DISA STIG GPO package checklists October 2026
AllDoD Adobe Acrobat Pro DC Continuous STIGDoD Adobe Acrobat Reader DC Continuous STIGDoD Google Chrome STIGDoD Internet Explorer 11 STIGDoD Microsoft Defender Antivirus STIGDoD Microsoft Edge STIGDoD Mozilla Firefox STIGDoD Office 2019-M365 Apps STIGDoD WinSvr 2012 R2 DC STIGDoD WinSvr 2012 R2 MS STIGDoD WinSvr 2016 DC and MS STIGDoD WinSvr 2019 DC and MS STIGDoD WinSvr 2022 DC STIGDoD WinSvr 2022 MS STIGDoD WinSvr 2025 DC STIGDoD WinSvr 2025 MS STIGDoD Windows 10 STIGDoD Windows 11 STIGDoD Windows Defender Firewall STIG
| Ref | Title | Text | |
|---|---|---|---|
| AADC-CN-000205 | Adobe Acrobat Pro DC Continuous Enhanced Security for standalone mode must be enabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-000210 | Adobe Acrobat Pro DC Continuous Enhanced Security for browser mode must be enabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-000275 | Adobe Acrobat Pro DC Continuous PDF file attachments must be blocked. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-000280 | Adobe Acrobat Pro DC Continuous access to unknown websites must be restricted. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-000285 | Adobe Acrobat Pro DC Continuous access to websites must be blocked. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-000290 | Adobe Acrobat Pro DC Continuous must be configured to block Flash Content. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-000295 | The Adobe Acrobat Pro DC Continuous Send and Track plugin for Outlook must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-000840 | Adobe Acrobat Pro DC Continuous privileged file and folder locations must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-000955 | Adobe Acrobat Pro DC Continuous FIPS mode must be enabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG User v2r1 MEM Device Configuration Profile - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile | |
| AADC-CN-000990 | Adobe Acrobat Pro DC Continuous periodic downloading of Adobe European certificates must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG User v2r1 MEM Device Configuration Profile - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile | |
| AADC-CN-001010 | Adobe Acrobat Pro DC Continuous Protected Mode must be enabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001015 | Adobe Acrobat Pro DC Continuous Protected View must be enabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001075 | The Adobe Acrobat Pro DC Continuous latest security-related software updates must be installed. | Not applicable to the policy. Not a GP setting | |
| AADC-CN-001280 | Adobe Acrobat Pro DC Continuous Default Handler changes must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001285 | Adobe Acrobat Pro DC Continuous must disable the ability to store files on Acrobat.com. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001290 | Adobe Acrobat Pro DC Continuous Cloud Synchronization must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001295 | Adobe Acrobat Pro DC Continuous Repair Installation must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001300 | Adobe Acrobat Pro DC Continuous third-party web connectors must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001305 | Adobe Acrobat Pro DC Continuous Webmail must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001310 | The Adobe Acrobat Pro DC Continuous Welcome Screen must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001315 | Adobe Acrobat Pro DC Continuous SharePoint and Office365 access must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| AADC-CN-001320 | Adobe Acrobat Pro DC Continuous Periodic downloading of Adobe certificates must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG User v2r1 MEM Device Configuration Profile - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile | |
| AADC-CN-001325 | Adobe Acrobat Pro DC Continuous privileged host locations must be disabled. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Pro DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Pro DC Continuous STIG v2r1 Administrative Template | |
| ARDC-CN-000005 | Adobe Reader DC must enable Enhanced Security in a Standalone Application. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000010 | Adobe Reader DC must enable Enhanced Security in a Browser. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000015 | Adobe Reader DC must enable Protected Mode. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000020 | Adobe Reader DC must enable Protected View. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000025 | Adobe Reader DC must Block Websites. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000030 | Adobe Reader DC must block access to Unknown Websites. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000035 | Adobe Reader DC must prevent opening files other than PDF or FDF. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000045 | Adobe Reader DC must block Flash Content. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000050 | Adobe Reader DC must disable the ability to change the Default Handler. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000055 | Adobe Reader DC must disable the Adobe Send and Track plugin for Outlook. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000060 | Adobe Reader DC must disable all service access to Document Cloud Services. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000065 | Adobe Reader DC must disable Cloud Synchronization. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000070 | Adobe Reader DC must disable the Adobe Repair Installation. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000075 | Adobe Reader DC must disable 3rd Party Web Connectors. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000080 | Adobe Reader DC must disable Acrobat Upsell. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000085 | Adobe Reader DC must disable Adobe Send for Signature. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000090 | Adobe Reader DC must disable access to Webmail. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000100 | Adobe Reader DC must disable Online SharePoint Access. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000115 | Adobe Reader DC must disable the Adobe Welcome Screen. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000120 | Adobe Reader DC must disable Service Upgrades. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000315 | Adobe Reader DC must disable the ability to add Trusted Files and Folders. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000320 | Adobe Reader DC must disable the ability to elevate IE Trusts to Privileged Locations. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG Computer v2r1 Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile Intune - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Administrative Temp | |
