T15:49:15.423Z Set the "minimum number of alphabetic characters" field appropriately. CCE-17186-8 2010-10-04T15:49:15.453Z 2010-10-04T15:49:15.500Z Set the "minimum number of numeric characters" field appropriately. CCE-17561-2 2010-10-04T15:49:15.530Z 2010-10-04T15:49:15.563Z Set the "minimum number of lower case characters" field appropriately. CCE-17979-6 2010-10-04T15:49:15.593Z 2010-10-04T15:49:15.640Z Set the "minimum number of upper case characters" field appropriately CCE-17618-0 2010-10-04T15:49:15.673Z 2010-10-04T15:49:15.703Z Set the "minimum number of non-alphanumeric characters" field appropriately. CCE-17763-4 2010-10-04T15:49:15.733Z 2010-10-04T15:49:15.780Z Enable or disable the "Lockout Enabled" setting. CCE-17393-0 2010-10-04T15:49:15.813Z 2010-10-04T15:49:15.843Z Set permissions on the SerializedSystemIni.dat file permissions appropriately. CCE-17913-5 2010-10-04T15:49:15.877Z 2011-12-03T04:35:03.557Z Define the "Lockout Threshold" in the Security Realm appropriately. CCE-18068-7 2010-10-04T15:49:15.937Z 2012-01-05T04:35:08.017Z Define the "Lockout Duration" in the Security Realm appropriately. CCE-17464-9 2010-10-04T15:49:16.017Z 2011-12-03T04:35:03.650Z Define the "Lockout Reset Duration" in the Security Realm appropriately. CCE-17856-6 2010-10-04T15:49:16.093Z 2010-10-04T15:49:16.127Z Enable or disable the "Require Unanimous Permit" setting. CCE-17794-9 2010-10-04T15:49:16.157Z 2012-01-05T04:35:08.113Z Set the "Host Name Verification" appropriately on the Administration Server. CCE-18186-7 2010-10-04T15:49:16.233Z 2012-01-05T04:35:08.173Z Define the "Minimum Number of Non-Alphabetic Characters" appropriately. CCE-17189-2 2010-10-04T15:49:16.297Z 2012-01-05T04:35:08.220Z Enable or disable the "SSL Enabled" setting for the appropriate LDAP Server connections. CCE-17956-4 2010-10-04T15:49:16.377Z 2012-01-05T04:35:08.267Z Set the "Host Name Verification" appropriately on all servers. CCE-17960-6 2010-10-04T15:49:16.453Z 2010-10-04T15:49:16.483Z Change and set "Domain Credentials" appropriately. CCE-17947-3 2010-10-04T15:49:16.517Z 2010-10-04T15:49:16.563Z Enable or disable the "Configuration Archive Enabled" box appropriately. CCE-17951-5 2010-10-04T15:49:16.593Z 2011-12-03T04:35:03.997Z Set the "Archive Configuration Count" appropriately. CCE-17973-9 2010-10-04T15:49:16.657Z 2011-12-03T04:35:04.027Z Set the password field appropriately for the "Default Administrator". CCE-17603-2 2010-10-04T15:49:16.733Z 2012-01-05T04:35:08.423Z Set the appropriate "SSL Listen Port" value on each server. CCE-17964-8 2010-10-04T15:49:16.797Z 2012-01-05T04:35:08.487Z Set the "Administration Console Session Timeout" field appropriately. CCE-17969-7 2010-10-04T15:49:16.860Z 2012-01-05T04:35:08.517Z Enable or disable the "Production Mode" appropriately. CCE-17991-1 2010-10-04T15:49:16.923Z 2011-12-03T04:35:04.230Z Enable or disable the WebLogic Auditing provider as appropriate. CCE-17872-3 2010-10-04T15:49:17.000Z 2010-10-04T15:49:17.030Z Set the appropriate "Invocation Timeout Seconds" value. CCE-17612-3 2010-10-04T15:49:17.063Z 2011-12-03T04:35:04.307Z Enable or disable the "Anonymous Admin Lookup Enabled" setting. CCE-17196-7 2010-10-04T15:49:17.140Z 2011-12-03T04:35:04.337Z Enabled or disable the "Web App Files Case Insensitive" setting. CCE-17201-5 2010-10-04T15:49:17.203Z 2011-12-03T04:35:04.387Z Enable or disable the "Enable Administration Port" setting. CCE-18144-6 2010-10-04T15:49:17.280Z 2011-12-03T04:35:04.433Z Enable or disable the "SSL Rejection Logging Enabled" setting on all servers. CCE-17963-0 2010-10-04T15:49:17.343Z 2011-12-03T04:35:04.480Z Set the "Export Key Lifespan" as appropriate on each Server. CCE-17844-2 2010-10-04T15:49:17.407Z 2011-12-03T04:35:04.527Z Enable or disable the "Client Cert Proxy Enabled" setting on the Administration Server. CCE-18077-8 2010-10-04T15:49:17.483Z 2011-12-03T04:35:04.573Z Enable or disable the "Client Cert Proxy Enabled" setting on the managed server. CCE-18082-8 2010-10-04T15:49:17.547Z 2010-10-04T15:49:17.577Z Set the "Frontend Host" attribute appropriately for each server. CCE-17478-9 2010-10-04T15:49:17.610Z 2012-01-05T04:35:08.907Z Set the "Check Roles and Policies" appropriately. CCE-17482-1 2010-10-04T15:49:17.687Z 2011-12-03T04:35:04.683Z Set the "Security Model Default" appropriately. CCE-17346-8 2010-10-04T15:49:17.750Z 2011-12-03T04:35:04.713Z Set the "When Deploying Web Applications or EJBS" appropriately. CCE-17208-0 2010-10-04T15:49:17.813Z 2010-10-04T15:49:17.860Z Set the "Configuration Audit Type" field appropriately. CCE-18128-9 2010-10-04T15:49:17.890Z 2012-01-05T04:35:09.033Z Set the EditMBeanServerEnabled attribute appropriately on the Administration Server CCE-17507-5 2010-10-04T15:49:17.953Z 2011-12-03T04:35:04.837Z Enable or disable two-way SSL appropriately for each server. CCE-17210-6 2010-10-04T15:49:18.030Z 2011-12-03T04:35:04.887Z Set the Embedded LDAP "Timeout" appropriately. CCE-18126-3 2010-10-04T15:49:18.093Z 2012-01-05T04:35:09.143Z Enable or disable the "Anonymous Bind Allowed" setting. CCE-18148-7 2010-10-04T15:49:18.157Z 2012-01-05T04:35:09.207Z Set the Server "Post Timeout" field appropriately for each server. CCE-18152-9 2010-10-04T15:49:18.233Z 2012-01-05T04:35:09.253Z Set the HTTP "Duration" appropriately for each server. CCE-17513-3 2010-10-04T15:49:18.297Z 2011-12-03T04:35:05.087Z Set the "HTTPS Duration" appropriately for each server. CCE-17769-1 2010-10-04T15:49:18.360Z 2011-12-03T04:35:05.137Z Set the "HTTP Maximum Message Size" appropriately for each server. CCE-17650-3 2010-10-04T15:49:18.437Z 2012-01-05T04:35:09.347Z For the Managed Server, create a "Connection Filter" if necessary. CCE-17214-8 2010-10-04T15:49:18.500Z 2012-01-05T04:35:09.393Z Create a connection filter for the appropriate serves and machines. CCE-18147-9 2010-10-04T15:49:18.577Z 2011-12-03T04:35:05.277Z Set the "Keystore" file permissions as appropriate. CCE-18024-0 2010-10-04T15:49:18.640Z 2011-12-03T04:35:05.337Z Set the "Keystores" permission value appropriately in directories. CCE-18046-3 2010-10-04T15:49:18.733Z 2012-01-05T04:35:09.503Z Set the premissions to the Weblogic Server Product Installation directory appropriately. CCE-17425-0 2010-10-04T15:49:18.797Z 2011-12-03T04:35:05.433Z Set the premissions to the Domain Home directory appropriately. CCE-17216-3 2010-10-04T15:49:18.860Z 2011-12-03T04:35:05.480Z Enable or disable the "Client Cert Proxy Enabled" attribute appropriately. CCE-18171-9 2010-10-04T15:49:18.937Z 2011-12-03T04:35:05.527Z Enable or disable the "Auth Cookie Enabled" option appropriately. CCE-18193-3 2010-10-04T15:49:19.000Z 2011-12-03T04:35:05.557Z Set the "Post Timeout" field appropriately. CCE-18198-2 2010-10-04T15:49:19.063Z 2012-01-05T04:35:09.657Z Set the "Maximum Open Sockets" setting appropriately on the Administration server. CCE-18185-9 2010-10-04T15:49:19.140Z 2012-01-05T04:35:09.707Z Set the permissions to the Middleware Home directory appropriately. CCE-9994-5 2010-10-04T15:51:20.687Z 2012-01-05T04:36:40.613Z The "Change Password" option in the Ctrl+Alt+Del dialog should be enabled or disabled as appropriate. CCE-10633-6 2010-10-04T15:51:20.767Z 2010-10-04T15:51:20.813Z The "Display user information when the session is locked" setting should be configured correctly. CCE-9710-5 2010-10-04T15:51:20.843Z 2010-10-04T15:51:20.890Z The account description for the built-in Administrator account should be set as appropriate. CCE-10688-0 2010-10-04T15:51:20.923Z 2010-10-04T15:51:20.967Z User-initiated system crashes via the CTRL+SCROLL LOCK+SCROLL LOCK sequence should be enabled or disabled for PS/2 keyboards as appropriate. CCE-10710-2 2010-10-04T15:51:21.017Z 2010-10-04T15:51:21.047Z User-initiated system crashes via the CTRL+SCROLL LOCK+SCROLL LOCK sequence should be enabled or disabled for USB keyboards as appropriate. CCE-10463-8 2010-10-04T15:51:21.093Z 2010-10-04T15:51:21.140Z The Syskey mode should be configured correctly. CCE-10814-2 2010-10-04T15:52:29.907Z 2012-01-05T04:37:17.957Z The 'MSS: (AutoShareWks) Enable Administrative Shares (recommended except for highly secure environments)' setting should be configured correctly. CCE-10303-6 2010-10-04T15:52:30.000Z 2012-01-05T04:37:18.017Z The 'MSS: (AutoReboot) Allow Windows to automatically restart after a system crash (recommended except for highly secure environments)' setting should be configured correctly. CCE-10064-4 2010-10-04T15:52:30.627Z 2012-01-05T04:37:18.407Z The 'Retain old events' setting should be configured correctly for the system log. CCE-10077-6 2010-10-04T15:52:30.797Z 2012-01-05T04:37:18.533Z The 'Allow Remote Shell Access' setting should be configured correctly. AC-1 AC-3 CM-6 CCE-10082-6 2010-10-04T15:52:31.077Z 2012-01-05T04:37:18.690Z Auditing of 'Audit process tracking' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10092-5 2010-10-04T15:52:31.343Z 2012-01-05T04:37:18.893Z The 'Require trusted path for credential entry' setting should be enabled or disabled as appropriate. AC-2 CCE-10093-3 2010-10-04T15:52:31.437Z 2012-01-05T04:37:18.940Z The 'Turn off Windows Update device driver searching' setting should be configured correctly. SI-2 CCE-10118-8 2010-10-04T15:52:31.717Z 2012-01-05T04:37:19.127Z Auditing of 'Audit logon events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10129-5 2010-10-04T15:52:31.797Z 2012-01-05T04:37:19.190Z The Windows Explorer 'Remove Security tab' setting should be configured correctly. CM-6 CCE-10136-0 2010-10-04T15:52:31.890Z 2012-01-05T04:37:19.253Z The 'Retain old events' setting should be configured correctly for the application log. CCE-10144-4 2010-10-04T15:52:32.063Z 2012-01-05T04:37:19.393Z Auditing of 'Audit policy change' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10169-1 2010-10-04T15:52:32.530Z 2012-01-05T04:37:19.800Z Auditing of 'Audit account management' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10175-8 2010-10-04T15:52:32.610Z 2012-01-05T04:37:19.863Z Auditing of 'Audit privilege use' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10490-1 2010-10-04T15:52:32.983Z 2012-01-05T04:37:20.157Z The 'Remove CD Burning features' setting should be configured correctly. AC-1 MP-4 CCE-8235-4 2010-10-04T15:52:33.077Z 2012-01-05T04:37:20.220Z The BitLocker 'Allow data recovery agent' setting should be enabled or disabled as appropriate for fixed data drives. CCE-8242-0 2010-10-04T15:52:33.157Z 2012-01-05T04:37:20.283Z The 'Configure user storage of BitLocker 48-digit recovery password' setting should be configured correctly for fixed data drives. CCE-8278-4 2010-10-04T15:52:33.250Z 2012-01-05T04:37:20.363Z The 'Choose how BitLocker-protected operating system drives can be recovered' setting should be enabled or disabled as appropriate. CCE-8284-2 2010-10-04T15:52:33.343Z 2012-01-05T04:37:20.423Z The BitLocker 'Configure TPM platform validation profile' setting should be enabled or disabled as appropriate. CCE-8299-0 2010-10-04T15:52:33.437Z 2012-01-05T04:37:20.487Z Validation of the 'Boot Manager' Platform Configuration Register (aka PCR 10) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8301-4 2010-10-04T15:52:33.530Z 2012-01-05T04:37:20.550Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 14) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8303-0 2010-10-04T15:52:33.627Z 2012-01-05T04:37:20.613Z The BitLocker 'Require additional authentication at startup' setting should be enabled or disabled as appropriate.. CCE-8309-7 2010-10-04T15:52:33.703Z 2012-01-05T04:37:20.673Z Use of a Trusted Platform Module (TPM) startup key for operating system drives encrypted with BitLocker should be configured correctly. CCE-8370-9 2010-10-04T15:52:33.797Z 2012-01-05T04:37:20.720Z The BitLocker 'Select the encryption method' setting should be enabled or disabled as appropriate. CCE-8405-3 2010-10-04T15:52:33.877Z 2012-01-05T04:37:20.800Z The BitLocker 'Do not allow write access to devices configured in another organization' setting should be configured correctly. CCE-8407-9 2010-10-04T15:52:33.967Z 2012-01-05T04:37:20.847Z Auditing of 'Audit system events' events on success should be enabled or disabled as appropriate. AU-2 CCE-8415-2 2010-10-04T15:52:34.157Z 2012-01-05T04:37:21.003Z The 'Configure user storage of BitLocker 48-digit recovery password' setting should be configured correctly for removable data drives. CCE-8417-8 2010-10-04T15:52:34.250Z 2012-01-05T04:37:21.067Z The 'Configure user storage of BitLocker 256-digit recovery key' setting should be configured correctly for fixed data drives. CCE-8483-0 2010-10-04T15:52:34.780Z 2012-01-05T04:37:21.580Z Validation of the 'Computer Manufacturer-Specific' Platform Configuration Register (aka PCR 7) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8493-9 2010-10-04T15:52:35.047Z 2012-01-05T04:37:21.767Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 12) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8496-2 2010-10-04T15:52:35.140Z 2012-01-05T04:37:21.830Z Validation of the 'Core Root of Trust of Measurement (CRTM), BIOS, and Platform Extensions' Platform Configuration Register (aka PCR 0) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8517-5 2010-10-04T15:52:35.423Z 2012-01-05T04:37:22.080Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 21) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8525-8 2010-10-04T15:52:35.517Z 2012-01-05T04:37:22.143Z Rights to activate or launch DCOM applications should be assigned as appropriate. CCE-8530-8 2010-10-04T15:52:35.593Z 2012-01-05T04:37:22.207Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 15) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8535-7 2010-10-04T15:52:35.687Z 2012-01-05T04:37:22.317Z Validation of the 'Master Boot Record (MBR) Code' Platform Configuration Register (aka PCR 4) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8538-1 2010-10-04T15:52:35.780Z 2012-01-05T04:37:22.377Z The BitLocker 'Require use of smart cards on removable data drives' setting should be configured correctly. CCE-8540-7 2010-10-04T15:52:35.877Z 2012-01-05T04:37:22.440Z The BitLocker 'Configure password complexity for fixed data drives' setting should be configured correctly. CCE-8541-5 2010-10-04T15:52:35.953Z 2012-01-05T04:37:22.487Z The 'Interactive logon: Display user information when the session is locked.' setting should be configured correctly. CCE-8546-4 2010-10-04T15:52:36.047Z 2012-01-05T04:37:22.550Z Use of a Trusted Platform Moduel (TPM) startup PIN for operating system drives encrypted with BitLocker should be configured correctly. CCE-8553-0 2010-10-04T15:52:36.140Z 2012-01-05T04:37:22.613Z The 'Omit recovery options from the BitLocker setup wizard' setting should be configured correctly for fixed data drives. CCE-8581-1 2010-10-04T15:52:36.407Z 2012-01-05T04:37:22.830Z The BitLocker 'Provide the unique identifiers for your organization' setting should be enabled or disabled as appropriate. CCE-8587-8 2010-10-04T15:52:36.593Z 2012-01-05T04:37:22.987Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 17) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8588-6 2010-10-04T15:52:36.687Z 2012-01-05T04:37:23.050Z The 'Configure user storage of BitLocker 48-digit recovery password' setting should be configured correctly for operating system drives. CCE-8595-1 2010-10-04T15:52:36.877Z 2012-01-05T04:37:23.237Z The 'Omit recovery options from the BitLocker setup wizard' setting should be configured correctly for removable data drives. CCE-8613-2 2010-10-04T15:52:37.047Z 2012-01-05T04:37:23.377Z The 'Choose how BitLocker-protected removable drives can be recovered' setting should be enabled or disabled as appropriate. CCE-8648-8 2010-10-04T15:52:37.140Z 2012-01-05T04:37:23.440Z The BitLocker 'Configure use of smart cards on removable data drives' setting should be enabled or disabled as appropriate. CCE-8651-2 2010-10-04T15:52:37.233Z 2012-01-05T04:37:23.503Z Validation of the 'Platform and Motherboard Configuration and Data' Platform Configuration Register (aka PCR 1) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8653-8 2010-10-04T15:52:37.313Z 2012-01-05T04:37:23.567Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 22) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8673-6 2010-10-04T15:52:37.593Z 2012-01-05T04:37:23.783Z The BitLocker 'Require password for fixed data drive' setting should be configured correctly. CCE-8683-5 2010-10-04T15:52:37.703Z 2012-01-05T04:37:23.863Z The BitLocker 'Require password for removable data drive' setting should be configured correctly. CCE-8688-4 2010-10-04T15:52:37.780Z 2012-01-05T04:37:23.923Z The minimum number of characters required for the BitLocker startup PIN used with the Trusted Platform Module (TPM) should be set correctly. CCE-8701-5 2010-10-04T15:52:37.877Z 2012-01-05T04:37:23.987Z The 'Configure user storage of BitLocker 256-digit recovery key' setting should be configured correctly for removable data drives. CCE-8703-1 2010-10-04T15:52:37.967Z 2012-01-05T04:37:24.050Z Validation of the 'State Transition and Wake Events' Platform Configuration Register (aka PCR 6) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8719-7 2010-10-04T15:52:38.140Z 2012-01-05T04:37:24.173Z The 'Deny write access to fixed drives not protected by BitLocker' setting should be configured correctly. CCE-8721-3 2010-10-04T15:52:38.233Z 2012-01-05T04:37:24.237Z The BitLocker 'Configure use of smart cards on fixed data drives' setting should be configured correctly. CCE-8743-7 2010-10-04T15:52:38.517Z 2012-01-05T04:37:24.470Z The 'Configure storage of BitLocker recovery information to AD DS' setting should be configured correctly for fixed data drives. CCE-8745-2 2010-10-04T15:52:38.610Z 2012-01-05T04:37:24.533Z The 'Choose how BitLocker-protected fixed drives can be recovered' setting should be enabled or disabled as appropriate. CCE-8751-0 2010-10-04T15:52:38.703Z 2012-01-05T04:37:24.597Z Validation of the 'NTFS Boot Sector' Platform Configuration Register (aka PCR 8) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8759-3 2010-10-04T15:52:38.780Z 2012-01-05T04:37:24.657Z The 'Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' setting should be configured correctly. CCE-8784-1 2010-10-04T15:52:38.877Z 2012-01-05T04:37:24.737Z The 'MSS: (NtfsDisable8dot3NameCreation) Enable the computer to stop generating 8.3 style filenames (recommended)' setting should be configured correctly. AC-3 CM-6 CM-7 SC-5 CCE-8787-4 2010-10-04T15:52:38.967Z 2012-01-05T04:37:24.800Z Validation of the 'Options ROM Code'' Platform Configuration Register (aka PCR 2) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8791-6 2010-10-04T15:52:39.140Z 2012-01-05T04:37:24.940Z The default folder for BitLocker recovery passwords should be set correctly. CCE-8837-7 2010-10-04T15:52:40.157Z 2012-01-05T04:37:25.720Z The 'Devices: Allow undock without having to log on' setting should be configured correctly. CCE-8844-3 2010-10-04T15:52:40.250Z 2012-01-05T04:37:25.767Z The 'Allow Standby States (S1-S3) When Sleeping (On Battery)' setting should be configured correctly. CCE-8855-9 2010-10-04T15:52:40.547Z 2012-01-05T04:37:26.003Z Validation of the 'BitLocker Access Control' Platform Configuration Register (aka PCR 11) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-8868-2 2010-10-04T15:52:41.140Z 2012-01-05T04:37:26.237Z The 'Devices: Allowed to format and eject removable media' setting should be configured correctly. AC-3 CM-6 CM-7 MP-2 SC-5 CCE-8899-7 2010-10-04T15:52:41.500Z 2012-01-05T04:37:26.457Z The BitLocker 'Prevent memory overwrite on restart' setting should be configured correctly. CCE-8905-2 2010-10-04T15:52:41.657Z 2012-01-05T04:37:26.517Z The 'Save BitLocker recovery information to AD DS for operating system drives' setting should be configured correctly. CCE-8917-7 2010-10-04T15:52:41.907Z 2012-01-05T04:37:26.643Z The 'Network Security: Restrict NTLM: Add server exceptions in this domain' setting should be configured correctly. CCE-8930-0 2010-10-04T15:52:42.030Z 2012-01-05T04:37:26.707Z The 'Enable computer and user accounts to be trusted for delegation' user right should be assigned to the appropriate accounts. AC-3 CM-6 CCE-8947-4 2010-10-04T15:52:42.467Z 2012-01-05T04:37:27.003Z The BitLocker 'Configure password complexity for removable data drives' setting should be configured correctly. CCE-8956-5 2010-10-04T15:52:42.577Z 2010-10-04T15:52:42.640Z Auditing of 'Logon-Logoff: IPsec Main Mode' events on success should be enabled or disabled as appropriate. AU-2 CCE-8965-6 2010-10-04T15:52:42.827Z 2012-01-05T04:37:27.173Z The 'Configure storage of BitLocker recovery information to AD DS' setting should be configured correctly for removable data drives. CCE-8983-9 2010-10-04T15:52:43.157Z 2012-01-05T04:37:27.440Z The BitLocker 'Minimum password length for removable data drive' setting should be configured correctly. CCE-8993-8 2010-10-04T15:52:43.280Z 2012-01-05T04:37:27.550Z The 'Configure user storage of BitLocker 256-digit recovery key' setting should be configured correctly for operating system drives. CCE-8995-3 2010-10-04T15:52:43.407Z 2012-01-05T04:37:27.627Z The 'Control use of Bitlocker on removable drives' setting should be configured correctly. CCE-9000-1 2010-10-04T15:52:43.640Z 2012-01-05T04:37:27.767Z The 'Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' setting should be configured correctly. CCE-9036-5 2010-10-04T15:52:44.407Z 2012-01-05T04:37:28.157Z The 'Network Security: Restrict NTLM: Add remote server exceptions for NTLM authentication' setting should be configured correctly. CCE-9046-4 2010-10-04T15:52:44.703Z 2012-01-05T04:37:28.300Z Validation of the 'Master Boot Record (MBR) Partition Table' Platform Configuration Register (aka PCR 5) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9050-6 2010-10-04T15:52:44.953Z 2012-01-05T04:37:28.440Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 16) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9053-0 2010-10-04T15:52:45.093Z 2012-01-05T04:37:28.517Z The 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows ' setting should be configured correctly. CCE-9062-1 2010-10-04T15:52:45.500Z 2012-01-05T04:37:28.643Z The BitLocker 'Object identifier' setting should be configured correctly. CCE-9066-2 2010-10-04T15:52:45.640Z 2012-01-05T04:37:28.707Z Auditing of 'Audit privilege use' events on success should be enabled or disabled as appropriate. AU-2 CCE-9079-5 2010-10-04T15:52:46.360Z 2012-01-05T04:37:29.097Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 13) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9082-9 2010-10-04T15:52:46.500Z 2012-01-05T04:37:29.157Z Validation of the 'Option ROM Configuration and Data' Platform Configuration Register (aka PCR 3) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9087-8 2010-10-04T15:52:46.640Z 2012-01-05T04:37:29.237Z The BitLocker 'Minimum password length for fixed data drive' setting should be configured correctly. CCE-9088-6 2010-10-04T15:52:46.797Z 2012-01-05T04:37:29.300Z The 'Do not install BitLocker To Go Reader on FAT formatted removable drives' setting should be configured correctly. CCE-9089-4 2010-10-04T15:52:46.890Z 2012-01-05T04:37:29.363Z The BitLocker 'Allow enhanced PINs for startup' setting should be configured correctly. CCE-9103-3 2010-10-04T15:52:47.327Z 2012-01-05T04:37:29.690Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 18) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9106-6 2010-10-04T15:52:47.467Z 2012-01-05T04:37:29.753Z The 'Do not install BitLocker To Go Reader on FAT formatted fixed drives' setting should be configured correctly. CCE-9112-4 2010-10-04T15:52:47.780Z 2012-01-05T04:37:29.907Z The 'System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies' setting should be configured correctly. SI-3 CCE-9114-0 2010-10-04T15:52:47.907Z 2012-01-05T04:37:29.970Z The 'BitLocker identification field' setting should be configured correctly. CCE-9126-4 2010-10-04T15:52:48.390Z 2012-01-05T04:37:30.267Z The 'Allow Standby States (S1-S3) When Sleeping (Plugged In)' setting should be configured correctly. CCE-9138-9 2010-10-04T15:52:48.983Z 2012-01-05T04:37:30.627Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 19) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9141-3 2010-10-04T15:52:49.077Z 2012-01-05T04:37:30.690Z The BitLocker 'Configure use of passwords for removable data drives' setting should be configured correctly. CCE-9144-7 2010-10-04T15:52:49.217Z 2012-01-05T04:37:30.737Z The BitLocker 'Configure use of passwords for fixed data drives' setting should be configured correctly. CCE-9145-4 2010-10-04T15:52:49.343Z 2012-01-05T04:37:30.800Z The 'Allowed BitLocker identification field' setting should be configured correctly. CCE-9146-2 2010-10-04T15:52:49.593Z 2012-01-05T04:37:30.877Z The BitLocker 'Allow data recovery agent' setting should be enabled or disabled as appropriate for removable data drives. CCE-9147-0 2010-10-04T15:52:49.780Z 2012-01-05T04:37:30.923Z The 'Omit recovery options from the BitLocker setup wizard' setting should be configured correctly for operating system drives. CCE-9161-1 2010-10-04T15:52:50.703Z 2012-01-05T04:37:31.347Z Validation of the 'NTFS Boot Block' Platform Configuration Register (aka PCR 9) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9162-9 2010-10-04T15:52:50.843Z 2012-01-05T04:37:31.423Z Auditing of 'Audit object access' events on success should be enabled or disabled as appropriate. AU-2 CCE-9173-6 2010-10-04T15:52:51.093Z 2012-01-05T04:37:31.533Z The BitLocker 'Require use of smart cards on fixed data drives' setting should be configured correctly. CCE-9176-9 2010-10-04T15:52:51.267Z 2012-01-05T04:37:31.597Z The 'Allow users to suspend and decrypt BitLocker protection on removable data drives' setting should be configured correctly. CCE-9180-1 2010-10-04T15:52:51.517Z 2012-01-05T04:37:31.707Z Auditing of 'Audit policy change' events on success should be enabled or disabled as appropriate. AU-2 CCE-9182-7 2010-10-04T15:52:51.627Z 2012-01-05T04:37:31.753Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 23) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9197-5 2010-10-04T15:52:52.937Z 2012-01-05T04:37:32.407Z The 'Save BitLocker recovery information to AD DS for fixed data drives' setting should be configured correctly. CCE-9200-7 2010-10-04T15:52:53.203Z 2012-01-05T04:37:32.517Z The BitLocker 'Allow data recovery agent' setting should be enabled or disabled as appropriate for operating system drives. CCE-9211-4 2010-10-04T15:52:53.343Z 2012-01-05T04:37:32.580Z The 'Deny write access to removable data drives not protected by