# findings

vuln_id: V-220742
rule_id: SV-220742r1000079_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 3D66E73980452DD8BD3CA8FE1C7ACB35BFFBF1E0
  ~~~~~
  'Enforce password history' is Configured

  PasswordHistorySize: 24


vuln_id: V-220743
rule_id: SV-220743r1051020_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: DCF0D84A66291D6B08E64E7CDECB346B977B8E44
  ~~~~~
  'Maximum Password Age' is Configured

  MaximumPasswordAge: 60


vuln_id: V-220744
rule_id: SV-220744r1051021_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C0EA9DC4F33916CB6458AECF6144EA38763BD20B
  ~~~~~
  'Minimum Password Age' is Configured

  MinimumPasswordAge: 1


vuln_id: V-220745
rule_id: SV-220745r1051022_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 6BE08ACAB8AD3365003019D2702FDF3075E0F32E
  ~~~~~
  'Minimum password length' is Configured

  MinimumPasswordLength: 14


vuln_id: V-220746
rule_id: SV-220746r1051023_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 26F570536C8CEA59E2945B3739F44E08FA2096F8
  ~~~~~
  'Password must meet complexity requirements' is Configured

  PasswordComplexity: 1


vuln_id: V-220747
rule_id: SV-220747r1051024_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 0C3874C178BF034376FC830F77095A4B14233118
  ~~~~~
  'Store passwords using reversible encryption' is Disabled

  ClearTextPassword: 0


vuln_id: V-220748
rule_id: SV-220748r991578_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: DA7DF341CB41A0B60FB92B392D3AA616EB0F8C60
  ~~~~~
  Credential Validation:	Success and Failure


vuln_id: V-220750
rule_id: SV-220750r958368_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: E026B0CB713D941C6AC9CDB0976AD1DDCB8564DE
  ~~~~~
  Security Group Management:	Success


vuln_id: V-220751
rule_id: SV-220751r958368_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 3AA7E01468B70DEFA406DABDAF58FAD0F1E7BE63
  ~~~~~
  User Account Management:	Success and Failure


vuln_id: V-220753
rule_id: SV-220753r1051025_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: DCA308C4975262F51F29DAED106C291E8960644D
  ~~~~~
  Plug and Play Events:	Success


vuln_id: V-220754
rule_id: SV-220754r1051026_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 0AE8978EA0ED5EC0DA9005C2608D05E3ED51FF0C
  ~~~~~
  Process Creation:	Success and Failure


vuln_id: V-220755
rule_id: SV-220755r991578_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 93A0853E44773D10564D3ED14795A30CC6191C41
  ~~~~~
  Account Lockout:	Failure


vuln_id: V-220756
rule_id: SV-220756r991578_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 6318D6520C67CFD4EB30011DEB0BCAC76DCB6CC8
  ~~~~~
  Group Membership:	Success


vuln_id: V-220757
rule_id: SV-220757r958406_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 7A950E7532BE5A2E4F09E8A1E67C0FDAF4E8851D
  ~~~~~
  Logoff:	Success


vuln_id: V-220758
rule_id: SV-220758r958406_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 6557C8974FEC4237F5E900001DCA960F93582900
  ~~~~~
  Logon:	Success and Failure


vuln_id: V-220760
rule_id: SV-220760r991578_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: BA41DFC702C29EE8A4A2E9FCA6F596F4BCEB5161
  ~~~~~
  Special Logon:	Success


vuln_id: V-220761
rule_id: SV-220761r991583_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 0455215FA05B68D7636085140D0F6948977838FA
  ~~~~~
  File Share:	Success and Failure


vuln_id: V-220763
rule_id: SV-220763r991583_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 11B3505989ED9CB1A87C28ADEB0006351D13AF0E
  ~~~~~
  Other Object Access Events:	Success and Failure


vuln_id: V-220765
rule_id: SV-220765r991583_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 2407B24433D2B954716743C3A3B170CD2F14F60B
  ~~~~~
  Removable Storage:	Success and Failure


vuln_id: V-220767
rule_id: SV-220767r991579_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: D7671610543864B4122F2BC729D6BEF505693247
  ~~~~~
  Audit Policy Change:	Success


vuln_id: V-220768
rule_id: SV-220768r958732_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 74E73B7E4CAE038B8D1A0EEE0B6B63A38790EF6E
  ~~~~~
  Authentication Policy Change:	Success


vuln_id: V-220769
rule_id: SV-220769r991579_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 2CF193FE8E8629806C5FA0FC4E522752CA150F38
  ~~~~~
  Authorization Policy Change:	Success


vuln_id: V-220770
rule_id: SV-220770r958732_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 5ADFCE8D22838148E00425A6936CEA3800FE7AA9
  ~~~~~
  Sensitive Privilege Use:	Success and Failure


vuln_id: V-220772
rule_id: SV-220772r991586_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 632F6B588FA4AF190993D337477F3ECADB75FEC7
  ~~~~~
  IPSec Driver:	Failure


vuln_id: V-220773
rule_id: SV-220773r991579_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 65E40F6B959EF218D68DFC455C5196DC70924EDC
  ~~~~~
  Other System Events:	Success and Failure


vuln_id: V-220775
rule_id: SV-220775r958732_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 74302EBA5C1C13D9FC589EBADB52C502534366D6
  ~~~~~
  Security State Change:	Success


vuln_id: V-220776
rule_id: SV-220776r958732_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 7571EDCEC40BA7B892BBFFB7B1A91933D6B26E8D
  ~~~~~
  Security System Extension:	Success


vuln_id: V-220777
rule_id: SV-220777r958732_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: BA1B5CB4CECAEB661B4B6DC8FB69F37F5D308239
  ~~~~~
  System Integrity:	Success and Failure


vuln_id: V-220779
rule_id: SV-220779r958752_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: F2418B961E1473B9DE2D8AC6A4EDFDC071036AA7
  ~~~~~
  'Specify the maximum log file size (KB)' is Enable: (Maximum Log Size (KB) of 32768 or greater) 

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application
  Value Name:	MaxSize
  Value:		0x00008000 (32768)
  Type:		REG_DWORD


vuln_id: V-220780
rule_id: SV-220780r958752_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 410610951479A93EBAA4D742D6C62B553FFCC5B6
  ~~~~~
  'Specify the maximum log file size (KB)' is Enable: (Maximum Log Size (KB) of 1024000 or greater) 

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security
  Value Name:	MaxSize
  Value:		0x000fa000 (1024000)
  Type:		REG_DWORD


vuln_id: V-220781
rule_id: SV-220781r958752_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 489B881681D68174887D297A098A37A658C8A4DD
  ~~~~~
  'Specify the maximum log file size (KB)' is Enable: (Maximum Log Size (KB) of 32768 or greater) 

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\System
  Value Name:	MaxSize
  Value:		0x00008000 (32768)
  Type:		REG_DWORD


vuln_id: V-220782
rule_id: SV-220782r958434_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 4CDBFD3690EC549DDFFFB51C92201C493EF00B4B
  ~~~~~
  C:\windows\System32\Winevt\Logs\Application.evtx
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\EventLog:(I)(F)
  NT AUTHORITY\SYSTEM:(I)(F)
  BUILTIN\Administrators:(I)(F)
  ---------------------


vuln_id: V-220783
rule_id: SV-220783r958434_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: CE8AA1E475C7721743E3AFFD73B09912D17D565D
  ~~~~~
  C:\windows\System32\Winevt\Logs\Security.evtx
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\EventLog:(I)(F)
  NT AUTHORITY\SYSTEM:(I)(F)
  BUILTIN\Administrators:(I)(F)
  ---------------------


vuln_id: V-220784
rule_id: SV-220784r958434_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 46DB62D699DC003F8072DA5CA34FBB2DDC3ED53D
  ~~~~~
  C:\windows\System32\Winevt\Logs\System.evtx
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\EventLog:(I)(F)
  NT AUTHORITY\SYSTEM:(I)(F)
  BUILTIN\Administrators:(I)(F)
  ---------------------


vuln_id: V-220786
rule_id: SV-220786r958412_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 99F1D6888C196E2A612663A7D9F93227609572AC
  ~~~~~
  Other Policy Change Events:	Success and Failure


vuln_id: V-220787
rule_id: SV-220787r958412_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 83B0324896B9F1E212EC8AFB81C12A2CD071D25B
  ~~~~~
  Other Logon/Logoff Events:	Success and Failure


vuln_id: V-220789
rule_id: SV-220789r958412_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: F37A20FF4D47C1504B7346B9B13E691565CAE1C2
  ~~~~~
  Detailed File Share:	Failure


vuln_id: V-220790
rule_id: SV-220790r958412_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: A142DF7C7C59B26DC662163C294BF0C37FCA4777
  ~~~~~
  MPSSVC Rule-Level Policy Change:	Success and Failure


vuln_id: V-220792
rule_id: SV-220792r958478_rule
status: Not_Applicable
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 12/17/2025
  ResultHash: 29B8147452F58C3C24F6A9507B138D2C09BDD8F2
  ~~~~~
  No camera detected so this requirement is NA.


vuln_id: V-220794
rule_id: SV-220794r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 936C50F902C44C0D68CF3E394852F5F03D22E703
  ~~~~~
  'Prevent enabling lock screen slide show' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization
  Value Name:	NoLockScreenSlideshow
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220795
rule_id: SV-220795r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: D0E96E8C2AE11956B4C7E90C0DC40786616E7C1F
  ~~~~~
  'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is Highest protection, source routing is completely disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters
  Value Name:	DisableIpSourceRouting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220796
rule_id: SV-220796r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: D620CAF8D08A5A7FBCF9811F9BECE656A64EA0E6
  ~~~~~
  'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is Highest protection, source routing is completely disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
  Value Name:	DisableIPSourceRouting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220797
rule_id: SV-220797r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 0478878E3F4F00BC13BC64CB667E9AFD673A0682
  ~~~~~
  'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
  Value Name:	EnableICMPRedirect
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220798
rule_id: SV-220798r958902_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C8E96AA0CB60DE462BAA29FCA852ED95506E2C53
  ~~~~~
  'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netbt\Parameters
  Value Name:	NoNameReleaseOnDemand
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220800
rule_id: SV-220800r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 7B07ED3ECA2CAD6E6EF5433B7B0D16EDA4ACD305
  ~~~~~
  'WDigest Authentication (disabling may require KB2871997)' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\Wdigest
  Value Name:	UseLogonCredential
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220801
rule_id: SV-220801r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C33E359580C405646EFE732E9C9A8001CA0E16C3
  ~~~~~
  'Remove "Run as Different User" from context menus' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Classes\batfile\shell\runasuser
  Value Name:	SuppressionPolicy
  Value:		0x00001000 (4096)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Classes\cmdfile\shell\runasuser
  Value Name:	SuppressionPolicy
  Value:		0x00001000 (4096)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Classes\exefile\shell\runasuser
  Value Name:	SuppressionPolicy
  Value:		0x00001000 (4096)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Classes\mscfile\shell\runasuser
  Value Name:	SuppressionPolicy
  Value:		0x00001000 (4096)
  Type:		REG_DWORD


vuln_id: V-220802
rule_id: SV-220802r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 7CFCC9E05DDAF5C85112F200991A5924DE30FA93
  ~~~~~
  'Enable insecure guest logons' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation
  Value Name:	AllowInsecureGuestAuth
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220803
rule_id: SV-220803r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 393FD3F9F314EA17F6A7048A3CFA6AB4DC74E5B8
  ~~~~~
  'Prohibit use of Internet Connection Sharing on your DNS domain network' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Network Connections
  Value Name:	NC_ShowSharedAccessUI
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220805
rule_id: SV-220805r971535_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: F3BAF2F37A9EE096EC6D75CCB50F4F80C5A8F612
  ~~~~~
  'ECC Curve Order' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002
  Value Name:	EccCurves
  Value:		NistP384 NistP256
  Type:		REG_MULTI_SZ


vuln_id: V-220806
rule_id: SV-220806r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 82B38F374F25481E13FFA8A129DCB132F5069F24
  ~~~~~
  'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy
  Value Name:	fMinimizeConnections (Not found)


vuln_id: V-220807
rule_id: SV-220807r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 429F4252FB8F6699C02681359AE6B1750873B4FF
  ~~~~~
  'Prohibit connection to non-domain networks when connected to domain authenticated network' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy
  Value Name:	fBlockNonDomain
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220809
rule_id: SV-220809r958422_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: ADD2B1D96AA135BF2C7628C54E9A984DAF42B0E4
  ~~~~~
  'Include command line in process creation events' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit
  Value Name:	ProcessCreationIncludeCmdLine_Enabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220810
rule_id: SV-220810r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 0AAE7791EBA4A06C080DFA9A8C60FF5A7E272667
  ~~~~~
  'Remote host allows delegation of non-exportable credentials' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation
  Value Name:	AllowProtectedCreds
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220811
rule_id: SV-220811r1016359_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: A35F1C37518BA5BE7F9CEF7DDAAE6530ED947399
  ~~~~~
  RequiredSecurityProperties:		1, 2
  VirtualizationBasedSecurityStatus:	2


vuln_id: V-220813
rule_id: SV-220813r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 009983E38051D68CB7767AAF4C319EF951391443
  ~~~~~
  'Boot-Start Driver Initialization Policy' is Enabled: (Good, unknown and bad but critical)

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Policies\EarlyLaunch
  Value Name:	DriverLoadPolicy
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-220814
rule_id: SV-220814r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 7557CBE1D798DD9C24316EE90023C69521D61C2D
  ~~~~~
  'Configure registry policy processing' is Enabled: (Process even if the Group Policy objects have not changed)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}
  Value Name:	NoGPOListChanges
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220815
rule_id: SV-220815r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: AD9A7497FE8CD47FB5AF348D0B743C308CD9D65A
  ~~~~~
  'Turn off downloading of print drivers over HTTP' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers
  Value Name:	DisableWebPnPDownload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220816
rule_id: SV-220816r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 2F9982102A61E5443396DF8FDC770F9E2C20F549
  ~~~~~
  'Turn off Internet download for Web publishing and online ordering wizards' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoWebServices
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220817
rule_id: SV-220817r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 7780591C5B701047DBD161609A91B8C491C97280
  ~~~~~
  'Turn off printing over HTTP' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers
  Value Name:	DisableHTTPPrinting
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220819
rule_id: SV-220819r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C63F5407FB05305B58DC58070EE19D102A8982C0
  ~~~~~
  'Do not display network selection UI' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System
  Value Name:	DontDisplayNetworkSelectionUI
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220821
rule_id: SV-220821r1051027_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: DEF4995148E29A1A9D587055844AEAA407FD7234
  ~~~~~
  'Require a password when a computer wakes (on battery)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51
  Value Name:	DCSettingIndex
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220822
rule_id: SV-220822r1051028_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: BFA345F26AABB27839EE8AFC87597A3DDBD162E5
  ~~~~~
  'Require a password when a computer wakes (plugged in)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51
  Value Name:	ACSettingIndex
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220823
rule_id: SV-220823r1137695_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 710AE588AB6A9F5E0B92559BED20BF35AFCB73BE
  ~~~~~
  'Configure Solicited Remote Assistance' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	fAllowToGetHelp
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220824
rule_id: SV-220824r971545_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 40E3D085D5C4B8BECD35CFE7A6BA8C4D346FDA19
  ~~~~~
  'Restrict Unauthenticated RPC clients' is Enabled: (Authenticated)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Rpc
  Value Name:	RestrictRemoteClients
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220825
rule_id: SV-220825r991589_rule
status: Not_Applicable
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 12/17/2025
  ResultHash: B25A1A2ECA2675D310A41F0056F41DBFCEAB243E
  ~~~~~
  Operating system is 'Windows 10 Enterprise LTSC 2021' so this requirement is NA.


vuln_id: V-220826
rule_id: SV-220826r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 334CD2718F72D0A72C789D4EC35DDD8F555104A5
  ~~~~~
  'Turn off Inventory Collector' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppCompat
  Value Name:	DisableInventory
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220827
rule_id: SV-220827r958804_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 429F8E88ADA237E5E5322A9AFBD48B8E33D2C07A
  ~~~~~
  'Disallow Autoplay for non-volume devices' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer
  Value Name:	NoAutoplayfornonVolume
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220828
rule_id: SV-220828r958804_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 01637DF3E70F327F92A796B403FE836B3C86FDF8
  ~~~~~
  'Set the default behavior for AutoRun' is Enabled: (Do not execute any autorun commands)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoAutorun
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220829
rule_id: SV-220829r958804_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 13FD2420C2B8D6429B41A57DD6B60EA04E2990AA
  ~~~~~
  'Turn off AutoPlay' is Enabled: (All Drives)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
  Value Name:	NoDriveTypeAutoRun
  Value:		0x000000ff (255)
  Type:		REG_DWORD


vuln_id: V-220830
rule_id: SV-220830r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: CFC843CAA9D6038AF5D5852099DD6A1BB493ED43
  ~~~~~
  'Use enhanced anti-spoofing when available' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures
  Value Name:	EnhancedAntiSpoofing
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220831
rule_id: SV-220831r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: DEA095E45CF9BF8C7FF2F5C4225B750C66E2B6B7
  ~~~~~
  'Turn off Microsoft consumer experiences' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\CloudContent
  Value Name:	DisableWindowsConsumerFeatures
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220832
rule_id: SV-220832r958518_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 7E4F6B9D764BEC43054FB933A76FD46CEFEA5B6C
  ~~~~~
  'Enumerate administrator accounts on elevation' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI
  Value Name:	EnumerateAdministrators
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220833
rule_id: SV-220833r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 675DF5D96893954A753326C4A1C2DE41A7320803
  ~~~~~
  'Limit Enhanced diagnostic data to the minimum required by Windows Analytics' is Enabled: (Enable Windows Analytics collection)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection
  Value Name:	LimitEnhancedDiagnosticDataWindowsAnalytics
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220834
rule_id: SV-220834r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 14B9FBD5EC0F50908A19F2904EB7A05C25CC872E
  ~~~~~
  'Allow Telemetry' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection
  Value Name:	AllowTelemetry
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220835
rule_id: SV-220835r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 1B980AE1F7833483336844BAEADF9F0CAF0BD5B9
  ~~~~~
  'Download Mode' is Enabled: (Any option except 'Internet')

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization
  Value Name:	DODownloadMode
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220836
rule_id: SV-220836r958478_rule
status: Not_Applicable
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 12/17/2025
  ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458
  ~~~~~
  This is a classified system so this requirement is NA.


vuln_id: V-220837
rule_id: SV-220837r958928_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 4A63DDC6B914A33381BF478DA8F617983D075AE8
  ~~~~~
  'Turn off Data Execution Prevention for Explorer' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer
  Value Name:	NoDataExecutionPrevention (Not found)


vuln_id: V-220838
rule_id: SV-220838r958902_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 6F4214738B47BDD9718A7512C9266DEA4E4E23C6
  ~~~~~
  'Turn off heap termination on corruption' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer
  Value Name:	NoHeapTerminationOnCorruption (Not found)


vuln_id: V-220839
rule_id: SV-220839r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 980FF0DC97726ACDDD026BE76CF4FA439D23F0E8
  ~~~~~
  'Turn off shell protocol protected mode' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	PreXPSP2ShellProtocolBehavior (Not found)


vuln_id: V-220840
rule_id: SV-220840r991589_rule
status: Not_Applicable
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 12/17/2025
  ResultHash: 35050B44054DB3A2BB2EF585B4198C7CAEE81E4F
  ~~~~~
  This is not an unclassified system so this requirement is NA.


