[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97559

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*


CCE-3055-1
The log file size limit for the Windows Firewall should be configured correctly for the Standard Profile.

CCE-2906-6
Auditing of "account management" events on failure should be enabled or disabled as appropriate..

CCE-4390-1
Prompt for password on resume from hibernate/suspend should be set correctly.

CCE-3176-5
Domain Profile: Allow UPnP framework exception (SP2 only)

CCE-2808-4
The "Remote Control Settings" policy should be set correctly for Terminal Services.

CCE-2293-9
The "Enable User to Patch Elevated Products" policy should be set correctly.

CCE-3247-4
Domain Profile: Allow file and printer sharing exception (SP2 only)

CCE-2846-4
The "change the system time" user right should be assigned to the correct accounts.

CCE-3066-8
Dr. Watson Crash Dumps should be properly configured.

CCE-3274-8
The TCP/IP NetBIOS Helper service should be enabled or disabled as appropriate.

CCE-2764-9
The "Screen Saver Timeout" setting should be configured correctly for the default user.

CCE-3103-9
Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Standard Profile.

CCE-3141-9
Domain Profile: Allow ICMP exceptions (SP2 only)

CCE-5032-8
Logon - Do not process the run once list

CCE-2100-6
Auditing of "logon" events on success should be enabled or disabled as appropriate..

CCE-3213-6
Standard Profile: Allow Remote Desktop exception (SP2 only)

CCE-2643-5
The "Anonymous access to the security event log" policy should be set correctly.

CCE-3284-7
Standard Profile: Protect all network connections (SP2 only)

CCE-2862-1
Membership in the Power Users group should be assigned to the appropriate accounts.

CCE-3114-6
The permitted number of TCP/IP Maximum Retried Half-open Sockets should be set correctly .

CCE-3198-9
The "Windows Firewall: Prohibit notifications" setting should be configured correctly for the Domain Profile.

CCE-3092-4
Always Wait for the Network at Computer Startup and Logon should be properly configured.

CCE-2419-0
Automatic Reboot After System Crash should be properly configured.

CCE-3258-1
Domain Profile: Allow local port exceptions (SP2 only)

CCE-2472-9
The "Message text for users attempting to log on" policy should be set correctly.

CCE-8374-1
CD Burning features in Windows Explorer should be enabled or disabled as appropriate.

CCE-3273-0
Restrictions for Unauthenticated RPC clients (SP2 only)

CCE-2933-0
Auditing of "directory service access" events on success should be enabled or disabled as appropriate..

CCE-2956-1
RPC Endpiont Mapper Client Authentication (SP2 only)

CCE-2336-6
The "when maximum log size is reached" property should be set correctly for the Security log.

CCE-2994-2
The "enforce password history" policy should meet minimum requirements.

CCE-2971-0
Auditing of "policy change" events on success should be enabled or disabled as appropriate..

CCE-2896-9
The startup type of the NetMeeting Remote Desktop Sharing service should be correct.

CCE-8364-2
Processing of the legacy run list on logon should be enabled or disabled as appropriate.

CCE-7583-8
The "Windows Firewall: Outbound connections" policy should be configured correctly for the Domain profile.

CCE-3136-9
Membership in the Remote Desktop Users group should be assigned to the appropriate accounts.

CCE-2343-2
Auditing of "logon" events on failure should be enabled or disabled as appropriate..

CCE-2923-1
The log file path and name for the Windows Firewall should be configured correctly for the Domain Profile.

CCE-2573-4
The "Message title for users attempting to log on" policy should be set correctly.

CCE-2777-1
The "when maximum log size is reached" property should be set correctly for the System log.

CCE-3151-8
The "Secure Channel: Require Strong (Windows 2000 or later) Session Key" policy should be set correctly.

CCE-2961-1
The "Set time limit for disconnected sessions" policy should be set correctly for Terminal Services.

CCE-3174-0
The log file path and name for the Windows Firewall should be configured correctly for the Standard Profile.

