| RHEL-08-030741 | V1R6 | RHEL 8 must disable the chrony daemon from acting as a server. | |
| RHEL-08-030742 | V1R6 | RHEL 8 must disable network management of the chrony daemon. | |
| RHEL-08-040000 | V1R6 | RHEL 8 must not have the telnet-server package installed. | |
| RHEL-08-040001 | V1R6 | RHEL 8 must not have any automated bug reporting tools installed. | |
| RHEL-08-040002 | V1R6 | RHEL 8 must not have the sendmail package installed. | |
| RHEL-08-040004 | V1R6 | RHEL 8 must enable mitigations against processor-based vulnerabilities. | |
| RHEL-08-040010 | V1R6 | RHEL 8 must not have the rsh-server package installed. | |
| RHEL-08-040020 | V1R6 | RHEL 8 must cover or disable the built-in or attached camera when not in use. | |
| RHEL-08-040021 | V1R6 | RHEL 8 must disable the asynchronous transfer mode (ATM) protocol. | |
| RHEL-08-040022 | V1R6 | RHEL 8 must disable the controller area network (CAN) protocol. | |
| RHEL-08-040023 | V1R6 | RHEL 8 must disable the stream control transmission protocol (SCTP). | |
| RHEL-08-040024 | V1R6 | RHEL 8 must disable the transparent inter-process communication (TIPC) protocol. | |
| RHEL-08-040025 | V1R6 | RHEL 8 must disable mounting of cramfs. | |
| RHEL-08-040026 | V1R6 | RHEL 8 must disable IEEE 1394 (FireWire) Support. | |
| WN19-00-000270 | V3R1 | Windows Server 2019 must have the roles and features required by the system documented. | |
| WN19-00-000320 | V3R1 | Windows Server 2019 must not have the Fax Server role installed. | |
| WN19-00-000340 | V3R1 | Windows Server 2019 must not have the Peer Name Resolution Protocol installed. | |
| WN19-00-000350 | V3R1 | Windows Server 2019 must not have Simple TCP/IP Services installed. | |
| WN19-00-000370 | V3R1 | Windows Server 2019 must not have the TFTP Client installed. | |
| WN19-00-000380 | V3R1 | Windows Server 2019 must not have the Server Message Block (SMB) v1 protocol installed. | |
| WN19-00-000390 | V3R1 | Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server. | |
| WN19-00-000400 | V3R1 | Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client. | |
| WN19-00-000410 | V3R1 | Windows Server 2019 must not have Windows PowerShell 2.0 installed. | |
| WN19-CC-000010 | V3R1 | Windows Server 2019 must prevent the display of slide shows on the lock screen. | |
| WN19-CC-000020 | V3R1 | Windows Server 2019 must have WDigest Authentication disabled. | |
| WN19-CC-000150 | V3R1 | Windows Server 2019 downloading print driver packages over HTTP must be turned off. | |
| WN19-CC-000160 | V3R1 | Windows Server 2019 printing over HTTP must be turned off. | |
| WN19-CC-000170 | V3R1 | Windows Server 2019 network selection user interface (UI) must not be displayed on the logon screen. | |
| WN19-CC-000200 | V3R1 | Windows Server 2019 Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft. | |
| WN19-CC-000300 | V3R1 | Windows Server 2019 Windows Defender SmartScreen must be enabled. | |
| WN19-CC-000400 | V3R1 | Windows Server 2019 must disable Basic authentication for RSS feeds over HTTP. | |
| WN19-CC-000410 | V3R1 | Windows Server 2019 must prevent Indexing of encrypted files. | |
| WN19-DC-000130 | V3R1 | Windows Server 2019 domain controllers must run on a machine dedicated to that function. | |
| WN19-MS-000030 | V3R1 | Windows Server 2019 local users on domain-joined member servers must not be enumerated. | |
| WN19-CC-000451 | V3R1 | The Windows Explorer Preview pane must be disabled for Windows Server 2019. | |
| UBTU-18-010018 | V2R12 | The Ubuntu operating system must not have the Network Information Service (NIS) package installed. | |
| UBTU-18-010019 | V2R12 | The Ubuntu operating system must not have the rsh-server package installed. | |
| UBTU-20-010406 | V1R6 | The Ubuntu operating system must not have the rsh-server package installed. | |
| APPL-14-002004 | V1R1 | The macOS system must disable Location Services. | |
| APPL-14-002005 | V1R1 | The macOS system must disable Bonjour multicast. | |