vuln_id: V-220845
rule_id: SV-220845r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 91E44EA4952901ECB9C71FC575E75862091DAFD1
  ~~~~~
  'Enables or disables Windows Game Recording and Broadcasting' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\GameDVR
  Value Name:	AllowGameDVR
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220846
rule_id: SV-220846r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 4CEF5A54871AEE440F7A1BEB6AD066676E445A4E
  ~~~~~
  'Use a hardware security device' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork
  Value Name:	RequireSecurityDevice
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220847
rule_id: SV-220847r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: FC6B1CECC3CFAF4C5174B34463A8237556972DF3
  ~~~~~
  'Minimum PIN length' is Enabled: (6 or greater)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity
  Value Name:	MinimumPINLength
  Value:		0x00000006 (6)
  Type:		REG_DWORD


vuln_id: V-220848
rule_id: SV-220848r1051029_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 338BC62939ABE731004ECB8DB57D03CF7B6B5B2E
  ~~~~~
  'Do not allow passwords to be saved' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	DisablePasswordSaving
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220849
rule_id: SV-220849r1137695_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 649B63305BF44C135717D4368AF832D0654318E8
  ~~~~~
  'Do not allow drive redirection' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	fDisableCdm
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220850
rule_id: SV-220850r1051030_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 9543721DB11F02494E7ED66C64CBD374894522C8
  ~~~~~
  'Always prompt for password upon connection' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	fPromptForPassword
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220851
rule_id: SV-220851r991554_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 08943A2B448533281BEE2C1020DD339D9FE588C1
  ~~~~~
  'Require secure RPC communication' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	fEncryptRPCTraffic
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220852
rule_id: SV-220852r958408_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 0C53D2EC2EA676A44E2B9D7BD6678B35A9150095
  ~~~~~
  'Set client connection encryption level' is Enabled: (High Level)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	MinEncryptionLevel
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-220853
rule_id: SV-220853r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 3F4C76E881CBB1C19B94AB2CA617139F68420F8A
  ~~~~~
  'Prevent downloading of enclosures' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds
  Value Name:	DisableEnclosureDownload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220854
rule_id: SV-220854r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 28C293E474B6B66AEE08C24C00A3F7E5499C0F18
  ~~~~~
  'Turn on Basic feed authentication over HTTP' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds
  Value Name:	AllowBasicAuthInClear (Not found)


vuln_id: V-220855
rule_id: SV-220855r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 176D0A2485AF508887C839ACDF2F4D36A9659917
  ~~~~~
  'Allow indexing of encrypted files' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search
  Value Name:	AllowIndexingEncryptedStoresOrItems
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220856
rule_id: SV-220856r1051031_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 591988E36B44158A6B5FD47B3E0A4AAA5E959EBC
  ~~~~~
  'Allow user control over installs' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer
  Value Name:	EnableUserControl
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220857
rule_id: SV-220857r1051032_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 453F878DFDBD58EA0B57A6EFB51F819380F02365
  ~~~~~
  'Always install with elevated privileges' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer
  Value Name:	AlwaysInstallElevated
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220858
rule_id: SV-220858r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 25956B5D4AA9F192272A0F7496A999EC40253412
  ~~~~~
  'Prevent Internet Explorer security prompt for Windows Installer scripts' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer
  Value Name:	SafeForScripting (Not found)


vuln_id: V-220859
rule_id: SV-220859r991591_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 465601DA377FEF10B547A2FE7BE36790D6AFAEF4
  ~~~~~
  'Sign-in last interactive user automatically after a system-initiated restart' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	DisableAutomaticRestartSignOn
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220860
rule_id: SV-220860r958422_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: EB4A265C9E587BD9D606DF1E88D13CF74FE47192
  ~~~~~
  'Turn on PowerShell Script Block Logging' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging
  Value Name:	EnableScriptBlockLogging
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220862
rule_id: SV-220862r958510_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 30889CFD34559B587AF9B23229EE47BF3019880E
  ~~~~~
  'Allow Basic authentication' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client
  Value Name:	AllowBasic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220863
rule_id: SV-220863r958848_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 4A4CD99AD9B2D52A3D642DCC31C496CFF4E83E5A
  ~~~~~
  'Allow unencrypted traffic' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client
  Value Name:	AllowUnencryptedTraffic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220865
rule_id: SV-220865r958510_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 05DABD310D5297F9FE1F997D158377A95C402A44
  ~~~~~
  'Allow Basic authentication' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service
  Value Name:	AllowBasic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220866
rule_id: SV-220866r958848_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 4B17B5D6EF94B0E0F37FCDDEEB811EFC975C0103
  ~~~~~
  'Allow unencrypted traffic' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service
  Value Name:	AllowUnencryptedTraffic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220867
rule_id: SV-220867r1051033_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 1AA481372E4667D4FE24C95C9119B1D501E8D612
  ~~~~~
  'Disallow WinRM from storing RunAs credentials' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service
  Value Name:	DisableRunAs
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220868
rule_id: SV-220868r958510_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 511153A33523CC0CB3BE2DD4DD561A858B374981
  ~~~~~
  'Disallow Digest authentication' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client
  Value Name:	AllowDigest
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220869
rule_id: SV-220869r958400_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: CD295ABCDFB51D0EE8DA52FAD5F6A33DF8038C9A
  ~~~~~
  'Let Windows apps activate with voice' is NOT configured to 'Enabled' with 'Default for all Apps:' set to 'Force Deny'.
  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy
  Value Name:	(NotFound)
  Value:		(NotFound)
  Type:		(NotFound)

  'Let Windows apps activate with voice while the system is locked' is configured to 'Enabled' with 'Default for all Apps:' set to 'Force Deny'.
  Registry Path:	HKLM:\\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy
  Value Name:	LetAppsActivateWithVoiceAboveLock
  Value:		2
  Type:		REG_DWORD


vuln_id: V-220870
rule_id: SV-220870r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: D02062E8EFA394EFD128CC780304DBFC3EAAE719
  ~~~~~
  'Turn on convenience PIN sign-in' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System
  Value Name:	AllowDomainPINLogon
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220871
rule_id: SV-220871r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 641D5B0C1E325C0255D6AC4FA357A5C980716995
  ~~~~~
  'Allow Windows Ink Workspace' is Enabled: (On, but disallow access above lock)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace
  Value Name:	AllowWindowsInkWorkspace
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220872
rule_id: SV-220872r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89108\Scan.Admin
  UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016
  ResultHash: 8C1493AE761559D80F64571BC10E6034D9814EFD
  ~~~~~
  'Do not suggest third-party content in Windows spotlight' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Windows\CloudContent
  Value Name:	DisableThirdPartySuggestions
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220902
rule_id: SV-220902r1137695_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 6F076B52FC6C5BE7DBAFCEAD9AD6E65054D1D24D
  ~~~~~
  'Enumeration policy for external devices incompatible with Kernel DMA Protection' is Enabled: (Block All)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection
  Value Name:	DeviceEnumerationPolicy
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220903
rule_id: SV-220903r958448_rule
status: Not_Reviewed
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) was unable to determine a Status but found the below configuration on 12/17/2025:
  ResultHash: BBAC88C8AB01CF95104CC45D880159B2968EBA9F
  ~~~~~
  Installed NSS Root Certificates:

  Subject:		CN=NSS Root CA 4, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	D753369F16C2CF15A9647AAE4F6E2B40E4A28242
  NotAfter:		10/11/2041 13:47:15

  Subject:		CN=NSS Root CA 1, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	4D96A58E74C1D5EC06C018459C3DDE71C0DBEF41
  NotAfter:		11/28/2029 22:06:38

  Subject:		CN=NSS Root CA 2, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	3CEE89598C90AA6F5A3B75FB03E94E111D75B5D9
  NotAfter:		10/20/2030 13:29:50


vuln_id: V-220907
rule_id: SV-220907r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 8A9F5422786D4EFACE58ACD7B0A7BB12DFFE3921
  ~~~~~
  HKLM:\SECURITY
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadPermissions, ChangePermissions
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------

  HKLM:\SOFTWARE
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Users
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: CREATOR OWNER
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------

  HKLM:\SYSTEM
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Users
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: CREATOR OWNER
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------


vuln_id: V-220908
rule_id: SV-220908r958482_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: ED6509E61BF73EE080EA4058CF1EEF2D90139214
  ~~~~~
  'Accounts: Administrator account status' is Disabled

  EnableAdminAccount: 0


vuln_id: V-220909
rule_id: SV-220909r958504_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 4B36C634C9C40B0094FF0676E2CD029965645B6F
  ~~~~~
  'Accounts: Guest account status' is Disabled

  EnableGuestAccount: 0


vuln_id: V-220910
rule_id: SV-220910r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 11C8987DBFFC9052B48349887397485EE4575B9B
  ~~~~~
  'Accounts: Limit local account use of blank passwords to console logon only' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	LimitBlankPasswordUse
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220911
rule_id: SV-220911r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: A5AD8E6621056536D220CA7C6A67BF0A37C8CF26
  ~~~~~
  'Accounts: Rename administrator account' is Configured

  NewAdministratorName: xAdministrator


vuln_id: V-220912
rule_id: SV-220912r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: A3A426DBE1430D47DFDDA61CE036F49841EE3E11
  ~~~~~
  'Accounts: Rename guest account' is Configured

  NewGuestName: xGuest


vuln_id: V-220913
rule_id: SV-220913r958442_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 324AD06F381FD021DAE56A525BB09066ECE5E5CF
  ~~~~~
  'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	SCENoApplyLegacyAuditPolicy
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220914
rule_id: SV-220914r958908_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C92AC1F7572F9B3171081EB2EEAAF362D261AA1F
  ~~~~~
  'Domain member: Digitally encrypt or sign secure channel data (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	RequireSignOrSeal
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220915
rule_id: SV-220915r958908_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: E8105F4A055719C6863012165C512F667D2DC2D5
  ~~~~~
  'Domain member: Digitally encrypt secure channel data (when possible)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	SealSecureChannel
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220916
rule_id: SV-220916r958908_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 685804E6BA9636AF386D9935CF3C842E8E5D1A87
  ~~~~~
  'Domain member: Digitally sign secure channel data (when possible)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	SignSecureChannel
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220917
rule_id: SV-220917r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 8D6ADB1CE377DE42DE0BD6F753A46706DCD5D69D
  ~~~~~
  'Domain member: Disable machine account password changes' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	DisablePasswordChange
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220918
rule_id: SV-220918r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: FAE72969A576C11785DDAD15FA1C5F2F963658CF
  ~~~~~
  'Domain member: Maximum machine account password age' is Enabled: (30 or less but not 0)

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	MaximumPasswordAge
  Value:		0x0000001e (30)
  Type:		REG_DWORD


vuln_id: V-220919
rule_id: SV-220919r958908_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: A43C9B8CB640DBD916EC75B515875BE22877FB1B
  ~~~~~
  'Domain member: Require strong (Windows 2000 or Later) session key' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	RequireStrongKey
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220920
rule_id: SV-220920r958402_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 61889039469BEE02CE032563F1503A67C9B510A6
  ~~~~~
  'Interactive logon: Machine inactivity limit' is Enabled: (900 or less but not 0)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	InactivityTimeoutSecs
  Value:		0x00000384 (900)
  Type:		REG_DWORD


vuln_id: V-220921
rule_id: SV-220921r958390_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: E8B54A53D42E7E78768CD8651A8875ECA26F3615
  ~~~~~
  'Interactive logon: Message text for users attempting to log on' is Configured Properly

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	LegalNoticeText
  Value:
  You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
  By using this IS (which includes any device attached to this IS), you consent to the following conditions:
  -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
  -At any time, the USG may inspect and seize data stored on this IS.
  -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
  -This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
  -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.
  Type:		REG_SZ


vuln_id: V-220922
rule_id: SV-220922r958390_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 94854FF1D86F23AA1E8C8DA8BD0A2FDD0916B300
  ~~~~~
  'Interactive logon: Message title for users attempting to log on' is Configured Properly

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	LegalNoticeCaption
  Value:		US Department of Defense Warning Statement
  Type:		REG_SZ


vuln_id: V-220923
rule_id: SV-220923r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C727B8F0E8A8C71CA56259690EAC8B0994E0B55A
  ~~~~~
  'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is Enabled: (10 or less)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  Value Name:	CachedLogonsCount
  Value:		10
  Type:		REG_SZ


vuln_id: V-220924
rule_id: SV-220924r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 2CAAC2074B82986A1F2C53818B9A189E05AD0251
  ~~~~~
  'Interactive logon: Smart card removal behavior' is Lock Workstation or Force Logoff

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  Value Name:	SCRemoveOption
  Value:		1
  Type:		REG_SZ


vuln_id: V-220925
rule_id: SV-220925r958908_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C5A49E1CFD30A72F3C940AB429BAFD8E14AE6618
  ~~~~~
  'Microsoft network client: Digitally sign communications (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters
  Value Name:	RequireSecuritySignature
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220926
rule_id: SV-220926r987796_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C2C6D190B20781C6F7D78C96826F328EC59F9E7B
  ~~~~~
  'Microsoft network client: Send unencrypted password to third-party SMB servers' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters
  Value Name:	EnablePlainTextPassword
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220927
rule_id: SV-220927r958908_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: BD9225A28377EF999965AC233E0FD3FA86018149
  ~~~~~
  'Microsoft network server: Digitally sign communications (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
  Value Name:	RequireSecuritySignature
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220928
rule_id: SV-220928r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: A51800A7EB71E8DB49CCE183B779719692119D7F
  ~~~~~
  'Network access: Allow anonymous SID/Name translation' is Disabled

  LSAAnonymousNameLookup: 0


vuln_id: V-220929
rule_id: SV-220929r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 2870C547CA5060B258B072ED5120B1CF7E989A0E
  ~~~~~
  'Network access: Do not allow anonymous enumeration of SAM accounts' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	RestrictAnonymousSAM
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220930
rule_id: SV-220930r1137695_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 1051CF51ECBB5E3283B3A4B53296BE7627D31DDD
  ~~~~~
  'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	RestrictAnonymous
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220931
rule_id: SV-220931r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: F31069CC046E2D2CBDAD2721CFEC8E714042ED08
  ~~~~~
  'Network access: Let Everyone permissions apply to anonymous users' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	EveryoneIncludesAnonymous
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220932
rule_id: SV-220932r1137695_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 19F7DCB438329890D8ED0ADB49701F95E47913B7
  ~~~~~
  'Network access: Restrict anonymous access to Named Pipes and Shares' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
  Value Name:	RestrictNullSessAccess
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220933
rule_id: SV-220933r1081053_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 7841756A49417E5B640EE51E3343CCEDE3E6FD7F
  ~~~~~
  'Network access: Restrict clients allowed to make remote calls to SAM' is Configured

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	RestrictRemoteSAM
  Value:		O:BAG:BAD:(A;;RC;;;BA)
  Type:		REG_SZ


vuln_id: V-220934
rule_id: SV-220934r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: E93E254994B885B4BF73196B1C654A88D7A1CFB2
  ~~~~~
  'Network security: Allow LocalSystem NULL session fallback' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\LSA\MSV1_0
  Value Name:	allownullsessionfallback
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220935
rule_id: SV-220935r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 1961C65D62E439DD994746E878FF5E58B7D0E689
  ~~~~~
  'Network security: Allow PKU2U authentication requests to this computer to use online identities' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\LSA\pku2u
  Value Name:	AllowOnlineID
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220936
rule_id: SV-220936r971535_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: FA8A28E5C7305C47B185A011067CD50419C4016B
  ~~~~~
  'Network security: Configure encryption types allowed for Kerberos' is Enabled: (AES128_HMAC_SHA1, AES256_HMAC_SHA1, and Future encryption types)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters
  Value Name:	SupportedEncryptionTypes
  Value:		0x7ffffff8 (2147483640)
  Type:		REG_DWORD


vuln_id: V-220937
rule_id: SV-220937r1051034_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: CC740FB3C2FC52E2AA528E6AB393D9E2FB79E3B5
  ~~~~~
  'Network security: Do not store LAN Manager hash value on next password change' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	NoLMHash
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220938
rule_id: SV-220938r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 2DB6BD8F09ADE45E5C4D9B0B24BFDBF70E5F49E5
  ~~~~~
  'Network security: LAN Manager authentication level' is Send NTLMv2 response only. Refuse LM & NTLM

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	LmCompatibilityLevel
  Value:		0x00000005 (5)
  Type:		REG_DWORD


vuln_id: V-220939
rule_id: SV-220939r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: CA96098204159CD21A974ACB15E4D5505B387F91
  ~~~~~
  'Network security: LDAP client signing requirements' is Negotiate signing

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LDAP
  Value Name:	LDAPClientIntegrity
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220940
rule_id: SV-220940r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C175B6A8BA1223684134D0E2E59E6F7B89B1A067
  ~~~~~
  'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is 'Require NTLMv2 session security' and 'Require 128-bit encryption'

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
  Value Name:	NTLMMinClientSec
  Value:		0x20080000 (537395200)
  Type:		REG_DWORD


vuln_id: V-220941
rule_id: SV-220941r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: C1CD32DB87A556AACC0477A01420E1F740E4BE43
  ~~~~~
  'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is 'Require NTLMv2 session security' and 'Require 128-bit encryption'

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
  Value Name:	NTLMMinServerSec
  Value:		0x20080000 (537395200)
  Type:		REG_DWORD


vuln_id: V-220942
rule_id: SV-220942r1137699_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 1CA705ED667092D89BECAE6AA40B0489C62A8841
  ~~~~~
  'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy
  Value Name:	Enabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220943
rule_id: SV-220943r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 0383A2D7E4FA7F9B6839578C9365C007DDDD1BA2
  ~~~~~
  'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic links)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager
  Value Name:	ProtectionMode
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220944
rule_id: SV-220944r1051035_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 21BF47E4A5506372B793739D85C957AB1A09D4F2
  ~~~~~
  'User Account Control: Admin Approval Mode for the Built-in Administrator account' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	FilterAdministratorToken
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220945
rule_id: SV-220945r958518_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: E735EC6F33A1169D2A60002C3D8D2515CA86CBC1
  ~~~~~
  'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is 'Prompt for consent on the secure desktop'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	ConsentPromptBehaviorAdmin
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220947
rule_id: SV-220947r1051036_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 612DE6CC150D65A0C6EAECFD65EDF62CB3A9F23C
  ~~~~~
  'User Account Control: Behavior of the elevation prompt for standard users' is 'Automatically deny elevation requests'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	ConsentPromptBehaviorUser
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220948
rule_id: SV-220948r958518_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 5496C0668A8A09249300A7E7262DFD46DCBE43E5
  ~~~~~
  'User Account Control: Detect application installations and prompt for elevation' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	EnableInstallerDetection
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220949
rule_id: SV-220949r958518_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 64B2C322F7C84A280007770D70BF56965D15C96F
  ~~~~~
  'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	EnableSecureUIAPaths
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220950
rule_id: SV-220950r1051037_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 2D70777D40743C5DBAB3D4DBE4BAFBCFC27BCC28
  ~~~~~
  'User Account Control: Run all administrators in Admin Approval Mode' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	EnableLUA
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220951
rule_id: SV-220951r958518_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: FD7CB37316D10F1E3FED0BDCD0202F2A5CEAD796
  ~~~~~
  'User Account Control: Virtualize file and registry write failures to per-user locations' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	EnableVirtualization
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220952
rule_id: SV-220952r1051038_rule
status: Open
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be OPEN on 12/17/2025
  ResultHash: AC0D171FAF15B3E83FED29B6E76237F554D99095
  ~~~~~
  Enabled local administrator accounts with a password older than 60 days:
  ---------------------------
  Account:			AMPerl.IAAdmin
  SID:				S-1-5-21-4163428051-2768110797-3591193048-1018
  Enabled:			True
  Password Last Set:	06/08/2023 23:58:46 (922 days ago)

  Account:			dod_admin
  SID:				S-1-5-21-4163428051-2768110797-3591193048-1001
  Enabled:			True
  Password Last Set:	01/27/2022 19:37:24 (1420 days ago)

  Account:			jtbegarek.iaadmin
  SID:				S-1-5-21-4163428051-2768110797-3591193048-1024
  Enabled:			True
  Password Last Set:	08/20/2025 14:40:01 (119 days ago)

  Account:			Scan.Admin
  SID:				S-1-5-21-4163428051-2768110797-3591193048-1016
  Enabled:			True
  Password Last Set:	03/05/2024 16:43:42 (652 days ago)

  Account:			tljones.iaadmin
  SID:				S-1-5-21-4163428051-2768110797-3591193048-1023
  Enabled:			True
  Password Last Set:	04/17/2025 19:19:53 (244 days ago)


  LAPS Configuration:
  ---------------------------
  Policy Name:	Password Settings | Password Complexity
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordComplexity
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]

  Policy Name:	Password Settings | Password Length
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordLength
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]

  Policy Name:	Password Settings | PasswordAge (Days)
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordAgeDays
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]


vuln_id: V-220954
rule_id: SV-220954r958478_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89108\Scan.Admin
  UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016
  ResultHash: 682F3C26FA3E45B02382214B8E1C03EAF6E80E8C
  ~~~~~
  'Turn off toast notifications on the lock screen' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications
  Value Name:	NoToastApplicationNotificationOnLockScreen
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220955
rule_id: SV-220955r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89108\Scan.Admin
  UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016
  ResultHash: E1E8733E0EB898F9D2EF428AC96620439C92F3E6
  ~~~~~
  'Do not preserve zone information in file attachments' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
  Value Name:	SaveZoneInformation (Not found)


vuln_id: V-220956
rule_id: SV-220956r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 87F79F66720D9E2E7AA2D4F0BD4E49B75FB81A54
  ~~~~~
  Access Credential Manager as a trusted caller:

  No objects assigned to this right.


vuln_id: V-220957
rule_id: SV-220957r1137691_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: E98EF1C3AADF7AF43B5A4A99EEC37235E343282B
  ~~~~~
  Access this computer from the network:

  BUILTIN\Administrators
  BUILTIN\Remote Desktop Users


vuln_id: V-220958
rule_id: SV-220958r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: FE3BC21CE05FC8AF06B5779CBF8444CACC0434C3
  ~~~~~
  Act as part of the operating system:

  No objects assigned to this right.


vuln_id: V-220959
rule_id: SV-220959r1137691_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: F48790F3B781A7406A6B4E00D9AD0AAB7E2F399C
  ~~~~~
  Allow log on locally:

  BUILTIN\Administrators
  BUILTIN\Users


vuln_id: V-220960
rule_id: SV-220960r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: FE97405F6D28A745E95E87B5555D354412968910
  ~~~~~
  Back up files and directories:

  BUILTIN\Administrators


vuln_id: V-220961
rule_id: SV-220961r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 636C8684B90F7F0155FAFD92359E722DCC949E95
  ~~~~~
  Change the system time:

  BUILTIN\Administrators
  NT AUTHORITY\LOCAL SERVICE
  NT SERVICE\autotimesvc


vuln_id: V-220962
rule_id: SV-220962r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 392F23BFEA1FFA843FBED2A87296251BF545F4E6
  ~~~~~
  Create a pagefile:

  BUILTIN\Administrators


vuln_id: V-220963
rule_id: SV-220963r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: DC364635E02E4550D6A89063BCA91A5342767023
  ~~~~~
  Create a token object:

  No objects assigned to this right.


vuln_id: V-220964
rule_id: SV-220964r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 1B5B4C099509D3018C425654D2D4FB7E1B14B154
  ~~~~~
  Create global objects:

  BUILTIN\Administrators
  NT AUTHORITY\LOCAL SERVICE
  NT AUTHORITY\NETWORK SERVICE
  NT AUTHORITY\SERVICE


vuln_id: V-220965
rule_id: SV-220965r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 9E9F312FE6D327D0F8B24DB218DD2C4C9713AAB7
  ~~~~~
  Create permanent shared objects:

  No objects assigned to this right.


vuln_id: V-220966
rule_id: SV-220966r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 3CD4E9016C9F359F5DA68C3C0F6C5C9FA18CC580
  ~~~~~
  Create symbolic links:

  BUILTIN\Administrators


vuln_id: V-220967
rule_id: SV-220967r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: AAF881443B1EF7292F901DB868FAA5B091A864F8
  ~~~~~
  Debug Programs:

  BUILTIN\Administrators


vuln_id: V-220968
rule_id: SV-220968r1137691_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 8968392459B797835F9CDB0E84E61A2D858F67D2
  ~~~~~
  Deny access to this computer from the network:

  BUILTIN\Guests


vuln_id: V-220971
rule_id: SV-220971r1137691_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: D42DF0ECC417CB415089564874B6907BEB79128C
  ~~~~~
  Deny log on locally:

  BUILTIN\Guests


vuln_id: V-220972
rule_id: SV-220972r1137691_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 9710F86B1963CAAA2C9429B687B5B8F0CFCE9509
  ~~~~~
  Deny log on through Remote Desktop Services:

  BUILTIN\Guests


vuln_id: V-220973
rule_id: SV-220973r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 6386CA45E70EAC022EEE395ACF120AD858947656
  ~~~~~
  Enable computer and user accounts to be trusted for delegation:

  No objects assigned to this right.


vuln_id: V-220974
rule_id: SV-220974r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: B79C184446E73079F465BE23CEE82A18CF0870A8
  ~~~~~
  Force shutdown from a remote system:

  BUILTIN\Administrators


vuln_id: V-220975
rule_id: SV-220975r1138519_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 3BB4559735E48794BD8165BD31FB3B91B5C97D70
  ~~~~~
  Impersonate a client after authentication:

  BUILTIN\Administrators
  NT AUTHORITY\LOCAL SERVICE
  NT AUTHORITY\NETWORK SERVICE
  NT AUTHORITY\SERVICE


vuln_id: V-220976
rule_id: SV-220976r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 59F1C37C37F91193AA2671D4DEFF065B9A2BCA05
  ~~~~~
  Load and unload device drivers:

