-
Notifications
You must be signed in to change notification settings - Fork 123
WindowsClient 11 2.5
MrAutomater edited this page Feb 27, 2026
·
1 revision
Title: Microsoft Windows 11 Security Technical Implementation Guide
Version: 2
Release: Release: 5 Benchmark Date: 01 Oct 2025 3.5.1 1.10.0
FileName: U_MS_Windows_11_STIG_V2R5_Manual-xccdf.xml
Created: 12/2/2025
Description: This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.
Total Stig Rule Coverage: 239 of 285 rules are automated; 84%
- High (CAT I): 23 of 28 rules are automated
- Medium (CAT II): 201 of 239 rules are automated
- Low (CAT III): 15 of 18 rules are automated
| StigRuleId | Severity | RuleType | DscResource | DuplicateOf |
|---|---|---|---|---|
| V-253297 | Medium | AccountPolicyRule | AccountPolicy | |
| V-253298 | Medium | AccountPolicyRule | AccountPolicy | |
| V-253299 | Medium | AccountPolicyRule | AccountPolicy | |
| V-253300 | Medium | AccountPolicyRule | AccountPolicy | |
| V-253301 | Medium | AccountPolicyRule | AccountPolicy | |
| V-253302 | Medium | AccountPolicyRule | AccountPolicy | |
| V-253303 | Medium | AccountPolicyRule | AccountPolicy | |
| V-253304 | Medium | AccountPolicyRule | AccountPolicy | |
| V-253305 | High | AccountPolicyRule | AccountPolicy | |
| V-253306 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253307 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253308 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253309 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253310 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253311 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253312 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253313 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253314 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253315 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253316 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253317 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253318 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253319 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253320 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253321 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253322 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253323 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253324 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253325 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253326 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253327 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253328 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253329 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253330 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253331 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253332 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253333 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253334 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253335 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253336 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253343 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253344 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253345 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253346 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253347 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253348 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253349 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-253263 | High | AuditSettingRule | AuditSetting | |
| V-253265 | High | AuditSettingRule | AuditSetting | |
| V-253274.a | Medium | PermissionRule | NTFSAccessEntry | |
| V-253274.b | Medium | PermissionRule | NTFSAccessEntry | |
| V-253274.c | Medium | PermissionRule | NTFSAccessEntry | |
| V-253340 | Medium | PermissionRule | NTFSAccessEntry | |
| V-253341 | Medium | PermissionRule | NTFSAccessEntry | |
| V-253342 | Medium | PermissionRule | NTFSAccessEntry | |
| V-253431.a | Medium | PermissionRule | RegistryAccessEntry | |
| V-253431.b | Medium | PermissionRule | RegistryAccessEntry | |
| V-253431.c | Medium | PermissionRule | RegistryAccessEntry | |
| V-253260.a | High | RegistryRule | RegistryPolicyFile | |
| V-253260.b | High | RegistryRule | RegistryPolicyFile | |
| V-253261 | Medium | RegistryRule | Registry | |
| V-253284 | High | RegistryRule | RegistryPolicyFile | |