| APPL-14-002007 | V1R1 | The macOS system must disable Internet Sharing. | |
| APPL-14-002010 | V1R1 | The macOS system must disable FaceTime.app. | |
| APPL-14-002012 | V1R1 | The macOS system must disable the iCloud Calendar services. | |
| APPL-14-002013 | V1R1 | The macOS system must disable iCloud Reminders. | |
| APPL-14-002014 | V1R1 | The macOS system must disable iCloud Address Book. | |
| APPL-14-002015 | V1R1 | The macOS system must disable iCloud Mail. | |
| APPL-14-002016 | V1R1 | The macOS system must disable iCloud Notes. | |
| APPL-14-002017 | V1R1 | The macOS system must disable the camera. | |
| APPL-14-002020 | V1R1 | The macOS system must disable Siri. | |
| APPL-14-002035 | V1R1 | The macOS system must disable Apple ID setup during Setup Assistant. | |
| APPL-14-002036 | V1R1 | The macOS system must disable Privacy Setup services during Setup Assistant. | |
| APPL-14-002037 | V1R1 | The macOS system must disable iCloud Storage Setup during Setup Assistant. | |
| APPL-14-002039 | V1R1 | The macOS system must disable Siri Setup during Setup Assistant. | |
| APPL-14-002040 | V1R1 | The macOS system must disable iCloud Keychain synchronization. | |
| APPL-14-002041 | V1R1 | The macOS system must disable iCloud Document synchronization. | |
| APPL-14-002042 | V1R1 | The macOS system must disable iCloud Bookmarks. | |
| APPL-14-002043 | V1R1 | The macOS system must disable iCloud Photo Library. | |
| APPL-14-002051 | V1R1 | The macOS system must disable the TouchID System Settings pane. | |
| APPL-14-002052 | V1R1 | The macOS system must disable the System Settings pane for Wallet and Apple Pay. | |
| APPL-14-002053 | V1R1 | The macOS system must disable the system settings pane for Siri. | |
| APPL-14-002080 | V1R1 | The macOS system must disable Airplay Receiver. | |
| APPL-14-002120 | V1R1 | The macOS system must disable AppleID and Internet Account modifications. | |
| APPL-14-002130 | V1R1 | The macOS system must disable CD/DVD Sharing. | |
| APPL-14-002140 | V1R1 | The macOS system must disable content caching service. | |
| APPL-14-002150 | V1R1 | The macOS system must disable iCloud desktop and document folder synchronization. | |
| APPL-14-002160 | V1R1 | The macOS system must disable iCloud Game Center. | |
| APPL-14-002170 | V1R1 | The macOS system must disable iCloud Private Relay. | |
| APPL-14-002180 | V1R1 | The macOS system must disable Find My service. | |
| APPL-14-002190 | V1R1 | The macOS system must disable password autofill. | |
| APPL-14-002200 | V1R1 | The macOS system must disable personalized advertising. | |
| APPL-14-002210 | V1R1 | The macOS system must disable sending Siri and Dictation information to Apple. | |
| APPL-14-002220 | V1R1 | The macOS system must enforce on device dictation. | |
| APPL-14-002230 | V1R1 | The macOS system must disable dictation. | |
| APPL-14-002240 | V1R1 | The macOS system must disable Printer Sharing. | |
| APPL-14-002250 | V1R1 | The macOS system must disable Remote Management. | |
| APPL-14-002260 | V1R1 | The macOS system must disable the Bluetooth system settings pane. | |
| APPL-14-002270 | V1R1 | The macOS system must disable the iCloud Freeform services. | |
| APPL-14-005054 | V1R1 | The macOS system must disable TouchID prompt during Setup Assistant. | |
| APPL-14-005055 | V1R1 | The macOS system must disable Screen Time prompt during Setup Assistant. | |
| APPL-14-005056 | V1R1 | The macOS system must disable Unlock with Apple Watch during Setup Assistant. | |
| APPL-14-005060 | V1R1 | The macOS system must disable proximity-based password sharing requests. | |
| APPL-14-005061 | V1R1 | The macOS system must disable Erase Content and Settings. | |
| APPL-13-002001 | V1R5 | The macOS system must be configured to disable SMB File Sharing unless it is required. | |
| APPL-13-002003 | V1R5 | The macOS system must be configured to disable the Network File System (NFS) daemon unless it is required. | |
| APPL-13-002004 | V1R5 | The macOS system must be configured to disable Location Services. | |
