Microsoft Security Baselines (SCT) 2026-10-08
AllInternet Explorer 11 - ComputerInternet Explorer 11 - UserWindows 10 20H2 - BitLockerWindows 10 20H2 - ComputerWindows 10 20H2 - UserWindows 10 20H2 and Server 20H2 - Defender AntivirusWindows 10 20H2 and Server 20H2 - Domain SecurityWindows 10 20H2 and Server 20H2 Member Server - Credential GuardWindows Server 20H2 - Domain ControllerWindows Server 20H2 - Domain Controller Virtualization Based SecurityWindows Server 20H2 - Member Server
| Ref | Title | Text | |
|---|---|---|---|
| Audit Security State Change | Audit policy: Audit Security State Change | Success | |
| Audit Security System Extension | Audit policy: Audit Security System Extension | Success | |
| Audit System Integrity | Audit policy: Audit System Integrity | Success and Failure | |
| Audit Other System Events | Audit policy: Audit Other System Events | Success and Failure | |
| Audit Logon | Audit policy: Audit Logon | Success and Failure | |
| Audit Account Lockout | Audit policy: Audit Account Lockout | Failure | |
| Audit Special Logon | Audit policy: Audit Special Logon | Success | |
| Audit Other Logon/Logoff Events | Audit policy: Audit Other Logon/Logoff Events | Success and Failure | |
| Audit File Share | Audit policy: Audit File Share | Success and Failure | |
| Audit Other Object Access Events | Audit policy: Audit Other Object Access Events | Success and Failure | |
| Audit Sensitive Privilege Use | Audit policy: Audit Sensitive Privilege Use | Success and Failure | |
| Audit Process Creation | Audit policy: Audit Process Creation | Success | |
| Audit Audit Policy Change | Audit policy: Audit Audit Policy Change | Success | |
| Audit Authentication Policy Change | Audit policy: Audit Authentication Policy Change | Success | |
| Audit MPSSVC Rule-Level Policy Change | Audit policy: Audit MPSSVC Rule-Level Policy Change | Success and Failure | |
| Audit Other Policy Change Events | Audit policy: Audit Other Policy Change Events | Failure | |
| Audit User Account Management | Audit policy: Audit User Account Management | Success and Failure | |
| Audit Security Group Management | Audit policy: Audit Security Group Management | Success | |
| Audit Credential Validation | Audit policy: Audit Credential Validation | Success and Failure | |
| Audit Detailed File Share | Audit policy: Audit Detailed File Share | Failure | |
| Audit Removable Storage | Audit policy: Audit Removable Storage | Success and Failure | |
| Audit PNP Activity | Audit policy: Audit PNP Activity | Success | |
| Audit Group Membership | Audit policy: Audit Group Membership | Success | |
| AutoConnectAllowedOEM | HKLM\Software\Microsoft\WcmSvc\wifinetworkmanager\config\AutoConnectAllowedOEM | REG_DWORD = 0 | |
| EnumerateAdministrators | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI\EnumerateAdministrators | REG_DWORD = 0 | |
| NoAutorun | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoAutorun | REG_DWORD = 1 | |
| NoDriveTypeAutoRun | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun | REG_DWORD = 255 | |
| NoWebServices | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebServices | REG_DWORD = 1 | |
| AllowEncryptionOracle | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters\AllowEncryptionOracle | REG_DWORD = 0 | |
| DisableAutomaticRestartSignOn | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableAutomaticRestartSignOn | REG_DWORD = 1 | |
| LocalAccountTokenFilterPolicy | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\LocalAccountTokenFilterPolicy | REG_DWORD = 0 | |
| MSAOptional | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\MSAOptional | REG_DWORD = 1 | |
| AdmPwdEnabled | HKLM\Software\Policies\Microsoft Services\AdmPwd\AdmPwdEnabled | REG_DWORD = 1 | |
| EnhancedAntiSpoofing | HKLM\Software\Policies\Microsoft\Biometrics\FacialFeatures\EnhancedAntiSpoofing | REG_DWORD = 1 | |
| DisableEnclosureDownload | HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds\DisableEnclosureDownload | REG_DWORD = 1 | |
| PreventCertErrorOverrides | HKLM\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings\PreventCertErrorOverrides | REG_DWORD = 1 | |