BitLocker' setting should be configured correctly. CCE-9214-8 2010-10-04T15:52:53.767Z 2012-01-05T04:37:32.753Z Auditing of 'Audit directory service access' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9220-5 2010-10-04T15:52:54.360Z 2012-01-05T04:37:33.033Z The 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows ' setting should be configured correctly. CCE-9221-3 2010-10-04T15:52:54.483Z 2012-01-05T04:37:33.113Z Use of the combination of both a Trusted Platform Module (TPM) startup key and PIN for operating system drives encrypted with BitLocker should be configured correctly. CCE-9224-7 2010-10-04T15:52:54.967Z 2012-01-05T04:37:33.330Z Auditing of 'Audit directory service access' events on success should be enabled or disabled as appropriate. AU-2 CCE-9236-1 2010-10-04T15:52:55.610Z 2012-01-05T04:37:33.627Z The 'Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' setting should be configured correctly. CCE-9241-1 2010-10-04T15:52:55.877Z 2012-01-05T04:37:33.767Z The 'Allow BitLocker without a compatible TPM' setting should be configured correctly. CCE-9247-8 2010-10-04T15:52:56.127Z 2012-01-05T04:37:33.907Z Rights to access DCOM applications should be assigned as appropriate. CCE-9248-6 2010-10-04T15:52:56.250Z 2012-01-05T04:37:33.970Z The 'Configure storage of BitLocker recovery information to AD DS' setting should be configured correctly for operating system drives. CCE-9256-9 2010-10-04T15:52:56.877Z 2012-01-05T04:37:34.347Z The 'Save BitLocker recovery information to AD DS for removable data drives' setting should be configured correctly. CCE-9259-3 2010-10-04T15:52:57.093Z 2012-01-05T04:37:34.457Z Use of the Trusted Platform Module (TPM) on startup for operating system drives encyrpted with BitLocker should be configured correctly. CCE-9279-1 2010-10-04T15:52:57.687Z 2012-01-05T04:37:34.863Z Validation of the 'Reserved for Future Use' Platform Configuration Register (aka PCR 20) by the Trusted Platform Module (TPM) should be enabled or disabled as appropriate. CCE-9282-5 2010-10-04T15:52:57.780Z 2012-01-05T04:37:34.940Z The 'Allow users to apply BitLocker protection on removable data drives' setting should be configured correctly. CCE-9321-1 2010-10-04T15:52:59.000Z 2012-01-05T04:37:35.830Z Auditing of 'Audit account logon events' events on success should be enabled or disabled as appropriate. AU-2 CCE-9339-3 2010-10-04T15:52:59.593Z 2012-01-05T04:37:36.317Z Auditing of 'Audit account management' events on success should be enabled or disabled as appropriate. AU-2 CCE-9340-1 2010-10-04T15:52:59.687Z 2012-01-05T04:37:36.377Z The 'Network Security: Restrict NTLM: Audit Incoming NTLM Traffic' setting should be configured correctly. CCE-9347-6 2010-10-04T15:53:00.077Z 2012-01-05T04:37:36.707Z Auditing of 'Audit process tracking' events on success should be enabled or disabled as appropriate. AU-2 CCE-9915-0 2010-10-04T15:53:00.547Z 2010-10-04T15:53:00.593Z The 'Do not apply during periodic background processing' option for registry policy processing should be enabled or disabled as appropriate. CCE-10417-4 2010-10-04T15:53:00.657Z 2012-01-05T04:37:37.080Z The 'Process even if the Group Policy objects have not changed' option for registry policy processing should be enabled or disabled as appropriate. CCE-9365-8 2010-10-04T15:53:00.860Z 2012-01-05T04:37:37.173Z Auditing of 'Audit logon events' events on success should be enabled or disabled as appropriate. AU-2 CCE-9380-7 2010-10-04T15:53:01.250Z 2012-01-05T04:37:37.457Z The 'Access Credential Manager as a trusted caller' user right should be assigned to the appropriate accounts. AC-3 CCE-9381-5 2010-10-04T15:53:01.343Z 2012-01-05T04:37:37.517Z The 'System cryptography: Force strong key protection for user keys stored on the computer' setting should be configured correctly. IA-5 CCE-10700-3 2010-10-04T15:53:02.217Z 2012-01-05T04:37:38.267Z The 'Scheduled install day' option for automatic updates should be set correctly. CCE-9924-2 2010-10-04T15:53:02.313Z 2012-01-05T04:37:38.347Z The 'Scheduled install time' option for automatic updates should be set correctly. CCE-9410-2 2010-10-04T15:53:02.703Z 2012-01-05T04:37:38.613Z The 'Interactive logon: Require smart card' setting should be configured correctly. CCE-9445-8 2010-10-04T15:53:03.547Z 2010-10-04T15:53:03.610Z Auditing of 'Account Logon: Other Account Logon Events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9463-1 2010-10-04T15:53:04.203Z 2012-01-05T04:37:39.800Z The 'Audit: Shut down system immediately if unable to log security audits' setting should be configured correctly. CCE-9494-6 2010-10-04T15:53:04.750Z 2012-01-05T04:37:40.253Z The 'Network Security: Restrict NTLM: Incoming NTLM traffic' setting should be configured correctly. CCE-9500-0 2010-10-04T15:53:05.047Z 2012-01-05T04:37:40.407Z The 'Retain old events' setting should be configured correctly for the security log. CCE-10519-7 2010-10-04T15:53:05.500Z 2010-10-04T15:53:05.547Z The 'Permit remote control of this computer' option for the 'Solicited Remote Assistance' setting should be configured correctly. CCE-10753-2 2010-10-04T15:53:05.593Z 2010-10-04T15:53:05.640Z The 'Maximum ticket time (value)' option for the 'Solicited Remote Assistance' setting should be configured correctly. CCE-10312-7 2010-10-04T15:53:05.687Z 2010-10-04T15:53:05.733Z The 'Maximum ticket time (units)' option for the 'Solicited Remote Assistance' setting should be configured correctly. CCE-9929-1 2010-10-04T15:53:05.780Z 2010-10-04T15:53:05.827Z The 'Method for sending e-mail invitations' option for the 'Solicited Remote Assistance' setting should be configured correctly. CCE-9518-2 2010-10-04T15:53:05.953Z 2012-01-05T04:37:40.970Z The 'Do not allow drive redirection' setting should be configured correctly. CCE-9525-7 2010-10-04T15:53:06.327Z 2012-01-05T04:37:41.173Z The 'Network Security: Restrict NTLM: NTLM authentication in this domain' setting should be configured correctly. CCE-10887-8 2010-10-04T15:53:06.890Z 2012-01-05T04:37:41.613Z The 'Require message confidentiality' option for the 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' setting should be enabled or disabled as appropriate. CCE-10777-1 2010-10-04T15:53:06.983Z 2012-01-05T04:37:41.673Z The 'Require NTLMv2 session security' option for the 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' setting should be enabled or disabled as appropriate. CCE-10904-1 2010-10-04T15:53:07.077Z 2012-01-05T04:37:41.737Z The 'Require 128-bit encryption' option for the 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' setting should be enabled or disabled as appropriate. CCE-9556-2 2010-10-04T15:53:07.437Z 2012-01-05T04:37:41.940Z The 'Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers' setting should be configured correctly. CCE-9579-4 2010-10-04T15:53:07.813Z 2012-01-05T04:37:42.157Z The 'System settings: Optional subsystems' setting should be configured correctly. CM-6 CCE-9604-0 2010-10-04T15:53:08.467Z 2012-01-05T04:37:42.517Z The 'Network Security: Restrict NTLM: Audit NTLM authentication in this domain' setting should be configured correctly. CCE-9629-7 2010-10-04T15:53:09.047Z 2012-01-05T04:37:42.877Z Auditing of 'Audit object access' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9677-6 2010-10-04T15:53:10.423Z 2012-01-05T04:37:43.673Z The 'Prevent access to registry editing tools' setting should be configured correctly. CM-3 CM-6 CCE-9715-4 2010-10-04T15:53:11.267Z 2010-10-04T15:53:11.313Z Auditing of 'Logon-Logoff: IPsec Main Mode' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9733-7 2010-10-04T15:53:11.813Z 2012-01-05T04:37:44.457Z The 'Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box' setting should be configured correctly. CCE-10916-5 2010-10-04T15:53:12.173Z 2012-01-05T04:37:44.690Z The 'Require message confidentiality' option for the 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' setting should be enabled or disabled as appropriate. CCE-10281-4 2010-10-04T15:53:12.267Z 2012-01-05T04:37:44.753Z The 'Require NTLMv2 session security' option for the 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' setting should be enabled or disabled as appropriate. CCE-10924-9 2010-10-04T15:53:12.360Z 2012-01-05T04:37:44.817Z The 'Require 128-bit encryption' option for the 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' setting should be enabled or disabled as appropriate. CCE-10779-7 2010-10-04T15:53:13.127Z 2012-01-05T04:37:45.283Z The 'Encryption Level' option for the Remote Desktop Services 'Set client connection encryption level' setting should be configured correctly. CCE-9808-7 2010-10-04T15:53:14.437Z 2010-10-04T15:53:14.483Z Auditing of 'Account Logon: Other Account Logon Events' events on success should be enabled or disabled as appropriate. AU-2 CCE-9887-1 2010-10-04T15:53:15.483Z 2012-01-05T04:37:46.550Z Auditing of 'Audit account logon events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-9958-0 2010-10-04T15:53:16.047Z 2012-01-05T04:37:46.877Z The 'Force specific screen saver' setting should be configured correctly. AC-1 CCE-10690-6 2010-10-04T15:53:16.233Z 2012-01-05T04:37:47.003Z The 'Permit remote control of this computer' option for the 'Offer Remote Assistance' setting should be configured correctly. CCE-9931-7 2010-10-04T15:53:16.327Z 2012-01-05T04:37:47.050Z The set of users and/or gorups allowed to make unsolicited offers of remote assistance (aka the 'Helpers' option for the 'Offer Remote Assistance' setting) should be configured correctly. CCE-9983-8 2010-10-04T15:53:16.517Z 2012-01-05T04:37:47.143Z The 'Do not process the legacy run list' setting should be configured correctly. AC-2 CM-6 CCE-9990-3 2010-10-04T15:53:16.797Z 2012-01-05T04:37:47.347Z Auditing of 'Audit system events' events on failure should be enabled or disabled as appropriate. AU-2 CCE-10207-9 2010-10-04T15:53:16.983Z 2010-10-04T15:53:17.047Z The "IPv6 Block of Protocols 41" option for the Windows Firewall setting should be configured correctly. CM-6 CCE-10488-5 2010-10-04T15:53:17.077Z 2010-10-04T15:53:17.140Z The "IPv6 Block of UDP 3544" option for the Windows Firewall setting should be configured correctly. CM-6 CCE-15050-8 2010-10-04T15:53:18.423Z 2010-10-04T15:53:18.467Z The "Allow operation while in domain" setting on the LLTDIO Driver should be configured correctly. CCE-14109-3 2010-10-04T15:53:18.517Z 2010-10-04T15:53:18.563Z The "Allow operation while in public network" setting on the LLTDIO Driver should be configured correctly. CCE-14718-1 2010-10-04T15:53:18.610Z 2010-10-04T15:53:18.657Z The "Prohibit operation while in private network" setting on the LLTDIO Driver should be configured correctly. CCE-15059-9 2010-10-04T15:53:18.797Z 2012-01-05T04:37:48.283Z The "Allow operation while in domain" setting on the RSPNDR Driver should be configured correctly. CCE-14830-4 2010-10-04T15:53:18.890Z 2010-10-04T15:53:18.953Z The "Allow operation while in public network" setting on the RSPNDR Driver should be configured correctly. CCE-14834-6 2010-10-04T15:53:19.000Z 2010-10-04T15:53:19.047Z The "Prohibit operation while in private network" setting on the RSPNDR Driver should be configured correctly. CCE-9797-2 2010-10-04T15:53:19.280Z 2010-10-04T15:53:19.327Z Installation and Configuration of Network Bridge on the DNS Domain Network should be properly configured. SC-2 SC-7 CCE-14900-5 2010-10-04T15:53:20.047Z 2010-10-04T15:53:20.093Z The Windows Connect Now "Maximum number of WCN devices" setting should be configured correctly. CCE-14653-0 2010-10-04T15:53:20.140Z 2010-10-04T15:53:20.187Z The Windows Connect Now "Higher precedence medium for devices discovered by multiple media" setting should be configured appropriately. CCE-15015-1 2010-10-04T15:53:20.233Z 2010-10-04T15:53:20.280Z The Windows Connect Now "Ethernet (UPnP)" setting should be configured correctly. CCE-15019-3 2010-10-04T15:53:20.327Z 2010-10-04T15:53:20.377Z The Windows Connect "In-band 802.11 Wi-Fi" setting should be configured correctly. CCE-15041-7 2010-10-04T15:53:20.423Z 2012-01-05T04:37:48.767Z The Windows Connect Now "USB Flash Drive" setting should be configured correctly. CCE-14411-3 2010-10-04T15:53:20.517Z 2012-01-05T04:37:48.817Z The Windows Connect Now "Windows Portable Device" setting should be configured correctly. CCE-10694-8 2010-10-04T15:53:21.313Z 2010-10-04T15:53:21.360Z The "Turn off Windows Update device driver search prompt" setting should be configured correctly. SI-2 CCE-10681-5 2010-10-04T15:53:21.407Z 2010-10-04T15:53:21.453Z The "Turn Off Automatic Root Certificates Update" setting should be configured correctly. CM-6 CCE-10658-3 2010-10-04T15:53:21.593Z 2010-10-04T15:53:21.640Z The "Turn off handwriting personalization data sharing" setting should be configured correctly. SI-1 SI-2 CCE-10368-9 2010-10-04T15:53:22.937Z 2010-10-04T15:53:22.983Z The "Configure Windows NTP Client\Type" setting should be configured correctly. AU-8 CM-6 CM-7 CCE-9892-1 2010-10-04T15:53:23.047Z 2010-10-04T15:53:23.093Z The "Configure Windows NTP Client\CrossSiteSyncFlags" setting should be configured correctly. AU-8 CM-6 CM-7 CCE-10756-5 2010-10-04T15:53:23.140Z 2010-10-04T15:53:23.187Z The "Configure Windows NTP Client\ResolvePeerBackoffMinutes" setting should be configured correctly. AU-8 CM-6 CM-7 CCE-10531-2 2010-10-04T15:53:23.217Z 