| APPL-13-002005 | V1R5 | The macOS system must be configured to disable Bonjour multicast advertising. | |
| APPL-13-002006 | V1R5 | The macOS system must be configured to disable the UUCP service. | |
| APPL-13-002007 | V1R5 | The macOS system must be configured to disable Internet Sharing. | |
| APPL-13-002008 | V1R5 | The macOS system must be configured to disable Web Sharing. | |
| APPL-13-002009 | V1R5 | The macOS system must be configured to disable AirDrop. | |
| APPL-13-002012 | V1R5 | The macOS system must be configured to disable the iCloud Calendar services. | |
| APPL-13-002013 | V1R5 | The macOS system must be configured to disable the iCloud Reminders services. | |
| APPL-13-002014 | V1R5 | The macOS system must be configured to disable iCloud Address Book services. | |
| APPL-13-002015 | V1R5 | The macOS system must be configured to disable the iCloud Mail services. | |
| APPL-13-002016 | V1R5 | The macOS system must be configured to disable the iCloud Notes services. | |
| APPL-13-002017 | V1R5 | The macOS system must cover or disable the built-in or attached camera when not in use. | |
| APPL-13-002020 | V1R5 | The macOS system must be configured to disable Siri and dictation. | |
| APPL-13-002032 | V1R5 | The macOS system must be configured to disable the system preference pane for Internet Accounts. | |
| APPL-13-002035 | V1R5 | The macOS system must be configured to disable the Cloud Setup services. | |
| APPL-13-002036 | V1R5 | The macOS system must be configured to disable the Privacy Setup services. | |
| APPL-13-002037 | V1R5 | The macOS system must be configured to disable the Cloud Storage Setup services. | |
| APPL-13-002039 | V1R5 | The macOS system must be configured to disable the Siri Setup services. | |
| APPL-13-002040 | V1R5 | The macOS system must disable iCloud Keychain synchronization. | |
| APPL-13-002041 | V1R5 | The macOS system must disable iCloud Document synchronization. | |
| APPL-13-002042 | V1R5 | The macOS system must disable iCloud Bookmark synchronization. | |
| APPL-13-002043 | V1R5 | The macOS system must disable the iCloud Photo Library. | |
| APPL-13-002051 | V1R5 | The macOS system must be configured to disable the system preference pane for TouchID and Password. | |
| APPL-13-002052 | V1R5 | The macOS system must be configured to disable the system preference pane for Wallet and ApplePay. | |
| APPL-13-002053 | V1R5 | The macOS system must be configured to disable the system preference pane for Siri. | |
| APPL-13-005054 | V1R5 | The macOS system must be configured to disable prompts to configure Touch ID. | |
| APPL-13-005055 | V1R5 | The macOS system must be configured to disable prompts to configure ScreenTime. | |
| APPL-13-005056 | V1R5 | The macOS system must be configured to disable prompts to configure Unlock with Watch. | |
| APPL-13-005058 | V1R5 | The macOS system must be configured to prevent activity continuation between Apple devices. | |
| APPL-13-005060 | V1R5 | The macOS system must be configured to prevent password proximity sharing requests from nearby Apple devices. | |
| APPL-13-005061 | V1R5 | The macOS system must be configured to prevent users from erasing all system content and settings. | |
| OL07-00-020000 | V3R1 | The Oracle Linux operating system must not have the rsh-server package installed. | |
| OL07-00-020010 | V3R1 | The Oracle Linux operating system must not have the ypserv package installed. | |
| OL07-00-021710 | V3R1 | The Oracle Linux operating system must not have the telnet-server package installed. | |
| RHEL-07-020000 | V3R6 | The Red Hat Enterprise Linux operating system must not have the rsh-server package installed. | |
| RHEL-07-020010 | V3R6 | The Red Hat Enterprise Linux operating system must not have the ypserv package installed. | |
| RHEL-07-021710 | V3R6 | The Red Hat Enterprise Linux operating system must not have the telnet-server package installed. | |
