nsacyber / Windows-Secure-Host-Baseline

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
Other
1.56k stars 286 forks source link

Missing STIG ADMX/ADML #20

Closed onedererer closed 7 years ago

onedererer commented 7 years ago

Minor issue but the DISA Windows 10 STIG v1R7 admx/l templates, specifically MSS-legacy and SecGuide, are not included and distributed with the SHB. While minor, this does cause some issues when running RSOP or GPRESULT as the settings contained within come up as "Extra Registry Settings."

onedererer commented 7 years ago

Specifically, they should be included with the windows\Group Policy Templates

onedererer commented 7 years ago

The included SecGuide.admx does not match the DISA Windows 10 STIG V1R7. Specifically, it is missing Pol_SecGuide_RemoveRunasdifferentuser.