| 1.1.9 Set 'aaa accounting connection' | CIS Cisco IOS 16 L2 v1.1.0 | Cisco | AUDIT AND ACCOUNTABILITY |
| 2.3.7.8 Ensure 'Interactive logon: Require Domain Controller Authentication to unlock workstation' is set to 'Enabled' (MS only) | CIS Microsoft Windows Server 2016 MS L1 v1.2.0 | Windows | ACCESS CONTROL |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Windows Server 2012 R2 MS L1 v2.4.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Windows Server 2012 R2 DC L1 v2.4.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Windows Server 2012 R2 DC L1 v2.5.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Windows Server 2012 DC L1 v2.1.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Windows Server 2012 MS L1 v2.1.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Microsoft Windows Server 2016 DC L1 v1.2.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.4.2 Set AAA 'source-interface' | CIS Cisco IOS 16 L2 v1.1.0 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwd | CIS CentOS 6 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwd | CIS CentOS 6 Workstation L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwd | CIS Oracle Linux 6 Workstation L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwd | CIS Red Hat 6 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwd | CIS Oracle Linux 6 Server L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.4 Ensure no legacy '+' entries exist in /etc/group | CIS Ubuntu Linux 16.04 LTS Server L1 v1.1.0 | Unix | ACCESS CONTROL |
| 6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadow | CIS CentOS 6 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadow | CIS Oracle Linux 6 Workstation L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/group | CIS CentOS 6 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/group | CIS CentOS 6 Workstation L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/group | CIS Red Hat 6 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/group | CIS Oracle Linux 6 Server L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 18.2.1 Ensure LAPS AdmPwd GPO Extension / CSE is installed (MS only) | CIS Microsoft Windows Server 2016 MS L1 v1.2.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.2.1 Ensure LAPS AdmPwd GPO Extension / CSE is installed (MS only) | CIS Windows Server 2012 R2 MS L1 v2.5.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.2.1 Ensure LAPS AdmPwd GPO Extension / CSE is installed (MS only) | CIS Windows Server 2012 R2 MS L1 v2.4.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.2.3 Ensure 'Enable Local Admin Password Management' is set to 'Enabled' (MS only) | CIS Windows Server 2012 R2 MS L1 v2.4.0 | Windows | ACCESS CONTROL |
| 18.2.3 Ensure 'Enable Local Admin Password Management' is set to 'Enabled' (MS only) | CIS Microsoft Windows Server 2016 MS L1 v1.2.0 | Windows | ACCESS CONTROL |
| 18.2.3 Ensure 'Enable Local Admin Password Management' is set to 'Enabled' (MS only) | CIS Windows Server 2012 R2 MS L1 v2.5.0 | Windows | ACCESS CONTROL |
| 18.8.27.2 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | ACCESS CONTROL |
| 18.8.27.2 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Windows Server 2012 DC L1 v2.1.0 | Windows | ACCESS CONTROL |
| 18.8.27.2 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | ACCESS CONTROL |
| 18.8.27.2 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Windows Server 2012 MS L1 v2.1.0 | Windows | ACCESS CONTROL |
| 18.8.27.3 Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | ACCESS CONTROL |
| 18.8.27.3 Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | ACCESS CONTROL |
| 18.8.27.3 Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only) | CIS Windows Server 2012 MS L1 v2.1.0 | Windows | ACCESS CONTROL |
| 18.8.28.2 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Windows Server 2012 R2 DC L1 v2.4.0 | Windows | ACCESS CONTROL |
| 18.8.28.2 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Windows Server 2012 R2 MS L1 v2.4.0 | Windows | ACCESS CONTROL |
| 18.8.28.2 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Windows Server 2012 R2 DC L1 v2.5.0 | Windows | ACCESS CONTROL |
| 18.8.28.2 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Windows Server 2012 R2 MS L1 v2.5.0 | Windows | ACCESS CONTROL |
| 18.8.28.3 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Microsoft Windows Server 2016 DC L1 v1.2.0 | Windows | ACCESS CONTROL |
| 18.8.28.3 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Microsoft Windows Server 2016 MS L1 v1.2.0 | Windows | ACCESS CONTROL |
| 18.8.28.3 Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only) | CIS Windows Server 2012 R2 MS L1 v2.4.0 | Windows | ACCESS CONTROL |
| 18.8.28.4 Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only) | CIS Microsoft Windows Server 2016 MS L1 v1.2.0 | Windows | ACCESS CONTROL |
| 18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Windows Server 2012 R2 MS L1 v2.5.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Windows Server 2012 R2 DC L1 v2.4.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Windows Server 2012 R2 DC L1 v2.5.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Windows Server 2012 R2 MS L1 v2.4.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