  BUILTIN\Administrators


vuln_id: V-220977
rule_id: SV-220977r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: AA88E2DBE75A77500E026C0631E31EB834CB2521
  ~~~~~
  Lock pages in memory:

  No objects assigned to this right.


vuln_id: V-220978
rule_id: SV-220978r958434_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: F506B79F7BAE0B4B9C26A872BD506286097A5492
  ~~~~~
  Manage auditing and security log:

  BUILTIN\Administrators


vuln_id: V-220979
rule_id: SV-220979r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 17C44C7943BC8AAB7D21F72E23CEC41AFE1A9F0C
  ~~~~~
  Modify firmware environment values:

  BUILTIN\Administrators


vuln_id: V-220980
rule_id: SV-220980r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: CF44D7B584EFD68DFC4D843B21D491E2F6848B64
  ~~~~~
  Perform volume maintenance tasks:

  BUILTIN\Administrators


vuln_id: V-220981
rule_id: SV-220981r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 15D359836034C5F1C910175CB6D5F67772067F27
  ~~~~~
  Profile single process:

  BUILTIN\Administrators


vuln_id: V-220982
rule_id: SV-220982r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: F888137124F8E9A99188DF6656EBE43CAAE52E7E
  ~~~~~
  Restore files and directories:

  BUILTIN\Administrators


vuln_id: V-220983
rule_id: SV-220983r958726_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 2EE38D6B4E98B44453F4F74A2761EDEB80FBC3B1
  ~~~~~
  Take ownership of files or other objects:

  BUILTIN\Administrators


vuln_id: V-252896
rule_id: SV-252896r958420_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: A45EAC4E3D6C6E7C671383D89AAE41F94F46804D
  ~~~~~
  'Turn on PowerShell Transcription' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription
  Value Name:	EnableTranscripting
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-252903
rule_id: SV-252903r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 6771B96D1ED1098549965ED8F67FF9028082CC2A
  ~~~~~
  SecurityServicesRunning:		1, 2


vuln_id: V-256894
rule_id: SV-256894r958552_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 20084BF752FA10BB981D8B6E81803EB2C45CEE3E
  ~~~~~
  Internet Explorer is supported on Windows 10 Enterprise LTSC 2021


  Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge


vuln_id: V-257593
rule_id: SV-257593r991589_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 4CDF0FBA2C490925B122D87AB28B4AB248337262
  ~~~~~
  'HKLM:\SYSTEM\CurrentControlSet\Services\PortProxy\v4tov4\tcp' does not exist

  'netsh interface portproxy show all' returned no output


vuln_id: V-268315
rule_id: SV-268315r1135269_rule
status: NotAFinding
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: D106FB820932416BA8165EF9D232122A8ADE4A4B
  ~~~~~
  Microsoft.copilot not found


vuln_id: V-278918
rule_id: SV-278918r1135272_rule
status: Open
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be OPEN on 12/17/2025
  ResultHash: 986E2AA371EE57C0BE58CB7A9BFDD5C0FC13FA58
  ~~~~~
  File System:	No Auditing


vuln_id: V-278920
rule_id: SV-278920r1135278_rule
status: Open
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be OPEN on 12/17/2025
  ResultHash: E3BC58368C7E0501CABAF5E7042609D91BD6A6A9
  ~~~~~
  Handle Manipulation:	No Auditing


vuln_id: V-278922
rule_id: SV-278922r1135284_rule
status: Open
hostname: MONT-SW-89108
host_ip: 22.19.120.22
workflow_status: Open
created_at: 2026-03-04 20:25:16
updated_at: 2026-03-04 20:25:16
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be OPEN on 12/17/2025
  ResultHash: 699C432E6583CB6CD672333388C153C260362A53
  ~~~~~
  Registry:	No Auditing


vuln_id: V-213190
rule_id: SV-213190r400378_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:41
updated_at: 2026-03-04 20:25:41
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: E839D7AAC582DE5CBE62156A6875B34511E7E917
  ~~~~~
  'Load trusted certificates from an Adobe EUTL server' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Adobe\Acrobat Reader\DC\Security\cDigSig\cEUTLDownload
  Value Name:	bLoadSettingsFromURL
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-213191
rule_id: SV-213191r400378_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:41
updated_at: 2026-03-04 20:25:41
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 5A32004519F673542B903436368A624D4E149DFD
  ~~~~~
  'Load trusted certificates from an Adobe AATL server' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Adobe\Acrobat Reader\DC\Security\cDigSig\cAdobeDownload
  Value Name:	bLoadSettingsFromURL
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-213193
rule_id: SV-213193r400876_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:41
updated_at: 2026-03-04 20:25:41
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 0953BC0DDDE64D9D7383C59DA5A8B777988C2D35
  ~~~~~
  'Enable FIPS' is NOT Enabled

  Registry Path:	HKCU:\SOFTWARE\Adobe\Acrobat Reader\DC\AVGeneral
  Value Name:	bFIPSMode (Not found)


vuln_id: V-251550
rule_id: SV-251550r961194_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:41
updated_at: 2026-03-04 20:25:41
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: FDD7EC120C3A7E53B1B2F0B1FE803C005523274E
  ~~~~~
  None of the extensions in question are configured.


vuln_id: V-251560
rule_id: SV-251560r1067559_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:41
updated_at: 2026-03-04 20:25:41
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025
  ResultHash: 6B698F8C848148C6B07A5D38E6DD2B7AECD543CC
  ~~~~~
  'Import Enterprise Roots' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Certificates
  Name:	ImportEnterpriseRoots
  Value:	0x00000001 (1)
  Type:	REG_DWORD


  Subject:		CN=NSS Root CA 4, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	D753369F16C2CF15A9647AAE4F6E2B40E4A28242
  NotAfter:		10/11/2041 13:47:15

  Subject:		CN=NSS Root CA 5, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	7232A47EB4B80CE23A2A3C3799CCAE0D67B0F143
  NotAfter:		09/25/2048 15:12:12

  Subject:		CN=NSS Root CA 1, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	4D96A58E74C1D5EC06C018459C3DDE71C0DBEF41
  NotAfter:		11/28/2029 22:06:38

  Subject:		CN=NSS Root CA 2, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	3CEE89598C90AA6F5A3B75FB03E94E111D75B5D9
  NotAfter:		10/20/2030 13:29:50


vuln_id: V-223122
rule_id: SV-223122r879587_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B
  ~~~~~
  'Disable AutoComplete for forms' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	Use FormSuggest
  Value:		no
  Type:		REG_SZ


vuln_id: V-223124
rule_id: SV-223124r879587_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE
  ~~~~~
  'Turn on the auto-complete feature for user names and passwords on forms' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	FormSuggest Passwords
  Value:		no
  Type:		REG_SZ

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	FormSuggest PW Ask
  Value:		no
  Type:		REG_SZ


vuln_id: V-223280
rule_id: SV-223280r961050_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: AB82DA94F817279F4C1E1EE501914F339AF03BC7
  ~~~~~
  'Block macros from running in Office files from the Internet' is NOT Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\access\security
  Value Name:	blockcontentexecutionfrominternet (Not found)


vuln_id: V-223281
rule_id: SV-223281r1016166_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 29FDB6AA469A6985C7CE97F46AE1FBD37871E6B2
  ~~~~~
  'Trust Center Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\access\security
  Value Name:	NoTBPromptUnsignedAddin
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223282
rule_id: SV-223282r1082349_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: D77C2E82A7D572EAD04E7C6040314D3C5652C6B1
  ~~~~~
  'VBA Macro Notification Settings' is Enabled: (Disable all except digitally signed macros)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\access\security
  Value Name:	vbawarnings
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223284
rule_id: SV-223284r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 768CBCFE1F018055B3389A766B3AF7F113FA43CC
  ~~~~~
  'Macro Runtime Scan Scope' is Enabled: (Enable for all documents)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security
  Value Name:	macroruntimescanscope
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223285
rule_id: SV-223285r1067544_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: B16ADE515E363F887C68C49630239CB917515255
  ~~~~~
  'Protect document metadata for rights managed Office Open XML Files' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security
  Value Name:	DRMEncryptProperty
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223286
rule_id: SV-223286r960963_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: B95BF163F165A17CDF6801AB61F6271A2B2BFEE6
  ~~~~~
  'Disable the Office client from polling the SharePoint Server for published links' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\portal
  Value Name:	linkpublishingdisabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223287
rule_id: SV-223287r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 784F7F3F487B6D1C548011727F63550D6130E993
  ~~~~~
  'Disable UI extending from documents and templates' is Enabled: (Disallow in Word; Excel; PowerPoint; Access; Outlook; Publisher; Project; Visio; InfoPath)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\access
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\excel
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\infopath
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\outlook
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\powerpoint
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\project
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\publisher
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\visio
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\word
  Value Name:	noextensibilitycustomizationfromdocument
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223288
rule_id: SV-223288r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: F514C7A140197E88FA4A733F7619DC87B196355D
  ~~~~~
  'ActiveX Control Initialization' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\Common\Security
  Value Name:	UFIControls (Not found)


vuln_id: V-223289
rule_id: SV-223289r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 9E43BB267DC28C5D3914CBFBB29691C47779E3B8
  ~~~~~
  'Automation Security' is Enabled: (Use application macro security level)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\Common\Security
  Value Name:	AutomationSecurity
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223290
rule_id: SV-223290r1016167_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: CE9FC3D125AF67B46A61CA1175F8B8EDA6E2715A
  ~~~~~
  'Disable all Trust Bar notifications for security issues' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\trustcenter
  Value Name:	trustbar
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223291
rule_id: SV-223291r961128_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 51F7F04A8BE8E239EFB2FA6988635FFCEAD49DBD
  ~~~~~
  'Encryption type for password protected Office 97-2003 files' is Enabled: (Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security
  Value Name:	defaultencryption12
  Value:		Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256
  Type:		REG_SZ


vuln_id: V-223292
rule_id: SV-223292r961128_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 6F7CCD4C1C3077DDF7BE01E2AC1772ADE732C237
  ~~~~~
  'Encryption type for password protected Office Open XML files' is Enabled: (Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security
  Value Name:	OpenXMLEncryption
  Value:		Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256
  Type:		REG_SZ


vuln_id: V-223293
rule_id: SV-223293r961353_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: C6978785DAA1AD95595D1AF476BB273878619C61
  ~~~~~
  'Allow mix of policy and user locations' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security\trusted locations
  Value Name:	allow user locations
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223294
rule_id: SV-223294r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: F127074E69D3A14AB4B225A7DF706EEC2774F2CA
  ~~~~~
  'Disable Smart Document's use of manifests' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\common\smart tag
  Value Name:	neverloadmanifests
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223295
rule_id: SV-223295r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 852DF74195C553BD82F48E32096BAA7BD65C16F8
  ~~~~~
  'Load Controls in Forms3' is Enabled: (1)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\vba\security
  Value Name:	LoadControlsInForms
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223310
rule_id: SV-223310r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: DEFCEA87A8A5B389D339BBC920A5DA25BB3907AB
  ~~~~~
  'Allow Trusted Locations on the network' is Disabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\trusted locations
  Value Name:	AllowNetworkLocations
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223311
rule_id: SV-223311r960963_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 48A820BC171F3156C77314E945A7A64A74F38DF5
  ~~~~~
  'VBA macro Notification Settings' is NOT Enabled: (Disable all except digitally signed macros)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	vbawarnings
  Value:		0x00000002 (2) [Expected 3 or 4]
  Type:		REG_DWORD


vuln_id: V-223312
rule_id: SV-223312r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 7E5731CF8FADBD0CC47863F2C22FB5DF1D2C87AA
  ~~~~~
  'Don't allow Dynamic Data Exchange (DDE) server launch in Excel' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\external content
  Value Name:	disableddeserverlaunch
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223313
rule_id: SV-223313r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: BE57798F42D253F153AD001AB441542E642D655C
  ~~~~~
  'Don't allow Dynamic Data Exchange (DDE) server lookup in Excel' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\external content
  Value Name:	disableddeserverlookup
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223314
rule_id: SV-223314r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: DECF55378D8719B588E3CDA5894EB38147D19316
  ~~~~~
  'File Block Settings 'dBase III / IV files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	DBaseFiles
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223315
rule_id: SV-223315r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: FBC0D56C700FFB903ADC7A9ED287D4BB73291E20
  ~~~~~
  'File Block Settings 'Dif and Sylk files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	DifandSylkFiles
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223316
rule_id: SV-223316r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 3116058A6B0F8D8D95EAB3DF266CF83483CA588E
  ~~~~~
  'File Block Settings 'Excel 2 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL2Macros
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223317
rule_id: SV-223317r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: B3CE734FFF7595C84E86A74BDCF0429EE5C1F1FF
  ~~~~~
  'File Block Settings 'Excel 2 worksheets'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL2Worksheets
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223318
rule_id: SV-223318r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 46A4AB4E4DA37377FC1E451A93D2BE0EE23387F5
  ~~~~~
  'File Block Settings 'Excel 3 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL3Macros
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223319
rule_id: SV-223319r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 81F7AAD3FDB684E4695F0023AF17D045E2CC1352
  ~~~~~
  'File Block Settings 'Excel 3 worksheets'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL3Worksheets
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223320
rule_id: SV-223320r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 63D656E47CB2C86266E4168A813F39EBF395431D
  ~~~~~
  'File Block Settings 'Excel 4 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL4Macros
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223321
rule_id: SV-223321r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 7815F4D54101C05228C50E827DA80EA38B788FB3
  ~~~~~
  'File Block Settings 'Excel 4 workbooks'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL4Workbooks
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223322
rule_id: SV-223322r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 90766A0824F54F709EA3F9AEF207A1A0EACD1C86
  ~~~~~
  'File Block Settings 'Excel 4 worksheets'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL4Worksheets
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223323
rule_id: SV-223323r961086_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: D77698ED1B5C3707DA52B927D395C22DB9837D59
  ~~~~~
  'File Block Settings 'Excel 95 workbooks'' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	xl95workbooks
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223324
rule_id: SV-223324r961086_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 5EDA40DF7442F8EE58DD271634EBB6778E874824
  ~~~~~
  'File Block Settings 'Excel 95-97 workbooks and templates'' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL9597WorkbooksandTemplates
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223325
rule_id: SV-223325r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: D0485CE242052AC17400AF8FE202DB5C96018023
  ~~~~~
  'File Block Settings 'Set default file block behavior'' is Enabled: (Blocked files are not opened)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	OpenInProtectedView
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223326
rule_id: SV-223326r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: C2A4A1AD6E6E8AAA46F7BEB4F9466CCAAE42DC52
  ~~~~~
  'File Block Settings 'Web pages and Excel 2003 XML spreadsheets'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	htmlandxmlssfiles
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223327
rule_id: SV-223327r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 38E9424B5151905C332CC6086FBF9243B12F05C1
  ~~~~~
  'Do not show data extraction options when opening corrupt workbooks' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options
  Value Name:	extractdatadisableui
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223328
rule_id: SV-223328r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 4B807D2DE77E281652EE437DD97B6BAC3A7A158A
  ~~~~~
  'Ask to update automatic links' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options\binaryoptions
  Value Name:	fupdateext_78_1
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223329
rule_id: SV-223329r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: DF3BF350535AB271E12CE9517D7CA34A856BB161
  ~~~~~
  'Load pictures from Web pages not created in Excel' is Disabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\internet
  Value Name:	donotloadpictures
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223330
rule_id: SV-223330r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: E7D7F44EC3B02F0E69B6E9C88667CDF23EFFCC52
  ~~~~~
  'Disable AutoRepublish' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options
  Value Name:	disableautorepublish
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223331
rule_id: SV-223331r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 178EC8CC5CA91EFBA47AE02DCC74772127C42918
  ~~~~~
  'Do not show AutoRepublish warning alert' is Disabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options
  Value Name:	disableautorepublishwarning
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223332
rule_id: SV-223332r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 8143E19ADF5341F6856B7357273757628C5DBBD7
  ~~~~~
  'Force file extension to match file type' is Enabled: (Always match file type)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	extensionhardening
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223333
rule_id: SV-223333r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 4A8A6ADB8FF8213A02507287859103BF68B75A28
  ~~~~~
  'Scan encrypted macros in Excel Open XML workbooks' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	excelbypassencryptiedmacrosscan (Not found)


vuln_id: V-223334
rule_id: SV-223334r960921_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 356C43AFDCE812F3F52FCE137694D4C0412B5619
  ~~~~~
  'Turn off file validation' is Disabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\filevalidation
  Value Name:	enableonload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223335
rule_id: SV-223335r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: E69AD2F03D89C6FA7F30136921238A054AC8432F
  ~~~~~
  'WEBSERVICE Function Notification Settings' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	webservicefunctionwarnings (Not found)


vuln_id: V-223336
rule_id: SV-223336r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 692AE32D3A24A5BA3708E204CB2F7BEB71F545C4
  ~~~~~
  'Block macros from running in Office files from the Internet' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	blockcontentexecutionfrominternet
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223337
rule_id: SV-223337r1016168_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: F817384CE827CB917128598CDEAA0ADD551A6F2F
  ~~~~~
  'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	notbpromptunsignedaddin
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223338
rule_id: SV-223338r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 465D4554F71A21FF379FD446BE2CE014BBF89B24
  ~~~~~
  'Always prevent untrusted Microsoft Query files from opening' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\office\16.0\excel\security\external content
  Value Name:	enableblockunsecurequeryfiles
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223339
rule_id: SV-223339r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 451A8A8DE1883B7E90DDA37CFD83733B657FC7CA
  ~~~~~
  'Always open untrusted database files in Protected View' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\protectedview
  Value Name:	enabledatabasefileprotectedview
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223340
rule_id: SV-223340r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: B6AA2152314FB34DED4299BFBEDA6D97F6807915
  ~~~~~
  'Do not open files from the Internet zone in Protected View' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview
  Value Name:	DisableInternetFilesInPV (Not found)


vuln_id: V-223341
rule_id: SV-223341r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: BCFE5FE673BE81F769F3AAF0E44CA3793770E95B
  ~~~~~
  'Do not open files in unsafe locations in Protected View' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview
  Value Name:	DisableUnsafeLocationsInPV (Not found)


vuln_id: V-223342
rule_id: SV-223342r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 0F2DB70326C00FF2291AC4E7E39EFE13737F92B2
  ~~~~~
  'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation
  Value Name:	openinprotectedview (Not found)

  'Allow edit' is Unchecked

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation
  Value Name:	DisableEditFromPV
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223343
rule_id: SV-223343r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 9E35868F505D9B7EF044EBFCB7555F859E5B5B90
  ~~~~~
  'Turn off Protected View for attachments opened from Outlook' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview
  Value Name:	DisableAttachmentsInPV
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223346
rule_id: SV-223346r961878_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: F5146E0EF9944223703A266026E50833A4D2EC0C
  ~~~~~
  'Authentication with Exchange Server' is Enabled: (Kerberos Password Authentication)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	authenticationservice
  Value:		0x00000010 (16)
  Type:		REG_DWORD


vuln_id: V-223347
rule_id: SV-223347r961878_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: EF59F7F2C0DEA9CFFCA75EE400AD4C269DD9219A
  ~~~~~
  'Enable RPC encryption' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\rpc
  Value Name:	enablerpcencryption
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223348
rule_id: SV-223348r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 8737D2D54EDB3BA99D8A042A10119FA417273A4D
  ~~~~~
  'Do not allow Outlook object model scripts to run for public folders' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	publicfolderscript
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223349
rule_id: SV-223349r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 622BD34DC9C64608D57450FEDFFBF1A97B714E49
  ~~~~~
  'Do not allow Outlook object model scripts to run for shared folders' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	sharedfolderscript
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223350
rule_id: SV-223350r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 242B02494150CC39BF63097E5D403F333F085943
  ~~~~~
  'Use Unicode format when dragging e-mail message to file system' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\options\general
  Value Name:	msgformat
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223351
rule_id: SV-223351r961863_rule
status: Not_Reviewed
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) was unable to determine a Status but found the below configuration on 12/17/2025:
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 4ECDFC11B01678DA255D83E3F9F6252837EE5E3B
  ~~~~~
  'Junk E-mail protection level' is Configured

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail
  Value Name:	junkmailprotection
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-223352
rule_id: SV-223352r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: F97A99C3426D2D49F21F519E1B129732C7A8E58B
  ~~~~~
  'Allow Active X One Off Forms' is Enabled: (Load only Outlook Controls)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	allowactivexoneoffforms
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223353
rule_id: SV-223353r961353_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 2A344EC8276D81EF338D1902160D3ECE70AC9FD2
  ~~~~~
  'Prevent users from customizing attachment security settings' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook
  Value Name:	disallowattachmentcustomization
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223354
rule_id: SV-223354r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 479E6BC429BD5183B6CAC013D30CFF3C91847FB7
  ~~~~~
  'Include Internet in Safe Zones for Automatic Picture Download' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail
  Value Name:	Internet
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223355
rule_id: SV-223355r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: CEBE73FDC6FC575984344165FB6A5855AEEE410D
  ~~~~~
  'Do not display 'Publish to GAL' button' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	publishtogaldisabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223356
rule_id: SV-223356r1117184_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 51ED0C30D17751569A3D7290804A7CAA73AD9153
  ~~~~~
  'Minimum encryption settings' is Enabled: (Minimum key size (in bits) of '168')