| V-253287 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253288 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253337 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253338 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253339 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253350 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253351 | Medium | RegistryRule | Registry | |
| V-253352 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253353 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253354 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253355 | Low | RegistryRule | RegistryPolicyFile | |
| V-253356 | Low | RegistryRule | RegistryPolicyFile | |
| V-253357 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253358 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253359.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-253359.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-253359.c | Medium | RegistryRule | RegistryPolicyFile | |
| V-253359.d | Medium | RegistryRule | RegistryPolicyFile | |
| V-253360 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253361 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253362.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-253362.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-253363 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253364 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253365 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253366 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253367 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253368 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253369.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-253369.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-253370 | High | RegistryRule | RegistryPolicyFile | |
| V-253371 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253372 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253373 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253374 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253375 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253376 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253377 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253378 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253379 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253380 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253381 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253382 | High | RegistryRule | RegistryPolicyFile | |
| V-253383 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253384 | Low | RegistryRule | RegistryPolicyFile | |
| V-253385 | Low | RegistryRule | RegistryPolicyFile | |
| V-253386 | High | RegistryRule | RegistryPolicyFile | |
| V-253387 | High | RegistryRule | RegistryPolicyFile | |
| V-253388 | High | RegistryRule | RegistryPolicyFile | |
| V-253389 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253390 | Low | RegistryRule | RegistryPolicyFile | |
| V-253391 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253392 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253393 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253394.a | Low | RegistryRule | RegistryPolicyFile | |
| V-253394.b | Low | RegistryRule | RegistryPolicyFile | |
| V-253395.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-253395.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-253396 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253397 | Low | RegistryRule | RegistryPolicyFile | |
| V-253398 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253399 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253400 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253401 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253402 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253403 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253404 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253405 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253406 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253407 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253408 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253409 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253410 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253411 | High | RegistryRule | RegistryPolicyFile | |
| V-253412 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253413 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253414 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253415 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253416 | High | RegistryRule | RegistryPolicyFile | |