2010-10-04T15:53:23.267Z The "Configure Windows NTP Client\ResolvePeerBackoffMaxTimes" setting should be configured correctly. AU-8 CM-6 CM-7 CCE-10774-8 2010-10-04T15:53:23.313Z 2010-10-04T15:53:23.360Z The "Configure Windows NTP Client\SpecialPollInterval" setting should be configured correctly. AU-8 CM-6 CM-7 CCE-10408-3 2010-10-04T15:53:23.407Z 2010-10-04T15:53:23.453Z The "Configure Windows NTP Client\EventLogFlags" setting should be configured correctly. AU-8 CM-6 CM-7 CCE-10007-3 2010-10-04T15:53:24.813Z 2010-10-04T15:53:24.860Z The "Turn on Basic feed authentication over HTTP" setting should be configured correctly. SC-1 SI-3 CCE-10443-0 2010-10-04T15:53:27.093Z 2012-01-05T04:37:51.283Z The startup type of the SPP Notification Service service should be correct. CCE-10091-7 2010-10-04T15:53:27.187Z 2012-01-05T04:37:51.330Z The startup type of the Windows Biometric service should be correct. CCE-10844-9 2010-10-04T15:53:27.280Z 2012-01-05T04:37:51.377Z The startup type of the WWAN AutoConfig service should be correct. AC-1 CCE-10636-9 2010-10-04T15:53:27.360Z 2010-10-04T15:53:27.423Z The "add workstations to domain" user right should be assigned to the correct accounts. CCE-10251-7 2010-10-04T15:53:27.453Z 2012-01-05T04:37:51.457Z DEPRECATED. Previously: The "synchronize directory service data" user right should be assigned to the correct accounts. Note: According to Microsoft, this is only relevant to domain controllers and hence does not apply to Windows 7. CCE-11164-1 2010-10-04T15:53:27.547Z 2012-01-05T04:37:51.517Z DEPRECATED. Previously: The startup type of the Alerter service should be correct. Note: According to Microsoft, no such service in Windows 7. CCE-11151-8 2010-10-04T15:53:27.657Z 2010-10-04T15:53:27.703Z The startup type of the Background Intelligent Transfer Service (BITS) service should be correct. CCE-11045-2 2010-10-04T15:53:27.750Z 2012-01-05T04:37:51.580Z DEPRECATED. Previously: The startup type of the ClipBook service should be correct. Note: According to Microsoft, no such service in Windows 7. CCE-10254-1 2010-10-04T15:53:27.843Z 2010-10-04T15:53:27.890Z The startup type of the Computer Browser service should be correct. CCE-10674-0 2010-10-04T15:53:27.937Z 2012-01-05T04:37:51.673Z DEPRECATED. Previously: The Error Reporting Service should be enabled or disabled as appropriate. Note: According to Microsoft, no such service in Windows 7. See Windows Error Reporting. CCE-10956-1 2010-10-04T15:53:28.030Z 2012-01-05T04:37:51.737Z DEPRECATED. Previously: The startup type of the Fast User Switching service should be correct. Note: According to Microsoft, no such service in Windows 7. CCE-11066-8 2010-10-04T15:53:28.127Z 2010-10-04T15:53:28.173Z The startup type of the FTP Publishing service should be correct. CCE-10264-0 2010-10-04T15:53:28.217Z 2012-01-05T04:37:51.817Z DEPRECATED. Previously: The startup type of the Indexing service should be correct. Note: According to Microsoft, no such service in Windows 7. CCE-11235-9 2010-10-04T15:53:28.313Z 2012-01-05T04:37:51.847Z DEPRECATED. Previously: The startup type of the Messenger service should be correct. Note: According to Microsoft, no such service in Windows 7. CCE-11221-9 2010-10-04T15:53:28.407Z 2012-01-05T04:37:51.893Z DEPRECATED. Previously: The startup type of the NetMeeting Remote Desktop Sharing service should be correct. Note: According to Microsoft, no such service in Windows 7. CCE-11226-8 2010-10-04T15:53:28.500Z 2012-01-05T04:37:51.940Z DEPRECATED. Previously: The Network Dynamic Data Exchange (DDE) service should be enabled or disabled as appropriate.Note: According to Microsoft, no such service in Windows 7. CCE-11124-5 2010-10-04T15:53:28.593Z 2012-01-05T04:37:51.987Z DEPRECATED. Previously: The Network DDE DDE Share Database Manager (DSDM) service should be enabled or disabled as appropriate.Note: According to Microsoft, no such service in Windows 7. CCE-10267-3 2010-10-04T15:53:28.687Z 2010-10-04T15:53:28.733Z The Remote Access Connection Manager service should be enabled or disabled as appropriate. CCE-11246-6 2010-10-04T15:53:28.780Z 2010-10-04T15:53:28.827Z The startup type of the Routing and Remote Access service should be correct. CCE-10271-5 2010-10-04T15:53:28.877Z 2010-10-04T15:53:28.923Z The startup type of the SSDP Discovery service should be correct. CCE-10272-3 2010-10-04T15:53:28.967Z 2010-10-04T15:53:29.017Z The startup type of the Task Scheduler service should be correct. CCE-10841-5 2010-10-04T15:53:29.063Z 2012-01-05T04:37:52.237Z DEPRECATED. Previously: The startup type of the Terminal Services service should be correct. Note: According to Microsoft, no such service in Windows 7. See Remote Desktop Services. CCE-10577-5 2010-10-04T15:53:29.157Z 2012-01-05T04:37:52.317Z DEPRECATED. Previously: The startup type of the Universal Plug and Play Device Host (UPnP) service should be correct. Note: According to Microsoft, no such service in Windows 7. CCE-11207-8 2010-10-04T15:53:29.250Z 2010-10-04T15:53:29.297Z The WebClient service should be enabled or disabled as appropriate. CCE-11229-2 2010-10-04T15:53:29.343Z 2012-01-05T04:37:52.407Z DEPRECATED. Previously: The Wireless Zero Configuration service should be enabled or disabled as appropriate.Note: According to Microsoft, no such service in Windows 7. CCE-11233-4 2010-10-04T15:53:29.437Z 2010-10-04T15:53:29.483Z The WMI Performance Adapter service should be enabled or disabled as appropriate. CCE-11220-1 2010-10-04T15:53:29.530Z 2010-10-04T15:53:29.577Z The startup type of the World Wide Web Publishing service should be correct. CCE-10282-2 2010-10-04T15:53:29.627Z 2012-01-05T04:37:52.517Z DEPRECATED. Previously: The "Prohibit use of Internet Connection Firewall on your DNS domain network" setting should be configured correctly.Note: According to Microsoft, does not apply to Windows 7. CCE-10886-0 2010-10-04T15:53:29.717Z 2010-10-04T15:53:29.767Z The "Internet Explorer Maintenance Policy Processing - Allow processing across a slow network connection" setting should be configured correctly. CCE-10499-2 2010-10-04T15:53:29.813Z 2010-10-04T15:53:29.860Z The "Turn off Windows Startup Sound" setting should be configured correctly. CM-6 CCE-10877-9 2010-10-04T15:53:29.907Z 2010-10-04T15:53:29.953Z The 'Approved Installation Sites for ActiveX Controls' security mechanism should be enabled or disabled as appropriate. CCE-11027-0 2010-10-04T15:53:30.377Z 2010-10-04T15:53:30.423Z The "Prevent Desktop Shortcut Creation" setting for Windows Media Player should be configured correctly. CCE-10767-2 2010-10-04T15:53:30.467Z 2012-01-05T04:37:52.817Z DEPRECATED. Previously: Prompt for password on resume from hibernate/suspend is set correctly.Note: According to Microsoft, does not apply to Windows 7. See settings under System\Power Management\Sleep Settings. CCE-10551-0 2010-10-04T15:53:30.860Z 2011-12-03T04:37:42.463Z DEPRECATED in favor of CCE-9811-1, CCE-9217-1. AU-2 CCE-10450-5 2010-10-04T15:53:30.953Z 2011-12-03T04:37:42.497Z DEPRECATED in favor of CCE-10078-4, CCE-9737-8. AU-2 CCE-12007-1 2010-10-04T15:53:31.047Z 2012-01-05T04:37:53.363Z The "6to4 Relay Name" machine setting should be configured correctly. CCE-12009-7 2010-10-04T15:53:31.157Z 2012-01-05T04:37:53.440Z The "6to4 Relay Name Resolution Interval" machine setting should be configured correctly. CCE-11356-3 2010-10-04T15:53:31.250Z 2012-01-05T04:37:53.487Z The "6to4 State" machine setting should be configured correctly. CCE-12287-9 2010-10-04T15:53:31.343Z 2012-01-05T04:37:53.550Z The "ActiveX installation policy for sites in Trusted zones" machine setting should be configured correctly. CCE-11699-6 2010-10-04T15:53:31.453Z 2012-01-05T04:37:53.597Z The "Add Printer wizard - Network scan page (Managed network)" machine setting should be configured correctly. CCE-11325-8 2010-10-04T15:53:31.547Z 2012-01-05T04:37:53.643Z The "Add Printer wizard - Network scan page (Unmanaged network)" machine setting should be configured correctly. CCE-11456-1 2010-10-04T15:53:31.657Z 2012-01-05T04:37:53.690Z The "Add the Administrators security group to roaming user profiles" machine setting should be configured correctly. CCE-11163-3 2010-10-04T15:53:31.767Z 2012-01-05T04:37:53.737Z The "Administratively assigned offline files" machine setting should be configured correctly. CCE-11762-2 2010-10-04T15:53:31.860Z 2012-01-05T04:37:53.800Z The "All Removable Storage classes: Deny all access" machine setting should be configured correctly. CCE-11585-7 2010-10-04T15:53:31.953Z 2012-01-05T04:37:53.847Z The "All Removable Storage: Allow direct access in remote sessions" machine setting should be configured correctly. CCE-10982-7 2010-10-04T15:53:32.047Z 2012-01-05T04:37:53.893Z The "Allow .rdp files from unknown publishers" machine setting should be configured correctly. CCE-11350-6 2010-10-04T15:53:32.140Z 2012-01-05T04:37:53.940Z The "Allow .rdp files from valid publishers and user's default .rdp settings" machine setting should be configured correctly. CCE-11465-2 2010-10-04T15:53:32.233Z 2012-01-05T04:37:53.987Z The "Allow access to BitLocker-protected fixed data drives from earlier versions of Windows" machine setting should be configured correctly. CCE-11636-8 2010-10-04T15:53:32.327Z 2012-01-05T04:37:54.033Z The "Allow access to BitLocker-protected removable data drives from earlier versions of Windows" machine setting should be configured correctly. CCE-10520-5 2010-10-04T15:53:32.437Z 2012-01-05T04:37:54.080Z The "Allow admin to install from Remote Desktop Services session" machine setting should be configured correctly. CCE-10446-3 2010-10-04T15:53:32.530Z 2012-01-05T04:37:54.143Z The "Allow administrators to override Device Installation Restriction policies" machine setting should be configured correctly. CCE-11674-9 2010-10-04T15:53:32.813Z 2012-01-05T04:37:54.190Z The "Allow Applications to Prevent Automatic Sleep (On Battery)" machine setting should be configured correctly. CCE-11835-6 2010-10-04T15:53:32.907Z 2012-01-05T04:37:54.237Z The "Allow Applications to Prevent Automatic Sleep (Plugged In)" machine setting should be configured correctly. CCE-12885-0 2010-10-04T15:53:33.017Z 2012-01-05T04:37:54.283Z The "Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services" machine setting should be configured correctly. CCE-11359-7 2010-10-04T15:53:33.093Z 2012-01-05T04:37:54.330Z The "Allow audio and video playback redirection" machine setting should be configured correctly. CCE-11228-4 2010-10-04T15:53:33.203Z 2012-01-05T04:37:54.377Z The "Allow audio recording redirection" machine setting should be configured correctly. CCE-11381-1 2010-10-04T15:53:33.313Z 2012-01-05T04:37:54.423Z The "Allow automatic configuration of listeners" machine setting should be configured correctly. CCE-10584-1 2010-10-04T15:53:33.407Z 2012-01-05T04:37:54.470Z The "Allow Automatic Sleep with Open Network Files (On Battery)" machine setting should be configured correctly. CCE-11514-7 2010-10-04T15:53:33.500Z 2012-01-05T04:37:54.517Z The "Allow Automatic Sleep with Open Network Files (Plugged In)" machine setting should be configured correctly. CCE-11537-8 2010-10-04T15:53:33.593Z 2012-01-05T04:37:54.580Z The "Allow Automatic Updates immediate installation" machine setting should be configured correctly. CCE-10454-7 2010-10-04T15:53:33.687Z 2012-03-17T03:35:39.687Z The "Allow Basic authentication" machine setting should be configured correctly for the WinRM client. CCE-11131-0 2010-10-04T15:53:33.780Z 2012-03-17T03:35:39.733Z The "Allow Basic authentication" machine setting should be configured correctly for the WinRM service. CCE-11216-9 2010-10-04T15:53:33.877Z 2012-01-05T04:37:54.707Z The "Allow BITS Peercaching" machine setting should be configured correctly. CCE-11906-5 2010-10-04T15:53:33.967Z 2012-01-05T04:37:54.753Z The "Allow certificates with no extended key usage certificate attribute" machine setting should be configured correctly. CCE-11539-4 2010-10-04T15:53:34.063Z 2012-01-05T04:37:54.830Z The "Allow Corporate redirection of Customer Experience Improvement uploads" machine setting should be configured correctly. CCE-12032-9 2010-10-04T15:53:34.157Z 2012-03-17T03:35:39.950Z The "Allow CredSSP authentication" machine setting should be configured correctly for the WinRM client. CCE-11306-8 2010-10-04T15:53:34.267Z 2012-03-17T03:35:40.013Z The "Allow CredSSP authentication" machine setting should be configured correctly for the WinRM service. CCE-13723-2 2010-10-04T15:53:34.360Z 2012-01-05T04:37:55.033Z The "Allow Cross-Forest User Policy and Roaming User Profiles" machine setting should be configured correctly. CCE-11972-7 2010-10-04T15:53:34.453Z 2012-01-05T04:37:55.080Z The "Allow cryptography algorithms compatible with Windows NT 4.0" machine setting should be configured correctly. CCE-10397-8 2010-10-04T15:53:34.547Z 2012-01-05T04:37:55.143Z The "Allow Delegating Default Credentials" machine setting should be configured correctly. CCE-10648-4 2010-10-04T15:53:34.640Z 2012-01-05T04:37:55.190Z The "Allow Delegating Default Credentials with NTLM-only Server Authentication" machine setting should be configured correctly. CCE-11223-5 2010-10-04T15:53:34.733Z 2012-01-05T04:37:55.237Z The "Allow Delegating Fresh Credentials" machine setting should be configured correctly. CCE-10968-6 2010-10-04T15:53:34.827Z 