| FormSuggest Passwords | HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main\FormSuggest Passwords | REG_SZ = no | |
| EnabledV9 | HKLM\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter\EnabledV9 | REG_DWORD = 1 | |
| PreventOverride | HKLM\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter\PreventOverride | REG_DWORD = 1 | |
| PreventOverrideAppRepUnknown | HKLM\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter\PreventOverrideAppRepUnknown | REG_DWORD = 1 | |
| ACSettingIndex | HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51\ACSettingIndex | REG_DWORD = 1 | |
| DCSettingIndex | HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51\DCSettingIndex | REG_DWORD = 1 | |
| EnableMulticast | HKLM\Software\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast | REG_DWORD = 0 | |
| DisableWebPnPDownload | HKLM\Software\Policies\Microsoft\Windows NT\Printers\DisableWebPnPDownload | REG_DWORD = 1 | |
| RestrictRemoteClients | HKLM\Software\Policies\Microsoft\Windows NT\Rpc\RestrictRemoteClients | REG_DWORD = 1 | |
| **del.fAllowFullControl | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\**del.fAllowFullControl | REG_SZ = | |
| **del.fUseMailto | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\**del.fUseMailto | REG_SZ = | |
| **del.MaxTicketExpiry | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\**del.MaxTicketExpiry | REG_SZ = | |
| **del.MaxTicketExpiryUnits | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\**del.MaxTicketExpiryUnits | REG_SZ = | |
| DisablePasswordSaving | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\DisablePasswordSaving | REG_DWORD = 1 | |
| fAllowToGetHelp | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\fAllowToGetHelp | REG_DWORD = 0 | |
| fDisableCdm | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\fDisableCdm | REG_DWORD = 1 | |
| fEncryptRPCTraffic | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\fEncryptRPCTraffic | REG_DWORD = 1 | |
| fPromptForPassword | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\fPromptForPassword | REG_DWORD = 1 | |
| MinEncryptionLevel | HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services\MinEncryptionLevel | REG_DWORD = 3 | |
| LetAppsActivateWithVoiceAboveLock | HKLM\Software\Policies\Microsoft\Windows\AppPrivacy\LetAppsActivateWithVoiceAboveLock | REG_DWORD = 2 | |
| DisableWindowsConsumerFeatures | HKLM\Software\Policies\Microsoft\Windows\CloudContent\DisableWindowsConsumerFeatures | REG_DWORD = 1 | |
| AllowProtectedCreds | HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation\AllowProtectedCreds | REG_DWORD = 1 | |
| MaxSize | HKLM\Software\Policies\Microsoft\Windows\EventLog\Application\MaxSize | REG_DWORD = 32768 | |
| MaxSize | HKLM\Software\Policies\Microsoft\Windows\EventLog\Security\MaxSize | REG_DWORD = 196608 | |
| MaxSize | HKLM\Software\Policies\Microsoft\Windows\EventLog\System\MaxSize | REG_DWORD = 32768 | |
| NoAutoplayfornonVolume | HKLM\Software\Policies\Microsoft\Windows\Explorer\NoAutoplayfornonVolume | REG_DWORD = 1 | |
| AllowGameDVR | HKLM\Software\Policies\Microsoft\Windows\GameDVR\AllowGameDVR | REG_DWORD = 0 | |
| NoBackgroundPolicy | HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}\NoBackgroundPolicy | REG_DWORD = 0 | |
| NoGPOListChanges | HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}\NoGPOListChanges | REG_DWORD = 0 | |
| AlwaysInstallElevated | HKLM\Software\Policies\Microsoft\Windows\Installer\AlwaysInstallElevated | REG_DWORD = 0 | |
| EnableUserControl | HKLM\Software\Policies\Microsoft\Windows\Installer\EnableUserControl | REG_DWORD = 0 | |
| DeviceEnumerationPolicy | HKLM\Software\Policies\Microsoft\Windows\Kernel DMA Protection\DeviceEnumerationPolicy | REG_DWORD = 0 | |
| AllowInsecureGuestAuth | HKLM\Software\Policies\Microsoft\Windows\LanmanWorkstation\AllowInsecureGuestAuth | REG_DWORD = 0 | |
| NC_ShowSharedAccessUI | HKLM\Software\Policies\Microsoft\Windows\Network Connections\NC_ShowSharedAccessUI | REG_DWORD = 0 | |
| \\*\NETLOGON | HKLM\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths\\\*\NETLOGON | REG_SZ = RequireMutualAuthentication=1,RequireIntegrity=1 | |
| \\*\SYSVOL | HKLM\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths\\\*\SYSVOL | REG_SZ = RequireMutualAuthentication=1,RequireIntegrity=1 | |