| V-253417 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253418 | High | RegistryRule | RegistryPolicyFile | |
| V-253419 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253420 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253421 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253422.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-253422.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-253423 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253424 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253425 | Low | RegistryRule | RegistryPolicyFile | |
| V-253426 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253434 | Medium | RegistryRule | Registry | |
| V-253437 | Medium | RegistryRule | Registry | |
| V-253438 | Medium | RegistryRule | Registry | |
| V-253439 | Medium | RegistryRule | Registry | |
| V-253440 | Medium | RegistryRule | Registry | |
| V-253441 | Low | RegistryRule | Registry | |
| V-253442 | Low | RegistryRule | Registry | |
| V-253443 | Medium | RegistryRule | Registry | |
| V-253444 | Medium | RegistryRule | Registry | |
| V-253445 | Medium | RegistryRule | Registry | |
| V-253446 | Low | RegistryRule | Registry | |
| V-253447 | Low | RegistryRule | Registry | |
| V-253448 | Medium | RegistryRule | Registry | |
| V-253449 | Medium | RegistryRule | Registry | |
| V-253450 | Medium | RegistryRule | Registry | |
| V-253451 | Medium | RegistryRule | Registry | |
| V-253453 | High | RegistryRule | Registry | |
| V-253454 | High | RegistryRule | Registry | |
| V-253455 | Medium | RegistryRule | Registry | |
| V-253456 | High | RegistryRule | Registry | |
| V-253457 | Medium | RegistryRule | Registry | |
| V-253458 | Medium | RegistryRule | Registry | |
| V-253459 | Medium | RegistryRule | Registry | |
| V-253460 | Medium | RegistryRule | Registry | |
| V-253461 | High | RegistryRule | Registry | |
| V-253462 | High | RegistryRule | Registry | |
| V-253463 | Medium | RegistryRule | Registry | |
| V-253464 | Medium | RegistryRule | Registry | |
| V-253465 | Medium | RegistryRule | Registry | |
| V-253466 | Medium | RegistryRule | Registry | |
| V-253467 | Low | RegistryRule | Registry | |
| V-253468 | Medium | RegistryRule | Registry | |
| V-253469 | Medium | RegistryRule | Registry | |
| V-253471 | Medium | RegistryRule | Registry | |
| V-253472 | Medium | RegistryRule | Registry | |
| V-253473 | Medium | RegistryRule | Registry | |
| V-253474 | Medium | RegistryRule | Registry | |
| V-253475 | Medium | RegistryRule | Registry | |
| V-253477 | Low | RegistryRule | RegistryPolicyFile | |
| V-253478 | Medium | RegistryRule | RegistryPolicyFile | |
| V-253427.a | Medium | RootCertificateRule | CertificateDSC | |
| V-253427.b | Medium | RootCertificateRule | CertificateDSC | |
| V-253427.c | Medium | RootCertificateRule | CertificateDSC | |
| V-253427.d | Medium | RootCertificateRule | CertificateDSC | |
| V-253429.a | Medium | RootCertificateRule | CertificateDSC | |
| V-253429.b | Medium | RootCertificateRule | CertificateDSC | |
| V-253430.a | Medium | RootCertificateRule | CertificateDSC | |
| V-253430.b | Medium | RootCertificateRule | CertificateDSC | |
| V-253430.c | Medium | RootCertificateRule | CertificateDSC | |
| V-253432 | Medium | SecurityOptionRule | SecurityOption | |
| V-253433 | Medium | SecurityOptionRule | SecurityOption | |
| V-253435 | Medium | SecurityOptionRule | SecurityOption | |
| V-253436 | Medium | SecurityOptionRule | SecurityOption | |
| V-253452 | High | SecurityOptionRule | SecurityOption | |
| V-253289 | Medium | ServiceRule | Service | |
| V-253479 | Medium | UserRightRule | UserRightsAssignment | |
| V-253480 | Medium | UserRightRule | UserRightsAssignment | |
| V-253481 | High | UserRightRule | UserRightsAssignment | |
| V-253482 | Medium | UserRightRule | UserRightsAssignment | |
| V-253483 | Medium | UserRightRule | UserRightsAssignment | |
| V-253484 | Medium | UserRightRule | UserRightsAssignment | |
| V-253485 | Medium | UserRightRule | UserRightsAssignment | |
| V-253486 | High | UserRightRule | UserRightsAssignment | |
| V-253487 | Medium | UserRightRule | UserRightsAssignment | |
| V-253488 | Medium | UserRightRule | UserRightsAssignment | |
| V-253489 | Medium | UserRightRule | UserRightsAssignment | |
| V-253490 | High | UserRightRule | UserRightsAssignment | |
| V-253491 | Medium | UserRightRule | UserRightsAssignment | |
| V-253492 | Medium | UserRightRule | UserRightsAssignment | |