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	minenckey
  Value:		0x000000a8 (168)
  Type:		REG_DWORD


vuln_id: V-223357
rule_id: SV-223357r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: E2C9F73B190E6B29BBEABEB8CFD74A547C3BDC99
  ~~~~~
  'Signature Warning' is Enabled: (Always warn about invalid signatures)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	warnaboutinvalid
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223358
rule_id: SV-223358r961893_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: CAC0862021F1CE3A46BC12E6271CF73E336D0607
  ~~~~~
  'Retrieving CRLs (Certificate Revocation Lists)' is Enabled: (When online always retrieve the CRL)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	usecrlchasing
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223359
rule_id: SV-223359r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 4D4C911F63DBC37FCEB01E849C424D2B113902D8
  ~~~~~
  'Outlook Security Mode' is Enabled: (Use Outlook Security Group Policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	adminsecuritymode
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-223360
rule_id: SV-223360r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: C9A6531D5B24CFC7619806A6D6E425E1B680E1C0
  ~~~~~
  'Allow users to demote attachments to Level 2' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	allowuserstolowerattachments
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223361
rule_id: SV-223361r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 41D7B63741915C9E849790348F78AD30C2F00495
  ~~~~~
  'Display Level 1 attachments' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	ShowLevel1Attach
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223362
rule_id: SV-223362r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 1605A8C1612A87BB82172E813DF11582FC593FEA
  ~~~~~
  'Remove file extensions blocked as Level 1' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security
  Value Name:	FileExtensionsRemoveLevel1 (Not found)


vuln_id: V-223363
rule_id: SV-223363r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 3359150706AEEC6955B2715BFA52F9775C1CA2BD
  ~~~~~
  'Remove file extensions blocked as Level 2' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security
  Value Name:	FileExtensionsRemoveLevel2 (Not found)


vuln_id: V-223364
rule_id: SV-223364r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 290D06434BADE923ADB9DC85373178CF4C655DAB
  ~~~~~
  'Allow scripts in one-off Outlook forms' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	EnableOneOffFormScripts
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223365
rule_id: SV-223365r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 398F7E965D7BC484A4CD6F3387B9795EF5C41C77
  ~~~~~
  'Set Outlook object model custom actions execution prompt' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomcustomaction
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223366
rule_id: SV-223366r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: BE00F145FB5044FC89C319331CAB046BE75AF3FD
  ~~~~~
  'Outlook object model prompt when accessing an address book' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomaddressbookaccess
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223367
rule_id: SV-223367r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: A908F49CE8BF06C0F75AA12A391B3BBA9762360A
  ~~~~~
  'Outlook object model prompt When accessing the Formula property of a UserProperty object' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	PromptOOMFormulaAccess
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223368
rule_id: SV-223368r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 9C78D999BA6E5112B4E4D97A061B1FCE35F60679
  ~~~~~
  'Outlook object model prompt when executing Save As' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomsaveas
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223369
rule_id: SV-223369r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 3CFB873AE566BCAC8E36564818ADB7A294FAE277
  ~~~~~
  'Outlook object model prompt when reading address information' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomaddressinformationaccess
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223370
rule_id: SV-223370r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 72C51A7F58C34C6EBDDD6FA26A7CB1B7B5E133BD
  ~~~~~
  'Outlook object model prompt when responding to meeting and task requests' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoommeetingtaskrequestresponse
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223371
rule_id: SV-223371r961779_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 2C19FE71BBCBB36E69ED3E54BB68EAEEA6933047
  ~~~~~
  'Outlook object model prompt when sending mail' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomsend
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223372
rule_id: SV-223372r961863_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 7899972D544A1715F338A25915043E9AB0865973
  ~~~~~
  'Allow hyperlinks in suspected phishing e-mail messages' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail
  Value Name:	JunkMailEnableLinks
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223373
rule_id: SV-223373r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 7ED0DA3544783F504B21115FD198091895C26189
  ~~~~~
  'Security setting for macros' is Enabled: (Warn for signed, disable unsigned)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	level
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-223377
rule_id: SV-223377r960963_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 695C01367D613236A11E98AF3F14EBE486C3A0E3
  ~~~~~
  'VBA Macro Notification Settings' is NOT Enabled: (Disable all except digitally signed macros)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	vbawarnings
  Value:		0x00000002 (2) [Expected 3 or 4]
  Type:		REG_DWORD


vuln_id: V-223378
rule_id: SV-223378r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 525EFBF4AB77188A48309CBF94931FAA450BE955
  ~~~~~
  'Run Programs' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	runprograms (Not found)


vuln_id: V-223379
rule_id: SV-223379r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 534BAD649726BDDAAA64EF44A60E4BC01148139E
  ~~~~~
  'PowerPoint 97-2003 presentations, shows, templates and add-in files' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\fileblock
  Value Name:	binaryfiles
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223380
rule_id: SV-223380r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 8E6D05A91EA21B699B7F2E127CEE9EFFE121FD17
  ~~~~~
  'Set default file block behavior' is Enabled: (Blocked files are not opened)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\fileblock
  Value Name:	OpenInProtectedView
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223381
rule_id: SV-223381r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 09ECAE8B938CDF4FA7CE44E41813CC919D214580
  ~~~~~
  'Scan encrypted macros in PowerPoint Open XML presentations' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	PowerPointBypassEncryptedMacroScan (Not found)


vuln_id: V-223382
rule_id: SV-223382r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 16AC53ACBB077110A7706A36B2F8225940C52507
  ~~~~~
  'Turn off file validation' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\filevalidation
  Value Name:	EnableOnLoad
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223383
rule_id: SV-223383r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 6A6A1F901BBD1CCB0D135B69A91687FA4B221A1D
  ~~~~~
  'Block macros from running in Office files from the Internet' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	blockcontentexecutionfrominternet
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223384
rule_id: SV-223384r1016170_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 8E9AD38984331BBCCF41B6F26047D9B0D44BA994
  ~~~~~
  'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	notbpromptunsignedaddin
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223385
rule_id: SV-223385r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: BE55A58B56B838F4B022590398F738F64B293047
  ~~~~~
  'Do not open files from the Internet zone in Protected View' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview
  Value Name:	DisableInternetFilesInPV
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223386
rule_id: SV-223386r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: F7404C4ABF30188455B63AEF73DE7D9F116E0781
  ~~~~~
  'Turn off Protected View for attachments opened from Outlook' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview
  Value Name:	DisableAttachmentsInPV
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223387
rule_id: SV-223387r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 8391A90CCD9FBCC216AE4267890E8F2461F4A035
  ~~~~~
  'Do not open files in unsafe locations in Protected View' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview
  Value Name:	DisableUnsafeLocationsInPV
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223388
rule_id: SV-223388r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: BB83D4755F70C287AA859AE88C12B96B7FF2BFC6
  ~~~~~
  'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\PowerPoint\security\filevalidation
  Value Name:	openinprotectedview (Not found)

  'Allow edit' is Unchecked

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\PowerPoint\security\filevalidation
  Value Name:	DisableEditFromPV
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223389
rule_id: SV-223389r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 11BD6198BBF5C200317DDE1B3BDD0B2BAD40E7B7
  ~~~~~
  'Allow Trusted Locations on the network' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\trusted locations
  Value Name:	AllowNetworkLocations
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223400
rule_id: SV-223400r1016174_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 419843462258497497E74CA2D88F8C1397E5177D
  ~~~~~
  'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security
  Value Name:	notbpromptunsignedaddin
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223401
rule_id: SV-223401r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: D55AB693730EA180137BA4599159E0F027BB30CE
  ~~~~~
  'Disable Trust Bar Notification for unsigned application add-ins and block them' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security
  Value Name:	WordBypassEncryptedMacroScan (Not found)


vuln_id: V-223402
rule_id: SV-223402r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: EBE624DF2AC6F71FC8A51E45650999D315E29E2F
  ~~~~~
  'Do not open files from the Internet zone in Protected View' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview
  Value Name:	disableinternetfilesinpv (Not found)


vuln_id: V-223403
rule_id: SV-223403r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 39AA2D404B74630552087E659D06325198D6F18E
  ~~~~~
  'Do not open files in unsafe locations in Protected View' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview
  Value Name:	disableunsafelocationsinpv (Not found)


vuln_id: V-223404
rule_id: SV-223404r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 4033328D0BBF040F24B833322971B54DDF4C9A95
  ~~~~~
  'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Word\security\filevalidation
  Value Name:	openinprotectedview (Not found)

  'Allow edit' is Unchecked

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Word\security\filevalidation
  Value Name:	DisableEditFromPV
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223405
rule_id: SV-223405r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 940DE327C9C4C8A0F9E788225F66571E4D8AE626
  ~~~~~
  'Turn off Protected View for attachments opened from Outlook' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview
  Value Name:	disableattachmentsinpv
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223406
rule_id: SV-223406r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: E20BB652553112B9D779FDE6ED8A97ED1E0184AA
  ~~~~~
  'Set default file block behavior' is Enabled: (Blocked files are not opened)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	OpenInProtectedView
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223407
rule_id: SV-223407r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 4141B58403170F053F5229FED712713E27134056
  ~~~~~
  'Word 2 and earlier binary documents and templates' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	Word2Files
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223408
rule_id: SV-223408r961086_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 3E1FC09E630C472154972BE5932D3282C4DE9338
  ~~~~~
  'Word 2000 binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	Word2000Files
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223409
rule_id: SV-223409r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 9B013977DFDFD374D7B76CC5D2E657F3618E1DFB
  ~~~~~
  'Word 2003 binary documents and templates' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word2003files
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223410
rule_id: SV-223410r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: B4F304984F907991205776A823510156A2551FE2
  ~~~~~
  'Word 2007 and later binary documents and templates' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word2007files
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223411
rule_id: SV-223411r961086_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: F92AD76657B4329B2D90EBDC6818BB15D18D22F8
  ~~~~~
  'Word 6.0 binary documents and templates' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word60files
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223412
rule_id: SV-223412r961086_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: BE33D318390B449985D2AA79FB456B94ED9E1FF6
  ~~~~~
  'Word 95 binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word95files
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223413
rule_id: SV-223413r961086_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: E784D1DA5F97CBA1EE0BDA63B7D555DEAE2A907A
  ~~~~~
  'Word 97 binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word97files
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223414
rule_id: SV-223414r961086_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 80D92FA19465440D3073030D51C998AEF52B5FF7
  ~~~~~
  'Word XP binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	wordxpfiles
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223415
rule_id: SV-223415r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 261104A8EE4EA15039470FEA66E29686CA3193F4
  ~~~~~
  'Block macros from running in Office files from the Internet' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security
  Value Name:	blockcontentexecutionfrominternet
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223416
rule_id: SV-223416r961092_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: CC97687F7F423BC5EEA52DA559254FC2DE6015E3
  ~~~~~
  'Allow Trusted Locations on the network' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\trusted locations
  Value Name:	allownetworklocations
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223417
rule_id: SV-223417r960963_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 1EC453ABE6D5138768991EAE2D9DFC645C0DCD2C
  ~~~~~
  'VBA macro Notification Settings' is NOT Enabled: (Disable all except digitally signed macros)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security
  Value Name:	vbawarnings
  Value:		0x00000002 (2) [Expected 3 or 4]
  Type:		REG_DWORD


vuln_id: V-223418
rule_id: SV-223418r960921_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: F99D7556B8778BB1EF7F0E19536B564736FF1A35
  ~~~~~
  'Turn off file validation' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\filevalidation
  Value Name:	enableonload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-278355
rule_id: SV-278355r1152352_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: FA1B0546362AA5A11841448F5C8094D526A8E3AF
  ~~~~~
  'Configure the level of client software diagnostic data sent by Office to Microsoft' is NOT Enabled: (Neither)

  Registry Path:	HKCU:\software\policies\Microsoft\office\common\clienttelemetry
  Value Name:	SendTelemetry (Not found)


vuln_id: V-278356
rule_id: SV-278356r1130624_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 6F7990F7F777A79D28ABFA2FF2403D19ECB45A07
  ~~~~~
  'Allow the use of connected experiences in Office that analyze content' is NOT Disabled

  Registry Path:	HKCU:\software\policies\Microsoft\office\16.0\common\privacy
  Value Name:	UserContentDisabled (Not found)


vuln_id: V-278357
rule_id: SV-278357r1130627_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 6A7C17AC9A74BA064A69ABF59510B33FE6AA651E
  ~~~~~
  'Allow the use of connected experiences in Office that download online content' is NOT Disabled

  Registry Path:	HKCU:\software\policies\Microsoft\office\16.0\common\privacy
  Value Name:	DownloadContentDisabled (Not found)


vuln_id: V-278358
rule_id: SV-278358r1130630_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: D027B1C12B50B7C82C964F00BD4DC68577919544
  ~~~~~
  'Allow the use of additional optional connected experiences in Office' is NOT Disabled

  Registry Path:	HKCU:\software\policies\Microsoft\office\16.0\common\privacy
  Value Name:	ControllerConnectedServicesEnabled (Not found)


vuln_id: V-278359
rule_id: SV-278359r1130633_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be OPEN on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 3F3900DA578663031342EA22374109DBF597AA79
  ~~~~~
  'Allow the use of connected experiences in Office' is NOT Disabled

  Registry Path:	HKCU:\software\policies\Microsoft\office\16.0\common\privacy
  Value Name:	DisconnectedState (Not found)


vuln_id: V-220711
rule_id: SV-220711r1051018_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) was unable to determine a Status but found the below configuration on 12/17/2025:
  ResultHash: 100D50DA00AC9D15565FF2A46FDBBF78EFC00B0D
  ~~~~~
  Failed accounts:
  ---------------------
  Name:		Alexandra.M.Perl
  SID:			S-1-5-21-4004422625-1934610219-1178763574-1016
  Enabled:		True
  Last Logon:	04/12/2024 17:51:05 [614 days]

  Name:		AMPerl.IAAdmin
  SID:			S-1-5-21-4004422625-1934610219-1178763574-1021
  Enabled:		True
  Last Logon:	08/13/2023 16:24:24 [857 days]

  Name:		Jason.T.Davis
  SID:			S-1-5-21-4004422625-1934610219-1178763574-1025
  Enabled:		True
  Last Logon:	01/28/2025 15:51:00 [323 days]

  Name:		Joshua.J.Jordan
  SID:			S-1-5-21-4004422625-1934610219-1178763574-1017
  Enabled:		True
  Last Logon:	08/07/2024 13:39:41 [497 days]

  Name:		jtbegarek.iaadmin
  SID:			S-1-5-21-4004422625-1934610219-1178763574-1026
  Enabled:		True
  Last Logon:	10/16/2025 16:49:04 [62 days]

  Name:		Ryan.W.Arnold
  SID:			S-1-5-21-4004422625-1934610219-1178763574-1019
  Enabled:		True
  Last Logon:	05/28/2025 12:18:16 [203 days]

  Name:		Thomas.L.Jones
  SID:			S-1-5-21-4004422625-1934610219-1178763574-1020
  Enabled:		True
  Last Logon:	11/06/2025 14:13:44 [41 days]

  Name:		tljones.iaadmin
  SID:			S-1-5-21-4004422625-1934610219-1178763574-1024
  Enabled:		True
  Last Logon:	Never


vuln_id: V-220712
rule_id: SV-220712r958726_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) was unable to determine a Status but found the below configuration on 12/17/2025:
  ResultHash: 755D0E653E43EF30F999A01A9B8C1F315C41FADD
  ~~~~~
  The following are members of the local Administrators group:
  ==============
  Name:		MONT-SW-89134\AMPerl.IAAdmin
  objectClass:	User
  objectSID:	S-1-5-21-4004422625-1934610219-1178763574-1021

  Name:		MONT-SW-89134\dod_admin
  objectClass:	User
  objectSID:	S-1-5-21-4004422625-1934610219-1178763574-1001

  Name:		MONT-SW-89134\jtbegarek.iaadmin
  objectClass:	User
  objectSID:	S-1-5-21-4004422625-1934610219-1178763574-1026

  Name:		MONT-SW-89134\scan.admin
  objectClass:	User
  objectSID:	S-1-5-21-4004422625-1934610219-1178763574-1022

  Name:		MONT-SW-89134\tljones.iaadmin
  objectClass:	User
  objectSID:	S-1-5-21-4004422625-1934610219-1178763574-1024

  Name:		MONT-SW-89134\xAdministrator
  objectClass:	User
  objectSID:	S-1-5-21-4004422625-1934610219-1178763574-500


vuln_id: V-220716
rule_id: SV-220716r1051019_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be OPEN on 12/17/2025
  ResultHash: A947E0D7F2C22454457CBDE851D5C0765A04775B
  ~~~~~
  Failed accounts:
  ---------------------
  Name:			dod_admin
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1001
  Enabled:			True
  Password Expires:	False

  Name:			jtbegarek.iaadmin
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1026
  Enabled:			True
  Password Expires:	False

  Name:			scan.admin
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1022
  Enabled:			True
  Password Expires:	False

  Name:			Thomas.L.Jones
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1020
  Enabled:			True
  Password Expires:	False


vuln_id: V-220872
rule_id: SV-220872r958478_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 8C1493AE761559D80F64571BC10E6034D9814EFD
  ~~~~~
  'Do not suggest third-party content in Windows spotlight' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Windows\CloudContent
  Value Name:	DisableThirdPartySuggestions
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220903
rule_id: SV-220903r958448_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) was unable to determine a Status but found the below configuration on 12/17/2025:
  ResultHash: 393EAA13FC13924073C463182B1C5D260DE26571
  ~~~~~
  Installed NSS Root Certificates:

  Subject:		CN=NSS Root CA 4, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	D753369F16C2CF15A9647AAE4F6E2B40E4A28242
  NotAfter:		10/11/2041 13:47:15

  Subject:		CN=NSS Root CA 5, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	7232A47EB4B80CE23A2A3C3799CCAE0D67B0F143
  NotAfter:		09/25/2048 15:12:12

  Subject:		CN=NSS Root CA 1, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	4D96A58E74C1D5EC06C018459C3DDE71C0DBEF41
  NotAfter:		11/28/2029 22:06:38

  Subject:		CN=NSS Root CA 2, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US
  Thumbprint:	3CEE89598C90AA6F5A3B75FB03E94E111D75B5D9
  NotAfter:		10/20/2030 13:29:50


vuln_id: V-220952
rule_id: SV-220952r1051038_rule
status: Open
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be OPEN on 12/17/2025
  ResultHash: A274B6C9BF0D9AD4F7001AD178081F1387B781F3
  ~~~~~
  Enabled local administrator accounts with a password older than 60 days:
  ---------------------------
  Account:			AMPerl.IAAdmin
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1021
  Enabled:			True
  Password Last Set:	08/13/2023 16:24:18 (857 days ago)

  Account:			dod_admin
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1001
  Enabled:			True
  Password Last Set:	01/27/2022 19:37:24 (1420 days ago)

  Account:			jtbegarek.iaadmin
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1026
  Enabled:			True
  Password Last Set:	08/20/2025 14:07:02 (119 days ago)

  Account:			scan.admin
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1022
  Enabled:			True
  Password Last Set:	03/05/2024 16:39:13 (652 days ago)

  Account:			tljones.iaadmin
  SID:				S-1-5-21-4004422625-1934610219-1178763574-1024
  Enabled:			True
  Password Last Set:	08/08/2024 02:24:09 (496 days ago)


  LAPS Configuration:
  ---------------------------
  Policy Name:	Password Settings | Password Complexity
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordComplexity
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]

  Policy Name:	Password Settings | Password Length
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordLength
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]

  Policy Name:	Password Settings | PasswordAge (Days)
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordAgeDays
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]


vuln_id: V-220954
rule_id: SV-220954r958478_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: 682F3C26FA3E45B02382214B8E1C03EAF6E80E8C
  ~~~~~
  'Turn off toast notifications on the lock screen' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications
  Value Name:	NoToastApplicationNotificationOnLockScreen
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220955
rule_id: SV-220955r991589_rule
status: NotAFinding
hostname: MONT-SW-89134
host_ip: 22.19.120.21
workflow_status: Open
created_at: 2026-03-04 20:25:42
updated_at: 2026-03-04 20:25:42
finding_details:
  Evaluate-STIG 1.2510.0 (Scan-Windows10_Checks) found this to be NOT A FINDING on 12/17/2025
  Username: MONT-SW-89134\dod_admin
  UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001
  ResultHash: E1E8733E0EB898F9D2EF428AC96620439C92F3E6
  ~~~~~
  'Do not preserve zone information in file attachments' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
  Value Name:	SaveZoneInformation (Not found)


vuln_id: V-206519
rule_id: SV-206519r960735_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  InstallUserLogin_Policy is set to 5 connections.
  Direct DB access is not available to users so UserLogin_Policy and CACUserLogin_Policy not set.  
  Application-level user access is set to only allow 2 simultaneous connections.


vuln_id: V-206520
rule_id: SV-206520r1043176_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user, who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  Installer accounts are created and sent from shore and are authenticated using user id/password. The naming convention for the domain admin account is not consistent across various platforms and installers may not have access to a CAC reader.

  Application accounts are authenticated using either user id/password or a CAC. This allows flexibility to allow a mariner to access the ShipCLIP application when CAC card issues occur during ship deployments and a mariner is unable to correct until in port.


vuln_id: V-206521
rule_id: SV-206521r1137654_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  MSC Afloat Applications utilize access controls and access authentication to the database server and the DBMS enforces roles at the database level in accordance with MSC IBS Access Control Policy 2.2.


vuln_id: V-206523
rule_id: SV-206523r960879_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Auditing is turned on for databases and organization-defined auditable events are being audited. 

  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies how to enable auditing and set the types of auditing events captured in the audit log.


vuln_id: V-206524
rule_id: SV-206524r960882_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Auditable events are set before the databases are deployed. 

  To be able to set auditable events, a user must have SET ANY SECURITY OPTION system privilege (Page 3 of reference document SQL Anywhere 17 - Auditing Options.pdf).


vuln_id: V-206525
rule_id: SV-206525r960885_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log.  A setting of ‘all’ includes auditing of successful permission checks on objects.


vuln_id: V-206526
rule_id: SV-206526r960885_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of failed permission checks on objects.


vuln_id: V-206527
rule_id: SV-206527r960888_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Section ‘Auditing Individual Connections’ on Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that connection-specific auditing option is enabled by default once auditing is enabled.


vuln_id: V-206529
rule_id: SV-206529r960894_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that the audit log captures accurate timestamps of all events (to a resolution of milliseconds).


vuln_id: V-206530
rule_id: SV-206530r960897_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that the audit log captures All login attempts (successful and failed), including the computer name.


vuln_id: V-206531
rule_id: SV-206531r960900_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that the audit log captures all login attempts (successful and failed), including the computer name.


vuln_id: V-206532
rule_id: SV-206532r960903_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that the audit log captures the outcome (success or failure) of events.


vuln_id: V-206533
rule_id: SV-206533r960906_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that the audit log captures the identity of user, subject, process associated with an event.


vuln_id: V-206534
rule_id: SV-206534r960909_rule
status: Not_Applicable
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  MSC does not have any additional organization-defined information that needs to be captured in addition to the information already captured as defined in reference document SQL Anywhere 17 – Database Activity Audit.pdf, which includes additional information for events by type, location, or subject.


vuln_id: V-206537
rule_id: SV-206537r960927_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Reference document SQL Anywhere 17 Date functions.pdf states that SQL Anywhere date functions use system clock.


vuln_id: V-206538
rule_id: SV-206538r960930_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  The Audit log is generated in directory E:\IBSDatabaseAuditFiles\Logs\ShipCLIP, is in a non-human readable format, and can only be translated by the dbmanageetd tool located on the database server. 

  A privileged user must know how to execute the dbmanageetd tool to translate the encrypted file.


vuln_id: V-206539
rule_id: SV-206539r960933_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  The Audit log is generated in directory E:\IBSDatabaseAuditFiles\Logs\ShipCLIP, is in a non-human readable format, and can only be translated by the dbmanageetd tool located on the database server. 

