Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
2,626 rules foundof 11,219Page 2 of 106
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-WIN10-2.2.12 | Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.13 | Ensure 'Create permanent shared objects' is set to 'No One'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.14 | Ensure 'Create symbolic links' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.15 | Ensure 'Debug programs' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.16 | Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.17 | Ensure 'Deny log on as a batch job' to include 'Guests'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.18 | Ensure 'Deny log on as a service' to include 'Guests'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.19 | Ensure 'Deny log on locally' to include 'Guests'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.20 | Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.21 | Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.22 | Ensure 'Force shutdown from a remote system' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.23 | Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.24 | Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.25 | Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.26 | Ensure 'Load and unload device drivers' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.27 | Ensure 'Lock pages in memory' is set to 'No One'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.30 | Ensure 'Manage auditing and security log' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.31 | Ensure 'Modify an object label' is set to 'No One'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.32 | Ensure 'Modify firmware environment values' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.33 | Ensure 'Perform volume maintenance tasks' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.34 | Ensure 'Profile single process' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.35 | Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.36 | Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.37 | Ensure 'Restore files and directories' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.38 | Ensure 'Shut down the system' is set to 'Administrators, Users'windows · Level 1 | windows | High | 1 | Automated |