StigData/Processed/WindowsClient-11-2.2.org.default.xml
|
<!--
The organizational settings file is used to define the local organizations preferred setting within an allowed range of the STIG. Each setting in this file is linked by STIG ID and the valid range is in an associated comment. --> <OrganizationalSettings fullversion="2.2"> <!-- Ensure ValueData is set to 0x00000006 (6) or greater --> <OrganizationalSetting id="V-253261" ValueData="" /> <!-- Ensure ''V-253297'' -ge '15' -or ''V-253297'' -eq '0'--> <OrganizationalSetting id="V-253297" PolicyValue="" /> <!-- Ensure ''V-253298'' -le '3' -and ''V-253298'' -ne '0'--> <OrganizationalSetting id="V-253298" PolicyValue="" /> <!-- Ensure ''V-253299'' -ge '15'--> <OrganizationalSetting id="V-253299" PolicyValue="" /> <!-- Ensure ''V-253300'' -ge '24'--> <OrganizationalSetting id="V-253300" PolicyValue="" /> <!-- Ensure ''V-253301'' -le '60' -and ''V-253301'' -ne '0'--> <OrganizationalSetting id="V-253301" PolicyValue="" /> <!-- Ensure ''V-253302'' -ge '1'--> <OrganizationalSetting id="V-253302" PolicyValue="" /> <!-- Ensure ''V-253303'' -ge '14'--> <OrganizationalSetting id="V-253303" PolicyValue="" /> <!-- Ensure ''V-253337'' -ge '32768'--> <OrganizationalSetting id="V-253337" ValueData="" /> <!-- Ensure ''V-253338'' -ge '1024000'--> <OrganizationalSetting id="V-253338" ValueData="" /> <!-- Ensure ''V-253339'' -ge '32768'--> <OrganizationalSetting id="V-253339" ValueData="" /> <!-- Ensure ''V-253364'' -match '3|ShouldBeAbsent'--> <OrganizationalSetting id="V-253364" ValueData="" /> <!-- Ensure ''V-253369.b'' -match '1|3'--> <OrganizationalSetting id="V-253369.b" ValueData="" /> <!-- Ensure ''V-253371'' -match '1|2'--> <OrganizationalSetting id="V-253371" ValueData="" /> <!-- Ensure ''V-253372'' -match '1|3|8'--> <OrganizationalSetting id="V-253372" ValueData="" /> <!-- Ensure ''V-253377'' -match '1|ShouldBeAbsent'--> <OrganizationalSetting id="V-253377" ValueData="" /> <!-- Ensure ''V-253396'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-253396" ValueData="" /> <!-- Ensure ''V-253397'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-253397" ValueData="" /> <!-- Ensure ''V-253398'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-253398" ValueData="" /> <!-- Ensure ''V-253401'' -ge '6'--> <OrganizationalSetting id="V-253401" ValueData="" /> <!-- Ensure ''V-253408'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-253408" ValueData="" /> <!-- Ensure ''V-253412'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-253412" ValueData="" /> <!-- Ensure location for DoD Root CA 3 certificate is present--> <OrganizationalSetting id="V-253427.a" Location="" /> <!-- Ensure location for DoD Root CA 4 certificate is present--> <OrganizationalSetting id="V-253427.b" Location="" /> <!-- Ensure location for DoD Root CA 5 certificate is present--> <OrganizationalSetting id="V-253427.c" Location="" /> <!-- Ensure location for DoD Root CA 6 O certificate is present--> <OrganizationalSetting id="V-253427.d" Location="" /> <!-- Ensure location for DoD Interoperability Root CA 2 certificate is present--> <OrganizationalSetting id="V-253429.a" Location="" /> <!-- Ensure location for DoD Interoperability Root CA 2 certificate is present--> <OrganizationalSetting id="V-253429.b" Location="" /> <!-- Ensure location for US DoD CCEB Interoperability Root CA 2 certificate is present--> <OrganizationalSetting id="V-253430.a" Location="" /> <!-- Ensure location for US DoD CCEB Interoperability Root CA 2,Thumbprint: 9 certificate is present--> <OrganizationalSetting id="V-253430.b" Location="" /> <!-- Ensure ''V-253435'' -ne 'Administrator'--> <OrganizationalSetting id="V-253435" OptionValue="" /> <!-- Ensure ''V-253436'' -ne 'Guest'--> <OrganizationalSetting id="V-253436" OptionValue="" /> <!-- Ensure ''V-253442'' -le '30' -and ''V-253442'' -gt '0'--> <OrganizationalSetting id="V-253442" ValueData="" /> <!-- Ensure ''V-253444'' -le '900' -and ''V-253444'' -gt '0'--> <OrganizationalSetting id="V-253444" ValueData="" /> <!-- Ensure 'V-253445' is set to the required legal notice before logon--> <OrganizationalSetting id="V-253445" ValueData="" /> <!-- Ensure ''V-253446'' -match '^(DoD Notice and Consent Banner|US Department of Defense Warning Statement)$'--> <OrganizationalSetting id="V-253446" ValueData="" /> <!-- Ensure ''V-253447'' -le '10'--> <OrganizationalSetting id="V-253447" ValueData="" /> <!-- Ensure ''V-253448'' -match '1|2'--> <OrganizationalSetting id="V-253448" ValueData="" /> <!-- Ensure ''V-253478'' -match '2|ShouldBeAbsent'--> <OrganizationalSetting id="V-253478" ValueData="" /> </OrganizationalSettings> |