StigData/Processed/WindowsClient-10-1.21.org.default.xml
|
<!--
The organizational settings file is used to define the local organizations preferred setting within an allowed range of the STIG. Each setting in this file is linked by STIG ID and the valid range is in an associated comment. --> <OrganizationalSettings fullversion="1.21"> <!-- Ensure ''V-63329'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-63329" ValueData="0" /> <!-- Ensure ''V-63405'' -ge '15' -or ''V-63405'' -eq '0'--> <OrganizationalSetting id="V-63405" PolicyValue="15" /> <!-- Ensure ''V-63409'' -le '3' -and ''V-63409'' -ne '0'--> <OrganizationalSetting id="V-63409" PolicyValue="3" /> <!-- Ensure ''V-63413'' -ge '15'--> <OrganizationalSetting id="V-63413" PolicyValue="15" /> <!-- Ensure ''V-63415'' -ge '24'--> <OrganizationalSetting id="V-63415" PolicyValue="24" /> <!-- Ensure ''V-63419'' -le '60' -and ''V-63419'' -ne '0'--> <OrganizationalSetting id="V-63419" PolicyValue="30" /> <!-- Ensure ''V-63421'' -ge '1'--> <OrganizationalSetting id="V-63421" PolicyValue="1" /> <!-- Ensure ''V-63423'' -ge '14'--> <OrganizationalSetting id="V-63423" PolicyValue="14" /> <!-- Ensure ''V-63519'' -ge '32768'--> <OrganizationalSetting id="V-63519" ValueData="32768" /> <!-- Ensure ''V-63523'' -ge '1024000'--> <OrganizationalSetting id="V-63523" ValueData="1024000" /> <!-- Ensure ''V-63527'' -ge '32768'--> <OrganizationalSetting id="V-63527" ValueData="32768" /> <!-- Ensure location for DoD Root CA 2 certificate is present--> <OrganizationalSetting id="V-63579.a" Location="" /> <!-- Ensure location for DoD Root CA 3 certificate is present--> <OrganizationalSetting id="V-63579.b" Location="" /> <!-- Ensure location for DoD Root CA 4 certificate is present--> <OrganizationalSetting id="V-63579.c" Location="" /> <!-- Ensure location for DoD Root CA 5 certificate is present--> <OrganizationalSetting id="V-63579.d" Location="" /> <!-- Ensure ''V-63581'' -match '1|ShouldBeAbsent'--> <OrganizationalSetting id="V-63581" ValueData="1" /> <!-- Ensure location for DoD Interoperability Root CA 1 certificate is present--> <OrganizationalSetting id="V-63587.a" Location="" /> <!-- Ensure location for DoD Interoperability Root CA 2 certificate is present--> <OrganizationalSetting id="V-63587.b" Location="" /> <!-- Ensure location for DoD Root CA 3 certificate is present--> <OrganizationalSetting id="V-63589" Location="" /> <!-- Ensure ''V-63595.b'' -match '1|3'--> <OrganizationalSetting id="V-63595.b" ValueData="1" /> <!-- Ensure ''V-63607'' -match '1|3|8'--> <OrganizationalSetting id="V-63607" ValueData="1" /> <!-- Ensure ''V-63619'' -ne 'Administrator'--> <OrganizationalSetting id="V-63619" OptionValue="" /> <!-- Ensure ''V-63625'' -ne 'Guest'--> <OrganizationalSetting id="V-63625" OptionValue="" /> <!-- Ensure ''V-63627'' -match '1|ShouldBeAbsent'--> <OrganizationalSetting id="V-63627" ValueData="1" /> <!-- Ensure ''V-63661'' -le '30' -and ''V-63661'' -gt '0'--> <OrganizationalSetting id="V-63661" ValueData="15" /> <!-- Ensure ''V-63669'' -le '900' -and ''V-63669'' -gt '0'--> <OrganizationalSetting id="V-63669" ValueData="450" /> <!-- Ensure ''V-63681'' -match '^(DoD Notice and Consent Banner|US Department of Defense Warning Statement)$'--> <OrganizationalSetting id="V-63681" ValueData="US Department of Defense Warning Statement" /> <!-- Ensure 'V-63685.b' -eq 1|2--> <OrganizationalSetting id="V-63685.b" ValueData="1" /> <!-- Ensure ''V-63687'' -le '10'--> <OrganizationalSetting id="V-63687" ValueData="10" /> <!-- Ensure ''V-63689'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-63689" ValueData="0" /> <!-- Ensure ''V-63691'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-63691" ValueData="0" /> <!-- Ensure ''V-63695'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-63695" ValueData="0" /> <!-- Ensure ''V-63697'' -match '1|2'--> <OrganizationalSetting id="V-63697" ValueData="1" /> <!-- Ensure ''V-63721'' -ge '6'--> <OrganizationalSetting id="V-63721" ValueData="6" /> <!-- Ensure ''V-63747'' -match '0|ShouldBeAbsent'--> <OrganizationalSetting id="V-63747" ValueData="0" /> <!-- Ensure ''V-63841'' -match '2|ShouldBeAbsent'--> <OrganizationalSetting id="V-63841" ValueData="2" /> <!-- Ensure both ValueName and ValueData equal the Organization's Tenant Guid, otherwise both should be '1111-2222-3333-4444'--> <OrganizationalSetting id="V-88203" ValueData="1111-2222-3333-4444" ValueName="1111-2222-3333-4444" /> <!-- Ensure ValueData is set to 0x00000006 (6) or greater --> <OrganizationalSetting id="V-94861" ValueData="" /> </OrganizationalSettings> |