2012-01-05T04:37:55.283Z The "Allow Delegating Fresh Credentials with NTLM-only Server Authentication" machine setting should be configured correctly. CCE-10440-6 2010-10-04T15:53:34.923Z 2012-01-05T04:37:55.330Z The "Allow Delegating Saved Credentials" machine setting should be configured correctly. CCE-12094-9 2010-10-04T15:53:35.017Z 2012-01-05T04:37:55.377Z The "Allow Delegating Saved Credentials with NTLM-only Server Authentication" machine setting should be configured correctly. CCE-12042-8 2010-10-04T15:53:35.110Z 2012-01-05T04:37:55.423Z The "Allow desktop composition for remote desktop sessions" machine setting should be configured correctly. CCE-11379-5 2010-10-04T15:53:35.203Z 2012-01-05T04:37:55.470Z The "Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries" machine setting should be configured correctly. CCE-11188-0 2010-10-04T15:53:35.297Z 2012-01-05T04:37:55.533Z The "Allow domain users to log on using biometrics" machine setting should be configured correctly. CCE-11455-3 2010-10-04T15:53:35.390Z 2012-01-05T04:37:55.580Z The "Allow ECC certificates to be used for logon and authentication" machine setting should be configured correctly. CCE-10612-0 2010-10-04T15:53:35.483Z 2012-01-05T04:37:55.643Z The "Allow enhanced PINs for startup" machine setting should be configured correctly. CCE-10532-0 2010-10-04T15:53:35.577Z 2012-01-05T04:37:55.690Z The "Allow Enhanced Storage certificate provisioning" machine setting should be configured correctly. CCE-10675-7 2010-10-04T15:53:35.673Z 2012-01-05T04:37:55.737Z The "Allow installation of devices that match any of these device IDs" machine setting should be configured correctly. CCE-11822-4 2010-10-04T15:53:35.767Z 2012-01-05T04:37:55.783Z The "Allow installation of devices using drivers that match these device setup classes" machine setting should be configured correctly. CCE-11250-8 2010-10-04T15:53:35.860Z 2012-01-05T04:37:55.847Z The "Allow Integrated Unblock screen to be displayed at the time of logon" machine setting should be configured correctly. CCE-11201-1 2010-10-04T15:53:35.953Z 2012-01-05T04:37:55.893Z The "Allow local activation security check exemptions" machine setting should be configured correctly. CCE-11330-8 2010-10-04T15:53:36.047Z 2012-01-05T04:37:55.957Z The "Allow logon scripts when NetBIOS or WINS is disabled" machine setting should be configured correctly. CCE-12004-8 2010-10-04T15:53:36.140Z 2012-01-05T04:37:56.033Z The "Allow non-administrators to install drivers for these device setup classes" machine setting should be configured correctly. CCE-10383-8 2010-10-04T15:53:36.250Z 2012-01-05T04:37:56.097Z The "Allow non-administrators to receive update notifications" machine setting should be configured correctly. CCE-10946-2 2010-10-04T15:53:36.327Z 2012-01-05T04:37:56.143Z The "Allow only system backup" machine setting should be configured correctly. CCE-11081-7 2010-10-04T15:53:36.423Z 2012-01-05T04:37:56.190Z The "Allow only USB root hub connected Enhanced Storage devices" machine setting should be configured correctly. CCE-11249-0 2010-10-04T15:53:36.517Z 2012-01-05T04:37:56.267Z The "Allow only Vista or later connections" machine setting should be configured correctly. CCE-10947-0 2010-10-04T15:53:36.627Z 2012-01-05T04:37:56.317Z The "Allow or Disallow use of the Offline Files feature" machine setting should be configured correctly. CCE-11912-3 2010-10-04T15:53:36.750Z 2012-01-05T04:37:56.363Z The "Allow Print Spooler to accept client connections" machine setting should be configured correctly. CCE-11104-7 2010-10-04T15:53:36.860Z 2012-01-05T04:37:56.407Z The "Allow printers to be published" machine setting should be configured correctly. CCE-11704-4 2010-10-04T15:53:36.953Z 2012-01-05T04:37:56.457Z The "Allow pruning of published printers" machine setting should be configured correctly. CCE-11248-2 2010-10-04T15:53:37.030Z 2012-01-05T04:37:56.503Z The "Allow remote access to the Plug and Play interface" machine setting should be configured correctly. CCE-11860-4 2010-10-04T15:53:37.140Z 2012-01-05T04:37:56.550Z The "Allow Remote Shell Access" machine setting should be configured correctly. CCE-12066-7 2010-10-04T15:53:37.233Z 2012-01-05T04:37:56.597Z The "Allow remote start of unlisted programs" machine setting should be configured correctly. CCE-11784-6 2010-10-04T15:53:37.327Z 2012-01-05T04:37:56.643Z The "Allow restore of system to default state" machine setting should be configured correctly. CCE-11398-5 2010-10-04T15:53:37.423Z 2012-01-05T04:37:56.707Z The "Allow signature keys valid for Logon" machine setting should be configured correctly. CCE-11428-0 2010-10-04T15:53:37.517Z 2012-01-05T04:37:56.753Z The "Allow signed updates from an intranet Microsoft update service location" machine setting should be configured correctly. CCE-11837-2 2010-10-04T15:53:37.627Z 2012-01-05T04:37:56.817Z The "Allow Standby States (S1-S3) When Sleeping (On Battery)" machine setting should be configured correctly. CCE-11714-3 2010-10-04T15:53:37.717Z 2012-01-05T04:37:56.877Z The "Allow Standby States (S1-S3) When Sleeping (Plugged In)" machine setting should be configured correctly. CCE-10854-8 2010-10-04T15:53:37.813Z 2012-01-05T04:37:56.923Z The "Allow the Network Access Protection client to support the 802.1x Enforcement Client component" machine setting should be configured correctly. CCE-11545-1 2010-10-04T15:53:37.907Z 2012-01-05T04:37:56.957Z The "Allow the use of biometrics" machine setting should be configured correctly. CCE-11213-6 2010-10-04T15:53:38.000Z 2012-01-05T04:37:57.003Z The "Allow time invalid certificates" machine setting should be configured correctly. CCE-11427-2 2010-10-04T15:53:38.093Z 2012-01-05T04:37:57.050Z The "Allow time zone redirection" machine setting should be configured correctly. CCE-11954-5 2010-10-04T15:53:38.187Z 2012-03-17T03:35:41.280Z The "Allow unencrypted traffic" machine setting should be configured correctly for the WinRM client. CCE-11290-4 2010-10-04T15:53:38.280Z 2012-03-17T03:35:41.343Z The "Allow unencrypted traffic" machine setting should be configured correctly for the WinRM service. CCE-10713-6 2010-10-04T15:53:38.377Z 2012-01-05T04:37:57.190Z The "Allow user name hint" machine setting should be configured correctly. CCE-11867-9 2010-10-04T15:53:38.483Z 2012-01-05T04:37:57.237Z The "Allow users to connect remotely using Remote Desktop Services" machine setting should be configured correctly. CCE-10455-4 2010-10-04T15:53:38.577Z 2012-01-05T04:37:57.283Z The "Allow users to log on using biometrics" machine setting should be configured correctly. CCE-12401-6 2010-10-04T15:53:38.657Z 2012-01-05T04:37:57.330Z The "Always install with elevated privileges" machine setting should be configured correctly. CCE-11299-5 2010-10-04T15:53:38.767Z 2012-01-05T04:37:57.377Z The "Always prompt for password upon connection" machine setting should be configured correctly. CCE-11478-5 2010-10-04T15:53:38.860Z 2012-01-05T04:37:57.440Z The "Always render print jobs on the server" machine setting should be configured correctly. CCE-11015-5 2010-10-04T15:53:38.953Z 2012-01-05T04:37:57.487Z The "Always show desktop on connection" machine setting should be configured correctly. CCE-11256-5 2010-10-04T15:53:39.047Z 2012-01-05T04:37:57.533Z The "Always use classic logon" machine setting should be configured correctly. CCE-11499-1 2010-10-04T15:53:39.140Z 2012-01-05T04:37:57.580Z The "Always use custom logon background" machine setting should be configured correctly. CCE-12164-0 2010-10-04T15:53:39.233Z 2012-01-05T04:37:57.627Z The "Always wait for the network at computer startup and logon" machine setting should be configured correctly. CCE-11166-6 2010-10-04T15:53:39.327Z 2012-01-05T04:37:57.673Z The "Apply policy to removable media" machine setting should be configured correctly. CCE-11594-9 2010-10-04T15:53:39.423Z 2012-01-05T04:37:57.720Z The "Apply the default user logon picture to all users" machine setting should be configured correctly. CCE-11433-0 2010-10-04T15:53:39.530Z 2012-01-05T04:37:57.767Z The "Approved Installation Sites for ActiveX Controls" machine setting should be configured correctly. CCE-11133-6 2010-10-04T15:53:39.627Z 2012-01-05T04:37:57.830Z The "Assign a default domain for logon" machine setting should be configured correctly. CCE-11511-3 2010-10-04T15:53:39.733Z 2012-01-05T04:37:57.863Z The "Automated Site Coverage by the DC Locator DNS SRV Records" machine setting should be configured correctly. CCE-11039-5 2010-10-04T15:53:39.843Z 2012-01-05T04:37:57.923Z The "Automatic reconnection" machine setting should be configured correctly. CCE-11761-4 2010-10-04T15:53:39.937Z 2012-01-05T04:37:57.970Z The "Automatic Updates detection frequency" machine setting should be configured correctly. CCE-11237-5 2010-10-04T15:53:40.063Z 2012-01-05T04:37:58.017Z The "Background upload of a roaming user profile's registry file while user is logged on" machine setting should be configured correctly. CCE-11890-1 2010-10-04T15:53:40.173Z 2012-03-17T03:35:41.903Z The "Backup log automatically when full" machine setting should be configured correctly for the application log. CCE-11400-9 2010-10-04T15:53:40.267Z 2012-03-17T03:35:41.967Z The "Backup log automatically when full" machine setting should be configured correctly for the security log. CCE-11138-5 2010-10-04T15:53:40.377Z 2012-03-17T03:35:42.030Z The "Backup log automatically when full" machine setting should be configured correctly for the setup log. CCE-12204-4 2010-10-04T15:53:40.467Z 2012-03-17T03:35:42.077Z The "Backup log automatically when full" machine setting should be configured correctly for the system log. CCE-11345-6 2010-10-04T15:53:40.577Z 2012-01-05T04:37:58.253Z The "Baseline file cache maximum size" machine setting should be configured correctly. CCE-12036-0 2010-10-04T15:53:40.673Z 2012-03-17T03:35:42.187Z The "Best effort service type" Layer-3 Differentiated Services Code Point (DSCP) value should be configured correctly for packets that conform to the flow specification. CCE-11663-2 2010-10-04T15:53:40.767Z 2012-03-17T03:35:42.247Z The "Best effort service type" Layer-3 Differentiated Services Code Point (DSCP) value should be configured correctly for packets that do not conform to the flow specification. CCE-10975-1 2010-10-04T15:53:40.877Z 2012-03-17T03:35:42.297Z The "Best effort service type" link layer (Layer-2) priority value should be configured correctly. CCE-11092-4 2010-10-04T15:53:40.967Z 2012-01-05T04:37:58.457Z The "Cache transforms in secure location on workstation" machine setting should be configured correctly. CCE-12092-3 2010-10-04T15:53:41.063Z 2012-01-05T04:37:58.517Z The "CD and DVD: Deny execute access" machine setting should be configured correctly. CCE-11847-1 2010-10-04T15:53:41.157Z 2012-01-05T04:37:58.567Z The "CD and DVD: Deny read access" machine setting should be configured correctly. CCE-10724-3 2010-10-04T15:53:41.250Z 2012-01-05T04:37:58.613Z The "CD and DVD: Deny write access" machine setting should be configured correctly. CCE-10771-4 2010-10-04T15:53:41.360Z 2012-01-05T04:37:58.657Z The "Check for New Signatures Before Scheduled Scans" machine setting should be configured correctly. CCE-11185-6 2010-10-04T15:53:41.453Z 2012-01-05T04:37:58.707Z The "Check published state" machine setting should be configured correctly. CCE-11423-1 2010-10-04T15:53:41.547Z 2012-01-05T04:37:58.767Z The "Choose default folder for recovery password" machine setting should be configured correctly. CCE-11829-9 2010-10-04T15:53:41.640Z 2012-01-05T04:37:58.830Z The "Choose drive encryption method and cipher strength" machine setting should be configured correctly. CCE-11273-0 2010-10-04T15:53:41.750Z 2012-01-05T04:37:58.877Z The "Choose how BitLocker-protected fixed drives can be recovered" machine setting should be configured correctly. CCE-12060-0 2010-10-04T15:53:41.843Z 2012-01-05T04:37:58.923Z The "Choose how BitLocker-protected operating system drives can be recovered" machine setting should be configured correctly. CCE-11973-5 2010-10-04T15:53:41.953Z 2012-01-05T04:37:59.017Z The "Choose how BitLocker-protected removable drives can be recovered" machine setting should be configured correctly. CCE-10583-3 2010-10-04T15:53:42.047Z 2012-01-05T04:37:59.113Z The "Communities" machine setting should be configured correctly. CCE-11177-3 2010-10-04T15:53:42.140Z 2012-01-05T04:37:59.173Z The "Computer location" machine setting should be configured correctly. CCE-11242-5 2010-10-04T15:53:42.250Z 2012-01-05T04:37:59.220Z The "Configuration of wireless settings using Windows Connect Now" machine setting should be configured correctly. CCE-11287-0 2010-10-04T15:53:42.343Z 2012-01-05T04:37:59.267Z The "Configure Applications preference logging and tracing" machine setting should be configured correctly. CCE-10749-0 2010-10-04T15:53:42.437Z 2012-01-05T04:37:59.317Z The "Configure Automatic Updates" machine setting should be configured correctly. CCE-10511-4 2010-10-04T15:53:42.530Z 2012-01-05T04:37:59.363Z The "Configure Background Sync" machine setting should be configured correctly. CCE-11275-5 2010-10-04T15:53:42.640Z 2012-01-05T04:37:59.423Z The "Configure BranchCache for network files" machine setting should be configured correctly. CCE-10483-6 2010-10-04T15:53:42.733Z 2012-01-05T04:37:59.470Z