  The dbmanageetd tool cannot make modifications to the original audit log, but only produces an XML translation of the original audit log. 
  Any modifications to the audit log will produce an error when the dbmanageetd tool tries to perform the translation.


vuln_id: V-206540
rule_id: SV-206540r960936_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  The Audit log is generated in directory E:\IBSDatabaseAuditFiles\Logs\ShipCLIP, is in a non-human readable format, and can only be translated by the dbmanageetd tool located on the database server. 

  Audit log cannot be deleted while in use.


vuln_id: V-206541
rule_id: SV-206541r960939_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  The Audit log is generated in directory E:\IBSDatabaseAuditFiles\Logs\ShipCLIP, is in a non-human readable format, and can only be translated by the dbmanageetd tool located on the database server.


vuln_id: V-206542
rule_id: SV-206542r960942_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  The Audit log is generated in directory E:\IBSDatabaseAuditFiles\Logs\ShipCLIP, is in a non-human readable format, and can only be translated by the dbmanageetd tool located on the database server. 

  The dbmanageetd tool does not have an option to modify the original audit log. It can only generate an XML translation of the original audit log. Any modifications to the original audit log will produce an error when the dbmanageetd tool tries to perform the translation.


vuln_id: V-206543
rule_id: SV-206543r960945_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  The Audit log is generated in directory E:\IBSDatabaseAuditFiles\Logs\ShipCLIP, is in a non-human readable format, and can only be translated by the dbmanageetd tool located on the database server. 

  The dbmanageetd tool does not have an option to delete the original audit log.


vuln_id: V-206544
rule_id: SV-206544r960960_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that a setting of ‘all’ includes auditing of DDL statements.


vuln_id: V-206545
rule_id: SV-206545r960960_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Software installations can only be performed by a privileged user.

  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  A request to relax the HBSS policy is also submitted to Afloat Operations Service Desk who approves and implements the request.


vuln_id: V-206546
rule_id: SV-206546r960960_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Database software is installed on the database server in directory C:\Program Files\SQL Anywhere 17.

  Database configuration files reside in directories E:\smis_app and E:\smis_app\ShipCLIP\configure.


vuln_id: V-206547
rule_id: SV-206547r960960_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  All database objects are owned by the system accounts DBA, dbo, sammuser, rs_systabgroup, shipclip and SYS.


vuln_id: V-206548
rule_id: SV-206548r960960_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS architecture does not allow users, even with the highest privileges, to modify the structure or logic of built-in security objects. 

  The SYS_AUTH_SA_ROLE, SYS_AUTH_SSO_ROLE, SYS_RUN_REPLICATION_ROLE, and SYS_AUTH_DBA_ROLE, are the only roles allowed to make modifications to database structure and logic modules.


vuln_id: V-206549
rule_id: SV-206549r960963_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Database configuration does not contain any sample or demonstration databases or objects. All databases are created and configured at time of installation.


vuln_id: V-206553
rule_id: SV-206553r1043177_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The designated port used by the database is configured in the smisdbs17-E.cfg file using the -x option. 

  ShipCLIP utilizes port 2639.


vuln_id: V-206554
rule_id: SV-206554r1051115_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  All application users are uniquely identified using a first initial+last name format within the database and installation users are uniquely identified using a first initial+last name+’_install’ format.


vuln_id: V-206555
rule_id: SV-206555r981946_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Database contains an obfuscated procedure, f_verify_pwd, that enforces password complexity.
  Login Policies enforce password lifetime.


vuln_id: V-206557
rule_id: SV-206557r961029_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Database or application connections transmit data using TLS in-transit encryption which includes the encrypted representations of passwords.

  In-transit encryption is configured in the smisdbs17-E.cfg file using the -ec option and specifying the identity path+filename of the obfuscated TLS configuration file.


vuln_id: V-206558
rule_id: SV-206558r961038_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  DBMS resides on the database server and can only be accessed directly by authorized personnel with the proper permissions and logged on to the server using PKI Authentication. 

  PKI validation is performed by the O/S upon log in. The DBMS cannot be directly accessed remotely because of PPMS implementation.


vuln_id: V-206559
rule_id: SV-206559r961041_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user, who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  Access to PKI private keys is restricted to privileged users having direct access to the server.

  Files containing In-transit and at-rest encryption keys are obfuscated. 
  If the keys are modified, the database will not start or be accessible.


vuln_id: V-206560
rule_id: SV-206560r961044_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  All application users are uniquely identified using a first initial+last name format within the database.

  PKI authentications are associated to the application user accounts within the database using the CAC EDI number.


vuln_id: V-206562
rule_id: SV-206562r961050_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS is configured to start in FIPS mode using the -fips database server option (SQL Anywhere 17 - -fips Database Option.pdf). This option enables the DBMS to use the FIPS 140-2 cryptographic modules (SQL Anywhere 17 - FIPS-certified Encryption Technology.pdf).


vuln_id: V-206563
rule_id: SV-206563r961053_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  All application users are uniquely identified using a first initial+last name format within the database.
  Non-organizational users do not have direct access to the DBMS.


vuln_id: V-206564
rule_id: SV-206564r1137655_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Users are configured with roles that separate user functionality from database management functionality.  Application users are not assigned to DBA or SSO roles which govern database management functions.


vuln_id: V-206565
rule_id: SV-206565r1043179_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS generates unique system-generated session identifiers for every database login connection.  
  The session identifiers are invalidated upon user logout or for other session terminations.
  The DBMS is not accessible by a direct remote connection or URL.


vuln_id: V-206566
rule_id: SV-206566r1043180_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS generates unique system-generated session identifiers for every database login connection. 
  The DBMS is not accessible by direct remote connection or URL.


vuln_id: V-206567
rule_id: SV-206567r1043181_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Database or application connections transmit data using TLS in-transit encryption which guard against man-in-the-middle attacks.
  In-transit encryption is configured in the smisdbs17-E.cfg file using the -ec option and specifying the identity path+filename of the obfuscated TLS configuration file.
  The DBMS is not accessible by direct remote connection or URL.


vuln_id: V-206568
rule_id: SV-206568r961122_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Section 1.6.1.2 of reference document SQL-Anywhere-Server-Database-Administration 17 -en.pdf details database shutdown and recovery processes including the Automatic Recovery Process (Section 1.6.1.2.1).


vuln_id: V-206569
rule_id: SV-206569r961125_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  DBMS utilizes service, transaction and audit logs to record the system state. 
  The service log records the DB startup options and the state of the DBs within the service to include the date and time of DB checkpoints and database warnings and errors as to cause of failure.
  Transaction and audit logs record all actions that occur against a database and can provide cause of failure information.


vuln_id: V-206571
rule_id: SV-206571r961131_rule
status: Not_Applicable
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Isolation of security functions and non-security functions are controlled by roles. 
  Only the DBA and SSO roles are able to execute security functions.


vuln_id: V-206572
rule_id: SV-206572r1137656_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  MSC IBS Afloat apps are not developed in the Afloat hosting production or test environments. The application is developed in a separate, stand-alone environment and deployed to the fleet as a compiled installation. As such, no code exists for moving data from Production to Test/Dev environments.


vuln_id: V-206573
rule_id: SV-206573r1137657_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  DBMS is capable of effectively protecting the private resources of one process or user from unauthorized access by another user or process.
  DBMS is only directly accessible by privileged users on the server.


vuln_id: V-206574
rule_id: SV-206574r1137658_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.


vuln_id: V-206575
rule_id: SV-206575r961158_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Application-specific logic is implemented within the database using stored procedures, functions and triggers, where appropriate. Database tables have defined columns and have primary key indexes.
  Database code does properly validate data before it is put into the database or acted upon by the database. Development team confirms that code accounts for invalid inputs.


vuln_id: V-206578
rule_id: SV-206578r961167_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Non-privileged users do not have direct access to the DBMS where database error messages are displayed. The application displays errors messages that only provide information for corrective action. The DBMS is not accessible by direct remote connection or URL.


vuln_id: V-206579
rule_id: SV-206579r961170_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Non-privileged users do not have direct access to the DBMS where database error messages are displayed. Only Administrative users can see the error messages in the DBMS.

  The database server can only be accessed by a privileged user, who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  Installer accounts are created and sent from shore.


vuln_id: V-206580
rule_id: SV-206580r1043182_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS does automatically terminate a user session. The organization-defined conditions are documented in Section 12.0 of the MSC IBS Access Control Policy 2.2. 

  When a privileged user is logged out of DBMS server after 15 minutes of inactivity, the direct connection to the DBMS is automatically terminated.
  The Database is configured to logout non-privileged application users after 15 minutes of inactivity and privileged application users at 10 minutes of inactivity.  
  Application users have no direct access to the DBMS.


vuln_id: V-206581
rule_id: SV-206581r961224_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS is configured to allow a manual termination of a session by providing a logout capability to the user.


vuln_id: V-206585
rule_id: SV-206585r961317_rule
status: Not_Applicable
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  DBMS does not implement DAC policies. SQL Anywhere uses authority/permission/group and role/privilege/user-extended security models.


vuln_id: V-206586
rule_id: SV-206586r961353_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Prohibiting non-privileged user from executing privileged functions is documented in Section 6.10 of the MSC IBS Access Control Policy 2.2. 

  DBMS prevents non-privileged users from executing privileged functions through Roles. 
  Non-privileged users do not have direct access the DBMS as it resides in a secure location.

  The database server can only be accessed by a privileged user, who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  Installer accounts are created and sent from shore.


vuln_id: V-206587
rule_id: SV-206587r961359_rule
status: Not_Applicable
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Privilege-elevation is not used within the DBMS. Stored procedures, functions and triggers are secured by roles.  Only database DBA or SSO roles can execute modules needing elevated privileges.


vuln_id: V-206591
rule_id: SV-206591r961392_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Storage requirement for audit records is not restricted on afloat environments and is able to consume the full amount of the available log drive space as needed. However, during audit log rollover, the previous log is immediately packaged and sent ashore to be translated and ingested into the OpenSearch repository. During rollover, the space on the afloat database server occupied by the previous audit file is reclaimed and a new audit log is created. Original audit files are then stored ashore in S3 buckets that have unlimited amount of storage and have access restricted to only authorized personnel.


vuln_id: V-206592
rule_id: SV-206592r961398_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Audit logs are sent ashore daily and stored in S3 buckets that have unlimited amount of storage so the audit logs never grow large enough to consume 75% of the server’s storage. 

  Storage size alerts on the ship are part of Operating System monitoring which falls to the hosting environment to configure.


vuln_id: V-206593
rule_id: SV-206593r961401_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Real time alerts are not possible in a disconnected architecture. As such, any database alerts that are produced, are sent ashore and received by the MSC IBS Ashore personnel with the next replication cycle.


vuln_id: V-206594
rule_id: SV-206594r961443_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that the audit log captures accurate timestamps of all events (to a resolution of milliseconds).
  The DBMS records time stamps in UTC.


vuln_id: V-206595
rule_id: SV-206595r961446_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17- Database Activity Audit.pdf specifies that the audit log captures accurate timestamps of all events (to a resolution of milliseconds).

  Parameter default_timestamp_increment is also set to 10000 for database operations set it to a 2-digit millisecond representation.


vuln_id: V-206596
rule_id: SV-206596r981956_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  Only MSC-authorized installers with administrator privileges can install DBMS modules. 
  Only database DBA or SSO roles can install or modify logic modules.


vuln_id: V-206597
rule_id: SV-206597r961461_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  Only MSC-authorized installers with DBA or SSO roles can make changes to the configuration of the DBMS.


vuln_id: V-206598
rule_id: SV-206598r981958_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of successful and unsuccessful executions of DDL statements and changes to database options.


vuln_id: V-206599
rule_id: SV-206599r961470_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database can only start up using the port designated in the -x database option.
  The designated port used by the database is configured to 2639 within the smisdbs17-E.cfg file.


vuln_id: V-206600
rule_id: SV-206600r1050788_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS requires reauthentication when changing role or escalating privileges.

  Creation of password-based installer accounts is initiated from shore and utilize the procedure SC_RemoteUserMaint.

  Password-based application accounts are created and maintained through the application using the procedure SC_UserMaint. 

  Both procedures use the FORCE PASSWORD CHANGE ON clause when creating or altering a login.


vuln_id: V-206601
rule_id: SV-206601r961521_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  DBMS does not allow cached authentication. 

  The DBMS requires reauthentication for every login attempt.


vuln_id: V-206603
rule_id: SV-206603r961596_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  DBMS sessions can only be launched from the server on which it is installed, so no certificate is required.


vuln_id: V-206604
rule_id: SV-206604r1018552_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Data encryption is configured to protect the confidentiality and integrity of data at rest using the -ek (strong database encryption) option in the database configuration file.


vuln_id: V-206607
rule_id: SV-206607r961638_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Database or application connections transmit data using TLS in-transit encryption to maintain the confidentiality and integrity of information during preparation for transmission.

  In-transit encryption is configured in the smisdbs17-E.cfg file using the -ec option and specifying the identity path+filename of the obfuscated TLS configuration file.


vuln_id: V-206608
rule_id: SV-206608r961641_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Database or application connections transmit data using TLS in-transit encryption to maintain the confidentiality and integrity of information during reception.

  In-transit encryption is configured in the smisdbs17-E.cfg file using the -ec option and specifying the identity path+filename of the obfuscated TLS configuration file.


vuln_id: V-206609
rule_id: SV-206609r961656_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Application-specific logic is implemented within the database using stored procedures, functions and triggers, where appropriate. Invalid inputs return appropriate error messages and statement execution is not committed to the database.
  Database code does properly validate data before it is put into the database or acted upon by the database. Development team confirms that code accounts for invalid inputs by capturing error codes and returning appropriate error messages to the user for corrective action.


vuln_id: V-206611
rule_id: SV-206611r1137667_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Software patches are applied via MSC afloat operations patching schedule. Patches are sent to the Afloat environment via ESTA and are stored on a shared Drive. DBMS Patches and upgrades are rolled into, scheduled and tracked, as part of the application release schedule.


vuln_id: V-206612
rule_id: SV-206612r961791_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of successful permission checks on all objects which translates to a successful access to an object.


vuln_id: V-206616
rule_id: SV-206616r961800_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing when privileges and permissions are added.


vuln_id: V-206617
rule_id: SV-206617r961800_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of unsuccessful attempts to add privileges/permissions.


vuln_id: V-206618
rule_id: SV-206618r961800_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of when privileges/permissions are modified.


vuln_id: V-206619
rule_id: SV-206619r961800_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of when unsuccessful attempts to modify privileges/permissions occur.


vuln_id: V-206620
rule_id: SV-206620r961803_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of DDL statements including when security objects are modified.


vuln_id: V-206621
rule_id: SV-206621r961803_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of when unsuccessful attempts to modify security objects occur.


vuln_id: V-206624
rule_id: SV-206624r961812_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing when privileges/permissions are deleted.


vuln_id: V-206625
rule_id: SV-206625r961812_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of when unsuccessful attempts to delete privileges/permissions occur.


vuln_id: V-206626
rule_id: SV-206626r961818_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of when security objects are deleted.


vuln_id: V-206627
rule_id: SV-206627r961818_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of successful and unsuccessful executions of DDL statements.


vuln_id: V-206630
rule_id: SV-206630r961824_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of when successful logons or connections occur.


vuln_id: V-206631
rule_id: SV-206631r961824_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of when unsuccessful logons or connection attempts occur.


vuln_id: V-206632
rule_id: SV-206632r961827_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf specifies the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing for all DDL statements exectutions, option changes, triggers, and xp_cmdshell invocations as well as all actions that require system privileges.


vuln_id: V-206633
rule_id: SV-206633r961827_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf and SQL Anywhere 17 – Database Activity Audit.pdf specify the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of unsuccessful permission checks or executions of DDL statements, option changes, triggers, and xp_cmdshell invocations as well as all actions that require system privileges.


vuln_id: V-206634
rule_id: SV-206634r961830_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf species the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of all successful connection attempts.


vuln_id: V-206635
rule_id: SV-206635r961833_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf species the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of all logon attempt even when concurrent logons/connections by the same user from different workstations occur.


vuln_id: V-206636
rule_id: SV-206636r961836_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf species the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of successful permission checks on objects which translates to a successful access to an object.


vuln_id: V-206637
rule_id: SV-206637r961836_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf species the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of failed permission checks on objects which translates to an unsuccessful access to an object.


vuln_id: V-206638
rule_id: SV-206638r961839_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Page 2 of reference document SQL Anywhere 17 - Auditing Options.pdf species the types of auditing events captured in the audit log. A setting of ‘all’ includes auditing of all successful and unsuccessful connection attempts.


vuln_id: V-206640
rule_id: SV-206640r1137661_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS is configured to start in FIPS mode using the -fips database server option (SQL Anywhere 17 - -fips Database Option.pdf). This option enables the DBMS to utilize NIST FIPS 140-2 or 140-3 Cryptographic modules to generate and validate cryptographic hashes.


vuln_id: V-206641
rule_id: SV-206641r1137664_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS is configured to start in FIPS mode using the -fips database server option (SQL Anywhere 17 - -fips Database Option.pdf). This option enables the DBMS to utilize NIST FIPS 140-2 or 140-3 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the data owner’s requirements.


vuln_id: V-206642
rule_id: SV-206642r961860_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  An Audit log is generated in directory E:\IBSDatabaseAuditFiles\Logs\ShipCLIP.
  An Event runs once a day at 0002 to generate a new audit log, securely package old audit log, and stage secure package in directory ESTA Root\LESAudit\ShipCLIP\To_Shore for transmission to shore and subsequent processing into the centrally managed OpenSearch repository.


vuln_id: V-206643
rule_id: SV-206643r961863_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS is configured according to the security configuration settings based on DoD security configuration and implementation guidance, including STIGs, NSA configuration guides, CTOs, DTMs, and IAVMs.


vuln_id: V-263602
rule_id: SV-263602r982479_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS is configured to utilize Login Policy options max_failed_login_attempts and max_days_login (SQL Anywhere 17 - Login_Policy_Options.pdf) to expire and disable non-system accounts.


vuln_id: V-263606
rule_id: SV-263606r981976_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  All software patches are obtained from the vendors and must go through the MSC Configuration Management process before being installed in a Production environment.


vuln_id: V-263608
rule_id: SV-263608r981982_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  The accounts within the database are a separate directory service then the Active Directory Services used to access the database server or workstation.


vuln_id: V-263610
rule_id: SV-263610r981988_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Based on DOD password criteria, the minimum 15-character length, the use of 2 special, 2 upper-case and 2 lower-case characters required for login eliminate commonly used passwords.


vuln_id: V-263614
rule_id: SV-263614r982497_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user, who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  Creation of password-based installer accounts is initiated from shore and utilize the procedure SC_RemoteUserMaint.

  Password-based application accounts are created and maintained through the application using the procedure SC_UserMaint. 

  Both procedures use the FORCE PASSWORD CHANGE ON clause when creating or altering a login.


vuln_id: V-263615
rule_id: SV-263615r982499_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Database contains an obfuscated procedure, f_verify_pwd, that enforces password complexity.
  Passwords are required to be at least 15 characters long.


vuln_id: V-263616
rule_id: SV-263616r982501_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  Password changes for application and installer accounts are maintained through the application. During the password change process, the application will display a Password Criteria section to assist the user in selecting a strong password.


vuln_id: V-263617
rule_id: SV-263617r982009_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The DBMS uses the CA and CRL lists for public key-based authentication. 
  These lists are located on the Application server.


vuln_id: V-263619
rule_id: SV-263619r982505_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  The database server can only be accessed by a privileged user, who creates an Afloat Operations Service Desk ticket.  Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days.

  Access to PKI private keys is restricted to privileged users having direct access to the server.

  Files containing In-transit and at-rest encryption keys are obfuscated.


vuln_id: V-278969
rule_id: SV-278969r1137670_rule
status: NotAFinding
hostname: MONT-DB-002
workflow_status: Open
created_at: 2026-03-06 17:50:21
updated_at: 2026-03-06 17:50:21
comments:
  MSC Business System Afloat applications use SQL Anywhere 17 database software. 
  On page 16 of SAP SQL Anywhere Supported Platforms.pdf, this database version is currently active and supported by SAP.


vuln_id: V-254238
rule_id: SV-254238r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Administrative privileges are segregated by assigning dedicated accounts for administrative tasks, with enforced policies and regular audits to maintain compliance and enhance security. NOT A FINDING


vuln_id: V-254239
rule_id: SV-254239r1153440_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be OPEN on 03/05/2026
  ResultHash: CF568A5923900BF3889A9601FFD0FFE6DEB1930C
  ~~~~~
  Enabled local administrator accounts with a password older than 60 days:
  ---------------------------
  Account:			DOD_Admin
  SID:				S-1-5-21-2359828523-3188837691-268305261-1000
  Enabled:			True
  Password Last Set:	11/11/2025 23:12:23 (113 days ago)


  LAPS Configuration:
  ---------------------------
  Policy Name:	Password Settings | Password Complexity
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordComplexity
  Value:		4
  Value Type:	REG_DWORD
  Configured:	True

  Policy Name:	Password Settings | Password Length
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordLength
  Value:		14
  Value Type:	REG_DWORD
  Configured:	True

  Policy Name:	Password Settings | PasswordAge (Days)
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordAgeDays
  Value:		60
  Value Type:	REG_DWORD
  Configured:	True

comments:
  Windows Server 2022 passwords for the built-in Administrator account has been changed. This is Not a Finding


vuln_id: V-254240
rule_id: SV-254240r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Administrative accounts are restricted from accessing internet-based applications, with technical controls enforcing this policy to mitigate potential security risks. NOT A FINDING


vuln_id: V-254241
rule_id: SV-254241r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be OPEN on 03/05/2026
  ResultHash: 2245DCDBB4CAC4ADD9A8E14225C8F4280B87D952
  ~~~~~
  The following are members of the local Backup Operators group:
  ==============
  Name:		SCHROEDER3\Server Administrator Group
  objectClass:	Group
  objectSID:	S-1-5-21-1160972651-4155981999-2770166294-1115

comments:
  Windows Server 2022 has the correct members of the Backup Operators group account for backup duties and normal operational tasks.
  This is Not a Finding


vuln_id: V-254242
rule_id: SV-254242r1051087_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6BE08ACAB8AD3365003019D2702FDF3075E0F32E
  ~~~~~
  'Minimum password length' is Configured

  MinimumPasswordLength: 14


vuln_id: V-254243
rule_id: SV-254243r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Ensured that passwords for manually managed application and service accounts are changed at least annually or immediately upon the departure of an administrator with knowledge of the password. NOT A FINDING


vuln_id: V-254244
rule_id: SV-254244r958482_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Eliminated unapproved shared user accounts and ensured that any necessary shared accounts are formally approved, documented, and monitored. NOT A FINDING


vuln_id: V-254245
rule_id: SV-254245r958808_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 6FF711AFAE14E49C15CD28D71EFFCBA6D6AF6065
  ~~~~~
  AppLocker is configured but 'Appx' and/or 'Exe' rules are not enabled.  Ensure an application allowlisting solution is in place and configured to a deny-all, permit-by-exception policy.