| APPL-15-002004 | V1R1 | The macOS system must disable Location Services. | |
| APPL-15-002005 | V1R1 | The macOS system must disable Bonjour multicast. | |
| APPL-15-002007 | V1R1 | The macOS system must disable Internet Sharing. | |
| APPL-15-002010 | V1R1 | The macOS system must disable FaceTime.app. | |
| APPL-15-002012 | V1R1 | The macOS system must disable the iCloud Calendar services. | |
| APPL-15-002013 | V1R1 | The macOS system must disable iCloud Reminders. | |
| APPL-15-002014 | V1R1 | The macOS system must disable iCloud Address Book. | |
| APPL-15-002015 | V1R1 | The macOS system must disable iCloud Mail. | |
| APPL-15-002016 | V1R1 | The macOS system must disable iCloud Notes. | |
| APPL-15-002017 | V1R1 | The macOS system must disable the camera. | |
| APPL-15-002020 | V1R1 | The macOS system must disable Siri. | |
| APPL-15-002035 | V1R1 | The macOS system must disable Apple ID setup during Setup Assistant. | |
| APPL-15-002036 | V1R1 | The macOS system must disable Privacy Setup services during Setup Assistant. | |
| APPL-15-002037 | V1R1 | The macOS system must disable iCloud storage setup during Setup Assistant. | |
| APPL-15-002039 | V1R1 | The macOS system must disable Siri Setup during Setup Assistant. | |
| APPL-15-002040 | V1R1 | The macOS system must disable iCloud Keychain Sync. | |
| APPL-15-002041 | V1R1 | The macOS system must disable iCloud Document Sync. | |
| APPL-15-002042 | V1R1 | The macOS system must disable iCloud Bookmarks. | |
| APPL-15-002043 | V1R1 | The macOS system must disable iCloud Photo Library. | |
| APPL-15-002052 | V1R1 | The macOS system must disable the System Settings pane for Wallet and Apple Pay. | |
| APPL-15-002053 | V1R1 | The macOS system must disable the system settings pane for Siri. | |
| APPL-15-002080 | V1R1 | The macOS system must disable Airplay Receiver. | |
| APPL-15-002120 | V1R1 | The macOS system must disable AppleID and internet Account Modification. | |
| APPL-15-002130 | V1R1 | The macOS system must disable CD/DVD Sharing. | |
| APPL-15-002140 | V1R1 | The macOS system must disable Content Caching service. | |
| APPL-15-002150 | V1R1 | The macOS system must disable iCloud Desktop and Document folder sync. | |
| APPL-15-002160 | V1R1 | The macOS system must disable iCloud Game Center. | |
| APPL-15-002170 | V1R1 | The macOS system must disable iCloud Private Relay. | |
| APPL-15-002180 | V1R1 | The macOS system must disable Find My service. | |
| APPL-15-002200 | V1R1 | The macOS system must disable Personalized Advertising. | |
| APPL-15-002210 | V1R1 | The macOS system must disable sending Siri and Dictation information to Apple. | |
| APPL-15-002220 | V1R1 | The macOS system must enforce On Device Dictation. | |
| APPL-15-002230 | V1R1 | The macOS system must disable Dictation. | |
| APPL-15-002240 | V1R1 | The macOS system must disable Printer Sharing. | |
| APPL-15-002250 | V1R1 | The macOS system must disable Remote Management. | |
| APPL-15-002260 | V1R1 | The macOS system must disable the Bluetooth System Settings pane. | |
| APPL-15-002270 | V1R1 | The macOS system must disable the iCloud Freeform services. | |
| APPL-15-005054 | V1R1 | The macOS system must disable the TouchID prompt during Setup Assistant. | |
| APPL-15-005055 | V1R1 | The macOS system must disable the Screen Time prompt during Setup Assistant. | |
| APPL-15-005056 | V1R1 | The macOS system must disable Unlock with Apple Watch during Setup Assistant. | |
| APPL-15-005060 | V1R1 | The macOS system must disable proximity-based password sharing requests. | |
| APPL-15-005061 | V1R1 | The macOS system must disable Erase Content and Settings. | |
| APPL-15-005140 | V1R1 | The macOS system must disable Genmoji. | |
| APPL-15-005150 | V1R1 | The macOS system must disable Apple Intelligence Image Generation. | |
| APPL-15-005160 | V1R1 | The macOS system must disable Apple Intelligence Writing Tools. | |
| APPL-15-002023 | V1R1 | The macOS system must disable sending audio recordings and transcripts to Apple. | |