| ARDC-CN-000330 | Adobe Reader DC must disable periodical uploading of European certificates. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG User v2r1 MEM Device Configuration Profile - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile | |
| ARDC-CN-000335 | Adobe Reader DC must disable periodical uploading of Adobe certificates. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG User v2r1 MEM Device Configuration Profile - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile | |
| ARDC-CN-000340 | Adobe Reader DC must have the latest Security-related Software Updates installed. | Not applicable to the policy. Not a GP setting | |
| ARDC-CN-000345 | Adobe Reader DC must enable FIPS mode. | Covered by DISA's policy. GPO - DoD Adobe Acrobat Reader DC Continuous STIG User v2r1 MEM Device Configuration Profile - DoD Adobe Acrobat Reader DC Continuous STIG v2r1 Custom Profile | |
| DTBC-0001 | Firewall traversal from remote host must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0002 | Site tracking users location must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0004 | Sites ability to show pop-ups must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0005 | Extensions installation must be blocklisted by default. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0006 | Extensions that are approved for use must be allowlisted. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0007 | The default search providers name must be set. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0008 | The default search provider URL must be set to perform encrypted searches. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0009 | Default search provider must be enabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0011 | The Password Manager must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0017 | Background processing must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0020 | Google Data Synchronization must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0021 | The URL protocol schema javascript must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0023 | Cloud print sharing must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0025 | Network prediction must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0026 | Metrics reporting to Google must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0027 | Search suggestions must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0029 | Importing of saved passwords must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0030 | Incognito mode must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0037 | Online revocation checks must be performed. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0038 | Safe Browsing must be enabled. | Covered by DISA's policy. Set to (1) StandardProtection GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0039 | Browser history must be saved. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0045 | Session only based cookies must be enabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0050 | The version of Google Chrome running on the system must be a supported version. | Not applicable to the policy. Not a GPO/Intune setting | |
| DTBC-0052 | Deletion of browser history must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0053 | Prompt for download location must be enabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0055 | Download restrictions must be configured. | Covered by DISA's policy. Set to 1 = Block dangerous downloads GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0057 | Safe Browsing Extended Reporting must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0058 | WebUSB must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0063 | Google Cast must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0064 | Autoplay must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0065 | URLs must be allowlisted for Autoplay use. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0066 | Anonymized data collection must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0067 | Collection of WebRTC event logs must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0068 | Chrome development tools must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0069 | Guest Mode must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0070 | AutoFill for credit cards must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0071 | AutoFill for addresses must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0072 | Import AutoFill form data must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0073 | Web Bluetooth API must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0074 | Use of the QUIC protocol must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - DoD Google Chrome STIG v2r11 Settings Catalog Intune - DoD Google Chrome STIG v2r11 - macOS | |
| DTBC-0075 | Create Themes with AI must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - Currently unsupport in Setting Catalog - Local script required | |
| DTBC-0076 | DevTools Generative AI features must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - Currently unsupport in Setting Catalog - Local script required | |
| DTBC-0077 | GenAI local foundational model must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - Currently unsupport in Setting Catalog - Local script required | |
| DTBC-0078 | Help Me Write must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - Currently unsupport in Setting Catalog - Local script required | |
| DTBC-0079 | AI-powered History Search must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - Currently unsupport in Setting Catalog - Local script required | |
| DTBC-0080 | Tab Compare Settings must be disabled. | Covered by DISA's policy. GPO - DoD Google Chrome STIG Computer v2r11 Intune - Currently unsupport in Setting Catalog - Local script required | |
| DTBI014-IE11 | Turn off Encryption Support must be enabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI015-IE11 | The Internet Explorer warning about certificate address mismatch must be enforced. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI018-IE11 | Check for publishers certificate revocation must be enforced. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG User v2r6 Intune - Set-STIGDSC.ps1 | |