  AppLocker rules:
  ---------------------------
  Rule Type:			Appx
  Enforcement Mode:		NotConfigured

  Rule Type:			Dll
  Enforcement Mode:		AuditOnly

  Rule Type:			Exe
  Enforcement Mode:		AuditOnly

  Rule Type:			Msi
  Enforcement Mode:		AuditOnly

  Rule Type:			Script
  Enforcement Mode:		AuditOnly

comments:
  Windows Server 2022 has been configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs. This is Not a Finding


vuln_id: V-254246
rule_id: SV-254246r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be OPEN on 03/05/2026
  ResultHash: 4F6E062C9AD17A9410FB01815F3313C5770EAE33
  ~~~~~
  No TPM has been detected on this system.

comments:
  Windows Server 2022 domain-joined systems has a Trusted Platform Module (TPM) enabled and ready for use. This is Not a Finding


vuln_id: V-254247
rule_id: SV-254247r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: D407E9034731F662CE2E7F849EE72FE3FD0AE83F
  ~~~~~
  Operating system is 'Windows Server 2022 Standard 21H2' (10.0.20348.4773)


vuln_id: V-254248
rule_id: SV-254248r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: ED004DFCA8B66091F04DB4817B417CC1901B40D4
  ~~~~~
  Windows Defender Antivirus is installed and running.
  Feature:	Windows-Defender
  State:	Enabled

  Service:	WinDefend
  Status:	Running


vuln_id: V-254249
rule_id: SV-254249r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Implemented a host-based intrusion detection and prevention system (ESS deployed/monitored from NOC) on all Windows Server 2022 systems. This system is regularly updated and monitored to detect and respond to potential security threats, ensuring compliance with DISA STIG requirements. NOT A FINDING


vuln_id: V-254250
rule_id: SV-254250r1137691_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B264AA7347D8EF3C29987476DF98F4696DE11F0D
  ~~~~~
  All disk file systems are NTFS or ReFS.

  Device ID:		C:
  Drive Type:		Local Disk (3)
  Volume Name:		Windows
  File System:		NTFS

  Device ID:		D:
  Drive Type:		Local Disk (3)
  Volume Name:		PROGLOGS
  File System:		NTFS

  Device ID:		E:
  Drive Type:		Local Disk (3)
  Volume Name:		MECM
  File System:		NTFS

  Device ID:		I:
  Drive Type:		Local Disk (3)
  Volume Name:		IIS
  File System:		NTFS


vuln_id: V-254251
rule_id: SV-254251r958702_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F081F472C14C9789CFC4D12C508F7C0925558A02
  ~~~~~
  Network access: Let Everyone permissions apply to anonymous users is set to Disabled
  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	EveryoneIncludesAnonymous
  Value		0

  Path:			C:\
  OverallState:	Expected permissions in place
  Compliance:	Compliant


vuln_id: V-254252
rule_id: SV-254252r958702_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 67D7443EABCEBA86F318DC3E0BAE19A215A4A644
  ~~~~~
  Network access: Let Everyone permissions apply to anonymous users is set to Disabled
  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	EveryoneIncludesAnonymous
  Value		0

  Path:			C:\Program Files
  OverallState:	Expected permissions in place
  Compliance:	Compliant

  Path:			C:\Program Files (x86)
  OverallState:	Expected permissions in place
  Compliance:	Compliant


vuln_id: V-254253
rule_id: SV-254253r958702_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BEECA7612E0B6DD07552469BDA0A29F4268519F5
  ~~~~~
  Network access: Let Everyone permissions apply to anonymous users is set to Disabled
  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	EveryoneIncludesAnonymous
  Value		0

  Path:			C:\WINDOWS
  OverallState:	Expected permissions in place
  Compliance:	Compliant


vuln_id: V-254254
rule_id: SV-254254r1153443_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6CFAAD398147CBD6AF58E8CC3C59CEF6D25F6236
  ~~~~~
  Path:			HKLM:\SECURITY
  OverallState:	Expected permissions in place
  Compliance:	Compliant

  Path:			HKLM:\SOFTWARE
  OverallState:	Expected permissions in place
  Compliance:	Compliant

  Path:			HKLM:\SYSTEM
  OverallState:	Expected permissions in place
  Compliance:	Compliant


vuln_id: V-254255
rule_id: SV-254255r1137691_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: 441A3895DA97E895CBFC18CFC98C8DF854F334FE
  ~~~~~
  No printers are configured on this server so this requirement is NA.


vuln_id: V-254256
rule_id: SV-254256r1051088_rule
status: NotAFinding
comments: Windows Server 2022 unused account has been disabled. This is Not a Finding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 490BD2E899FA3C7F6E247F8A18AC1F6BEB815876
  ~~~~~
  Failed accounts:
  ---------------------
  Name:		DOD_Admin
  SID:			S-1-5-21-2359828523-3188837691-268305261-1000
  Enabled:		True
  Last Logon:	11/11/2025 23:11:45 [113 days]


vuln_id: V-254257
rule_id: SV-254257r958482_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A8361572FCF4DDE4D6872D094DE902234124BB6E
  ~~~~~
  No enabled accounts found that do not require a password.


vuln_id: V-254258
rule_id: SV-254258r1051089_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 03421DBAA63FB77EFDA8438D19174504036DC035
  ~~~~~
  No enabled accounts found where the password does not expire.


vuln_id: V-254259
rule_id: SV-254259r958794_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  GPO is implemented to mitigate unauthorized modifications to system files that can compromise the integrity, confidentiality, and availability of a Windows Server 2022 system. This is Not A Finding


vuln_id: V-254260
rule_id: SV-254260r1137695_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: FE6E08BCA44D55D33AD47289B0481DA21EA7058A
  ~~~~~
  Only system-created shares exist on this system so this requirement is NA.


vuln_id: V-254261
rule_id: SV-254261r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6D1B1446FB5CC2634D5EADF74C6B8A5903ECB08C
  ~~~~~
  No .p12 or .pfx certificate files found.


vuln_id: V-254262
rule_id: SV-254262r958552_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Implemented encryption mechanisms on Windows Server 2022 systems to protect sensitive data at rest, ensuring its confidentiality and integrity in compliance with DISA STIG requirements. NOT A FINDING


vuln_id: V-254263
rule_id: SV-254263r958912_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Implemented secure communication protocols, such as TLS, encrypted VPNs, or IPsec, on Windows Server 2022. This ensures that data requiring strict confidentiality and integrity is protected throughout its transmission and handling processes, in compliance with DISA STIG requirements. NOT A FINDING


vuln_id: V-254264
rule_id: SV-254264r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 6EFFFCDAA74F2893347505F85C0B7A675BCD956A
  ~~~~~
  Installed Roles:
  ---------------------
  Device Health Attestation
  File and Storage Services
  Web Server (IIS)

  Installed Role Services:
  ---------------------
  File and iSCSI Services
  File Server
  Storage Services
  Web Server
  Common HTTP Features
  Default Document
  Directory Browsing
  HTTP Errors
  Static Content
  Health and Diagnostics
  HTTP Logging
  Tracing
  Performance
  Static Content Compression
  Security
  Request Filtering
  Application Development
  .NET Extensibility 4.8
  ASP.NET 4.8
  ISAPI Extensions
  ISAPI Filters
  Server Side Includes
  Management Tools
  IIS Management Console

  Installed Features:
  ---------------------
  .NET Framework 4.8 Features
  .NET Framework 4.8
  ASP.NET 4.8
  WCF Services
  HTTP Activation
  TCP Port Sharing
  Azure Arc Setup
  Microsoft Defender Antivirus
  System Data Archiver
  Windows PowerShell
  Windows PowerShell 5.1
  Windows Process Activation Service
  Process Model
  Configuration APIs
  WoW64 Support

comments:
  Verified that all required roles and features for our Windows Server 2022 systems are documented and ensured regular reviews are performed to ensure only essential components are active, thereby reducing potential security risks NOT A FINDING


vuln_id: V-254265
rule_id: SV-254265r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: DDEB8EC31627B565DA9A6E2585FF589E535BD0A3
  ~~~~~
  Active Network Connections:
  ---------------------------
  Network Category:	DomainAuthenticated
  Windows Firewall:	Disabled

  Windows Firewall is disabled on one or more active network profiles.  Confirm a host-based firewall is in use on this system.

comments:
  Manual check verified: This is Not a Finding

  Active Network Connections:
  ---------------------------
  Network Category:	DomainAuthenticated
  Windows Firewall:	Enabled


vuln_id: V-254266
rule_id: SV-254266r1000154_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Implemented automated mechanisms, including continuous vulnerability scanning, regular internal assessments, and annual external evaluations, to ensure timely identification and remediation of security flaws in system components. NOT A FINDING


vuln_id: V-254267
rule_id: SV-254267r958364_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 129AAEF8C98B12262CD5814E10D70D7749FB55E0
  ~~~~~
  No enabled accounts found that are set to expire within 72 hours of the PasswordLastSet date.  If there are enabled 'temporary' accounts currently on the system, this should be marked as Open.  Otherwise, mark as Not Applicable.

comments:
  Temporary user accounts are configured to automatically expire within 72 hours of creation, with regular audits and policies enforcing this practice to prevent unauthorized access through outdated accounts. NOT A FINDING


vuln_id: V-254268
rule_id: SV-254268r958508_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: A2DFD837F05076354B18E9404AAC0860BC860EE5
  ~~~~~
  No enabled accounts found that are set to expire within 72 hours of the PasswordLastSet date.  If there are enabled 'emergency' accounts currently on the system, this should be marked as Open.  Otherwise, mark as Not Applicable.

comments:
  Emergency administrator accounts are configured to be automatically removed or disabled within 72 hours post-crisis, with regular audits ensuring compliance. NOT A FINDING


vuln_id: V-254269
rule_id: SV-254269r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4D0C4B866AA7FEEDE82ECD2E8B4A22DEDE2618CF
  ~~~~~
  Feature Name:		Fax
  Expected State:	Available, Removed
  Detected State:	Available


vuln_id: V-254270
rule_id: SV-254270r958480_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8AB08F4114350A4A86D884EB5E8C414772162FB9
  ~~~~~
  Feature Name:		Web-Ftp-Service
  Expected State:	Available, Removed
  Detected State:	Available


vuln_id: V-254271
rule_id: SV-254271r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E1E83B25E45FCBBBA565EC2D58D12CDBFBB1E7FE
  ~~~~~
  Feature Name:		PNRP
  Expected State:	Available, Removed
  Detected State:	Available


vuln_id: V-254272
rule_id: SV-254272r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 40AEBB2BB0A9343573591561E5E7304E61192602
  ~~~~~
  Feature Name:		Simple-TCPIP
  Expected State:	Available, Removed
  Detected State:	Available


vuln_id: V-254273
rule_id: SV-254273r958480_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BE5328321458F35B80D9546AF49C8D20D0895613
  ~~~~~
  Feature Name:		Telnet-Client
  Expected State:	Available, Removed
  Detected State:	Available


vuln_id: V-254274
rule_id: SV-254274r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: FBD7E7D6321CD55D5EFD1C45DD60F9D0AAF741E0
  ~~~~~
  Feature Name:		TFTP-Client
  Expected State:	Available, Removed
  Detected State:	Available


vuln_id: V-254275
rule_id: SV-254275r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 89C59932D73F94F028707A00C6DF6452922F914B
  ~~~~~
  The Windows Feature 'FS-SMB1' is Available


vuln_id: V-254276
rule_id: SV-254276r958478_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: 26B515519ECF89836EB6C2CFF22BC2444B8E212F
  ~~~~~
  V-254275 (WN22-00-000380) is configured so this requirement is NA.


vuln_id: V-254278
rule_id: SV-254278r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 0BFB975652099AC78A9E2F9F60247AFF7E3F2EDF
  ~~~~~
  Feature Name:		PowerShell-v2
  Expected State:	Available, Removed
  Detected State:	Available


vuln_id: V-254279
rule_id: SV-254279r991589_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: CD7DFE28A41B52BD912CF759969D5D1B7C89F295
  ~~~~~
  Web-Ftp-Server is not installed so this requirement is NA.


vuln_id: V-254281
rule_id: SV-254281r1051090_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 9EA96422EDF496B5515908982651D9091ACEA304
  ~~~~~
  DomainRole:	Member Server

  NtpClient (Local)
  Type:		NT5DS (Local)


vuln_id: V-254282
rule_id: SV-254282r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 31FA001D95F799B1779974DAE788547F7248BA04
  ~~~~~
  No unresolved SIDs are assigned any User Right


vuln_id: V-254283
rule_id: SV-254283r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 795D12619CC035A12CE3BE8D046C9DA2FD6AC217
  ~~~~~
  BIOS Mode:	UEFI


vuln_id: V-254284
rule_id: SV-254284r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F00AB6308F2F40793871577252596AC96D27494C
  ~~~~~
  Confirm-SecureBootUEFI = True


vuln_id: V-254285
rule_id: SV-254285r958736_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 45DDCAF75C302AFBAF4F0083BDF37443F28A83CC
  ~~~~~
  'Reset account lockout counter after' is Configured

  LockoutDuration: 15


vuln_id: V-254286
rule_id: SV-254286r958388_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 41AA04D471372F76F2904EE0EF5CA66462310C29
  ~~~~~
  'Account lockout threshold' is Configured

  LockoutBadCount: 3


vuln_id: V-254287
rule_id: SV-254287r958388_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C7A0EE0ADBB8B8A24BDEA6EC108E7DA83CCEAB1C
  ~~~~~
  'Reset account lockout counter after' is Configured

  ResetLockoutCount: 15


vuln_id: V-254288
rule_id: SV-254288r1000156_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3D66E73980452DD8BD3CA8FE1C7ACB35BFFBF1E0
  ~~~~~
  'Enforce password history' is Configured

  PasswordHistorySize: 24


vuln_id: V-254289
rule_id: SV-254289r1051091_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2375DBDED09541A6709A3597732260F71AD44BD7
  ~~~~~
  'Maximum password age' is Configured

  MaximumPasswordAge: 60


vuln_id: V-254290
rule_id: SV-254290r1051092_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E9E63FACC0D99C86CB8F91687EDAD046854EBCD0
  ~~~~~
  'Minimum password age' is Configured

  MinimumPasswordAge: 1


vuln_id: V-254292
rule_id: SV-254292r1051094_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3254975B2BFF298E56535B14B1F167FECB6E84E0
  ~~~~~
  'Password must meet complexity requirements' is Enabled

  PasswordComplexity: 1


vuln_id: V-254293
rule_id: SV-254293r1051095_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 0C3874C178BF034376FC830F77095A4B14233118
  ~~~~~
  'Store passwords using reversible encryption' is Disabled

  ClearTextPassword: 0


vuln_id: V-254295
rule_id: SV-254295r959008_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
comments:
  Audit records are offloaded in real time for interconnected systems and weekly for standalone systems, with monitoring ensuring successful offloading. NOT A FINDING


vuln_id: V-254296
rule_id: SV-254296r958434_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 548E1706345EB5A15CB428AA4BFEF9410EA96AA3
  ~~~~~
  Path:			C:\WINDOWS\System32\Winevt\Logs\Application.evtx
  OverallState:	Expected permissions in place
  Compliance:	Compliant


vuln_id: V-254297
rule_id: SV-254297r958434_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: FC207BB5E6ABD073A18C6924714E55BE3BFE7F86
  ~~~~~
  Path:			C:\WINDOWS\System32\Winevt\Logs\Security.evtx
  OverallState:	Expected permissions in place
  Compliance:	Compliant


vuln_id: V-254298
rule_id: SV-254298r958434_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C8851B49AF642F6DEA2F56B31A82E5A84259555F
  ~~~~~
  Path:			C:\WINDOWS\System32\Winevt\Logs\System.evtx
  OverallState:	Expected permissions in place
  Compliance:	Compliant


vuln_id: V-254299
rule_id: SV-254299r991558_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: FFBD6629F8FCAB722C297362D4BCFAB3EE7637BC
  ~~~~~
  Path:			C:\WINDOWS\System32\Eventvwr.exe
  OverallState:	Expected permissions in place
  Compliance:	Compliant


vuln_id: V-254300
rule_id: SV-254300r991578_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: DA7DF341CB41A0B60FB92B392D3AA616EB0F8C60
  ~~~~~
  Credential Validation:	Success and Failure


vuln_id: V-254302
rule_id: SV-254302r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 9A6F552FAB98CF8F94D1E6F6BD0061408022D4E5
  ~~~~~
  Other Account Management Events:	Success


vuln_id: V-254303
rule_id: SV-254303r958368_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E026B0CB713D941C6AC9CDB0976AD1DDCB8564DE
  ~~~~~
  Security Group Management:	Success


vuln_id: V-254304
rule_id: SV-254304r958368_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3AA7E01468B70DEFA406DABDAF58FAD0F1E7BE63
  ~~~~~
  User Account Management:	Success and Failure


vuln_id: V-254306
rule_id: SV-254306r991583_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: DCA308C4975262F51F29DAED106C291E8960644D
  ~~~~~
  Plug and Play Events:	Success


vuln_id: V-254307
rule_id: SV-254307r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 812B92C97F6B9D7E16F6294B301DF81AC57720AA
  ~~~~~
  Process Creation:	Success


vuln_id: V-254309
rule_id: SV-254309r991552_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 93A0853E44773D10564D3ED14795A30CC6191C41
  ~~~~~
  Account Lockout:	Failure


vuln_id: V-254310
rule_id: SV-254310r991578_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6318D6520C67CFD4EB30011DEB0BCAC76DCB6CC8
  ~~~~~
  Group Membership:	Success


vuln_id: V-254311
rule_id: SV-254311r991581_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7A950E7532BE5A2E4F09E8A1E67C0FDAF4E8851D
  ~~~~~
  Logoff:	Success


vuln_id: V-254312
rule_id: SV-254312r958406_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6557C8974FEC4237F5E900001DCA960F93582900
  ~~~~~
  Logon:	Success and Failure


vuln_id: V-254314
rule_id: SV-254314r991578_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BA41DFC702C29EE8A4A2E9FCA6F596F4BCEB5161
  ~~~~~
  Special Logon:	Success


vuln_id: V-254315
rule_id: SV-254315r991578_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 11B3505989ED9CB1A87C28ADEB0006351D13AF0E
  ~~~~~
  Other Object Access Events:	Success and Failure


vuln_id: V-254317
rule_id: SV-254317r991583_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2407B24433D2B954716743C3A3B170CD2F14F60B
  ~~~~~
  Removable Storage:	Success and Failure


vuln_id: V-254319
rule_id: SV-254319r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 97A2C29533741E815089838C552EA7A8C711908D
  ~~~~~
  Audit Policy Change:	Success and Failure


vuln_id: V-254321
rule_id: SV-254321r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 74E73B7E4CAE038B8D1A0EEE0B6B63A38790EF6E
  ~~~~~
  Authentication Policy Change:	Success


vuln_id: V-254322
rule_id: SV-254322r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2CF193FE8E8629806C5FA0FC4E522752CA150F38
  ~~~~~
  Authorization Policy Change:	Success


vuln_id: V-254323
rule_id: SV-254323r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 5ADFCE8D22838148E00425A6936CEA3800FE7AA9
  ~~~~~
  Sensitive Privilege Use:	Success and Failure


vuln_id: V-254325
rule_id: SV-254325r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: DA7397241EC5F3DE27CBE7655B73C2C623E786F1
  ~~~~~
  IPsec Driver:	Success and Failure


vuln_id: V-254327
rule_id: SV-254327r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 65E40F6B959EF218D68DFC455C5196DC70924EDC
  ~~~~~
  Other System Events:	Success and Failure


vuln_id: V-254329
rule_id: SV-254329r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 74302EBA5C1C13D9FC589EBADB52C502534366D6
  ~~~~~
  Security State Change:	Success


vuln_id: V-254330
rule_id: SV-254330r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7571EDCEC40BA7B892BBFFB7B1A91933D6B26E8D
  ~~~~~
  Security System Extension:	Success


vuln_id: V-254331
rule_id: SV-254331r958732_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BA1B5CB4CECAEB661B4B6DC8FB69F37F5D308239
  ~~~~~
  System Integrity:	Success and Failure


vuln_id: V-254333
rule_id: SV-254333r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F1FF27FC0FC899547BD03D4C8BD0FE36EE83FA4E
  ~~~~~
  'Prevent enabling lock screen slide show' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization\
  Value Name:	NoLockScreenSlideshow
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254334
rule_id: SV-254334r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1EDE9A591A79DC8BF4C1F654342D40768088ECD8
  ~~~~~
  'WDigest Authentication (disabling may require KB2871997)' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\Wdigest\
  Value Name:	UseLogonCredential
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254335
rule_id: SV-254335r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: FD2A5F481DC8E7F2CF188AA48C139FDEA170A28D
  ~~~~~
  'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\
  Value Name:	DisableIPSourceRouting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-254336
rule_id: SV-254336r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B01D70CC85ACFF0BB8A61E31234D618894184D3B
  ~~~~~
  'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\
  Value Name:	DisableIPSourceRouting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-254337
rule_id: SV-254337r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1DDC780C39BA1038E120F73A8B04C0E6786A7642
  ~~~~~
  'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\
  Value Name:	EnableICMPRedirect
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254338
rule_id: SV-254338r958902_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2C22458F77057B8B0299AC398322BD1B4C853C80
  ~~~~~
  'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netbt\Parameters\
  Value Name:	NoNameReleaseOnDemand
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254339
rule_id: SV-254339r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 82F1D332008FB8B34EBC506111C5A9D6D04B2E00
  ~~~~~
  'Enable insecure guest logons' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation\
  Value Name:	AllowInsecureGuestAuth
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254340
rule_id: SV-254340r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 129AAFAE3AF022AFE44F51ED28E32569CF7A0D22
  ~~~~~
  'Hardened UNC Paths' is configured properly.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths
  Value Name:	\\*\NETLOGON
  Value:		RequireMutualAuthentication=1, RequireIntegrity=1
  Type:		REG_SZ