| NoLockScreenCamera | HKLM\Software\Policies\Microsoft\Windows\Personalization\NoLockScreenCamera | REG_DWORD = 1 | |
| NoLockScreenSlideshow | HKLM\Software\Policies\Microsoft\Windows\Personalization\NoLockScreenSlideshow | REG_DWORD = 1 | |
| **del.EnableScriptBlockInvocationLogging | HKLM\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging\**del.EnableScriptBlockInvocationLogging | REG_SZ = | |
| EnableScriptBlockLogging | HKLM\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging\EnableScriptBlockLogging | REG_DWORD = 1 | |
| AllowDomainPINLogon | HKLM\Software\Policies\Microsoft\Windows\System\AllowDomainPINLogon | REG_DWORD = 0 | |
| EnableSmartScreen | HKLM\Software\Policies\Microsoft\Windows\System\EnableSmartScreen | REG_DWORD = 1 | |
| EnumerateLocalUsers | HKLM\Software\Policies\Microsoft\Windows\System\EnumerateLocalUsers | REG_DWORD = 0 | |
| ShellSmartScreenLevel | HKLM\Software\Policies\Microsoft\Windows\System\ShellSmartScreenLevel | REG_SZ = Block | |
| fBlockNonDomain | HKLM\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy\fBlockNonDomain | REG_DWORD = 1 | |
| AllowIndexingEncryptedStoresOrItems | HKLM\Software\Policies\Microsoft\Windows\Windows Search\AllowIndexingEncryptedStoresOrItems | REG_DWORD = 0 | |
| AllowBasic | HKLM\Software\Policies\Microsoft\Windows\WinRM\Client\AllowBasic | REG_DWORD = 0 | |
| AllowDigest | HKLM\Software\Policies\Microsoft\Windows\WinRM\Client\AllowDigest | REG_DWORD = 0 | |
| AllowUnencryptedTraffic | HKLM\Software\Policies\Microsoft\Windows\WinRM\Client\AllowUnencryptedTraffic | REG_DWORD = 0 | |
| AllowBasic | HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\AllowBasic | REG_DWORD = 0 | |
| AllowUnencryptedTraffic | HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\AllowUnencryptedTraffic | REG_DWORD = 0 | |
| DisableRunAs | HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\DisableRunAs | REG_DWORD = 1 | |
| DefaultInboundAction | HKLM\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\DefaultInboundAction | REG_DWORD = 1 | |
| DefaultOutboundAction | HKLM\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\DefaultOutboundAction | REG_DWORD = 0 | |
| DisableNotifications | HKLM\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\DisableNotifications | REG_DWORD = 1 | |
| EnableFirewall | HKLM\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\EnableFirewall | REG_DWORD = 1 | |
| LogDroppedPackets | HKLM\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging\LogDroppedPackets | REG_DWORD = 1 | |
| LogFileSize | HKLM\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging\LogFileSize | REG_DWORD = 16384 | |
| LogSuccessfulConnections | HKLM\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging\LogSuccessfulConnections | REG_DWORD = 1 | |
| PolicyVersion | HKLM\Software\Policies\Microsoft\WindowsFirewall\PolicyVersion | REG_DWORD = 538 | |
| DefaultInboundAction | HKLM\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\DefaultInboundAction | REG_DWORD = 1 | |
| DefaultOutboundAction | HKLM\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\DefaultOutboundAction | REG_DWORD = 0 | |
| DisableNotifications | HKLM\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\DisableNotifications | REG_DWORD = 1 | |
| EnableFirewall | HKLM\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\EnableFirewall | REG_DWORD = 1 | |
| LogDroppedPackets | HKLM\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging\LogDroppedPackets | REG_DWORD = 1 | |
| LogFileSize | HKLM\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging\LogFileSize | REG_DWORD = 16384 | |
| LogSuccessfulConnections | HKLM\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging\LogSuccessfulConnections | REG_DWORD = 1 | |
| AllowLocalIPsecPolicyMerge | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\AllowLocalIPsecPolicyMerge | REG_DWORD = 0 | |
| AllowLocalPolicyMerge | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\AllowLocalPolicyMerge | REG_DWORD = 0 | |
| DefaultInboundAction | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\DefaultInboundAction | REG_DWORD = 1 | |
| DefaultOutboundAction | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\DefaultOutboundAction | REG_DWORD = 0 | |
