-
Notifications
You must be signed in to change notification settings - Fork 124
WindowsServer 2025 MS 1.1
MrAutomater edited this page Jun 19, 2026
·
1 revision
Title: Microsoft Windows Server 2025 Security Technical Implementation Guide
Version: 1
Release: Release: 1 Benchmark Date: 26 Jan 2026 3.5.2 1.10.0
FileName: U_MS_Windows_Server_2025_MS_STIG_V1R1_Manual-xccdf.xml
Created: 6/16/2026
Description: This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.
Total Stig Rule Coverage: 200 of 250 rules are automated; 80%
- High (CAT I): 17 of 20 rules are automated
- Medium (CAT II): 174 of 219 rules are automated
- Low (CAT III): 9 of 11 rules are automated
| StigRuleId | Severity | RuleType | DscResource | DuplicateOf |
|---|---|---|---|---|
| V-278033 | Medium | AccountPolicyRule | AccountPolicy | |
| V-278034 | Medium | AccountPolicyRule | AccountPolicy | |
| V-278035 | Medium | AccountPolicyRule | AccountPolicy | |
| V-278036 | Medium | AccountPolicyRule | AccountPolicy | |
| V-278037 | Medium | AccountPolicyRule | AccountPolicy | |
| V-278038 | Medium | AccountPolicyRule | AccountPolicy | |
| V-278039 | Medium | AccountPolicyRule | AccountPolicy | |
| V-278040 | High | AccountPolicyRule | AccountPolicy | |
| V-278047 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278048 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278049 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278050 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278051 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278052 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278053 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278054 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278055 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278056 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278057 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278058 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278059 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278060 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278061 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278062 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278063 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278064 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278065 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278066 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278067 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278068 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278069 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278070 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278071 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278072 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278073 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278074 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278075 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278076 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278077 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278078 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-278079 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-277997 | High | AuditSettingRule | AuditSetting | |
| V-277998 | Medium | PermissionRule | NTFSAccessEntry | |
| V-277999.a | Medium | PermissionRule | NTFSAccessEntry | |
| V-277999.b | Medium | PermissionRule | NTFSAccessEntry | |
| V-278000 | Medium | PermissionRule | NTFSAccessEntry | |
| V-278001.a | Medium | PermissionRule | RegistryAccessEntry | |
| V-278001.b | Medium | PermissionRule | RegistryAccessEntry | |
| V-278001.c | Medium | PermissionRule | RegistryAccessEntry | |
| V-278002 | Low | PermissionRule | none | |
| V-278043 | Medium | PermissionRule | NTFSAccessEntry | |
| V-278044 | Medium | PermissionRule | NTFSAccessEntry | |
| V-278045 | Medium | PermissionRule | NTFSAccessEntry | |
| V-278046 | Medium | PermissionRule | NTFSAccessEntry | |
| V-278024 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278025 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278080 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278082 | Low | RegistryRule | RegistryPolicyFile | |
| V-278083 | Low | RegistryRule | RegistryPolicyFile | |
| V-278084 | Low | RegistryRule | RegistryPolicyFile | |
| V-278086 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278087.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-278087.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-278088 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278089 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278090.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-278090.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-278091 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278092 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278093 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278094 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278095 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278096 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278097 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278098 | Low | RegistryRule | RegistryPolicyFile | |
| V-278099 | High | RegistryRule | RegistryPolicyFile | |
| V-278100 | High | RegistryRule | RegistryPolicyFile | |
