Microsoft Windows 10 Security Technical Implementation Guide

The Microsoft Windows 10 Security Technical Implementation Guide (V3 R6) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R6

CurrentPublished Mon Jan 05 2026

Windows 10 systems must use either Group Policy or an approved Mobile Device Management (MDM) product to enforce STIG compliance.

Microsoft Windows 10 Security Technical Implementation Guide

Assessment Title

Rule Text

Windows 10 systems must use either Group Policy or an approved Mobile Device Management (MDM) product to enforce STIG compliance.

Description

Discussion Text

Without Windows 10 systems being managed, devices could be rogue and become targets of an attacker.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-268319

Rule

SV-268319r1135263_rule

Severity

medium

Rule Version

WN10-CC-000063

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the Windows 10 system is receiving policy from either Group Policy or an MDM with the following steps:

From a command line or PowerShell:

gpresult /R
OS Configuration: Member Workstation

If the system is not being managed by GPO, ask the administrator to indicate which MDM is managing the device.

From PowerShell: Get-Service -Name "IntuneManagementExtension"

If the Windows 10 system is not receiving policy from either Group Policy or an MDM, this is a finding.

This is NA for standalone, nondomain-joined systems.

Implementation Procedure

Fix Text

Configure the Windows 10 system to use either Group Policy or an approved MDM product to enforce STIG compliance.

STIG check 258 of 267 in the Microsoft Windows 10 STIG checklist

← Previous · V-268315Copilot must be disabled for Windows 10.Next · V-278918 →Windows 10 must be configured to audit file system failures.