CCE-1840-8
The required auditing for the registry key HKEY_LOCAL_MACHINE\SYSTEM should be enabled.

CCE-3124-5
The "Set time limit for idle sessions" policy should be set correctly for Terminal Services.

CCE-2972-8
Unicast response to multicast or broadcast requests should be enabled or disabled as appropriate for the Domain Profile.

CCE-2354-9
The "Limit Users to One Remote Session" policy should be set correctly for Terminal Services.

CCE-2851-4
The "Shut Down system immediately if unable to log security audits" policy should be set correctly.

CCE-3304-3
Domain Profile: Allow Remote Desktop exception (SP2 only)

CCE-8440-0
The "Windows Firewall: Apply local firewall rules" policy should be configured correctly for the Domain profile.

CCE-2776-3
Automatic Logon should be properly configured.

CCE-3090-8
The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Domain Profile.

CCE-2693-0
The security log maximum size should be configured correctly..

CCE-3014-8
The "when maximum log size is reached" property should be set correctly for the Application log.

CCE-2958-7
The log file size limit for the Windows Firewall should be configured correctly for the Domain Profile.

CCE-2890-2
The "Anonymous access to the system event log" policy should be set correctly.

CCE-3040-3
Use of the built-in Guest account should be enabled or disabled as appropriate.

CCE-2996-7
The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly.

CCE-2682-3
The required auditing for %SystemDrive% directory should be enabled.

CCE-2986-8
The "account lockout threshold" policy should meet minimum requirements.

CCE-2925-6
CD-ROM Autorun should be properly configured.

CCE-4838-9
The time in seconds before the screen saver grace period expires (ScreenSaverGracePeriod) setting should be configured correctly.

CCE-3157-5
The amount of idle time required before disconnecting a session should be set correctly.

CCE-3119-5
The "Anonymous access to the application event log" policy should be set correctly.

CCE-2794-6
The "restrict guest access to security log" policy should be set correctly.

CCE-2345-7
The "restrict guest access to system log" policy should be set correctly.

CCE-3134-4
The "Windows Firewall: Prohibit notifications" setting should be configured correctly for the Standard Profile.

CCE-3097-3
The "Secure Channel: Digitally Encrypt or Sign Secure Channel Data (Always)" policy should be set correctly.

CCE-2259-0
Auditing of "object access" events on success should be enabled or disabled as appropriate..

CCE-7528-3
The "Configure Automatic Updates" setting should be configured correctly.

CCE-2466-1
The "reset account lockout counter after" policy should meet minimum requirements.

CCE-2913-2
Auditing of "privilege use" events on success should be enabled or disabled as appropriate..

CCE-2959-5
The "Terminate session when time limits are reached" policy should be set correctly for Terminal Services.

CCE-2707-8
The "Log Successful Connections" option for the Windows Firewall should be configured correctly for the Standard Profile.

CCE-4262-2
The "Prevent IIS Installation" setting should be configured correctly.

CCE-2439-8
The "minimum password age" policy should meet minimum requirements.

CCE-3085-8
The "Unsigned Driver Installation Behavior" policy should be set correctly.

CCE-2949-6
The "Always Prompt Client for Password upon Connection" policy should be set correctly for Terminal Services.

CCE-3012-2
The "Allow Unsolicited Remote Assistance" policy should be set correctly for Terminal Services.

CCE-3179-9
Standard Profile: Do not allow exceptions (SP2 only)

CCE-3280-5
The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Standard Profile.

CCE-3194-8
Domain Profile: Do not allow exceptions (SP2 only)

CCE-2828-2
Domain Profile: Allow local program exceptions

CCE-2559-3
The TCP/IP KeepAlive Time should be set correctly .

CCE-2116-2
The "restrict guest access to application log" policy should be set correctly.

CCE-2866-2
Domain Profile: Define port exceptions (SP2 only)

CCE-2889-4
The "store password using reversible encryption for all users in the domain" policy should be set correctly.

CCE-5025-2
The "Prohibit non-administrators from applying vendor signed updates" setting should be configured correctly.