| DTBI022-IE11 | The Download signed ActiveX controls property must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI023-IE11 | The Download unsigned ActiveX controls property must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI024-IE11 | The Initialize and script ActiveX controls not marked as safe property must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI031-IE11 | The Java permissions must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI032-IE11 | Accessing data sources across domains must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI036-IE11 | Functionality to drag and drop or copy and paste files must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI038-IE11 | Launching programs and files in IFRAME must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI039-IE11 | Navigating windows and frames across different domains must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI042-IE11 | Userdata persistence must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI044-IE11 | Clipboard operations via script must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI046-IE11 | Logon options must be configured to prompt (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI061-IE11 | Java permissions must be configured with High Safety (Intranet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI062-IE11 | Anti-Malware programs against ActiveX controls must be run for the Intranet zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI091-IE11 | Java permissions must be configured with High Safety (Trusted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI092-IE11 | Anti-Malware programs against ActiveX controls must be run for the Trusted Sites zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1000-IE11 | Dragging of content from different domains within a window must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1005-IE11 | Dragging of content from different domains across windows must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1010-IE11 | Internet Explorer Processes Restrict ActiveX Install must be enforced (Explorer). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1020-IE11 | Internet Explorer Processes Restrict ActiveX Install must be enforced (iexplore). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1025-IE11 | Dragging of content from different domains within a window must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1046-IE11 | Anti-Malware programs against ActiveX controls must be run for the Internet zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1051-IE11 | Anti-Malware programs against ActiveX controls must be run for the Restricted Sites zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1060-IE11 | Prevent bypassing SmartScreen Filter warnings must be enabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1065-IE11 | Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet must be enabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1070-IE11 | Prevent per-user installation of ActiveX controls must be enabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1075-IE11 | Prevent ignoring certificate errors option must be enabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1080-IE11 | Turn on SmartScreen Filter scan option for the Internet Zone must be enabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1085-IE11 | Turn on SmartScreen Filter scan option for the Restricted Sites Zone must be enabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1090-IE11 | The Initialize and script ActiveX controls not marked as safe must be disallowed (Intranet Zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1095-IE11 | The Initialize and script ActiveX controls not marked as safe must be disallowed (Trusted Sites Zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1100-IE11 | Allow Fallback to SSL 3.0 (Internet Explorer) must be disabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1105-IE11 | Run once selection for running outdated ActiveX controls must be disabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1110-IE11 | Enabling outdated ActiveX controls for Internet Explorer must be blocked. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1115-IE11 | Use of the Tabular Data Control (TDC) ActiveX control must be disabled for the Internet Zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI112-IE11 | The Download signed ActiveX controls property must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1120-IE11 | Use of the Tabular Data Control (TDC) ActiveX control must be disabled for the Restricted Sites Zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1125-IE11 | VBScript must not be allowed to run in Internet Explorer (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI113-IE11 | The Download unsigned ActiveX controls property must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1130-IE11 | VBScript must not be allowed to run in Internet Explorer (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI1135-IE11 | Internet Explorer Development Tools Must Be Disabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - Set-STIGDSC.ps1 | |
| DTBI114-IE11 | The Initialize and script ActiveX controls not marked as safe property must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI115-IE11 | ActiveX controls and plug-ins must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI116-IE11 | ActiveX controls marked safe for scripting must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI119-IE11 | File downloads must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI121-IE11 | Java permissions must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI122-IE11 | Accessing data sources across domains must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI123-IE11 | The Allow META REFRESH property must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI126-IE11 | Functionality to drag and drop or copy and paste files must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI128-IE11 | Launching programs and files in IFRAME must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI129-IE11 | Navigating windows and frames across different domains must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI132-IE11 | Userdata persistence must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI133-IE11 | Active scripting must be disallowed (Restricted Sites Zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI134-IE11 | Clipboard operations via script must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI136-IE11 | Logon options must be configured and enforced (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI300-IE11 | Configuring History setting must be set to 40 days. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Windows 10 STIG v2r5 Administrative Templates Profile | |