| APPL-15-002024 | V1R1 | The macOS system must disable sending search data from Spotlight to Apple. | |
| ALMA-09-028510 | V1R1 | AlmaLinux OS 9 must disable remote management of the chrony daemon. | |
| ALMA-09-028620 | V1R1 | AlmaLinux OS 9 must prevent the chrony daemon from acting as a server. | |
| ALMA-09-028730 | V1R1 | AlmaLinux OS 9 must not have the iprutils package installed. | |
| ALMA-09-028840 | V1R1 | AlmaLinux OS 9 must not have the quagga package installed. | |
| ALMA-09-028950 | V1R1 | AlmaLinux OS 9 must not have the sendmail package installed. | |
| ALMA-09-029060 | V1R1 | AlmaLinux OS 9 must not have the telnet-server package installed. | |
| ALMA-09-029170 | V1R1 | AlmaLinux OS 9 must not have a Trivial File Transfer Protocol (TFTP) client package installed. | |
| ALMA-09-029390 | V1R1 | AlmaLinux OS 9 must not have the cups package installed. | |
| ALMA-09-029500 | V1R1 | AlmaLinux OS 9 must not have the gssproxy package installed. | |
| ALMA-09-029610 | V1R1 | AlmaLinux OS 9 must disable the Asynchronous Transfer Mode (ATM) kernel module. | |
| ALMA-09-029720 | V1R1 | AlmaLinux OS 9 must be configured to disable Bluetooth. | |
| ALMA-09-029830 | V1R1 | AlmaLinux OS 9 must disable the Controller Area Network (CAN) kernel module. | |
| ALMA-09-029940 | V1R1 | AlmaLinux OS 9 must disable mounting of cramfs. | |
| ALMA-09-030050 | V1R1 | AlmaLinux OS 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module. | |
| ALMA-09-030160 | V1R1 | AlmaLinux OS 9 must disable mounting of squashfs. | |
| ALMA-09-030270 | V1R1 | AlmaLinux OS 9 must disable the Transparent Inter Process Communication (TIPC) kernel module. | |
| ALMA-09-030380 | V1R1 | AlmaLinux OS 9 must disable mounting of udf. | |
| ALMA-09-030490 | V1R1 | Cameras must be disabled or covered when not in use. | |
| ALMA-09-030600 | V1R1 | AlmaLinux OS 9 must not have the nfs-utils package installed. | |
| ALMA-09-030710 | V1R1 | AlmaLinux OS 9 must not have the rsh package installed. | |
| ALMA-09-030820 | V1R1 | AlmaLinux OS 9 must not have the rsh-server package installed. | |
| ALMA-09-030930 | V1R1 | AlmaLinux OS 9 must not have the tuned package installed. | |
| ALMA-09-031040 | V1R1 | A graphical display manager must not be installed on AlmaLinux OS 9 unless approved. | |
| ALMA-09-031150 | V1R1 | AlmaLinux OS 9 must not have the ypserv package installed. | |
| ALMA-09-031260 | V1R1 | AlmaLinux OS 9 must not have the avahi package installed. | |
| ALMA-09-031370 | V1R1 | AlmaLinux OS 9 must be configured to disable USB mass storage. | |
| OL08-00-030741 | V1R6 | OL 8 must disable the chrony daemon from acting as a server. | |
| OL08-00-030742 | V1R6 | OL 8 must disable network management of the chrony daemon. | |
| OL08-00-040000 | V1R6 | OL 8 must not have the telnet-server package installed. | |
| OL08-00-040001 | V1R6 | OL 8 must not have any automated bug reporting tools installed. | |
| OL08-00-040002 | V1R6 | OL 8 must not have the sendmail package installed. | |
| OL08-00-040004 | V1R6 | OL 8 must enable mitigations against processor-based vulnerabilities. | |
| OL08-00-040010 | V1R6 | OL 8 must not have the rsh-server package installed. | |
| OL08-00-040020 | V1R6 | OL 8 must cover or disable the built-in or attached camera when not in use. | |
| OL08-00-040024 | V1R6 | OL 8 must disable the transparent inter-process communication (TIPC) protocol. | |
| OL08-00-040025 | V1R6 | OL 8 must disable mounting of cramfs. | |
| OL08-00-040026 | V1R6 | OL 8 must disable IEEE 1394 (FireWire) Support. | |
| OL09-00-000040 | V1R1 | OL 9 must be configured to disable the Asynchronous Transfer Mode (ATM) kernel module. | |
| OL09-00-000041 | V1R1 | OL 9 must be configured to disable the Controller Area Network (CAN) kernel module. | |
| OL09-00-000042 | V1R1 | OL 9 must be configured to disable the FireWire kernel module. | |
| OL09-00-000043 | V1R1 | OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module. | |