| V-253493 | Medium | UserRightRule | UserRightsAssignment | |
| V-253494 | Medium | UserRightRule | UserRightsAssignment | |
| V-253495 | Medium | UserRightRule | UserRightsAssignment | |
| V-253496 | Medium | UserRightRule | UserRightsAssignment | |
| V-253497 | Medium | UserRightRule | UserRightsAssignment | |
| V-253498 | Medium | UserRightRule | UserRightsAssignment | |
| V-253499 | Medium | UserRightRule | UserRightsAssignment | |
| V-253500 | Medium | UserRightRule | UserRightsAssignment | |
| V-253501 | Medium | UserRightRule | UserRightsAssignment | |
| V-253502 | Medium | UserRightRule | UserRightsAssignment | |
| V-253503 | Medium | UserRightRule | UserRightsAssignment | |
| V-253504 | Medium | UserRightRule | UserRightsAssignment | |
| V-253505 | Medium | UserRightRule | UserRightsAssignment | |
| V-253506 | Medium | UserRightRule | UserRightsAssignment | |
| V-253277 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-253285.a | Medium | WindowsFeatureRule | WindowsFeature | |
| V-253285.b | Medium | WindowsFeatureRule | WindowsFeature | |
| V-253286 | Medium | WindowsFeatureRule | WindowsFeature |
| StigRuleId | Severity | RuleType |
|---|---|---|
| V-253258 | Medium | DocumentRule |
| V-253268 | Low | DocumentRule |
| V-253271 | Medium | DocumentRule |
| V-253275 | High | DocumentRule |
| V-253280 | Medium | DocumentRule |
| V-253291 | Medium | DocumentRule |
| V-253295 | Medium | DocumentRule |
| V-253254 | Medium | ManualRule |
| V-253255 | Medium | ManualRule |
| V-253256 | Medium | ManualRule |
| V-253257 | Medium | ManualRule |
| V-253259 | High | ManualRule |
| V-253262 | Medium | ManualRule |
| V-253264 | High | ManualRule |
| V-253266 | Medium | ManualRule |
| V-253267 | Medium | ManualRule |
| V-253269 | High | ManualRule |
| V-253270 | Medium | ManualRule |
| V-253272 | Low | ManualRule |
| V-253273 | Medium | ManualRule |
| V-253276 | Medium | ManualRule |
| V-253278 | Medium | ManualRule |
| V-253279 | Medium | ManualRule |
| V-253281 | Medium | ManualRule |
| V-253282 | Medium | ManualRule |
| V-253290 | Medium | ManualRule |
| V-253292 | Medium | ManualRule |
| V-253293 | Medium | ManualRule |
| V-253294 | High | ManualRule |
| V-253296 | Low | ManualRule |
| V-253428 | Medium | ManualRule |
| V-253470 | Medium | ManualRule |
| V-253476 | Medium | ManualRule |
| V-256893 | Medium | ManualRule |
| V-257592 | Medium | ManualRule |
| V-257770 | Medium | ManualRule |
| V-268317 | Medium | ManualRule |
| V-268318 | Medium | ManualRule |
| V-278926 | Medium | ManualRule |
| V-278927 | Medium | ManualRule |
| V-278928 | Medium | ManualRule |
| V-278929 | Medium | ManualRule |
| V-278930 | Medium | ManualRule |
| V-278931 | Medium | ManualRule |
| V-278932 | Medium | ManualRule |
| V-278933 | Medium | ManualRule |
- Adobe-AcrobatPro-2.1
- Adobe-AcrobatReader-1.6
- Adobe-AcrobatReader-2.1
- DotNetFramework-4-2.7
- DotNetFramework-4-2.8
- FireFox-All-6.6
- FireFox-All-6.7
- Google-Chrome-2.10
- Google-Chrome-2.11
- IISServer-10.0-3.6
- IISServer-10.0-3.7
- IISSite-10.0-2.14
- IISSite-10.0-2.15
- InternetExplorer-11-2.5
- InternetExplorer-11-2.6
- MS-Edge-2.4
- MS-Edge-2.5
- Office-365ProPlus-3.4
- Office-365ProPlus-3.5
- Office-Access2016-1.1
- Office-Access2016-2.1
- Office-Excel2016-1.2
- Office-Excel2016-2.2
- Office-OneNote2016-1.2
- Office-OneNote2016-2.1
- Office-Outlook2016-2.3
- Office-Outlook2016-2.4
- Office-PowerPoint2016-1.1
- Office-PowerPoint2016-2.1
- Office-Publisher2016-1.3
- Office-Publisher2016-2.1
- Office-Skype2016-1.1
- Office-Skype2016-2.1
- Office-System2016-2.4
- Office-System2016-2.5
- Office-Word2016-1.1
- Office-Word2016-2.1
- OracleLinux-8-2.3
- OracleLinux-8-2.4
- OracleLinux-9-1.1
- RHEL-7-3.14
- RHEL-7-3.15
- RHEL-9-2.7
- RHEL-9-2.8
- SqlServer-2016-Instance-3.5
- SqlServer-2016-Instance-3.6
- SqlServer-2022-Instance-1.3
- SqlServer-2022-Instance-1.4
- Ubuntu-18.04-2.14
- Ubuntu-18.04-2.15
- WindowsClient-10-3.5
- WindowsClient-10-3.6
- WindowsClient-11-2.6
- WindowsClient-11-2.7
- WindowsDefender-All-2.7
- WindowsDefender-All-2.8
- WindowsDnsServer-2012R2-2.5
- WindowsDnsServer-2012R2-2.7
- WindowsFirewall-All-2.1
- WindowsFirewall-All-2.2
- WindowsServer-2016-DC-2.10
- WindowsServer-2016-DC-2.9
- WindowsServer-2016-MS-2.10
- WindowsServer-2016-MS-2.9
- WindowsServer-2019-DC-3.7
- WindowsServer-2019-DC-3.8
- WindowsServer-2019-MS-3.7
- WindowsServer-2019-MS-3.8
- WindowsServer-2022-DC-2.7
- WindowsServer-2022-DC-2.8
- WindowsServer-2022-MS-2.7
- WindowsServer-2022-MS-2.8
- WindowsServer-2025-DC-1.1
- WindowsServer-2025-MS-1.1