| DTBI318-IE11 | Internet Explorer must be set to disallow users to add/delete sites. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI319-IE11 | Internet Explorer must be configured to disallow users to change policies. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI320-IE11 | Internet Explorer must be configured to use machine settings. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI325-IE11 | Security checking features must be enforced. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI350-IE11 | Software must be disallowed to run or install with invalid signatures. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI356-IE11 | The 64-bit tab processes, when running in Enhanced Protected Mode on 64-bit versions of Windows, must be turned on. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI365-IE11 | Checking for server certificate revocation must be enforced. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI370-IE11 | Checking for signatures on downloaded programs must be enforced. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI375-IE11 | All network paths (UNCs) for Intranet sites must be disallowed. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI385-IE11 | Script-initiated windows without size or position constraints must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI390-IE11 | Script-initiated windows without size or position constraints must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI395-IE11 | Scriptlets must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI415-IE11 | Automatic prompting for file downloads must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI425-IE11 | Java permissions must be disallowed (Local Machine zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI426-IE11 | Anti-Malware programs against ActiveX controls must be run for the Local Machine zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI430-IE11 | Java permissions must be disallowed (Locked Down Local Machine zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI435-IE11 | Java permissions must be disallowed (Locked Down Intranet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI440-IE11 | Java permissions must be disallowed (Locked Down Trusted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI450-IE11 | Java permissions must be disallowed (Locked Down Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI455-IE11 | XAML files must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI460-IE11 | XAML files must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI485-IE11 | Protected Mode must be enforced (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI490-IE11 | Protected Mode must be enforced (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI495-IE11 | Pop-up Blocker must be enforced (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI500-IE11 | Pop-up Blocker must be enforced (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI515-IE11 | Websites in less privileged web content zones must be prevented from navigating into the Internet zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI520-IE11 | Websites in less privileged web content zones must be prevented from navigating into the Restricted Sites zone. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI575-IE11 | Allow binary and script behaviors must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI580-IE11 | Automatic prompting for file downloads must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI590-IE11 | Internet Explorer Processes for MIME handling must be enforced. (Reserved) | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI592-IE11 | Internet Explorer Processes for MIME handling must be enforced (Explorer). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI594-IE11 | Internet Explorer Processes for MIME handling must be enforced (iexplore). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI595-IE11 | Internet Explorer Processes for MIME sniffing must be enforced (Reserved). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI596-IE11 | Internet Explorer Processes for MIME sniffing must be enforced (Explorer). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI597-IE11 | Internet Explorer Processes for MIME sniffing must be enforced (iexplore). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI599-IE11 | Internet Explorer Processes for MK protocol must be enforced (Reserved). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI600-IE11 | Internet Explorer Processes for MK protocol must be enforced (Explorer). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI605-IE11 | Internet Explorer Processes for MK protocol must be enforced (iexplore). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI610-IE11 | Internet Explorer Processes for Zone Elevation must be enforced (Reserved). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI612-IE11 | Internet Explorer Processes for Zone Elevation must be enforced (Explorer). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI614-IE11 | Internet Explorer Processes for Zone Elevation must be enforced (iexplore). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI630-IE11 | Internet Explorer Processes for Restrict File Download must be enforced (Reserved). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI635-IE11 | Internet Explorer Processes for Restrict File Download must be enforced (Explorer). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI640-IE11 | Internet Explorer Processes for Restrict File Download must be enforced (iexplore). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI645-IE11 | Internet Explorer Processes for restricting pop-up windows must be enforced (Reserved). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI647-IE11 | Internet Explorer Processes for restricting pop-up windows must be enforced (Explorer). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI649-IE11 | Internet Explorer Processes for restricting pop-up windows must be enforced (iexplore). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI650-IE11 | .NET Framework-reliant components not signed with Authenticode must be disallowed to run (Restricted Sites Zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI655-IE11 | .NET Framework-reliant components signed with Authenticode must be disallowed to run (Restricted Sites Zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI670-IE11 | Scripting of Java applets must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI690-IE11 | AutoComplete feature for forms must be disallowed. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG User v2r6 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI715-IE11 | Crash Detection management must be enforced. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI725-IE11 | Turn on the auto-complete feature for user names and passwords on forms must be disabled. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI740-IE11 | Managing SmartScreen Filter use must be enforced. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI760-IE11 | Browser must retain history on exit. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI770-IE11 | Deleting websites that the user has visited must be disallowed. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI780-IE11 | InPrivate Browsing must be disallowed. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI800-IE11 | Scripting of Internet Explorer WebBrowser control property must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI810-IE11 | When uploading files to a server, the local directory path must be excluded (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI815-IE11 | Internet Explorer Processes for Notification Bars must be enforced (Reserved). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI820-IE11 | Security Warning for unsafe files must be set to prompt (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI825-IE11 | Internet Explorer Processes for Notification Bars must be enforced (Explorer). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI830-IE11 | ActiveX controls without prompt property must be used in approved domains only (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI835-IE11 | Internet Explorer Processes for Notification Bars must be enforced (iexplore). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI840-IE11 | Cross-Site Scripting Filter must be enforced (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI850-IE11 | Scripting of Internet Explorer WebBrowser Control must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI860-IE11 | When uploading files to a server, the local directory path must be excluded (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI870-IE11 | Security Warning for unsafe files must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI880-IE11 | ActiveX controls without prompt property must be used in approved domains only (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI890-IE11 | Cross-Site Scripting Filter property must be enforced (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI900-IE11 | Internet Explorer Processes Restrict ActiveX Install must be enforced (Reserved). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI910-IE11 | Status bar updates via script must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI920-IE11 | .NET Framework-reliant components not signed with Authenticode must be disallowed to run (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI930-IE11 | .NET Framework-reliant components signed with Authenticode must be disallowed to run (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI940-IE11 | Scriptlets must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI950-IE11 | Status bar updates via script must be disallowed (Restricted Sites zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI985-IE11 | When Enhanced Protected Mode is enabled, ActiveX controls must be disallowed to run in Protected Mode. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI990-IE11 | Dragging of content from different domains across windows must be disallowed (Internet zone). | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 Intune - DoD Internet Explorer 11 STIG v2r7 Settings Catalog | |
| DTBI999-IE11 | The version of Internet Explorer running on the system must be a supported version. | Covered by DISA's policy. GPO - DoD Internet Explorer 11 STIG Computer v2r7 | |
| WNDF-AV-000001 | Microsoft Defender AV must be configured to block the Potentially Unwanted Application (PUA) feature. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000003 | Microsoft Defender AV must be configured to automatically take action on all detected tasks. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000004 | Microsoft Defender AV must be configured to run and scan for malware and other potentially unwanted software. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000005 | Microsoft Defender AV must be configured to not exclude files for scanning. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000006 | Microsoft Defender AV must be configured to not exclude files opened by specified processes. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000007 | Microsoft Defender AV must be configured to enable the Automatic Exclusions feature. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000008 | Microsoft Defender AV must be configured to disable local setting override for reporting to Microsoft MAPS. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000009 | Microsoft Defender AV must be configured to check in real time with MAPS before content is run or accessed. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000010 | Microsoft Defender AV must join Microsoft MAPS. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000011 | Microsoft Defender AV must be configured to only send safe samples for MAPS telemetry. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000012 | Microsoft Defender AV must be configured for protocol recognition for network protection. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000013 | Microsoft Defender AV must be configured to not allow local override of monitoring for file and program activity. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000014 | Microsoft Defender AV must be configured to not allow override of monitoring for incoming and outgoing file activity. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000015 | Microsoft Defender AV must be configured to not allow override of scanning for downloaded files and attachments. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000016 | Microsoft Defender AV must be configured to not allow override of behavior monitoring. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000017 | Microsoft Defender AV Group Policy settings must take priority over the local preference settings. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000018 | Microsoft Defender AV must monitor for incoming and outgoing files. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000019 | Microsoft Defender AV must be configured to monitor for file and program activity. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000020 | Microsoft Defender AV must be configured to scan all downloaded files and attachments. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000021 | Microsoft Defender AV must be configured to always enable real-time protection. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000022 | Microsoft Defender AV must be configured to enable behavior monitoring. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000023 | Microsoft Defender AV must be configured to process scanning when real-time protection is enabled. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000024 | Microsoft Defender AV must be configured to scan archive files. | Covered by DISA's policy. GPO/Intune - Baseline set to Not Configured | |