The "Configure Corporate Windows Error Reporting" machine setting should be configured correctly. CCE-10485-1 2010-10-04T15:53:42.827Z 2012-01-05T04:37:59.503Z The "Configure Corrupted File Recovery Behavior" machine setting should be configured correctly. CCE-11321-7 2010-10-04T15:53:42.923Z 2012-01-05T04:37:59.550Z The "Configure Data Sources preference logging and tracing" machine setting should be configured correctly. CCE-11575-8 2010-10-04T15:53:43.030Z 2012-01-05T04:37:59.597Z The "Configure Default consent" machine setting should be configured correctly. CCE-12057-6 2010-10-04T15:53:43.127Z 2012-01-05T04:37:59.643Z The "Configure device installation time-out" machine setting should be configured correctly. CCE-14026-9 2010-10-04T15:53:43.217Z 2012-01-05T04:37:59.690Z The "Configure Devices preference logging and tracing" machine setting should be configured correctly. CCE-11527-9 2010-10-04T15:53:43.313Z 2012-01-05T04:37:59.753Z The "Configure Drive Maps preference logging and tracing" machine setting should be configured correctly. CCE-12910-6 2010-10-04T15:53:43.423Z 2012-01-05T04:37:59.800Z The "Configure Environment preference logging and tracing" machine setting should be configured correctly. CCE-12822-3 2010-10-04T15:53:43.517Z 2012-01-05T04:37:59.830Z The "Configure Files preference logging and tracing" machine setting should be configured correctly. CCE-12974-2 2010-10-04T15:53:43.610Z 2012-01-05T04:37:59.893Z The "Configure Folder Options preference logging and tracing" machine setting should be configured correctly. CCE-11935-4 2010-10-04T15:53:43.717Z 2012-01-05T04:37:59.923Z The "Configure Folders preference logging and tracing" machine setting should be configured correctly. CCE-12948-6 2010-10-04T15:53:43.813Z 2012-01-05T04:37:59.970Z The "Configure Ini Files preference logging and tracing" machine setting should be configured correctly. CCE-11522-0 2010-10-04T15:53:43.907Z 2012-01-05T04:38:00.017Z The "Configure Internet Settings preference logging and tracing" machine setting should be configured correctly. CCE-11194-8 2010-10-04T15:53:44.000Z 2012-01-05T04:38:00.067Z The "Configure keep-alive connection interval" machine setting should be configured correctly. CCE-11418-1 2010-10-04T15:53:44.110Z 2012-01-05T04:38:00.113Z The "Configure list of Enhanced Storage devices usable on your computer" machine setting should be configured correctly. CCE-10797-9 2010-10-04T15:53:44.203Z 2012-01-05T04:38:00.173Z The "Configure list of IEEE 1667 silos usable on your computer" machine setting should be configured correctly. CCE-12051-9 2010-10-04T15:53:44.313Z 2012-01-05T04:38:00.237Z The "Configure Local Users and Groups preference logging and tracing" machine setting should be configured correctly. CCE-11638-4 2010-10-04T15:53:44.407Z 2012-01-05T04:38:00.300Z The "Configure Microsoft SpyNet Reporting" machine setting should be configured correctly. CCE-11332-4 2010-10-04T15:53:44.500Z 2012-01-05T04:38:00.363Z The "Configure minimum PIN length for startup" machine setting should be configured correctly. CCE-11305-0 2010-10-04T15:53:44.593Z 2012-01-05T04:38:00.407Z The "Configure MSI Corrupted File Recovery Behavior" machine setting should be configured correctly. CCE-11144-3 2010-10-04T15:53:44.703Z 2012-01-05T04:38:00.457Z The "Configure Network Options preference logging and tracing" machine setting should be configured correctly. CCE-13026-0 2010-10-04T15:53:44.797Z 2012-01-05T04:38:00.517Z The "Configure Network Shares preference logging and tracing" machine setting should be configured correctly. CCE-11881-0 2010-10-04T15:53:44.890Z 2012-01-05T04:38:00.567Z The "Configure Power Options preference logging and tracing" machine setting should be configured correctly. CCE-12806-6 2010-10-04T15:53:44.983Z 2012-01-05T04:38:00.613Z The "Configure Printers preference logging and tracing" machine setting should be configured correctly. CCE-10563-5 2010-10-04T15:53:45.077Z 2012-01-05T04:38:00.657Z The "Configure RD Connection Broker farm name" machine setting should be configured correctly. CCE-11132-8 2010-10-04T15:53:45.173Z 2012-01-05T04:38:00.707Z The "Configure RD Connection Broker server name" machine setting should be configured correctly. CCE-12147-5 2010-10-04T15:53:45.267Z 2012-01-05T04:38:00.753Z The "Configure Regional Options preference logging and tracing" machine setting should be configured correctly. CCE-13691-1 2010-10-04T15:53:45.377Z 2012-01-05T04:38:00.800Z The "Configure Registry preference logging and tracing" machine setting should be configured correctly. CCE-11971-9 2010-10-04T15:53:45.467Z 2012-01-05T04:38:00.830Z The "Configure Reliability WMI Providers" machine setting should be configured correctly. CCE-11962-8 2010-10-04T15:53:45.563Z 2012-01-05T04:38:00.877Z The "Configure Report Archive" machine setting should be configured correctly. CCE-11861-2 2010-10-04T15:53:45.673Z 2012-01-05T04:38:00.923Z The "Configure Report Queue" machine setting should be configured correctly. CCE-11646-7 2010-10-04T15:53:45.767Z 2012-01-05T04:38:00.970Z The "Configure root certificate clean up" machine setting should be configured correctly. CCE-12038-6 2010-10-04T15:53:45.860Z 2012-03-17T03:35:44.170Z The Diagnostic Policy Service (DPS) "Configure Scenario Execution Level" machine setting should be configured correctly for Fault Tolerant Heap . CCE-11210-2 2010-10-04T15:53:45.967Z 2012-03-17T03:35:44.247Z The Diagnostic Policy Service (DPS) "Configure Scenario Execution Level" machine setting should be configured correctly for Windows Boot Performance Diagnostics. CCE-11484-3 2010-10-04T15:53:46.063Z 2012-03-17T03:35:44.310Z The Diagnostic Policy Service (DPS) "Configure Scenario Execution Level" machine setting should be configured correctly for Windows Memory Leak Diagnosis. CCE-10616-1 2010-10-04T15:53:46.173Z 2012-03-17T03:35:44.357Z The Diagnostic Policy Service (DPS) "Configure Scenario Execution Level" machine setting should be configured correctly for Windows Resource Exhaustion Detection and Resolution. CCE-10626-0 2010-10-04T15:53:46.267Z 2012-03-17T03:35:44.420Z The Diagnostic Policy Service (DPS) "Configure Scenario Execution Level" machine setting should be configured correctly for Windows Shutdown Performance Diagnostics. CCE-11054-4 2010-10-04T15:53:46.360Z 2012-03-17T03:35:44.467Z The Diagnostic Policy Service (DPS) "Configure Scenario Execution Level" machine setting should be configured correctly for Windows Standby/Resume Performance Diagnostics. CCE-11966-9 2010-10-04T15:53:46.467Z 2012-03-17T03:35:44.547Z The Diagnostic Policy Service (DPS) "Configure Scenario Execution Level" machine setting should be configured correctly for Windows System Responsiveness Diagnostics. CCE-13753-9 2010-10-04T15:53:46.563Z 2012-01-05T04:38:01.347Z The "Configure Scheduled Tasks preference logging and tracing" machine setting should be configured correctly. CCE-11106-2 2010-10-04T15:53:46.657Z 2012-01-05T04:38:01.393Z The "Configure Security Policy for Scripted Diagnostics" machine setting should be configured correctly. CCE-11494-2 2010-10-04T15:53:46.750Z 2012-03-17T03:35:44.670Z The Remote Desktop Connection Client "Configure server authentication for client" machine setting should be configured correctly. CCE-12116-0 2010-10-04T15:53:46.860Z 2012-01-05T04:38:01.487Z The "Configure Services preference logging and tracing" machine setting should be configured correctly. CCE-14699-3 2010-10-04T15:53:46.967Z 2012-01-05T04:38:01.533Z The "Configure Shortcuts preference logging and tracing" machine setting should be configured correctly. CCE-12002-2 2010-10-04T15:53:47.063Z 2012-01-05T04:38:01.580Z The "Configure slow-link mode" machine setting should be configured correctly. CCE-12226-7 2010-10-04T15:53:47.157Z 2012-01-05T04:38:01.673Z The "Configure Start Menu preference logging and tracing" machine setting should be configured correctly. CCE-10870-4 2010-10-04T15:53:47.250Z 2012-01-05T04:38:01.720Z The "Configure the list of blocked TPM commands" machine setting should be configured correctly. CCE-10994-2 2010-10-04T15:53:47.343Z 2012-01-05T04:38:01.783Z The "Configure the refresh interval for Server Manager" machine setting should be configured correctly. CCE-11673-1 2010-10-04T15:53:47.437Z 2012-01-05T04:38:01.830Z The "Configure the server address, refresh interval, and issuer certificate authority of a target Subscription Manager" machine setting should be configured correctly. CCE-11809-1 2010-10-04T15:53:47.547Z 2012-01-05T04:38:01.877Z The "Configure TPM platform validation profile" machine setting should be configured correctly. CCE-12237-4 2010-10-04T15:53:47.640Z 2012-01-05T04:38:01.923Z The "Configure use of passwords for fixed data drives" machine setting should be configured correctly. CCE-10422-4 2010-10-04T15:53:47.733Z 2012-01-05T04:38:01.970Z The "Configure use of passwords for removable data drives" machine setting should be configured correctly. CCE-11239-1 2010-10-04T15:53:47.843Z 2012-01-05T04:38:02.017Z The "Configure use of smart cards on fixed data drives" machine setting should be configured correctly. CCE-12336-4 2010-10-04T15:53:47.937Z 2012-01-05T04:38:02.067Z The "Configure use of smart cards on removable data drives" machine setting should be configured correctly. CCE-11856-2 2010-10-04T15:53:48.030Z 2012-01-05T04:38:02.113Z The "Configure Windows NTP Client" machine setting should be configured correctly. CCE-11328-2 2010-10-04T15:53:48.127Z 2012-01-05T04:38:02.157Z The "Contact PDC on logon failure" machine setting should be configured correctly. CCE-11377-9 2010-10-04T15:53:48.217Z 2012-01-05T04:38:02.207Z The "Control use of BitLocker on removable drives" machine setting should be configured correctly. CCE-10558-5 2010-10-04T15:53:48.313Z 2012-03-17T03:35:45.170Z The "Controlled load service type" Layer-3 Differentiated Services Code Point (DSCP) value should be configured correctly for packets that conform to the flow specification. CCE-11393-6 2010-10-04T15:53:48.423Z 2012-03-17T03:35:45.217Z The "Controlled load service type" Layer-3 Differentiated Services Code Point (DSCP) should be configured correctly for packets that do not conform to the flow specification. CCE-10315-0 2010-10-04T15:53:48.517Z 2012-03-17T03:35:45.280Z The "Controlled load service type" link layer (Layer-2) priority value should be configured correctly. CCE-11399-3 2010-10-04T15:53:48.610Z 2012-01-05T04:38:02.393Z The "Corporate DNS Probe Host Address" machine setting should be configured correctly. CCE-10891-0 2010-10-04T15:53:48.703Z 2012-01-05T04:38:02.440Z The "Corporate DNS Probe Host Name" machine setting should be configured correctly. CCE-11600-4 2010-10-04T15:53:48.797Z 2012-01-05T04:38:02.487Z The "Corporate Site Prefix List" machine setting should be configured correctly. CCE-12005-5 2010-10-04T15:53:48.907Z 2012-01-05T04:38:02.533Z The "Corporate Website Probe URL" machine setting should be configured correctly. CCE-11279-7 2010-10-04T15:53:49.000Z 2012-01-05T04:38:02.580Z The "Critical Battery Notification Action" machine setting should be configured correctly. CCE-11438-9 2010-10-04T15:53:49.093Z 2012-01-05T04:38:02.627Z The "Critical Battery Notification Level" machine setting should be configured correctly. CCE-11370-4 2010-10-04T15:53:49.203Z 2012-01-05T04:38:02.673Z The "Custom Classes: Deny read access" machine setting should be configured correctly. CCE-10718-5 2010-10-04T15:53:49.313Z 2012-01-05T04:38:02.720Z The "Custom Classes: Deny write access" machine setting should be configured correctly. CCE-11703-6 2010-10-04T15:53:49.407Z 2012-01-05T04:38:02.767Z The "Customize consent settings" machine setting should be configured correctly. CCE-11554-3 2010-10-04T15:53:49.500Z 2012-01-05T04:38:02.800Z The "Customize Warning Messages" machine setting should be configured correctly. CCE-11083-3 2010-10-04T15:53:49.610Z 2012-01-05T04:38:02.863Z The "DC Locator DNS records not registered by the DCs" machine setting should be configured correctly. CCE-11431-4 2010-10-04T15:53:49.717Z 2012-01-05T04:38:02.907Z The "Default behavior for AutoRun" machine setting should be configured correctly. CCE-11601-2 2010-10-04T15:53:49.813Z 2012-01-05T04:38:02.957Z The "Default quota limit and warning level" machine setting should be configured correctly. CCE-11718-4 2010-10-04T15:53:49.923Z 2012-01-05T04:38:03.033Z The "Define Activation Security Check exemptions" machine setting should be configured correctly. CCE-12137-6 2010-10-04T15:53:50.017Z 2012-01-05T04:38:03.113Z The "Define host name-to-Kerberos realm mappings" machine setting should be configured correctly. CCE-10868-8 2010-10-04T15:53:50.127Z 2012-01-05T04:38:03.143Z The "Define interoperable Kerberos V5 realm settings" machine setting should be configured correctly. CCE-11534-5 2010-10-04T15:53:50.217Z 2012-01-05T04:38:03.207Z The "Delay Restart for scheduled installations" machine setting should be configured correctly. CCE-11955-2 2010-10-04T15:53:50.313Z 2012-01-05T04:38:03.237Z The "Delete cached copies of roaming profiles" machine setting should be configured correctly. CCE-10613-8 2010-10-04T15:53:50.407Z 2012-01-05T04:38:03.283Z The "Delete data from devices running Microsoft firmware when a user logs off from the computer." machine setting should be configured