| OL09-00-000044 | V1R1 | OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module. | |
| OL09-00-000045 | V1R1 | OL 9 must disable mounting of cramfs. | |
| OL09-00-000046 | V1R1 | OL 9 Bluetooth must be disabled. | |
| OL09-00-000100 | V1R1 | OL 9 must not have the nfs-utils package installed. | |
| OL09-00-000105 | V1R1 | OL 9 must not have the rsh-server package installed. | |
| OL09-00-000110 | V1R1 | OL 9 must not have the telnet-server package installed. | |
| OL09-00-000115 | V1R1 | OL 9 must not have the gssproxy package installed. | |
| OL09-00-000120 | V1R1 | OL 9 must not have the iprutils package installed. | |
| OL09-00-000125 | V1R1 | OL 9 must not have the tuned package installed. | |
| OL09-00-000150 | V1R1 | OL 9 must not have the sendmail package installed. | |
| UBTU-24-100040 | V1R1 | Ubuntu 24.04 LTS must not have the rsh-server package installed. | |
| UBTU-22-215030 | V1R1 | Ubuntu 22.04 LTS must not have the "rsh-server" package installed. | |
| WN11-00-000100 | V1R6 | Internet Information System (IIS) or its subcomponents must not be installed on a workstation. | |
| WN11-00-000110 | V1R6 | Simple TCP/IP Services must not be installed on the system. | |
| WN11-00-000155 | V1R6 | The Windows PowerShell 2.0 feature must be disabled on the system. | |
| WN11-00-000160 | V1R6 | The Server Message Block (SMB) v1 protocol must be disabled on the system. | |
| WN11-00-000165 | V1R6 | The Server Message Block (SMB) v1 protocol must be disabled on the SMB server. | |
| WN11-00-000170 | V1R6 | The Server Message Block (SMB) v1 protocol must be disabled on the SMB client. | |
| WN11-00-000175 | V1R6 | The Secondary Logon service must be disabled on Windows 11. | |
| WN11-00-000210 | V1R6 | Bluetooth must be turned off unless approved by the organization. | |
| WN11-00-000220 | V1R6 | Bluetooth must be turned off when not in use. | |
| WN11-CC-000005 | V1R6 | Camera access from the lock screen must be disabled. | |
| WN11-CC-000007 | V1R6 | Windows 11 must cover or disable the built-in or attached camera when not in use. | |
| WN11-CC-000010 | V1R6 | The display of slide shows on the lock screen must be disabled. | |
| WN11-CC-000038 | V1R6 | WDigest Authentication must be disabled. | |
| WN11-CC-000039 | V1R6 | Run as different user must be removed from context menus. | |
| WN11-CC-000044 | V1R6 | Internet connection sharing must be disabled. | |
| WN11-CC-000100 | V1R6 | Downloading print driver packages over HTTP must be prevented. | |
| WN11-CC-000105 | V1R6 | Web publishing and online ordering wizards must be prevented from downloading a list of providers. | |
| WN11-CC-000110 | V1R6 | Printing over HTTP must be prevented. | |
| WN11-CC-000120 | V1R6 | The network selection user interface (UI) must not be displayed on the logon screen. | |
| WN11-CC-000130 | V1R6 | Local users on domain-joined computers must not be enumerated. | |
| WN11-CC-000175 | V1R6 | The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft. | |
| WN11-CC-000197 | V1R6 | Microsoft consumer experiences must be turned off. | |
| WN11-CC-000210 | V1R6 | The Microsoft Defender SmartScreen for Explorer must be enabled. | |
| WN11-CC-000252 | V1R6 | Windows 11 must be configured to disable Windows Game Recording and Broadcasting. | |
| WN11-CC-000300 | V1R6 | Basic authentication for RSS feeds over HTTP must not be used. | |
| WN11-CC-000305 | V1R6 | Indexing of encrypted files must be turned off. | |
| WN11-CC-000370 | V1R6 | The convenience PIN for Windows 11 must be disabled. | |
| WN11-CC-000390 | V1R6 | Windows 11 must be configured to prevent users from receiving suggestions for third-party or additional applications. | |
| WN11-UC-000015 | V1R6 | Toast notifications to the lock screen must be turned off. | |
| RHEL-09-213045 | V2R5 | RHEL 9 must be configured to disable the Asynchronous Transfer Mode kernel module. | |
| RHEL-09-213050 | V2R5 | RHEL 9 must be configured to disable the Controller Area Network kernel module. | |