| WNDF-AV-000025 | Microsoft Defender AV must be configured to scan removable drives. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000026 | Microsoft Defender AV must be configured to perform a weekly scheduled scan. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000027 | Microsoft Defender AV must be configured to turn on email scanning. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000028 | Microsoft Defender AV spyware definition age must not exceed 7 days. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000029 | Microsoft Defender AV virus definition age must not exceed 7 days. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000030 | Microsoft Defender AV must be configured to check for definition updates daily. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000031 | Microsoft Defender AV must be configured for automatic remediation action to be taken for threat alert level Severe. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000032 | Microsoft Defender AV must be configured to block executable content from email client and webmail. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000033 | Microsoft Defender AV must be configured block Office applications from creating child processes. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000034 | Microsoft Defender AV must be configured block Office applications from creating executable content. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000035 | Microsoft Defender AV must be configured to block Office applications from injecting into other processes. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000036 | Microsoft Defender AV must be configured to impede JavaScript and VBScript to launch executables. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000037 | Microsoft Defender AV must be configured to block execution of potentially obfuscated scripts. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000038 | Microsoft Defender AV must be configured to block Win32 imports from macro code in Office. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000039 | Microsoft Defender AV must be configured to prevent user and apps from accessing dangerous websites. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog Intune located under Enable Network Protection setting | |
| WNDF-AV-000040 | Microsoft Defender AV must be configured for automatic remediation action to be taken for threat alert level High. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000041 | Microsoft Defender AV must be configured for automatic remediation action to be taken for threat alert level Medium. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000042 | Microsoft Defender AV must be configured for automatic remediation action to be taken for threat alert level Low. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000043 | Microsoft Defender AV must block Adobe Reader from creating child processes. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000044 | Microsoft Defender AV must block credential stealing from the Windows local security authority subsystem. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000045 | Microsoft Defender AV must block untrusted and unsigned processes that run from USB. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000046 | Microsoft Defender AV must use advanced protection against ransomware. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000047 | Microsoft Defender AV must audit process creations originating from PSExec and WMI commands. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000048 | Microsoft Defender AV must audit persistence through WMI event subscription. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000049 | Microsoft Defender AV must audit executable files from running unless they meet a prevalence, age, or trusted list criterion. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000050 | Microsoft Defender AV must block Office communication application from creating child processes. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000051 | Microsoft Defender AV must block abuse of exploited vulnerable signed drivers. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r8 Attack Surface Reduction (ASR) Settings Catalog Intune - DoD Microsoft Defender Antivirus STIG v2r8 Att | |
| WNDF-AV-000052 | Microsoft Defender AV must configure local administrator merge behavior for lists. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000055 | Microsoft Defender AV must randomize scheduled task times. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000056 | Microsoft Defender AV must hide the Family options area. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000057 | Microsoft Defender AV must enable the file hash computation feature. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000058 | Microsoft Defender AV must enable extended cloud check. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000064 | Microsoft Defender AV must enable script scanning. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000065 | Microsoft Defender AV must enable real-time protection and Security Intelligence Updates during OOBE. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000068 | Microsoft Defender AV must enable network protection to be configured into block or audit mode on Windows Server. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000070 | Microsoft Defender AV must enable EDR in block mode. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000071 | Microsoft Defender AV must report Dynamic Signature dropped events. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000072 | Microsoft Defender AV must scan excluded files and directories during quick scans. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000073 | Microsoft Defender AV must set cloud protection level to High. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000074 | Microsoft Defender AV must convert warn verdict to block. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000075 | Microsoft Defender AV must enable asynchronous inspection. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000076 | Microsoft Defender AV must scan packed executables. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000077 | Microsoft Defender AV must enable heuristics. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| WNDF-AV-000100 | Microsoft Defender AV must control whether exclusions are visible to Local Admins. | Covered by DISA's policy. GPO - DoD Microsoft Defender AntiVirus STIG Computer v2r10 Intune - DoD Microsoft Defender Antivirus STIG v2r10 Computer Settings Catalog | |
