CIS Microsoft Windows Server 2022 v3.0.0 NG - Domain Controller

Name: CIS Microsoft Windows Server 2022 v3.0.0 NG - Domain Controller

Updated: 1/6/2025

Authority: CIS

Plugin: Windows

Revision: 1.2

Estimated Item Count: 8

Filename: CIS_Microsoft_Windows_Server_2022_v3.0.0_NG_-_Domain_Controller.audit

Size: 23.2 kB

MD5: f062fa4e0b929288698b26d128c28ad4

SHA256: a332dff095232e5cf099d4165bd8207d68bfff66e55eb1d136d77c193cf9830b

Description	Categories
18.9.5.1 (NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'	SYSTEM AND INFORMATION INTEGRITY
18.9.5.2 (NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot' or higher	SYSTEM AND INFORMATION INTEGRITY
18.9.5.3 (NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'	SYSTEM AND INFORMATION INTEGRITY
18.9.5.4 (NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'	SYSTEM AND INFORMATION INTEGRITY
18.9.5.6 (NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)	SYSTEM AND INFORMATION INTEGRITY
18.9.5.7 (NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'	SYSTEM AND INFORMATION INTEGRITY
18.9.26.2 (NG) Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'	SYSTEM AND INFORMATION INTEGRITY
CIS_Microsoft_Windows_Server_2022_v3.0.0_NG_-_Domain_Controller.audit from CIS Microsoft Windows Server 2022 Benchmark v3.0.0