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths
  Value Name:	\\*\SYSVOL
  Value:		RequireMutualAuthentication=1, RequireIntegrity=1
  Type:		REG_SZ


vuln_id: V-254341
rule_id: SV-254341r958422_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4DFC6BA75798E56910A33B9D96E6D2D420BC6756
  ~~~~~
  'Include command line in process creation events' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit\
  Value Name:	ProcessCreationIncludeCmdLine_Enabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254342
rule_id: SV-254342r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A6787BE9BF9EBC98B28F1CCF8F98F76B360CEEEB
  ~~~~~
  'Remote host allows delegation of non-exportable credentials' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation\
  Value Name:	AllowProtectedCreds
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254343
rule_id: SV-254343r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A35F1C37518BA5BE7F9CEF7DDAAE6530ED947399
  ~~~~~
  RequiredSecurityProperties:		1, 2
  VirtualizationBasedSecurityStatus:	2


vuln_id: V-254344
rule_id: SV-254344r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3B453E5CCCFF7EC01DEA2A73749BDB9C46225430
  ~~~~~
  'Boot-Start Driver Initialization Policy' is Configured

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Policies\EarlyLaunch\
  Value Name:	DriverLoadPolicy
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-254345
rule_id: SV-254345r1135378_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7905A44A409938687363A90FF0AA7E4DD50D87CF
  ~~~~~
  'Configure registry policy processing' is Enabled with 'Process even if the Group Policy objects have not changed'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}\
  Value Name:	NoGPOListChanges
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254346
rule_id: SV-254346r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 32CBA225876D2C05F8801F707AB4140F0F48A7A7
  ~~~~~
  'Turn off downloading of print drivers over HTTP' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers\
  Value Name:	DisableWebPnPDownload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254347
rule_id: SV-254347r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7B7637A41B7F21B0A1F1751BFA0D051BF866D05E
  ~~~~~
  'Turn off printing over HTTP' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers\
  Value Name:	DisableHTTPPrinting
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254348
rule_id: SV-254348r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1AE459ACF2E26EC676F7C66BD39065C48B525A12
  ~~~~~
  'Do not display network selection UI' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System\
  Value Name:	DontDisplayNetworkSelectionUI
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254349
rule_id: SV-254349r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1A590DAB7AE78E231C4BA125C070F448CA2B09D0
  ~~~~~
  'Require a password when a computer wakes (on battery)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51\
  Value Name:	DCSettingIndex
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254350
rule_id: SV-254350r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 78DC59725D3EA066501F07139D729AA0ED751AC4
  ~~~~~
  'Require a password when a computer wakes (plugged in)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51\
  Value Name:	ACSettingIndex
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254351
rule_id: SV-254351r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C098CF3CC287BA2ADF7ECCD0876CB0AF916DA7DD
  ~~~~~
  'Turn off Inventory Collector' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppCompat\
  Value Name:	DisableInventory
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254352
rule_id: SV-254352r958804_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 06CF0EC4F30E3C377A3E10B39BA0BD384D98F394
  ~~~~~
  'Disallow Autoplay for non-volume devices' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer\
  Value Name:	NoAutoplayfornonVolume
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254353
rule_id: SV-254353r958804_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 763263DA63BB845D32A031E492E9C3FA975310FB
  ~~~~~
  'Set the default behavior for AutoRun' is Enabled with 'Do not execute any autorun commands'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\
  Value Name:	NoAutorun
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254354
rule_id: SV-254354r958804_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: AE0235811E2BDD415A15CD26D20BB620C605AC2D
  ~~~~~
  'Turn off AutoPlay' is Enabled with 'All Drives'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\
  Value Name:	NoDriveTypeAutoRun
  Value:		0x000000ff (255)
  Type:		REG_DWORD


vuln_id: V-254355
rule_id: SV-254355r958518_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 79914B07D596B65F2BA8FB25AC11B5D2C9C745F8
  ~~~~~
  'Enumerate administrator accounts on elevation' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI\
  Value Name:	EnumerateAdministrators
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254356
rule_id: SV-254356r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 43A185A2A6BC079EB4766987471D21D43FB53698
  ~~~~~
  'Allow Diagnostic Data' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection\
  Value Name:	AllowTelemetry
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254357
rule_id: SV-254357r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E9B6549BAE42CBD670A0DBEA8CBF0FA02AA949CD
  ~~~~~
  'Download Mode' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization\
  Value Name:	DODownloadMode
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-254358
rule_id: SV-254358r958752_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E5D0915FC2A9906852D04841C613A85AAD0AFAD4
  ~~~~~
  'Specify the maximum log file size (KB)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application\
  Value Name:	MaxSize
  Value:		0x00008000 (32768)
  Type:		REG_DWORD


vuln_id: V-254359
rule_id: SV-254359r958752_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 202CE7E8F7DCFC453AA44AAEF3A9AB99C44A256F
  ~~~~~
  'Specify the maximum log file size (KB)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security\
  Value Name:	MaxSize
  Value:		0x00030000 (196608)
  Type:		REG_DWORD


vuln_id: V-254360
rule_id: SV-254360r958752_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 80DFF18057B3C208B441E0E6B593D20FFF279705
  ~~~~~
  'Specify the maximum log file size (KB)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\System\
  Value Name:	MaxSize
  Value:		0x00008000 (32768)
  Type:		REG_DWORD


vuln_id: V-254361
rule_id: SV-254361r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6A0C9BEA4C87F35E6833869813861CCC0549A4E2
  ~~~~~
  'Configure Windows Defender SmartScreen' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System\
  Value Name:	EnableSmartScreen
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254362
rule_id: SV-254362r958928_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B1047788DBBB2BA860895126C947CFD8500B09D5
  ~~~~~
  'Turn off Data Execution Prevention for Explorer' is Not Configured or Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer\
  Value Name:	NoDataExecutionPrevention
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254363
rule_id: SV-254363r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 596D29423B76A43C4DE1155D696635B51AB9ABD1
  ~~~~~
  'Turn off heap termination on corruption' is Not Configured or Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer\
  Value Name:	NoHeapTerminationOnCorruption
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254364
rule_id: SV-254364r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 87489D7F9A9940C8C12134B4F7357AF6745BAC28
  ~~~~~
  'Turn off shell protocol protected mode' is Not Configured or Disabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\
  Value Name:	PreXPSP2ShellProtocolBehavior
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254365
rule_id: SV-254365r1051096_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8A6F308A68898593F9FAE33E2F2B747F8F8D3C67
  ~~~~~
  'Do not allow passwords to be saved' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\
  Value Name:	DisablePasswordSaving
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254366
rule_id: SV-254366r1137695_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B60AF67D4B1D9F699B75CA09365CD481E215BDB7
  ~~~~~
  'Do not allow drive redirection' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\
  Value Name:	fDisableCdm
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254367
rule_id: SV-254367r1051097_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 0116030C4DA6A19D0E24E009C368077FB935D0E1
  ~~~~~
  'Always prompt for password upon connection' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\
  Value Name:	fPromptForPassword
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254368
rule_id: SV-254368r958408_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: D92475D9562B764F7346D35A421DD406D94DCD75
  ~~~~~
  'Require secure RPC communication' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\
  Value Name:	fEncryptRPCTraffic
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254369
rule_id: SV-254369r958408_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 9BB0D90CD86171E36FA3CD54874EC7BFE2008BEA
  ~~~~~
  'Set client connection encryption level' is Enabled with 'High Level'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\
  Value Name:	MinEncryptionLevel
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-254370
rule_id: SV-254370r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 0FA3BC5EFAAA7A686C34DDAE591C63015D264CF2
  ~~~~~
  'Prevent downloading of enclosures' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds\
  Value Name:	DisableEnclosureDownload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254371
rule_id: SV-254371r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: DBE3AE0F4C497C7AEAE60DED97155CCE2444E026
  ~~~~~
  'Turn on Basic feed authentication over HTTP' is Not Configured or Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds\
  Value Name:	AllowBasicAuthInClear
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254372
rule_id: SV-254372r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 90894DA38F8EC2761B825073AE30CB6514CE3091
  ~~~~~
  'Allow indexing of encrypted files' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search\
  Value Name:	AllowIndexingEncryptedStoresOrItems
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254373
rule_id: SV-254373r1051098_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BBBA6D48AAA246FAB71C6A830B701F777624C085
  ~~~~~
  'Allow user control over installs' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer\
  Value Name:	EnableUserControl
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254374
rule_id: SV-254374r1051099_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B8FA2EABE0FF7A96734CD88AEF585CD72E3FFAE8
  ~~~~~
  'Always install with elevated privileges' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer\
  Value Name:	AlwaysInstallElevated
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254375
rule_id: SV-254375r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1A73F057634CB5E21CD3588CC8DD087B7DE61450
  ~~~~~
  'Prevent Internet Explorer security prompt for Windows Installer scripts' is Not Configured or Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer\
  Value Name:	SafeForScripting
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254376
rule_id: SV-254376r991591_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 218FBFEB0FDC27DE759F73E5D5DA97E040455853
  ~~~~~
  'Sign-in last interactive user automatically after a system-initiated restart' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	DisableAutomaticRestartSignOn
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254377
rule_id: SV-254377r958422_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8077ADB516152411C7CDFF49D6CBB9D72C0C9EA8
  ~~~~~
  'Turn on PowerShell Script Block Logging' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging\
  Value Name:	EnableScriptBlockLogging
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254378
rule_id: SV-254378r958510_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E4E40CE41CC8DAC825405E07025044FB81EE5440
  ~~~~~
  'Allow Basic authentication' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client\
  Value Name:	AllowBasic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254379
rule_id: SV-254379r958848_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 263B3F3ADEFEEB444D7DB7C6A09E407E73BBA08C
  ~~~~~
  'Allow unencrypted traffic' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client\
  Value Name:	AllowUnencryptedTraffic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254380
rule_id: SV-254380r958510_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2BEC0AEE0C273F63E101B2083185E0AEF60BA726
  ~~~~~
  'Disallow Digest authentication' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client\
  Value Name:	AllowDigest
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254381
rule_id: SV-254381r958510_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 68310D9F3AC255CDE6A52457A3F8A1FBA287B140
  ~~~~~
  'Allow Basic authentication' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service\
  Value Name:	AllowBasic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254382
rule_id: SV-254382r958848_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 357A463A54C8BD409FB2CBE12890A8584E4AF139
  ~~~~~
  'Allow unencrypted traffic' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service\
  Value Name:	AllowUnencryptedTraffic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254383
rule_id: SV-254383r1051100_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7EB2124D3D256F0132552100281506BAD4398825
  ~~~~~
  'Disallow WinRM from storing RunAs credentials' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service\
  Value Name:	DisableRunAs
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254384
rule_id: SV-254384r958420_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C444D73491E68255626976B1DF5477CB27C7220F
  ~~~~~
  'Turn on PowerShell Transcription' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription\
  Value Name:	EnableTranscripting
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254385
rule_id: SV-254385r958726_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: F7DE991FB49346C9EC2F2DEEB9D564F37D7ACC9E
  ~~~~~
  System is a 'Member Server' so this requirement is NA.


vuln_id: V-254428
rule_id: SV-254428r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: CF7C91A195CBE710A8E0F73C0AAA4360670D7BAA
  ~~~~~
  The following are members of the local Administrators group:
  ---------------------
  Name:		SCHROEDER3\Server Administrator Group
  objectClass:	Group
  objectSID:	S-1-5-21-1160972651-4155981999-2770166294-1115

  Name:		SCHR-P3-DP-001\DOD_Admin
  objectClass:	User
  objectSID:	S-1-5-21-2359828523-3188837691-268305261-1000

  Name:		SCHR-P3-DP-001\X_Admin
  objectClass:	User
  objectSID:	S-1-5-21-2359828523-3188837691-268305261-500

comments:
  Verified that Windows Server 2022 only allows administrators responsible for the member server to have Administrator rights on the system. This is Not a Finding


vuln_id: V-254429
rule_id: SV-254429r958518_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 30E45018BB7651DB88A5241CEB1F4E1159C948E7
  ~~~~~
  'Apply UAC restrictions to local accounts on network logons' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	LocalAccountTokenFilterPolicy
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254430
rule_id: SV-254430r958478_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: ABC68409B29B6EC49A61BC75D73157070C3C31F0
  ~~~~~
  'Enumerate local users on domain-joined computers' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System\
  Value Name:	EnumerateLocalUsers
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254431
rule_id: SV-254431r971545_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 65E5F695A849838CF853B7D32CA2F7CE19D83A67
  ~~~~~
  'Restrict Unauthenticated RPC clients' is Enabled with 'Authenticated'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Rpc\
  Value Name:	RestrictRemoteClients
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254432
rule_id: SV-254432r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 28CC0C728D320C305B66377A1ED8B6C7583DBFE4
  ~~~~~
  'Interactive Logon: Number of previous logons to cache (in case Domain Controller is not available)' is 4

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
  Value Name:	CachedLogonsCount
  Value:		4
  Type:		REG_SZ


vuln_id: V-254433
rule_id: SV-254433r1106522_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 893BAD8BC491FFB6C7E3048B01AD96D0B7EF0DA7
  ~~~~~
  'Network access: Restrict clients allowed to make remote calls to SAM' is Edit Security

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\
  Value Name:	RestrictRemoteSAM
  Value:		O:BAG:BAD:(A;;RC;;;BA)
  Type:		REG_SZ


vuln_id: V-254434
rule_id: SV-254434r1137691_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 302709A83196FCC3F75108A1CD0F0A4A4BFBD945
  ~~~~~
  Access this computer from the network:

  BUILTIN\Administrators
  NT AUTHORITY\Authenticated Users


vuln_id: V-254435
rule_id: SV-254435r1137691_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2017821C4C79DB61FC5D00147D32549CD255D0CC
  ~~~~~
  Deny access to this computer from the network:

  BUILTIN\Guests
  NT AUTHORITY\Local account and member of Administrators group
  SCHROEDER3\Domain Admins
  SCHROEDER3\Enterprise Admins


vuln_id: V-254436
rule_id: SV-254436r1137691_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 03F4A332644912F7F95A7831218F109145CEA783
  ~~~~~
  Deny log on as a batch job:

  BUILTIN\Guests
  SCHROEDER3\Domain Admins
  SCHROEDER3\Enterprise Admins


vuln_id: V-254437
rule_id: SV-254437r1137691_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4294CFB5B18D0C418EF974E6E2005643F3B0500C
  ~~~~~
  Deny log on as a service:

  SCHROEDER3\Domain Admins
  SCHROEDER3\Enterprise Admins


vuln_id: V-254438
rule_id: SV-254438r1137691_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A6AB7925239BC754343973E4D286CFA0FC3409EB
  ~~~~~
  Deny log on locally:

  BUILTIN\Guests
  SCHROEDER3\Domain Admins
  SCHROEDER3\Enterprise Admins


vuln_id: V-254439
rule_id: SV-254439r958672_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 04FBE91CC35C10C7B519DF46BCEC005918F7B5E7
  ~~~~~
  Deny log on through Remote Desktop Services:

  BUILTIN\Guests
  NT AUTHORITY\Local account
  SCHROEDER3\Domain Admins
  SCHROEDER3\Enterprise Admins


vuln_id: V-254440
rule_id: SV-254440r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6386CA45E70EAC022EEE395ACF120AD858947656
  ~~~~~
  Enable computer and user accounts to be trusted for delegation:

  No objects assigned to this right.


vuln_id: V-254441
rule_id: SV-254441r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6771B96D1ED1098549965ED8F67FF9028082CC2A
  ~~~~~
  SecurityServicesRunning:		1, 2


vuln_id: V-254442
rule_id: SV-254442r958448_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1E639BE4EE5A1CDEB45CD6D11961572DC003871E
  ~~~~~
  Subject:		CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	D73CA91102A2204A36459ED32213B467D7CE97FB
  NotAfter:		12/30/2029
  Installed:		True

  Subject:		CN=DoD Root CA 4, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	B8269F25DBD937ECAFD4C35A9838571723F2D026
  NotAfter:		7/25/2032
  Installed:		True

  Subject:		CN=DoD Root CA 5, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	4ECB5CC3095670454DA1CBD410FC921F46B8564B
  NotAfter:		6/14/2041
  Installed:		True

  Subject:		CN=DoD Root CA 6, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	D37ECF61C0B4ED88681EF3630C4E2FC787B37AEF
  NotAfter:		1/24/2053
  Installed:		True


vuln_id: V-254443
rule_id: SV-254443r958448_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be OPEN on 03/05/2026
  ResultHash: 4982E06E870E9B395CD6921A477687F3A80D46EF
  ~~~~~
  Subject:		CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Issuer:		CN=DoD Interoperability Root CA 2, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	49CBE933151872E17C8EAE7F0ABA97FB610F6477
  NotAfter:		11/16/2024
  Installed:		False

comments:
  DoD Interoperability Root Certificate Authority (CA) cross-certificates is installed in the Untrusted Certificates Store on unclassified systems. This is Not a Finding


vuln_id: V-254444
rule_id: SV-254444r1081077_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A49AC51E65251963BCF59A4603952BF695EF12C6
  ~~~~~
  Subject:		CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Issuer:		CN=US DoD CCEB Interoperability Root CA 2, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	9B74964506C7ED9138070D08D5F8B969866560C8
  NotAfter:		7/18/2025
  Installed:		True

  Subject:		CN=DoD Root CA 6, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Issuer:		CN=US DoD CCEB Interoperability Root CA 2, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	D471CA32F7A692CE6CBB6196BD3377FE4DBCD106
  NotAfter:		7/18/2026
  Installed:		True


vuln_id: V-254445
rule_id: SV-254445r958504_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4B36C634C9C40B0094FF0676E2CD029965645B6F
  ~~~~~
  'Accounts: Guest account status' is Disabled

  EnableGuestAccount: 0


vuln_id: V-254446
rule_id: SV-254446r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7AC1D020AB6148539D57E4FB73B39D6CD29DBDBF
  ~~~~~
  'Accounts: Limit local account use of blank passwords to console logon only' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\
  Value Name:	LimitBlankPasswordUse
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254447
rule_id: SV-254447r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 938B5D59F6EEE4836658D1458955462833BA0985
  ~~~~~
  'Accounts: Rename administrator account' is Configured

  NewAdministratorName: X_Admin


vuln_id: V-254448
rule_id: SV-254448r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 65D963B5E42EA95D69DDA5CE0A378E6B2420D343
  ~~~~~
  'Accounts: Rename guest account' is Configured

  NewGuestName: Visitor


vuln_id: V-254449
rule_id: SV-254449r958442_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7AFC3CE567F252B2BE09FC92C1D55F904F5B444F
  ~~~~~
  'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\
  Value Name:	SCENoApplyLegacyAuditPolicy
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254450
rule_id: SV-254450r958908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 768851CC97ECEB9EB63B747FCDA75CF7978BB583
  ~~~~~
  'Domain member: Digitally encrypt or sign secure channel data (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\
  Value Name:	RequireSignOrSeal
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254451
rule_id: SV-254451r958908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F343CF439907225DA5621C3F34434F566462DD05
  ~~~~~
  'Domain member: Digitally encrypt secure channel data (when possible)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\
  Value Name:	SealSecureChannel
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254452
rule_id: SV-254452r958908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 36BAC351878C6C80896B265F9F8C16749B276082
  ~~~~~
  'Domain member: Digitally sign secure channel data (when possible)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\
  Value Name:	SignSecureChannel
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254453
rule_id: SV-254453r971545_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BB635AA6841E00077B664A8F94678C4D24F2AACE
  ~~~~~
  'Domain member: Disable machine account password changes' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\
  Value Name:	DisablePasswordChange
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254454
rule_id: SV-254454r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: FD4D63A71698777BC7EC42B1C996A91D8276371E
  ~~~~~
  'Domain member: Maximum machine account password age' is 30 with '0'

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\
  Value Name:	MaximumPasswordAge
  Value:		0x0000001e (30)
  Type:		REG_DWORD


vuln_id: V-254455
rule_id: SV-254455r958908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 7A8877B1B464B449B4A82D21A20FE09800FBA1D8
  ~~~~~
  'Domain member: Require strong (Windows 2000 or Later) session key' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\
  Value Name:	RequireStrongKey
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254456
rule_id: SV-254456r958400_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 106D0A1D24637F2A65C89B4F7DA77EF34A14C166
  ~~~~~
  'Interactive logon: Machine inactivity limit' is 900 with '0'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	InactivityTimeoutSecs
  Value:		0x00000384 (900)
  Type:		REG_DWORD


vuln_id: V-254457
rule_id: SV-254457r958390_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 018D3D51B44A64283ACD50EE838B99BC47F1811C
  ~~~~~
  'Interactive logon: Message text for users attempting to log on' is Configured Properly

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	LegalNoticeText
  Value: 		You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
  By using this IS (which includes any device attached to this IS), you consent to the following conditions:
  -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
  -At any time, the USG may inspect and seize data stored on this IS.
  -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
  -This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
  -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.
  Type:		REG_SZ


vuln_id: V-254458
rule_id: SV-254458r958390_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 94854FF1D86F23AA1E8C8DA8BD0A2FDD0916B300
  ~~~~~
  'Interactive logon: Message title for users attempting to log on' is Configured Properly