| EDGE-00-000001 | User control of proxy settings must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000002 | Bypassing Microsoft Defender SmartScreen prompts for sites must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000003 | Bypassing of Microsoft Defender SmartScreen warnings about downloads must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000004 | The list of domains for which Microsoft Defender SmartScreen will not trigger warnings must be allowlisted if used. | Covered by DISA's policy. Not Confgured GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000005 | InPrivate mode must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000006 | Background processing must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000008 | The ability of sites to show pop-ups must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000009 | The default search provider must be set to use an encrypted connection. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000010 | Data Synchronization must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000011 | Network prediction must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000012 | Search suggestions must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000013 | Importing of autofill form data must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000014 | Importing of browser settings must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000015 | Importing of cookies must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000016 | Importing of extensions must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000017 | Importing of browsing history must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000018 | Importing of home page settings must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000019 | Importing of open tabs must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000020 | Importing of payment info must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000021 | Importing of saved passwords must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000022 | Importing of search engine settings must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000023 | Importing of shortcuts must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000024 | AutoplayAllowed must be set to disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000025 | WebUSB must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000026 | Google Cast must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000027 | Web Bluetooth API must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000028 | Autofill for Credit Cards must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000029 | Autofill for addresses must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000030 | Online revocation checks must be performed. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000031 | Personalization of ads, search, and news by sending browsing history to Microsoft must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000032 | Site tracking of a user’s location must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000033 | Browser history must be saved. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000034 | Edge development tools must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000036 | Download restrictions must be configured. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000039 | URLs must be allowlisted for plugin use if used. | Covered by DISA's policy. [*.]mil [*,]gov GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000041 | Extensions installation must be blocklisted by default. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000042 | Extensions that are approved for use must be allowlisted if used. | Covered by DISA's policy. Not Configured GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000043 | The Password Manager must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000045 | The version of Microsoft Edge running on the system must be a supported version. | Not applicable to the policy. Not a configuration item | |
| EDGE-00-000047 | Site isolation for every site must be enabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000048 | Supported authentication schemes must be configured. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000050 | Microsoft Defender SmartScreen must be enabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000051 | Microsoft Defender SmartScreen must be configured to block potentially unwanted apps. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000052 | The download location prompt must be configured. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000054 | Tracking of browsing activity must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000055 | A website's ability to query for payment methods must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000056 | Suggestions of similar web pages in the event of a navigation error must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000057 | User feedback must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000058 | The collections feature must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000059 | The Share Experience feature must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000060 | Guest mode must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000061 | Relaunch notification must be required. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000062 | The built-in DNS client must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000063 | Use of the QUIC protocol must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000064 | The list of domains media autoplay allows must be allowlisted if used. | Covered by DISA's policy. [*.]gov [*.]mil GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File Intune - DoD Microsoft Edge STIG v2r5 - macOS | |