| RHEL-09-213055 | V2R5 | RHEL 9 must be configured to disable the FireWire kernel module. | |
| RHEL-09-213060 | V2R5 | RHEL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module. | |
| RHEL-09-213065 | V2R5 | RHEL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module. | |
| RHEL-09-215025 | V2R5 | RHEL 9 must not have the nfs-utils package installed. | |
| RHEL-09-215030 | V2R5 | RHEL 9 must not have the ypserv package installed. | |
| RHEL-09-215035 | V2R5 | RHEL 9 must not have the rsh-server package installed. | |
| RHEL-09-215040 | V2R5 | RHEL 9 must not have the telnet-server package installed. | |
| RHEL-09-215045 | V2R5 | RHEL 9 must not have the gssproxy package installed. | |
| RHEL-09-215050 | V2R5 | RHEL 9 must not have the iprutils package installed. | |
| RHEL-09-215055 | V2R5 | RHEL 9 must not have the tuned package installed. | |
| RHEL-09-231195 | V2R5 | RHEL 9 must disable mounting of cramfs. | |
| RHEL-09-291035 | V2R5 | RHEL 9 Bluetooth must be disabled. | |
| WN10-00-000080 | V3R1 | Only authorized user accounts must be allowed to create or run virtual machines on Windows 10 systems. | |
| WN10-00-000100 | V3R1 | Internet Information System (IIS) or its subcomponents must not be installed on a workstation. | |
| WN10-00-000110 | V3R1 | Simple TCP/IP Services must not be installed on the system. | |
| WN10-00-000155 | V3R1 | The Windows PowerShell 2.0 feature must be disabled on the system. | |
| WN10-00-000160 | V3R1 | The Server Message Block (SMB) v1 protocol must be disabled on the system. | |
| WN10-00-000165 | V3R1 | The Server Message Block (SMB) v1 protocol must be disabled on the SMB server. | |
| WN10-00-000170 | V3R1 | The Server Message Block (SMB) v1 protocol must be disabled on the SMB client. | |
| WN10-00-000175 | V3R1 | The Secondary Logon service must be disabled on Windows 10. | |
| WN10-00-000210 | V3R1 | Bluetooth must be turned off unless approved by the organization. | |
| WN10-00-000220 | V3R1 | Bluetooth must be turned off when not in use. | |
| WN10-CC-000005 | V3R1 | Camera access from the lock screen must be disabled. | |
| WN10-CC-000007 | V3R1 | Windows 10 must cover or disable the built-in or attached camera when not in use. | |
| WN10-CC-000010 | V3R1 | The display of slide shows on the lock screen must be disabled. | |
| WN10-CC-000038 | V3R1 | WDigest Authentication must be disabled. | |
| WN10-CC-000039 | V3R1 | Run as different user must be removed from context menus. | |
| WN10-CC-000044 | V3R1 | Internet connection sharing must be disabled. | |
| WN10-CC-000100 | V3R1 | Downloading print driver packages over HTTP must be prevented. | |
| WN10-CC-000105 | V3R1 | Web publishing and online ordering wizards must be prevented from downloading a list of providers. | |
| WN10-CC-000110 | V3R1 | Printing over HTTP must be prevented. | |
| WN10-CC-000120 | V3R1 | The network selection user interface (UI) must not be displayed on the logon screen. | |
| WN10-CC-000130 | V3R1 | Local users on domain-joined computers must not be enumerated. | |
| WN10-CC-000175 | V3R1 | The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft. | |
| WN10-CC-000197 | V3R1 | Microsoft consumer experiences must be turned off. | |
| WN10-CC-000210 | V3R1 | The Windows Defender SmartScreen for Explorer must be enabled. | |
| WN10-CC-000252 | V3R1 | Windows 10 must be configured to disable Windows Game Recording and Broadcasting. | |
| WN10-CC-000300 | V3R1 | Basic authentication for RSS feeds over HTTP must not be used. | |
| WN10-CC-000305 | V3R1 | Indexing of encrypted files must be turned off. | |
| WN10-CC-000370 | V3R1 | The convenience PIN for Windows 10 must be disabled. | |
| WN10-CC-000385 | V3R1 | Windows Ink Workspace must be configured to disallow access above the lock. | |
| WN10-CC-000390 | V3R1 | Windows 10 should be configured to prevent users from receiving suggestions for third-party or additional applications. | |
| WN10-UC-000015 | V3R1 | Toast notifications to the lock screen must be turned off. | |