| V-278102 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278103 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278104 | Low | RegistryRule | RegistryPolicyFile | |
| V-278105 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278106 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278107 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278108 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278109 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278110 | Low | RegistryRule | RegistryPolicyFile | |
| V-278111 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278112 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278113 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278114 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278115 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278116 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278117 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278118 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278119 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278120 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278121 | High | RegistryRule | RegistryPolicyFile | |
| V-278122 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278123 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278124 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278125 | High | RegistryRule | RegistryPolicyFile | |
| V-278126 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278127 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278128 | High | RegistryRule | RegistryPolicyFile | |
| V-278129 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278130 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278131 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278179 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278182 | Medium | RegistryRule | Registry | |
| V-278190 | High | RegistryRule | RegistryPolicyFile | |
| V-278196 | High | RegistryRule | Registry | |
| V-278199 | Medium | RegistryRule | Registry | |
| V-278200 | Medium | RegistryRule | Registry | |
| V-278201 | Medium | RegistryRule | Registry | |
| V-278202 | Medium | RegistryRule | Registry | |
| V-278203 | Medium | RegistryRule | Registry | |
| V-278204 | Medium | RegistryRule | Registry | |
| V-278205 | Medium | RegistryRule | Registry | |
| V-278206 | Medium | RegistryRule | Registry | |
| V-278207 | Medium | RegistryRule | Registry | |
| V-278208 | Low | RegistryRule | Registry | |
| V-278209 | Medium | RegistryRule | Registry | |
| V-278210 | Medium | RegistryRule | Registry | |
| V-278211 | Medium | RegistryRule | Registry | |
| V-278213 | Medium | RegistryRule | Registry | |
| V-278214 | Medium | RegistryRule | Registry | |
| V-278216 | High | RegistryRule | Registry | |
| V-278217 | High | RegistryRule | Registry | |
| V-278218 | Medium | RegistryRule | Registry | |
| V-278219 | High | RegistryRule | Registry | |
| V-278220 | Medium | RegistryRule | Registry | |
| V-278221 | Medium | RegistryRule | Registry | |
| V-278222 | Medium | RegistryRule | Registry | |
| V-278223 | Medium | RegistryRule | Registry | |
| V-278225 | High | RegistryRule | Registry | |
| V-278226 | Medium | RegistryRule | Registry | |
| V-278227 | Medium | RegistryRule | Registry | |
| V-278228 | Medium | RegistryRule | Registry | |
| V-278229 | Medium | RegistryRule | Registry | |
| V-278230 | Medium | RegistryRule | Registry | |
| V-278231 | Low | RegistryRule | Registry | |
| V-278232 | Medium | RegistryRule | Registry | |
| V-278233 | Medium | RegistryRule | Registry | |
| V-278234 | Medium | RegistryRule | Registry | |
| V-278235 | Medium | RegistryRule | Registry | |
| V-278236 | Medium | RegistryRule | Registry | |
| V-278237 | Medium | RegistryRule | Registry | |
| V-278238 | Medium | RegistryRule | Registry | |
| V-278239 | Medium | RegistryRule | Registry | |
| V-278240 | Medium | RegistryRule | RegistryPolicyFile | |
| V-278192.a | Medium | RootCertificateRule | CertificateDSC | |
| V-278192.b | Medium | RootCertificateRule | CertificateDSC | |
| V-278192.c | Medium | RootCertificateRule | CertificateDSC | |
| V-278192.d | Medium | RootCertificateRule | CertificateDSC | |
| V-278193.a | Medium | RootCertificateRule | CertificateDSC | |
| V-278193.b | Medium | RootCertificateRule | CertificateDSC | |
| V-278193.c | Medium | RootCertificateRule | none | |
| V-278194.a | Medium | RootCertificateRule | CertificateDSC | |
| V-278194.b | Medium | RootCertificateRule | CertificateDSC | |
| V-278215 | High | SecurityOptionRule | SecurityOption | |
| V-278195 | Medium | SecurityOptionRule | SecurityOption | |
| V-278197 | Medium | SecurityOptionRule | SecurityOption | |
| V-278198 | Medium | SecurityOptionRule | SecurityOption | |
| V-278183 | Medium | UserRightRule | UserRightsAssignment | |
| V-278184 | Medium | UserRightRule | UserRightsAssignment | |
| V-278185 | Medium | UserRightRule | UserRightsAssignment | |
| V-278186 | Medium | UserRightRule | UserRightsAssignment | |
| V-278187 | Medium | UserRightRule | UserRightsAssignment | |
| V-278188 | Medium | UserRightRule | UserRightsAssignment | |
| V-278189 | Medium | UserRightRule | UserRightsAssignment | |
| V-278241 | Medium | UserRightRule | UserRightsAssignment | |
| V-278242 | High | UserRightRule | UserRightsAssignment | |