| EDGE-00-000065 | Visual Search must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000066 | Copilot must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000067 | Session only-based cookies must be enabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000068 | FriendlyURLs must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000069 | Access to Microsoft 365 Copilot writing assistance must be disabled. | Covered by DISA's policy. GPO - N/A Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| EDGE-00-000070 | Spell checking provided by Microsoft Editor must be disabled. | Covered by DISA's policy. GPO - DoD Microsoft Edge STIG v2r5 Intune - DoD Microsoft Edge STIG v2r5 Settings Catalog Intune - DoD Microsoft Edge STIG v2r5 - macOS Preference File | |
| FFOX-00-000001 | The installed version of Firefox must be supported. | Not applicable to the policy. Not a baseline GPO configuration | |
| FFOX-00-000002 | Firefox must be configured to allow only TLS 1.2 or above. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000003 | Firefox must be configured to ask which certificate to present to a website when a certificate is required. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000004 | Firefox must be configured to not automatically check for updated versions of installed search plugins. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000005 | Firefox must be configured to not automatically update installed add-ons and plugins. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000006 | Firefox must be configured to not automatically execute or download MIME types that are not authorized for auto-download. | Not applicable to the policy. Not a baseline GPO configuration | |
| FFOX-00-000007 | Firefox must be configured to disable form fill assistance. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000008 | Firefox must be configured to not use a password store with or without a master password. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000009 | Firefox must be configured to block pop-up windows. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000010 | Firefox must be configured to prevent JavaScript from moving or resizing windows. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000011 | Firefox must be configured to prevent JavaScript from raising or lowering windows. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000013 | Firefox must be configured to disable the installation of extensions. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000014 | Background submission of information to Mozilla must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000015 | Firefox development tools must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000016 | Firefox must have the DoW root certificates installed. | Covered by DISA's policy. Computer Configuration >> Policies >> Administrative Templates >> Mozilla >> Firefox >> Certificates >> Import Enterprise Roots >> Enabled GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 | |
| FFOX-00-000017 | Firefox must be configured to not delete data upon shutdown. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000018 | Firefox must prevent the user from quickly deleting data. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000019 | Firefox private browsing must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000020 | Firefox search suggestions must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000021 | Firefox autoplay must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000022 | Firefox network prediction must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000023 | Firefox fingerprinting protection must be enabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000024 | Firefox cryptomining protection must be enabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000025 | Firefox Enhanced Tracking Protection must be enabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000026 | Firefox extension recommendations must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000027 | Firefox deprecated ciphers must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000028 | Firefox must not recommend extensions as the user is using the browser. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000029 | The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000033 | Firefox must be configured so that DNS over HTTPS is disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000034 | Firefox accounts must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000036 | Firefox feedback reporting must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000037 | Firefox encrypted media extensions must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| FFOX-00-000039 | Firefox Studies must be disabled. | Covered by DISA's policy. GPO - GPO Mozilla Firefox STIG v6r9 Intune - DoD Mozilla Firefox STIG v6r9 Custom Profile | |
| O365-AC-000001 | Macros must be blocked from running in Access files from the Internet. | Covered by DISA's policy. GPO - DoD Office 2019-M365 Apps STIG User v3r4 Intune - DoD M365 Apps STIG v3r4 Settings Catalog Intune - Multi-Session OS - DoD M365 Apps STIG v3r4 User Settings Catalog | |
| O365-AC-000002 | Trust Bar Notifications for unsigned application add-ins in Access must be disabled and blocked. | Covered by DISA's policy. GPO - DoD Office 2019-M365 Apps STIG User v3r4 Intune - DoD M365 Apps STIG v3r4 Settings Catalog Intune - Multi-Session OS - DoD M365 Apps STIG v3r4 User Settings Catalog | |
| O365-AC-000003 | VBA macros not digitally signed must be blocked in Access. | Covered by DISA's policy. GPO - DoD Office 2019-M365 Apps STIG User v3r4 Intune - DoD M365 Apps STIG v3r4 Settings Catalog Intune - Multi-Session OS - DoD M365 Apps STIG v3r4 User Settings Catalog | |
| O365-CO-000001 | The Macro Runtime Scan Scope must be enabled for all documents. | Covered by DISA's policy. GPO - DoD Office 2019-M365 Apps STIG User v3r4 Intune - DoD M365 Apps STIG v3r4 Settings Catalog Intune - Multi-Session OS - DoD M365 Apps STIG v3r4 User Settings Catalog | |
| O365-CO-000002 | Document metadata for rights managed Office Open XML files must be protected. | Covered by DISA's policy. GPO - DoD Office 2019-M365 Apps STIG User v3r4 Intune - DoD M365 Apps STIG v3r4 Settings Catalog Intune - Multi-Session OS - DoD M365 Apps STIG v3r4 User Settings Catalog | |
| O365-CO-000003 | The Office client must be prevented from polling the SharePoint Server for published links. | Covered by DISA's policy. GPO - DoD Office 2019-M365 Apps STIG User v3r4 Intune - DoD M365 Apps STIG v3r4 Settings Catalog Intune - Multi-Session OS - DoD M365 Apps STIG v3r4 User Settings Catalog | |
| O365-CO-000004 | Custom user interface (UI) code must be blocked from loading in all Office applications. | Covered by DISA's policy. GPO - DoD Office 2019-M365 Apps STIG User v3r4 Intune - DoD M365 Apps STIG v3r4 Settings Catalog Intune - Multi-Session OS - DoD M365 Apps STIG v3r4 User Settings Catalog |
Showing 400 of 3465; narrow with the search or a family.