| WN16-00-000300 | V2R9 | The roles and features required by the system must be documented. | |
| WN16-00-000350 | V2R9 | The Fax Server role must not be installed. | |
| WN16-00-000370 | V2R9 | The Peer Name Resolution Protocol must not be installed. | |
| WN16-00-000380 | V2R9 | Simple TCP/IP Services must not be installed. | |
| WN16-00-000400 | V2R9 | The TFTP Client must not be installed. | |
| WN16-00-000410 | V2R9 | The Server Message Block (SMB) v1 protocol must be uninstalled. | |
| WN16-00-000411 | V2R9 | The Server Message Block (SMB) v1 protocol must be disabled on the SMB server. | |
| WN16-00-000412 | V2R9 | The Server Message Block (SMB) v1 protocol must be disabled on the SMB client. | |
| WN16-00-000420 | V2R9 | Windows PowerShell 2.0 must not be installed. | |
| WN16-CC-000010 | V2R9 | The display of slide shows on the lock screen must be disabled. | |
| WN16-CC-000030 | V2R9 | WDigest Authentication must be disabled on Windows Server 2016. | |
| WN16-CC-000160 | V2R9 | Downloading print driver packages over HTTP must be prevented. | |
| WN16-CC-000170 | V2R9 | Printing over HTTP must be prevented. | |
| WN16-CC-000180 | V2R9 | The network selection user interface (UI) must not be displayed on the logon screen. | |
| WN16-CC-000240 | V2R9 | The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft. | |
| WN16-CC-000330 | V2R9 | Windows Server 2016 Windows SmartScreen must be enabled. | |
| WN16-CC-000430 | V2R9 | Basic authentication for RSS feeds over HTTP must not be used. | |
| WN16-CC-000440 | V2R9 | Indexing of encrypted files must be turned off. | |
| WN16-DC-000130 | V2R9 | Domain controllers must run on a machine dedicated to that function. | |
| WN16-MS-000030 | V2R9 | Local users on domain-joined computers must not be enumerated. | |
| WN16-CC-000421 | V2R9 | The Windows Explorer Preview pane must be disabled for Windows Server 2016. | |
| WN22-00-000270 | V2R5 | Windows Server 2022 must have the roles and features required by the system documented. | |
| WN22-00-000320 | V2R5 | Windows Server 2022 must not have the Fax Server role installed. | |
| WN22-00-000340 | V2R5 | Windows Server 2022 must not have the Peer Name Resolution Protocol installed. | |
| WN22-00-000350 | V2R5 | Windows Server 2022 must not have Simple TCP/IP Services installed. | |
| WN22-00-000370 | V2R5 | Windows Server 2022 must not have the TFTP Client installed. | |
| WN22-00-000380 | V2R5 | Windows Server 2022 must not the Server Message Block (SMB) v1 protocol installed. | |
| WN22-00-000390 | V2R5 | Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server. | |
| WN22-00-000400 | V2R5 | Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client. | |
| WN22-00-000410 | V2R5 | Windows Server 2022 must not have Windows PowerShell 2.0 installed. | |
| WN22-CC-000010 | V2R5 | Windows Server 2022 must prevent the display of slide shows on the lock screen. | |
| WN22-CC-000020 | V2R5 | Windows Server 2022 must have WDigest Authentication disabled. | |
| WN22-CC-000150 | V2R5 | Windows Server 2022 downloading print driver packages over HTTP must be turned off. | |
| WN22-CC-000160 | V2R5 | Windows Server 2022 printing over HTTP must be turned off. | |
| WN22-CC-000170 | V2R5 | Windows Server 2022 network selection user interface (UI) must not be displayed on the logon screen. | |
| WN22-CC-000200 | V2R5 | Windows Server 2022 Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft. | |
| WN22-CC-000300 | V2R5 | Windows Server 2022 Microsoft Defender antivirus SmartScreen must be enabled. | |
| WN22-CC-000400 | V2R5 | Windows Server 2022 must disable Basic authentication for RSS feeds over HTTP. | |
| WN22-CC-000410 | V2R5 | Windows Server 2022 must prevent Indexing of encrypted files. | |
| WN22-DC-000130 | V2R5 | Windows Server 2022 domain controllers must run on a machine dedicated to that function. | |
| WN22-MS-000030 | V2R5 | Windows Server 2022 local users on domain-joined member servers must not be enumerated. | |