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	LegalNoticeCaption
  Value:		US Department of Defense Warning Statement
  Type:		REG_SZ


vuln_id: V-254459
rule_id: SV-254459r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8B161028B52B049F95101C070A22F225127B9051
  ~~~~~
  'Interactive logon: Smart card removal behavior' is 'Lock Workstation' or 'Force Logoff'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
  Value Name:	scremoveoption
  Value:		1
  Type:		REG_SZ


vuln_id: V-254460
rule_id: SV-254460r958908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F3C1E8E33099B45BDB212B0519A2F33B9B2B5171
  ~~~~~
  'Microsoft network client: Digitally sign communications (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters\
  Value Name:	RequireSecuritySignature
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254461
rule_id: SV-254461r958908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 8AE5A1136C75ABE6423313D703CC15C146488D7A
  ~~~~~
  'Microsoft network client: Digitally sign communications (if server agrees)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters\
  Value Name:	EnableSecuritySignature
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254462
rule_id: SV-254462r987796_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: D6A4C224ED5457C6DAF9850BB9D0BC40612C173A
  ~~~~~
  'Microsoft Network Client: Send unencrypted password to third-party SMB servers' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters\
  Value Name:	EnablePlainTextPassword
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254463
rule_id: SV-254463r958908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 899E5D4268B8FD2F2EB44326E2D59EE9E6C50F76
  ~~~~~
  'Microsoft network server: Digitally sign communications (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\
  Value Name:	RequireSecuritySignature
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254464
rule_id: SV-254464r958908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: FD8E0D554726CFB8905B2B726A4944CC4D7ACE69
  ~~~~~
  'Microsoft network server: Digitally sign communications (if client agrees)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\
  Value Name:	EnableSecuritySignature
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254465
rule_id: SV-254465r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: A51800A7EB71E8DB49CCE183B779719692119D7F
  ~~~~~
  'Network access: Allow anonymous SID/Name translation' is Disabled

  LSAAnonymousNameLookup: 0


vuln_id: V-254466
rule_id: SV-254466r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 626DA34A65C05C1C220101534FE1788BBD495E56
  ~~~~~
  'Network access: Do not allow anonymous enumeration of SAM accounts' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\
  Value Name:	RestrictAnonymousSAM
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254467
rule_id: SV-254467r1137695_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4B5021F1C8C390A907EFF7C0B541B8772B1C668D
  ~~~~~
  'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\
  Value Name:	RestrictAnonymous
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254468
rule_id: SV-254468r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: AC46176E36B5AD551B2D02BEF397E0465B660237
  ~~~~~
  'Network access: Let Everyone permissions apply to anonymous users' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\
  Value Name:	EveryoneIncludesAnonymous
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254469
rule_id: SV-254469r1137695_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E07BBC4D71D24D912C7B7521C5945409D833E711
  ~~~~~
  'Network access: Restrict anonymous access to Named Pipes and Shares' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\
  Value Name:	RestrictNullSessAccess
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254470
rule_id: SV-254470r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 164DB84D831559475134E000319130634298EA3B
  ~~~~~
  'Network security: Allow Local System to use computer identity for NTLM' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\LSA\
  Value Name:	UseMachineId
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254471
rule_id: SV-254471r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 5D6C0BC2C8171041F930D845BE80EE2BD8659E12
  ~~~~~
  'Network security: Allow LocalSystem NULL session fallback' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\LSA\MSV1_0\
  Value Name:	allownullsessionfallback
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254472
rule_id: SV-254472r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: EAB0D07DEDC065B44229C9732CF27E1EE69C9BC7
  ~~~~~
  'Network security: Allow PKU2U authentication requests to this computer to use online identities' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\LSA\pku2u\
  Value Name:	AllowOnlineID
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254473
rule_id: SV-254473r971535_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: EB2E1C21CBD2C88EBB89CDF510B713F7A18E062B
  ~~~~~
  'Network security: Configure encryption types allowed for Kerberos' is Enabled with 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, and Future encryption types'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters\
  Value Name:	SupportedEncryptionTypes
  Value:		0x7ffffff8 (2147483640)
  Type:		REG_DWORD


vuln_id: V-254474
rule_id: SV-254474r1051107_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 59F308CA0C17B53FC330F51C46C1E3AB01AF5CBA
  ~~~~~
  'Network security: Do not store LAN Manager hash value on next password change' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\
  Value Name:	NoLMHash
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254475
rule_id: SV-254475r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1CC5D989E6B73511369D6A08B8D0016672826C20
  ~~~~~
  'Network security: LAN Manager authentication level' is Send NTLMv2 response only. Refuse LM & NTLM

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\
  Value Name:	LmCompatibilityLevel
  Value:		0x00000005 (5)
  Type:		REG_DWORD


vuln_id: V-254476
rule_id: SV-254476r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: CFE3936D1DF99F42BB95CBA55FD8FE4C27770EE2
  ~~~~~
  'Network security: LDAP client signing requirements' is Negotiate signing

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LDAP\
  Value Name:	LDAPClientIntegrity
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254477
rule_id: SV-254477r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6802EBE26CD5FF48DF408F26F7CB8084098AB071
  ~~~~~
  'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is Configured with 'Require NTLMv2 session security' and 'Require 128-bit encryption'

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\
  Value Name:	NTLMMinClientSec
  Value:		0x20080000 (537395200)
  Type:		REG_DWORD


vuln_id: V-254478
rule_id: SV-254478r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: DC6D70BA7750B4643BD7CE13AF8B68FBA994B3DD
  ~~~~~
  'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is Configured with 'Require NTLMv2 session security' and 'Require 128-bit encryption'

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\
  Value Name:	NTLMMinServerSec
  Value:		0x20080000 (537395200)
  Type:		REG_DWORD


vuln_id: V-254479
rule_id: SV-254479r958450_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E10C5B4F863FA065AD5387F2743A222FA15AA5E8
  ~~~~~
  'System cryptography: Force strong key protection for user keys stored on the computer' is Configured

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\
  Value Name:	ForceKeyProtection
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-254480
rule_id: SV-254480r1137699_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be OPEN on 03/05/2026
  ResultHash: E46D3484D8944AFFA46967D60ACD605B428DDB1D
  ~~~~~
  'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' is NOT Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\
  Value Name:	Enabled
  Value:		0x00000000 (0) [Expected 1]
  Type:		REG_DWORD

comments:
  Manual check shows correct setting is enabled by Group Policy.

  Registry Hive: HKEY_LOCAL_MACHINE
  Registry Path: \SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\

  Value Name: Enabled

  Value Type: REG_DWORD
  Value: 0x00000001 (1)

  This is Not a Finding


vuln_id: V-254481
rule_id: SV-254481r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BFB64B7D780EA1E5C79D016BA948BBC98408343C
  ~~~~~
  'System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\
  Value Name:	ProtectionMode
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254482
rule_id: SV-254482r1051108_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 70E59D3D7BCF2AFB0B1B2813244D3E2B6DE68BD5
  ~~~~~
  'User Account Control: Admin Approval Mode for the Built-in Administrator account' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	FilterAdministratorToken
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254483
rule_id: SV-254483r958518_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3EB1B083F7DF5FA8446DC810CB471A52F4C7F8A5
  ~~~~~
  'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	EnableUIADesktopToggle
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254484
rule_id: SV-254484r958518_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1DED330A39AA7F6CAC7DF413BA95D334BDB7FCD9
  ~~~~~
  'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is Configured

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	ConsentPromptBehaviorAdmin
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-254485
rule_id: SV-254485r1051109_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: BE525AED7069FB59A3EAC5D0AF05F4EE40A99E22
  ~~~~~
  'User Account Control: Behavior of the elevation prompt for standard users' is Configured

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	ConsentPromptBehaviorUser
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-254486
rule_id: SV-254486r958518_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: C5D7BBC45FF654CBF4E175605BDC5FD7B063BBDB
  ~~~~~
  'User Account Control: Detect application installations and prompt for elevation' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	EnableInstallerDetection
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254487
rule_id: SV-254487r958518_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 06A665D592B4B23BCFB8A09B17AFF2A0D38F7E7D
  ~~~~~
  'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	EnableSecureUIAPaths
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254488
rule_id: SV-254488r1051110_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be OPEN on 03/05/2026
  ResultHash: 357698FA2953D54C7396A10623B6A500DB0F3D95
  ~~~~~
  'User Account Control: Run all administrators in Admin Approval Mode' is NOT Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	EnableLUA
  Value:		0x00000000 (0) [Expected 1]
  Type:		REG_DWORD

comments:
  Manual check shows correct setting is enabled by Group Policy.

  Value Name: EnableLUA

  Value Type: REG_DWORD
  Value: 0x00000001 (1)

  This is Not a Finding


vuln_id: V-254489
rule_id: SV-254489r958518_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3F065E81CCABC3C5F47A5BAE70F17477E17BB4EA
  ~~~~~
  'User Account Control: Virtualize file and registry write failures to per-user locations' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
  Value Name:	EnableVirtualization
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-254490
rule_id: SV-254490r991589_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  Username: SCHROEDER3\S.Admin
  UserSID: S-1-5-21-1160972651-4155981999-2770166294-1108
  ResultHash: E1E8733E0EB898F9D2EF428AC96620439C92F3E6
  ~~~~~
  'Do not preserve zone information in file attachments' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
  Value Name:	SaveZoneInformation (Not found)


vuln_id: V-254491
rule_id: SV-254491r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 87F79F66720D9E2E7AA2D4F0BD4E49B75FB81A54
  ~~~~~
  Access Credential Manager as a trusted caller:

  No objects assigned to this right.


vuln_id: V-254492
rule_id: SV-254492r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: FE3BC21CE05FC8AF06B5779CBF8444CACC0434C3
  ~~~~~
  Act as part of the operating system:

  No objects assigned to this right.


vuln_id: V-254493
rule_id: SV-254493r1137691_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 078AAF9877C8DD4E87675C8D70F3B334B130B1F6
  ~~~~~
  Allow log on locally:

  BUILTIN\Administrators


vuln_id: V-254494
rule_id: SV-254494r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: FE97405F6D28A745E95E87B5555D354412968910
  ~~~~~
  Back up files and directories:

  BUILTIN\Administrators


vuln_id: V-254495
rule_id: SV-254495r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 392F23BFEA1FFA843FBED2A87296251BF545F4E6
  ~~~~~
  Create a pagefile:

  BUILTIN\Administrators


vuln_id: V-254496
rule_id: SV-254496r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: DC364635E02E4550D6A89063BCA91A5342767023
  ~~~~~
  Create a token object:

  No objects assigned to this right.


vuln_id: V-254497
rule_id: SV-254497r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 1B5B4C099509D3018C425654D2D4FB7E1B14B154
  ~~~~~
  Create global objects:

  BUILTIN\Administrators
  NT AUTHORITY\LOCAL SERVICE
  NT AUTHORITY\NETWORK SERVICE
  NT AUTHORITY\SERVICE


vuln_id: V-254498
rule_id: SV-254498r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 9E9F312FE6D327D0F8B24DB218DD2C4C9713AAB7
  ~~~~~
  Create permanent shared objects:

  No objects assigned to this right.


vuln_id: V-254499
rule_id: SV-254499r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3CD4E9016C9F359F5DA68C3C0F6C5C9FA18CC580
  ~~~~~
  Create symbolic links:

  BUILTIN\Administrators


vuln_id: V-254500
rule_id: SV-254500r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E5554733A1BAD484044698CCA1825B99C1BA28E2
  ~~~~~
  Debug programs:

  BUILTIN\Administrators


vuln_id: V-254501
rule_id: SV-254501r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B79C184446E73079F465BE23CEE82A18CF0870A8
  ~~~~~
  Force shutdown from a remote system:

  BUILTIN\Administrators


vuln_id: V-254502
rule_id: SV-254502r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2104116F3E578932C6928A7C2DD8A48B8D144C66
  ~~~~~
  Generate security audits:

  NT AUTHORITY\LOCAL SERVICE
  NT AUTHORITY\NETWORK SERVICE


vuln_id: V-254503
rule_id: SV-254503r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 3BB4559735E48794BD8165BD31FB3B91B5C97D70
  ~~~~~
  Impersonate a client after authentication:

  BUILTIN\Administrators
  NT AUTHORITY\LOCAL SERVICE
  NT AUTHORITY\NETWORK SERVICE
  NT AUTHORITY\SERVICE


vuln_id: V-254504
rule_id: SV-254504r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 71A81E9CA36B32AAB1ED8E7CD3EBF64365CC50CA
  ~~~~~
  Increase scheduling priority:

  BUILTIN\Administrators


vuln_id: V-254505
rule_id: SV-254505r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 59F1C37C37F91193AA2671D4DEFF065B9A2BCA05
  ~~~~~
  Load and unload device drivers:

  BUILTIN\Administrators


vuln_id: V-254506
rule_id: SV-254506r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: AA88E2DBE75A77500E026C0631E31EB834CB2521
  ~~~~~
  Lock pages in memory:

  No objects assigned to this right.


vuln_id: V-254507
rule_id: SV-254507r958434_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F506B79F7BAE0B4B9C26A872BD506286097A5492
  ~~~~~
  Manage auditing and security log:

  BUILTIN\Administrators


vuln_id: V-254508
rule_id: SV-254508r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 17C44C7943BC8AAB7D21F72E23CEC41AFE1A9F0C
  ~~~~~
  Modify firmware environment values:

  BUILTIN\Administrators


vuln_id: V-254509
rule_id: SV-254509r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: CF44D7B584EFD68DFC4D843B21D491E2F6848B64
  ~~~~~
  Perform volume maintenance tasks:

  BUILTIN\Administrators


vuln_id: V-254510
rule_id: SV-254510r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 15D359836034C5F1C910175CB6D5F67772067F27
  ~~~~~
  Profile single process:

  BUILTIN\Administrators


vuln_id: V-254511
rule_id: SV-254511r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: F888137124F8E9A99188DF6656EBE43CAAE52E7E
  ~~~~~
  Restore files and directories:

  BUILTIN\Administrators


vuln_id: V-254512
rule_id: SV-254512r958726_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2EE38D6B4E98B44453F4F74A2761EDEB80FBC3B1
  ~~~~~
  Take ownership of files or other objects:

  BUILTIN\Administrators


vuln_id: V-278942
rule_id: SV-278942r1135355_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 32DC3F7100D45592B3F29D4AE22539CF53C74144
  ~~~~~
  File System:	Success and Failure


vuln_id: V-278944
rule_id: SV-278944r1135361_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 2A5E8BE97C840AD2234C85F56C64FD8BCA308F03
  ~~~~~
  Handle Manipulation:	Success and Failure


vuln_id: V-278946
rule_id: SV-278946r1135367_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 15:44:32
updated_at: 2026-03-12 15:44:32
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-WindowsServer2022_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 0C7E32035E54411B6E149335F5BF0ADE578354B5
  ~~~~~
  Registry:	Success and Failure


vuln_id: V-225223
rule_id: SV-225223r961038_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: B3CB706A6ADDE1748C32DB756BC478CBF6005E4B
  ~~~~~
  HKLM:\SOFTWARE\Microsoft\StrongName\Verification exists but no values were found within.


vuln_id: V-225224
rule_id: SV-225224r961038_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 76CBF5A7C87686EA51FA77410808A92FDB3A947F
  ~~~~~
  All user profiles have State configured to 0x00023c00


vuln_id: V-225225
rule_id: SV-225225r961038_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: 0E4360D1A69538A55E456743C4260C8FCE83E079
  ~~~~~
  Installed .NET version is '4.8'.  This check only applies to .NET version 4.0 specifically so this requirement is NA.


vuln_id: V-225228
rule_id: SV-225228r1043178_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: 5484AA1F334AF98C429F840221EEC8B7ADB0A2EE
  ~~~~~
  No machine.config or *.exe.config files found using .NET remoting with HTTP channel so this requirement is NA.


vuln_id: V-225229
rule_id: SV-225229r1107247_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 69B5FA47DB52CEE6EE623CD1C66B970ACFE69DFB
  ~~~~~
  Operating system:
  ---------------------------------
  Name:	Microsoft Windows Server 2022 Standard [21H2]
  Version:	10.0.20348

  Enabled .NET Windows features:
  ---------------------------------
  NET-Framework-45-Core

  Library files:
  ---------------------------------
  File Path:			C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
  Version:			4.8.4795.0

  File Path:			C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
  Version:			4.8.4795.0

  Ref - https://learn.microsoft.com/en-us/lifecycle/products/microsoft-net-framework

  Ref - https://support.microsoft.com/en-us/topic/clarification-on-the-support-life-cycle-for-the-net-framework-3-5-the-net-framework-3-0-and-the-net-framework-2-0-28621c7b-226c-7682-27f5-2e2a42db39c3


vuln_id: V-225230
rule_id: SV-225230r961908_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 665ECD2BE03F9086D5C3B003C3B3238D2C474D25
  ~~~~~
  No machine.config or *.exe.config files found with 'enforceFIPSPolicy enabled=false'.


vuln_id: V-225231
rule_id: SV-225231r961038_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: E28F7B07BF034968DDD074235F2D4C0EFC0E8F76
  ~~~~~
  Registry Path:	HKLM:\SOFTWARE\Microsoft\.NETFramework
  Value Name:	AllowStrongNameBypass
  Value:		0x00000000 (0)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework
  Value Name:	AllowStrongNameBypass
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-225233
rule_id: SV-225233r961608_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 6CC95A95DACFD9A95160D8D82AE7400D383C1A8D
  ~~~~~
  No *.exe.config files found with 'loadFromRemoteSources enabled=true'.


vuln_id: V-225234
rule_id: SV-225234r961863_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: D494EFC0B5BFFA0F47A4414E95B31461DB797F2D
  ~~~~~
  No machine.config or *.exe.config files found with 'defaultProxy enabled=false' or with 'bypasslist', 'module', or 'proxy' elements.


vuln_id: V-225235
rule_id: SV-225235r960891_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 337EA4CB8826346C79B61FFD2C48107B8F2246C3
  ~~~~~
  No machine.config or *.exe.config files found with 'etwEnable enabled=false'.


vuln_id: V-225236
rule_id: SV-225236r1069477_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 4E9D9F9778F6BF1402126A5E6E14400D9AF77B9C
  ~~~~~
  No applications found requiring .NET 4.0 specifically.


vuln_id: V-225237
rule_id: SV-225237r1043178_rule
status: Not_Applicable
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT APPLICABLE on 03/05/2026
  ResultHash: 499D611575281956E8E80B6EFACA64CD0F81EBAD
  ~~~~~
  No machine.config or *.exe.config files found using .NET remoting with TCP channel so this requirement is NA.


vuln_id: V-225238
rule_id: SV-225238r1069480_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 23C37571322EA7216F197978D4B3FF97743E9C71
  ~~~~~
  .NET Framework 4 version is 4.6 or later.

  Registry Path:	HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
  Value Name:	SystemDefaultTlsVersions
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
  Value Name:	SystemDefaultTlsVersions
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-218786
rule_id: SV-218786r1022652_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be OPEN on 03/05/2026
  ResultHash: 6A6094447CB8DE66FC6303CBDD8749BE276169CF
  ~~~~~
  File is the only option selected.

comments:
  Manual check shows settings as follows:

  Both ETW and Log file logging are enabled.

  This is Not a Finding


vuln_id: V-218788
rule_id: SV-218788r1156543_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be OPEN on 03/05/2026
  ResultHash: 7599E6F84AF0FE02631E378C3BDEFF3AC6CE19D6
  ~~~~~
  Log format is 'W3C'

  The 'Request Header >> Connection' custom field is NOT configured.

  The 'Request Header >> Warning' custom field is NOT configured.

comments:
  Log format is 'W3C'

  The 'Request Header >> Connection' custom field is configured.

  The 'Request Header >> Warning' custom field is configured.

  This is Not a Finding


vuln_id: V-218789
rule_id: SV-218789r1156546_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be OPEN on 03/05/2026
  ResultHash: C3C26BB04CA1EEAB0A14FFB0A603274C530242F3
  ~~~~~
  Log format is 'W3C'

  User Agent, User Name, and Referrer are all logged.

  The 'Request Header >> Authorization' custom field is NOT configured.

  The 'Response Header >> Content-Type' custom field is NOT configured.

comments:
  Log format is 'W3C'

  User Agent, User Name, and Referrer are all logged.

  The 'Request Header >> Authorization' custom field is configured.

  The 'Response Header >> Content-Type' custom field is configured.

  This is Not a Finding


vuln_id: V-218790
rule_id: SV-218790r1067580_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 47C2704EC787A78914769229C4FEA868D5EB6FA8
  ~~~~~
  Path:			C:\inetpub\logs\LogFiles
  OverallState:	Less restrictive than Expected [finding]
  Compliance:	Not Compliant
  Unexpected rules...
  ---------------------
  State:		LessRestrictive
  Compliant:	False
  Identity:		CREATOR OWNER
  Type:		Allow
  Basic:		FullControl
  Expected:		N/A
  Advanced:	AppendData, ChangePermissions, CreateDirectories, CreateFiles, Delete, DeleteSubdirectoriesAndFiles, ExecuteFile, ListDirectory, ReadAttributes, ReadData, ReadExtendedAttributes, ReadPermissions, TakeOwnership, Traverse, WriteAttributes, WriteData, WriteExtendedAttributes
  Expected:		
  Inherited:		C:\inetpub\logs
  AppliesTo:	Subfolders, Files
  Summary:		Unexpected Rule: A rule with rights 'FullControl' was found on the system but was not defined in the expectation.

  State:		LessRestrictive
  Compliant:	False
  Identity:		NT SERVICE\TrustedInstaller
  Type:		Allow
  Basic:		FullControl
  Expected:		N/A
  Advanced:	AppendData, ChangePermissions, CreateDirectories, CreateFiles, Delete, DeleteSubdirectoriesAndFiles, ExecuteFile, ListDirectory, ReadAttributes, ReadData, ReadExtendedAttributes, ReadPermissions, TakeOwnership, Traverse, WriteAttributes, WriteData, WriteExtendedAttributes
  Expected:		
  Inherited:		C:\inetpub\logs
  AppliesTo:	This, Subfolders, Files
  Summary:		Unexpected Rule: A rule with rights 'FullControl' was found on the system but was not defined in the expectation.
  ---------------------

comments:
  Log file access is restricted only authorized system accounts have access to IIS log files.  This is Not a Finding


vuln_id: V-218791
rule_id: SV-218791r960948_rule
status: NotAFinding
comments: Verified the paths of all log files are part of the system backup. This is Not a Finding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 74E69E807F3DCC8CA324A8C5947BC62D9FE1A815
  ~~~~~
  Log Directory: %SystemDrive%\inetpub\logs\LogFiles

  Ensure the logs in the directory above are being backed up.


vuln_id: V-218792
rule_id: SV-218792r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
comments:
  Ensured that user management for hosted applications is performed outside of the IIS 10.0 web server. Utilized enterprise-wide user management solutions, such as LDAP or Active Directory, to handle user authentication and management. This is Not a Finding


vuln_id: V-218793
rule_id: SV-218793r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 03/05/2026:
  ResultHash: 909864146B7EF18AC7E6CCAEB573BFB88320271A
  ~~~~~
  Software installed on this system:

  ActivID ActivClient x64
  Axway Desktop Validator
  CRLAutoCache
  DoD Secure Host Baseline Server
  InstallRoot
  Microsoft Edge
  Microsoft NetBanner
  Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130
  Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33130
  STIG Viewer 3 (Machine)
  Veritas Backup Exec Remote Agent for Windows
  WinZip 23.0

comments:
  Ensured that the IIS 10.0 web server contains only the functions necessary for its operation. This involved removing or disabling any unnecessary features, services, and modules to minimize potential security risks. This is Not a Finding


vuln_id: V-218794
rule_id: SV-218794r960963_rule
status: NotAFinding
hostname: SCHR-P3-DP-001
host_ip: 164.231.170.44
workflow_status: Open
created_at: 2026-03-12 19:38:14
updated_at: 2026-03-12 19:38:14
finding_details:
  Evaluate-STIG 1.2601.0 (Scan-IIS10_0_Server_Checks) found this to be NOT A FINDING on 03/05/2026
  ResultHash: 5ACA563509DF0C703A464BA6BDCBE01BACEB7FD1
  ~~~~~
  Application Request Routing Cache is not installed.