CCE-3000-7
The "Secure Channel: Digitally Sign Secure Channel Data (When Possible)" policy should be set correctly.

CCE-2453-9
The permitted number of TCP/IP Maximum Half-open Sockets should be set correctly .

CCE-3129-4
The "Limit Number of Connections" policy should be set correctly for Terminal Services.

CCE-8147-1
The "Windows Firewall: Inbound connections" policy should be configured correctly for the Domain Profile.

CCE-4849-6
The "Do not allow passwords to be saved" setting should be configured correctly for Terminal Services.

CCE-2767-2
The "generate security audits" user right should be assigned to the correct accounts.

CCE-2816-7
Auditing of "process tracking" events on success should be enabled or disabled as appropriate..

CCE-3084-1
The "Use FIPS compliant algorithms for encryption, hashing, and signing" policy should be set correctly.

CCE-2476-0
Domain Profile: Allow remote administration

CCE-3231-8
Standard Profile: Define port exceptions (SP2 only)

CCE-2904-1
The application log maximum size should be configured correctly..

CCE-2174-1
The screen saver should be enabled or disabled as appropriate for the current user.

CCE-3011-4
The "Enable User to Use Media Source While Elevated" policy should be set correctly.

CCE-3117-9
The "Prevent Codec Download" policy should be set correctly for Windows MediaPlayer.

CCE-2735-9
The "password must meet complexity requirments" policy should be set correctly.

CCE-2965-2
The "Log Dropped Packets" option for the Windows Firewall should be configured correctly for the Domain Profile.

CCE-2980-1
The "Screen Saver Timeout" setting should be configured correctly for the current user.

CCE-2796-1
The required auditing for the registry key HKEY_LOCAL_MACHINE\SOFTWARE should be enabled.

CCE-3170-8
The "Screen Saver Executable Name" setting should be configured correctly for the current user.

CCE-4500-5
The "Password protect the screen saver" setting should be configured correctly for the current user.

CCE-2867-0
Auditing of "account logon" events on success should be enabled or disabled as appropriate..

CCE-2690-6
Membership in the Backup Operators group should be assigned to the appropriate accounts.

CCE-2701-1
The "Users Prompted to Change Password Before Expiration" policy should be set correctly.

CCE-2878-7
Auditing of "system" events on success should be enabled or disabled as appropriate..

CCE-2928-0
The "account lockout duration" policy should meet minimum requirements.

CCE-2444-8
Disable saving of dial-up passwords should be properly configured.

CCE-2981-9
The "minimum password length" policy should meet minimum requirements.

CCE-2920-7
The "maximum password age" policy should meet minimum requirements.

CCE-3094-0
The "Enable User Control Over Installs" policy should be set correctly.

CCE-3018-9
The "Maximum machine account password age" policy should be set correctly.

CCE-3154-2
Domain Profile: Protect all network connections (SP2 only)

CCE-7598-6
The "Secure Channel: Digitally Encrypt Secure Channel Data (When Possible)" policy should be set correctly.

CCE-2939-7
Auditing of "process tracking" events on failure should be enabled or disabled as appropriate..

CCE-8515-9
The "Windows Firewall: Define program exceptions" policy should be configured correctly for the Domain Profile.

CCE-2723-5
the "System settings: Use Certificate Rules on Windows Executables for Software Restriction Polices" setting should be configured correctly.

CCE-2992-6
The "System cryptography: Force strong key protection for user keys stored on the computer" setting should be configured correctly.

CCE-2954-6
Standard Profile: Allow remote administration exception (SP2 only)

CCE-3006-4
The system log maximum size should be configured correctly..

CPE    1
cpe:/o:microsoft:windows_xp
*XCCDF
xccdf_org.secpod_benchmark_Windows_XP
OVAL    127
oval:gov.nist.usgcb.xp:def:30
oval:gov.nist.usgcb.xp:def:32
oval:gov.nist.usgcb.xp:def:35
oval:gov.nist.usgcb.xp:def:34
...

© 2013 SecPod Technologies