| V-278243 | Medium | UserRightRule | UserRightsAssignment | |
| V-278244 | Medium | UserRightRule | UserRightsAssignment | |
| V-278245 | Medium | UserRightRule | UserRightsAssignment | |
| V-278246 | High | UserRightRule | UserRightsAssignment | |
| V-278247 | Medium | UserRightRule | UserRightsAssignment | |
| V-278248 | Medium | UserRightRule | UserRightsAssignment | |
| V-278249 | Medium | UserRightRule | UserRightsAssignment | |
| V-278250 | High | UserRightRule | UserRightsAssignment | |
| V-278251 | Medium | UserRightRule | UserRightsAssignment | |
| V-278252 | Medium | UserRightRule | UserRightsAssignment | |
| V-278253 | Medium | UserRightRule | UserRightsAssignment | |
| V-278254 | Medium | UserRightRule | UserRightsAssignment | |
| V-278255 | Medium | UserRightRule | UserRightsAssignment | |
| V-278256 | Medium | UserRightRule | UserRightsAssignment | |
| V-278257 | Medium | UserRightRule | UserRightsAssignment | |
| V-278258 | Medium | UserRightRule | UserRightsAssignment | |
| V-278259 | Medium | UserRightRule | UserRightsAssignment | |
| V-278260 | Medium | UserRightRule | UserRightsAssignment | |
| V-278261 | Medium | UserRightRule | UserRightsAssignment | |
| V-278262 | Medium | UserRightRule | UserRightsAssignment | |
| V-278015 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-278016 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-278019 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-278020 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-278021 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-278022 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-278023 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-278026 | Medium | WindowsFeatureRule | WindowsFeature |
| StigRuleId | Severity | RuleType |
|---|---|---|
| V-277982 | Medium | DocumentRule |
| V-277983 | Medium | DocumentRule |
| V-277991 | Medium | DocumentRule |
| V-277996 | Medium | DocumentRule |
| V-278003 | Medium | DocumentRule |
| V-278008 | Medium | DocumentRule |
| V-278011 | Medium | DocumentRule |
| V-277985 | Medium | ManualRule |
| V-277986 | Medium | ManualRule |
| V-277987 | High | ManualRule |
| V-277988 | Medium | ManualRule |
| V-277989 | Medium | ManualRule |
| V-277990 | Medium | ManualRule |
| V-277992 | Medium | ManualRule |
| V-277993 | Medium | ManualRule |
| V-277995 | Medium | ManualRule |
| V-278004 | Medium | ManualRule |
| V-278005 | Medium | ManualRule |
| V-278006 | Medium | ManualRule |
| V-278007 | Medium | ManualRule |
| V-278009 | Medium | ManualRule |
| V-278010 | Medium | ManualRule |
| V-278012 | Medium | ManualRule |
| V-278013 | Medium | ManualRule |
| V-278014 | Medium | ManualRule |
| V-278017 | Medium | ManualRule |
| V-278018 | Medium | ManualRule |
| V-278027 | Medium | ManualRule |
| V-278028 | Medium | ManualRule |
| V-278029 | Low | ManualRule |
| V-278031 | Medium | ManualRule |
| V-278032 | Medium | ManualRule |
| V-278041 | Medium | ManualRule |
| V-278042 | Medium | ManualRule |
| V-278085 | Low | ManualRule |
| V-278101 | High | ManualRule |
| V-278177 | High | ManualRule |
| V-278178 | Medium | ManualRule |
| V-278180 | Medium | ManualRule |
| V-278181 | Medium | ManualRule |
| V-278212 | Medium | ManualRule |
| V-279916 | Medium | ManualRule |
| V-279917 | Medium | ManualRule |
| V-279918 | Medium | ManualRule |
| V-279919 | Medium | ManualRule |
| V-279920 | Medium | ManualRule |
| V-279921 | Medium | ManualRule |
| V-279922 | Medium | ManualRule |
| V-279923 | Medium | ManualRule |
| V-278030 | Medium | ManualRule |
- Adobe-AcrobatPro-2.1
- Adobe-AcrobatReader-1.6
- Adobe-AcrobatReader-2.1
- DotNetFramework-4-2.7
- DotNetFramework-4-2.8
- FireFox-All-6.6
- FireFox-All-6.7
- Google-Chrome-2.10
- Google-Chrome-2.11
- IISServer-10.0-3.6
- IISServer-10.0-3.7
- IISSite-10.0-2.14
- IISSite-10.0-2.15
- InternetExplorer-11-2.5
- InternetExplorer-11-2.6
- MS-Edge-2.4
- MS-Edge-2.5
- Office-365ProPlus-3.4
- Office-365ProPlus-3.5
- Office-Access2016-1.1
- Office-Access2016-2.1
- Office-Excel2016-1.2
- Office-Excel2016-2.2
- Office-OneNote2016-1.2
- Office-OneNote2016-2.1
- Office-Outlook2016-2.3
- Office-Outlook2016-2.4
- Office-PowerPoint2016-1.1
- Office-PowerPoint2016-2.1
- Office-Publisher2016-1.3
- Office-Publisher2016-2.1
- Office-Skype2016-1.1
- Office-Skype2016-2.1
- Office-System2016-2.4
- Office-System2016-2.5
- Office-Word2016-1.1
- Office-Word2016-2.1
- OracleLinux-8-2.3
- OracleLinux-8-2.4
- OracleLinux-9-1.1
- RHEL-7-3.14
- RHEL-7-3.15
- RHEL-9-2.7
- RHEL-9-2.8
- SqlServer-2016-Instance-3.5
- SqlServer-2016-Instance-3.6
- SqlServer-2022-Instance-1.3
- SqlServer-2022-Instance-1.4
- Ubuntu-18.04-2.14
- Ubuntu-18.04-2.15
- WindowsClient-10-3.5
- WindowsClient-10-3.6
- WindowsClient-11-2.6
- WindowsClient-11-2.7
- WindowsDefender-All-2.7
- WindowsDefender-All-2.8
- WindowsDnsServer-2012R2-2.5
- WindowsDnsServer-2012R2-2.7
- WindowsFirewall-All-2.1
- WindowsFirewall-All-2.2
- WindowsServer-2016-DC-2.10
- WindowsServer-2016-DC-2.9
- WindowsServer-2016-MS-2.10
- WindowsServer-2016-MS-2.9
- WindowsServer-2019-DC-3.7
- WindowsServer-2019-DC-3.8
- WindowsServer-2019-MS-3.7
- WindowsServer-2019-MS-3.8
- WindowsServer-2022-DC-2.7
- WindowsServer-2022-DC-2.8
- WindowsServer-2022-MS-2.7
- WindowsServer-2022-MS-2.8
- WindowsServer-2025-DC-1.1
- WindowsServer-2025-MS-1.1