correctly. CCE-11349-8 2010-10-04T15:53:50.517Z 2012-01-05T04:38:03.330Z The "Delete user profiles older than a specified number of days on system restart" machine setting should be configured correctly. CCE-12399-2 2010-10-04T15:53:50.610Z 2012-01-05T04:38:03.377Z The "Deny Delegating Default Credentials" machine setting should be configured correctly. CCE-11281-3 2010-10-04T15:53:50.717Z 2012-01-05T04:38:03.423Z The "Deny Delegating Fresh Credentials" machine setting should be configured correctly. CCE-11231-8 2010-10-04T15:53:50.813Z 2012-01-05T04:38:03.470Z The "Deny Delegating Saved Credentials" machine setting should be configured correctly. CCE-11615-2 2010-10-04T15:53:50.923Z 2012-01-05T04:38:03.533Z The "Deny write access to fixed drives not protected by BitLocker" machine setting should be configured correctly. CCE-11142-7 2010-10-04T15:53:51.017Z 2012-01-05T04:38:03.613Z The "Deny write access to removable drives not protected by BitLocker" machine setting should be configured correctly. CCE-11234-2 2010-10-04T15:53:51.110Z 2012-01-05T04:38:03.690Z The "Detect application failures caused by deprecated COM objects" machine setting should be configured correctly. CCE-11688-9 2010-10-04T15:53:51.203Z 2012-01-05T04:38:03.737Z The "Detect application failures caused by deprecated Windows DLLs" machine setting should be configured correctly. CCE-10784-7 2010-10-04T15:53:51.297Z 2012-01-05T04:38:03.783Z The "Detect application install failures" machine setting should be configured correctly. CCE-10569-2 2010-10-04T15:53:51.390Z 2012-01-05T04:38:03.830Z The "Detect application installers that need to be run as administrator" machine setting should be configured correctly. CCE-11885-1 2010-10-04T15:53:51.483Z 2012-01-05T04:38:03.877Z The "Detect applications unable to launch installers under UAC" machine setting should be configured correctly. CCE-11241-7 2010-10-04T15:53:51.577Z 2012-01-05T04:38:03.923Z The "Diagnostics: Configure scenario execution level" machine setting should be configured correctly. CCE-11611-1 2010-10-04T15:53:51.687Z 2012-01-05T04:38:03.970Z The "Diagnostics: Configure scenario retention" machine setting should be configured correctly. CCE-12047-7 2010-10-04T15:53:51.780Z 2012-01-05T04:38:04.017Z The "Directory pruning interval" machine setting should be configured correctly. CCE-11129-4 2010-10-04T15:53:51.877Z 2012-01-05T04:38:04.067Z The "Directory pruning priority" machine setting should be configured correctly. CCE-10477-8 2010-10-04T15:53:51.967Z 2012-01-05T04:38:04.097Z The "Directory pruning retry" machine setting should be configured correctly. CCE-11705-1 2010-10-04T15:53:52.063Z 2012-01-05T04:38:04.157Z The "Disable binding directly to IPropertySetStorage without intermediate layers." machine setting should be configured correctly. CCE-11824-0 2010-10-04T15:53:52.157Z 2012-01-05T04:38:04.190Z The "Disable delete notifications on all volumes" machine setting should be configured correctly. CCE-10343-2 2010-10-04T15:53:52.250Z 2012-01-05T04:38:04.237Z The "Disable IE security prompt for Windows Installer scripts" machine setting should be configured correctly. CCE-11621-0 2010-10-04T15:53:52.343Z 2012-01-05T04:38:04.317Z The "Disable Logging" machine setting should be configured correctly. CCE-11094-0 2010-10-04T15:53:52.453Z 2012-01-05T04:38:04.377Z The "Disable logging via package settings" machine setting should be configured correctly. CCE-12332-3 2010-10-04T15:53:52.547Z 2012-01-05T04:38:04.423Z The "Disable or enable software Secure Attention Sequence" machine setting should be configured correctly. CCE-11547-7 2010-10-04T15:53:52.640Z 2012-01-05T04:38:04.470Z The "Disable password strength validation for Peer Grouping" machine setting should be configured correctly. CCE-11017-1 2010-10-04T15:53:52.733Z 2012-01-05T04:38:04.517Z The "Disable remote Desktop Sharing" machine setting should be configured correctly. CCE-12376-0 2010-10-04T15:53:52.843Z 2012-01-05T04:38:04.567Z The "Disable text prediction" machine setting should be configured correctly. CCE-11708-5 2010-10-04T15:53:52.937Z 2012-01-05T04:38:04.613Z The "Disable Windows Error Reporting" machine setting should be configured correctly. CCE-10972-8 2010-10-04T15:53:53.017Z 2012-01-05T04:38:04.657Z The "Disable Windows Installer" machine setting should be configured correctly. CCE-10899-3 2010-10-04T15:53:53.127Z 2012-01-05T04:38:04.720Z The "Disallow changing of geographic location" machine setting should be configured correctly. CCE-12266-3 2010-10-04T15:53:53.217Z 2012-01-05T04:38:04.783Z The "Disallow Digest authentication" machine setting should be configured correctly. CCE-12168-1 2010-10-04T15:53:53.313Z 2012-01-05T04:38:04.830Z The "Disallow Interactive Users from generating Resultant Set of Policy data" machine setting should be configured correctly. CCE-11697-0 2010-10-04T15:53:53.407Z 2012-03-17T03:35:46.887Z The "Disallow Kerberos authentication" machine setting should be configured correctly for the WinRM client. CCE-11149-2 2010-10-04T15:53:53.500Z 2012-03-17T03:35:46.950Z The "Disallow Kerberos authentication" machine setting should be configured correctly for the WinRM service. CCE-11497-5 2010-10-04T15:53:53.593Z 2012-01-05T04:38:04.987Z The "Disallow locally attached storage as backup target" machine setting should be configured correctly. CCE-11756-4 2010-10-04T15:53:53.703Z 2012-03-17T03:35:47.047Z The "Disallow Negotiate authentication" machine setting should be configured correctly for the WinRM client. CCE-12295-2 2010-10-04T15:53:53.797Z 2012-03-17T03:35:47.107Z The "Disallow Negotiate authentication" machine setting should be configured correctly for the WinRM service. CCE-11908-1 2010-10-04T15:53:53.890Z 2012-01-05T04:38:05.127Z The "Disallow network as backup target" machine setting should be configured correctly. CCE-11797-8 2010-10-04T15:53:53.983Z 2012-01-05T04:38:05.173Z The "Disallow optical media as backup target" machine setting should be configured correctly. CCE-11681-4 2010-10-04T15:53:54.093Z 2012-01-05T04:38:05.220Z The "Disallow run-once backups" machine setting should be configured correctly. CCE-11327-4 2010-10-04T15:53:54.187Z 2012-01-05T04:38:05.267Z The "Disallow selection of Custom Locales" machine setting should be configured correctly. CCE-11420-7 2010-10-04T15:53:54.280Z 2012-01-05T04:38:05.300Z The "Disallow user override of locale settings" machine setting should be configured correctly. CCE-12166-5 2010-10-04T15:53:54.377Z 2012-01-05T04:38:05.363Z The "Disk Diagnostic: Configure custom alert text" machine setting should be configured correctly. CCE-11922-2 2010-10-04T15:53:54.467Z 2012-01-05T04:38:05.407Z The "Disk Diagnostic: Configure execution level" machine setting should be configured correctly. CCE-12073-3 2010-10-04T15:53:54.577Z 2012-01-05T04:38:05.457Z The "Disk Quota policy processing" machine setting should be configured correctly. CCE-11125-2 2010-10-04T15:53:54.673Z 2012-01-05T04:38:05.503Z The "Display a custom message title when device installation is prevented by a policy setting" machine setting should be configured correctly. CCE-12020-4 2010-10-04T15:53:54.780Z 2012-01-05T04:38:05.550Z The "Display a custom message when installation is prevented by a policy setting" machine setting should be configured correctly. CCE-11410-8 2010-10-04T15:53:54.877Z 2012-01-05T04:38:05.597Z The "Display information about previous logons during user logon" machine setting should be configured correctly. CCE-11444-7 2010-10-04T15:53:54.967Z 2012-01-05T04:38:05.657Z The "Display Shutdown Event Tracker" machine setting should be configured correctly. CCE-11362-1 2010-10-04T15:53:55.063Z 2012-01-05T04:38:05.707Z The "Display string when smart card is blocked" machine setting should be configured correctly. CCE-11834-9 2010-10-04T15:53:55.173Z 2012-01-05T04:38:05.737Z The "DNS Suffix Search List" machine setting should be configured correctly. CCE-11341-5 2010-10-04T15:53:55.267Z 2012-01-05T04:38:05.783Z The "Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box" machine setting should be configured correctly. CCE-11785-3 2010-10-04T15:53:55.360Z 2012-01-05T04:38:05.830Z The "Do not allow adding new targets via manual configuration" machine setting should be configured correctly. CCE-10996-7 2010-10-04T15:53:55.467Z 2012-01-05T04:38:06.003Z The "Do not allow additional session logins" machine setting should be configured correctly. CCE-11127-8 2010-10-04T15:53:55.563Z 2012-01-05T04:38:06.050Z The "Do not allow changes to initiator CHAP secret" machine setting should be configured correctly. CCE-11285-4 2010-10-04T15:53:55.657Z 2012-01-05T04:38:06.113Z The "Do not allow changes to initiator iqn name" machine setting should be configured correctly. CCE-12056-8 2010-10-04T15:53:55.750Z 2012-01-05T04:38:06.173Z The "Do not allow client printer redirection" machine setting should be configured correctly. CCE-11303-5 2010-10-04T15:53:55.843Z 2012-01-05T04:38:06.237Z The "Do not allow clipboard redirection" machine setting should be configured correctly. CCE-11448-8 2010-10-04T15:53:55.953Z 2012-01-05T04:38:06.283Z The "Do not allow color changes" machine setting should be configured correctly. CCE-10600-5 2010-10-04T15:53:56.047Z 2012-01-05T04:38:06.330Z The "Do not allow COM port redirection" machine setting should be configured correctly. CCE-11425-6 2010-10-04T15:53:56.140Z 2012-01-05T04:38:06.377Z The "Do not allow compression on all NTFS volumes" machine setting should be configured correctly. CCE-11277-1 2010-10-04T15:53:56.233Z 2012-01-05T04:38:06.423Z The "Do not allow connections without IPSec" machine setting should be configured correctly. CCE-11352-2 2010-10-04T15:53:56.327Z 2012-01-05T04:38:06.470Z The "Do not allow desktop composition" machine setting should be configured correctly. CCE-11098-1 2010-10-04T15:53:56.437Z 2012-01-05T04:38:06.517Z The "Do not allow Digital Locker to run" machine setting should be configured correctly. CCE-11709-3 2010-10-04T15:53:56.530Z 2012-01-05T04:38:06.567Z The "Do not allow drive redirection" machine setting should be configured correctly. CCE-11284-7 2010-10-04T15:53:56.610Z 2012-01-05T04:38:06.613Z The "Do not allow encryption on all NTFS volumes" machine setting should be configured correctly. CCE-10353-1 2010-10-04T15:53:56.717Z 2012-01-05T04:38:06.657Z The "Do not allow Flip3D invocation" machine setting should be configured correctly. CCE-11664-0 2010-10-04T15:53:56.813Z 2012-01-05T04:38:06.707Z The "Do not allow font smoothing" machine setting should be configured correctly. CCE-12159-0 2010-10-04T15:53:56.907Z 2012-01-05T04:38:06.753Z The "Do not allow local administrators to customize permissions" machine setting should be configured correctly. CCE-11623-6 2010-10-04T15:53:57.000Z 2012-01-05T04:38:06.800Z The "Do not allow LPT port redirection" machine setting should be configured correctly. CCE-12170-7 2010-10-04T15:53:57.110Z 2012-01-05T04:38:06.847Z The "Do not allow manual configuration of discovered targets" machine setting should be configured correctly. CCE-11852-1 2010-10-04T15:53:57.203Z 2012-01-05T04:38:06.893Z The "Do not allow manual configuration of iSNS servers" machine setting should be configured correctly. CCE-12045-1 2010-10-04T15:53:57.297Z 2012-01-05T04:38:06.940Z The "Do not allow manual configuration of target portals" machine setting should be configured correctly. CCE-11316-7 2010-10-04T15:53:57.390Z 2012-01-05T04:38:07.017Z The "Do not allow non-Enhanced Storage removable devices" machine setting should be configured correctly. CCE-12040-2 2010-10-04T15:53:57.500Z 2012-01-05T04:38:07.067Z The "Do not allow password authentication of Enhanced Storage devices" machine setting should be configured correctly. CCE-11905-7 2010-10-04T15:53:57.593Z 2012-01-05T04:38:07.113Z The "Do not allow passwords to be saved" machine setting should be configured correctly. CCE-11531-1 2010-10-04T15:53:57.687Z 2012-01-05T04:38:07.157Z The "Do not allow printing to Journal Note Writer" machine setting should be configured correctly. CCE-11232-6 2010-10-04T15:53:57.780Z 2012-01-05T04:38:07.207Z The "Do not allow sessions without mutual CHAP" machine setting should be configured correctly. CCE-11486-8 2010-10-04T15:53:57.877Z 2012-01-05T04:38:07.253Z The "Do not allow sessions without one way CHAP" machine setting should be configured correctly. CCE-11517-0 2010-10-04T15:53:57.967Z 2012-01-05T04:38:07.283Z The "Do not allow smart card device redirection" machine setting should be configured correctly. CCE-11390-2 2010-10-04T15:53:58.077Z 2012-01-05T04:38:07.330Z The "Do not allow Snipping Tool to run" machine setting should be configured correctly. CCE-11387-8 2010-10-04T15:53:58.173Z 2012-01-05T04:38:07.377Z The "Do not allow Sound Recorder to run" machine setting should be configured correctly. CCE-11128-6 2010-10-04T15:53:58.267Z 2012-01-05T04:38:07.423Z The "Do not allow supported Plug and Play device redirection" machine setting should be configured correctly. CCE-11991-7 2010-10-04T15:53:58.360Z 2012-01-05T04:38:07.470Z The "Do not allow the BITS client to use Windows Branch Cache" machine setting should be configured correctly. CCE-11353-0 2010-10-04T15:53:58.467Z 2012-01-05T04:38:07.517Z The "Do not allow the computer to act as a BITS Peercaching client" machine setting should be