| DisableNotifications | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\DisableNotifications | REG_DWORD = 1 | |
| EnableFirewall | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\EnableFirewall | REG_DWORD = 1 | |
| LogDroppedPackets | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging\LogDroppedPackets | REG_DWORD = 1 | |
| LogFileSize | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging\LogFileSize | REG_DWORD = 16384 | |
| LogSuccessfulConnections | HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging\LogSuccessfulConnections | REG_DWORD = 1 | |
| AllowWindowsInkWorkspace | HKLM\Software\Policies\Microsoft\WindowsInkWorkspace\AllowWindowsInkWorkspace | REG_DWORD = 1 | |
| UseLogonCredential | HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest\UseLogonCredential | REG_DWORD = 0 | |
| DisableExceptionChainValidation | HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\kernel\DisableExceptionChainValidation | REG_DWORD = 0 | |
| DriverLoadPolicy | HKLM\SYSTEM\CurrentControlSet\Policies\EarlyLaunch\DriverLoadPolicy | REG_DWORD = 3 | |
| SMB1 | HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\SMB1 | REG_DWORD = 0 | |
| Start | HKLM\SYSTEM\CurrentControlSet\Services\MrxSmb10\Start | REG_DWORD = 4 | |
| NodeType | HKLM\SYSTEM\CurrentControlSet\Services\Netbt\Parameters\NodeType | REG_DWORD = 2 | |
| NoNameReleaseOnDemand | HKLM\SYSTEM\CurrentControlSet\Services\Netbt\Parameters\NoNameReleaseOnDemand | REG_DWORD = 1 | |
| DisableIPSourceRouting | HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisableIPSourceRouting | REG_DWORD = 2 | |
| DisableIPSourceRouting | HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DisableIPSourceRouting | REG_DWORD = 2 | |
| EnableICMPRedirect | HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnableICMPRedirect | REG_DWORD = 0 | |
| SeBackupPrivilege | Privilege Rights: SeBackupPrivilege | *S-1-5-32-544 | |
| SeCreateGlobalPrivilege | Privilege Rights: SeCreateGlobalPrivilege | *S-1-5-32-544,*S-1-5-6,*S-1-5-19,*S-1-5-20 | |
| SeCreatePagefilePrivilege | Privilege Rights: SeCreatePagefilePrivilege | *S-1-5-32-544 | |
| SeCreatePermanentPrivilege | Privilege Rights: SeCreatePermanentPrivilege | ||
| SeCreateTokenPrivilege | Privilege Rights: SeCreateTokenPrivilege | ||
| SeDebugPrivilege | Privilege Rights: SeDebugPrivilege | *S-1-5-32-544 | |
| SeDenyNetworkLogonRight | Privilege Rights: SeDenyNetworkLogonRight | *S-1-5-113 | |
| SeDenyRemoteInteractiveLogonRight | Privilege Rights: SeDenyRemoteInteractiveLogonRight | *S-1-5-113 | |
| SeEnableDelegationPrivilege | Privilege Rights: SeEnableDelegationPrivilege | ||
| SeImpersonatePrivilege | Privilege Rights: SeImpersonatePrivilege | *S-1-5-32-544,*S-1-5-6,*S-1-5-19,*S-1-5-20 | |
| SeInteractiveLogonRight | Privilege Rights: SeInteractiveLogonRight | *S-1-5-32-544,*S-1-5-32-545 | |
| SeLoadDriverPrivilege | Privilege Rights: SeLoadDriverPrivilege | *S-1-5-32-544 | |
| SeLockMemoryPrivilege | Privilege Rights: SeLockMemoryPrivilege | ||
| SeManageVolumePrivilege | Privilege Rights: SeManageVolumePrivilege | *S-1-5-32-544 | |
| SeNetworkLogonRight | Privilege Rights: SeNetworkLogonRight | *S-1-5-32-544,*S-1-5-32-555 | |
| SeProfileSingleProcessPrivilege | Privilege Rights: SeProfileSingleProcessPrivilege | *S-1-5-32-544 | |
| SeRemoteShutdownPrivilege | Privilege Rights: SeRemoteShutdownPrivilege | *S-1-5-32-544 | |
| SeRestorePrivilege | Privilege Rights: SeRestorePrivilege | *S-1-5-32-544 | |
| SeSecurityPrivilege | Privilege Rights: SeSecurityPrivilege | *S-1-5-32-544 | |
| SeSystemEnvironmentPrivilege | Privilege Rights: SeSystemEnvironmentPrivilege | *S-1-5-32-544 | |
| SeTakeOwnershipPrivilege | Privilege Rights: SeTakeOwnershipPrivilege | *S-1-5-32-544 | |
| SeTcbPrivilege | Privilege Rights: SeTcbPrivilege | ||
| SeTrustedCredManAccessPrivilege | Privilege Rights: SeTrustedCredManAccessPrivilege | ||
| MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption | Registry Values: MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption | 1,"1" | |
| MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin | Registry Values: MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin | 4,2 | |
| MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser | Registry Values: MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser | 4,0 | |
| MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableInstallerDetection | Registry Values: MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableInstallerDetection | 4,1 | |
| MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | Registry Values: MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | 4,1 | |
| MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableSecureUIAPaths | Registry Values: MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableSecureUIAPaths | 4,1 | |
| MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableVirtualization | Registry Values: MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableVirtualization | 4,1 | |
| MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken | Registry Values: MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken | 4,1 | |
| MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\InactivityTimeoutSecs | Registry Values: MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\InactivityTimeoutSecs | 4,900 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse | 4,1 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel | 4,5 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\allownullsessionfallback | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\allownullsessionfallback | 4,0 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec | 4,537395200 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec | 4,537395200 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash | 4,1 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous | 4,1 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM | 4,1 | |
| MACHINE\System\CurrentControlSet\Control\Lsa\RestrictRemoteSAM | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\RestrictRemoteSAM | 1,"O:BAG:BAD:(A;;RC;;;BA)" | |
| MACHINE\System\CurrentControlSet\Control\Lsa\SCENoApplyLegacyAuditPolicy | Registry Values: MACHINE\System\CurrentControlSet\Control\Lsa\SCENoApplyLegacyAuditPolicy | 4,1 | |
| MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode | Registry Values: MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode | 4,1 | |
| MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\requiresecuritysignature | Registry Values: MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\requiresecuritysignature | 4,1 | |
| MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RestrictNullSessAccess | Registry Values: MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RestrictNullSessAccess | 4,1 | |
| MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword | Registry Values: MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword | 4,0 | |
| MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature | Registry Values: MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature | 4,1 | |
| MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity | Registry Values: MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity | 4,1 | |
| MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\requiresignorseal | Registry Values: MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\requiresignorseal | 4,1 | |
| MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\requirestrongkey | Registry Values: MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\requirestrongkey | 4,1 | |
| MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\sealsecurechannel | Registry Values: MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\sealsecurechannel | 4,1 | |
| MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\signsecurechannel | Registry Values: MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\signsecurechannel | 4,1 | |
| "XblAuthManager",4,"" | Service General Setting: "XblAuthManager",4,"" | ||
| "XblGameSave",4,"" | Service General Setting: "XblGameSave",4,"" | ||
| "XboxGipSvc",4,"" | Service General Setting: "XboxGipSvc",4,"" | ||
| "XboxNetApiSvc",4,"" | Service General Setting: "XboxNetApiSvc",4,"" | ||
| LSAAnonymousNameLookup | System Access: LSAAnonymousNameLookup | 0 |
180 of 663.