configured correctly. CCE-11870-3 2010-10-04T15:53:58.563Z 2012-01-05T04:38:07.550Z The "Do not allow the computer to act as a BITS Peercaching server" machine setting should be configured correctly. CCE-10861-3 2010-10-04T15:53:58.657Z 2012-01-05T04:38:07.597Z The "Do not allow window animations" machine setting should be configured correctly. CCE-11342-3 2010-10-04T15:53:58.767Z 2012-01-05T04:38:07.643Z The "Do not allow Windows Journal to be run" machine setting should be configured correctly. CCE-12192-1 2010-10-04T15:53:58.860Z 2012-01-05T04:38:07.690Z The "Do not allow Windows Media Center to run" machine setting should be configured correctly. CCE-10872-0 2010-10-04T15:53:58.953Z 2012-01-05T04:38:07.737Z The "Do not allow Windows Messenger to be run" machine setting should be configured correctly. CCE-11794-5 2010-10-04T15:53:59.047Z 2012-01-05T04:38:07.783Z The "Do not automatically encrypt files moved to encrypted folders" machine setting should be configured correctly. CCE-10773-0 2010-10-04T15:53:59.140Z 2012-01-05T04:38:07.830Z The "Do not automatically start Windows Messenger initially" machine setting should be configured correctly. CCE-11172-4 2010-10-04T15:53:59.233Z 2012-01-05T04:38:07.893Z The "Do not check for user ownership of Roaming Profile Folders" machine setting should be configured correctly. CCE-12046-9 2010-10-04T15:53:59.327Z 2012-01-05T04:38:07.923Z The "Do not delete temp folder upon exit" machine setting should be configured correctly. CCE-11898-4 2010-10-04T15:53:59.437Z 2012-01-05T04:38:07.987Z The "Do not detect slow network connections" machine setting should be configured correctly. CCE-10819-1 2010-10-04T15:53:59.530Z 2012-01-05T04:38:08.033Z The "Do not display Initial Configuration Tasks window automatically at logon" machine setting should be configured correctly. CCE-10299-6 2010-10-04T15:53:59.627Z 2012-01-05T04:38:08.080Z The "Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box" machine setting should be configured correctly. CCE-11872-9 2010-10-04T15:53:59.733Z 2012-01-05T04:38:08.113Z The "Do not display Manage Your Server page at logon" machine setting should be configured correctly. CCE-11282-1 2010-10-04T15:53:59.827Z 2012-01-05T04:38:08.157Z The "Do not display Server Manager automatically at logon" machine setting should be configured correctly. CCE-11603-8 2010-10-04T15:53:59.923Z 2012-01-05T04:38:08.207Z The "Do not forcefully unload the users registry at user logoff" machine setting should be configured correctly. CCE-10837-3 2010-10-04T15:54:00.017Z 2012-01-05T04:38:08.253Z The "Do not log users on with temporary profiles" machine setting should be configured correctly. CCE-10320-0 2010-10-04T15:54:00.110Z 2012-01-05T04:38:08.317Z The "Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names" machine setting should be configured correctly. CCE-11245-8 2010-10-04T15:54:00.217Z 2012-01-05T04:38:08.363Z The "Do not process the legacy run list" machine setting should be configured correctly. CCE-11992-5 2010-10-04T15:54:00.313Z 2012-01-05T04:38:08.423Z The "Do not process the run once list" machine setting should be configured correctly. CCE-12274-7 2010-10-04T15:54:00.407Z 2012-01-05T04:38:08.487Z The "Do not send a Windows error report when a generic driver is installed on a device" machine setting should be configured correctly. CCE-11584-0 2010-10-04T15:54:00.500Z 2012-01-05T04:38:08.533Z The "Do not send additional data" machine setting should be configured correctly. CCE-10572-6 2010-10-04T15:54:00.593Z 2012-01-05T04:38:08.567Z The "Do not set default client printer to be default printer in a session" machine setting should be configured correctly. CCE-11596-4 2010-10-04T15:54:00.703Z 2012-01-05T04:38:08.627Z The "Do Not Show First Use Dialog Boxes" machine setting should be configured correctly. CCE-10355-6 2010-10-04T15:54:00.797Z 2012-01-05T04:38:08.673Z The "Do not show the "local access only" network icon" machine setting should be configured correctly. CCE-10806-8 2010-10-04T15:54:00.890Z 2012-01-05T04:38:08.737Z The "Do not turn off system power after a Windows system shutdown has occurred." machine setting should be configured correctly. CCE-11178-1 2010-10-04T15:54:00.983Z 2012-01-05T04:38:08.830Z The "Do not use Remote Desktop Session Host server IP address when virtual IP address is not available" machine setting should be configured correctly. CCE-10669-0 2010-10-04T15:54:01.093Z 2012-01-05T04:38:08.877Z The "Do not use temporary folders per session" machine setting should be configured correctly. CCE-11849-7 2010-10-04T15:54:01.187Z 2012-01-05T04:38:08.970Z The "Domain Controller Address Type Returned" machine setting should be configured correctly. CCE-10842-3 2010-10-04T15:54:01.280Z 2012-01-05T04:38:09.033Z The "Domain Location Determination URL" machine setting should be configured correctly. CCE-11913-1 2010-10-04T15:54:01.377Z 2012-01-05T04:38:09.080Z The "Don't set the always do this checkbox" machine setting should be configured correctly. CCE-11217-7 2010-10-04T15:54:01.467Z 2012-01-05T04:38:09.127Z The "Download missing COM components" machine setting should be configured correctly. CCE-11318-3 2010-10-04T15:54:01.577Z 2012-01-05T04:38:09.220Z The "Dynamic Registration of the DC Locator DNS Records" machine setting should be configured correctly. CCE-11209-4 2010-10-04T15:54:01.673Z 2012-01-05T04:38:09.283Z The "Dynamic Update" machine setting should be configured correctly. CCE-11058-5 2010-10-04T15:54:01.767Z 2012-01-05T04:38:09.330Z The "EFS recovery policy processing" machine setting should be configured correctly. CCE-11917-2 2010-10-04T15:54:01.860Z 2012-01-05T04:38:09.377Z The "Enable client-side targeting" machine setting should be configured correctly. CCE-11198-9 2010-10-04T15:54:01.953Z 2012-01-05T04:38:09.423Z The "Enable disk quotas" machine setting should be configured correctly. CCE-10568-4 2010-10-04T15:54:02.047Z 2012-01-05T04:38:09.470Z The "Enable NTFS pagefile encryption" machine setting should be configured correctly. CCE-11261-5 2010-10-04T15:54:02.140Z 2012-01-05T04:38:09.517Z The "Enable Persistent Time Stamp" machine setting should be configured correctly. CCE-11369-6 2010-10-04T15:54:02.233Z 2012-01-05T04:38:09.567Z The "Enable Transparent Caching" machine setting should be configured correctly. CCE-10906-6 2010-10-04T15:54:02.343Z 2012-01-05T04:38:09.613Z The "Enable user control over installs" machine setting should be configured correctly. CCE-10866-2 2010-10-04T15:54:02.437Z 2012-01-05T04:38:09.673Z The "Enable user to browse for source while elevated" machine setting should be configured correctly. CCE-10965-2 2010-10-04T15:54:02.547Z 2012-01-05T04:38:09.753Z The "Enable user to patch elevated products" machine setting should be configured correctly. CCE-11844-8 2010-10-04T15:54:02.640Z 2012-01-05T04:38:09.800Z The "Enable user to use media source while elevated" machine setting should be configured correctly. CCE-11057-7 2010-10-04T15:54:02.733Z 2012-01-05T04:38:09.847Z The "Enable Windows NTP Client" machine setting should be configured correctly. CCE-11873-7 2010-10-04T15:54:02.827Z 2012-01-05T04:38:09.893Z The "Enable Windows NTP Server" machine setting should be configured correctly. CCE-11889-3 2010-10-04T15:54:02.923Z 2012-01-05T04:38:09.957Z The "Enable/Disable PerfTrack" machine setting should be configured correctly. CCE-11088-2 2010-10-04T15:54:03.030Z 2012-01-05T04:38:10.003Z The "Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates" machine setting should be configured correctly. CCE-10894-4 2010-10-04T15:54:03.127Z 2012-01-05T04:38:10.067Z The "Encrypt the Offline Files cache" machine setting should be configured correctly. CCE-11593-1 2010-10-04T15:54:03.217Z 2012-01-05T04:38:10.113Z The "Enforce disk quota limit" machine setting should be configured correctly. CCE-12058-4 2010-10-04T15:54:03.313Z 2012-01-05T04:38:10.173Z The "Enforce Removal of Remote Desktop Wallpaper" machine setting should be configured correctly. CCE-11434-8 2010-10-04T15:54:03.407Z 2012-01-05T04:38:10.220Z The "Enforce upgrade component rules" machine setting should be configured correctly. CCE-11450-4 2010-10-04T15:54:03.517Z 2012-01-05T04:38:10.283Z The "Enumerate administrator accounts on elevation" machine setting should be configured correctly. CCE-11746-5 2010-10-04T15:54:03.610Z 2012-01-05T04:38:10.347Z The "Events.asp program" machine setting should be configured correctly. CCE-11152-6 2010-10-04T15:54:03.703Z 2012-01-05T04:38:10.393Z The "Events.asp program command line parameters" machine setting should be configured correctly. CCE-11964-4 2010-10-04T15:54:03.813Z 2012-01-05T04:38:10.440Z The "Events.asp URL" machine setting should be configured correctly. CCE-11460-3 2010-10-04T15:54:03.907Z 2012-01-05T04:38:10.487Z The "Exclude credential providers" machine setting should be configured correctly. CCE-11137-7 2010-10-04T15:54:04.000Z 2012-01-05T04:38:10.550Z The "Exclude files from being cached" machine setting should be configured correctly. CCE-10864-7 2010-10-04T15:54:04.093Z 2012-01-05T04:38:10.613Z The "Execute print drivers in isolated processes" machine setting should be configured correctly. CCE-10624-5 2010-10-04T15:54:04.187Z 2012-01-05T04:38:10.643Z The "Expected dial-up delay on logon" machine setting should be configured correctly. CCE-11976-8 2010-10-04T15:54:04.297Z 2012-01-05T04:38:10.690Z The "Extend Point and Print connection to search Windows Update" machine setting should be configured correctly. CCE-11075-9 2010-10-04T15:54:04.390Z 2012-01-05T04:38:10.737Z The "Filter duplicate logon certificates" machine setting should be configured correctly. CCE-10973-6 2010-10-04T15:54:04.500Z 2012-01-05T04:38:10.783Z The "Final DC Discovery Retry Setting for Background Callers" machine setting should be configured correctly. CCE-12010-5 2010-10-04T15:54:04.593Z 2012-01-05T04:38:10.830Z The "Floppy Drives: Deny execute access" machine setting should be configured correctly. CCE-11411-6 2010-10-04T15:54:04.687Z 2012-01-05T04:38:10.877Z The "Floppy Drives: Deny read access" machine setting should be configured correctly. CCE-12142-6 2010-10-04T15:54:04.780Z 2012-01-05T04:38:10.940Z The "Floppy Drives: Deny write access" machine setting should be configured correctly. CCE-12115-2 2010-10-04T15:54:04.877Z 2012-01-05T04:38:10.987Z The "Folder Redirection policy processing" machine setting should be configured correctly. CCE-11643-4 2010-10-04T15:54:04.983Z 2012-01-05T04:38:11.033Z The "For tablet pen input, don’t show the Input Panel icon" machine setting should be configured correctly. CCE-11322-5 2010-10-04T15:54:05.077Z 2012-01-05T04:38:11.097Z The "For touch input, don’t show the Input Panel icon" machine setting should be configured correctly. CCE-11821-6 2010-10-04T15:54:05.173Z 2012-01-05T04:38:11.173Z The "Force Rediscovery Interval" machine setting should be configured correctly. CCE-11180-7 2010-10-04T15:54:05.280Z 2012-01-05T04:38:11.220Z The "Force selected system UI language to overwrite the user UI language" machine setting should be configured correctly. CCE-11297-9 2010-10-04T15:54:05.377Z 2012-01-05T04:38:11.267Z The "Force the reading of all certificates from the smart card" machine setting should be configured correctly. CCE-11402-5 2010-10-04T15:54:05.467Z 2012-01-05T04:38:11.317Z The "ForwarderResourceUsage" machine setting should be configured correctly. CCE-11543-6 2010-10-04T15:54:05.563Z 2012-01-05T04:38:11.363Z The "Global Configuration Settings" machine setting should be configured correctly. CCE-11995-8 2010-10-04T15:54:05.657Z 2012-01-05T04:38:11.407Z The "Group Policy refresh interval for computers" machine setting should be configured correctly. CCE-11520-4 2010-10-04T15:54:05.767Z 2012-01-05T04:38:11.457Z The "Group Policy refresh interval for domain controllers" machine setting should be configured correctly. CCE-12121-0 2010-10-04T15:54:05.860Z 2012-01-05T04:38:11.503Z The "Group Policy slow link detection" machine setting should be configured correctly. CCE-10863-9 2010-10-04T15:54:05.953Z 2012-03-17T03:35:50.967Z The "Guaranteed service type" Layer-3 Differentiated Services Code Point (DSCP) value should be configured correctly for packets that conform to the flow specification. CCE-11634-3 2010-10-04T15:54:06.063Z 2012-03-17T03:35:51.030Z The "Guaranteed service type" Layer-3 Differentiated Services Code Point should be configured correctly for packets that do not conform to the flow specification. CCE-11269-8 2010-10-04T15:54:06.157Z 2012-03-17T03:35:51.077Z The "Guaranteed service type" link layer (Layer-2) priority value should be configured correctly. CCE-11440-5 2010-10-04T15:54:06.250Z 2012-01-05T04:38:11.707Z The "Hash Publication for BranchCache" machine setting should be configured correctly. CCE-11848-9 2010-10-04T15:54:06.343Z 2012-01-05T04:38:11.753Z The "Hide entry points for Fast User Switching" machine setting should be configured correctly. CCE-11401-7 2010-10-04T15:54:06.453Z 2012-01-05T04:38:11.817Z The "Hide notifications about RD Licensing problems that affect the RD Session Host server" machine setting should be configured correctly. CCE-11778-8 2010-10-04T15:54:06.547Z 2012-01-05T04:38:11.863Z The "Hide previous versions list for local files" machine setting should be configured correctly. CCE-10846-4