Change Log
Item Changed
DoD Windows Defender Antivirus STIG
Computer v1r1
DoD Windows 7 v1r27 GPO Backups
DoD Windows 7 v1r27 GPO Reports
DoD Windows 8 and 8.1 v1r18 GPO
Backups
DoD Windows 8 and 8.1 v1r18 GPO
Reports
DoD Windows 10 v1r10 GPO Backups
DoD Windows 10 v1r10 GPO Reports
DoD Windows Server 2008 R2 Domain
Controller STIG Computer v1r23 GPO
Backup
DoD Windows Server 2008 R2 Domain
Controller STIG Computer v1r23 GPO
Report
DoD Windows Server 2008 R2 Domain
Controller STIG User v1r23 GPO
Backup
DoD Windows Server 2008 R2 Domain
Controller STIG User v1r23 GPO Report
DoD Windows Server 2008 R2 Domain
Controller v1r23 Checklist
DoD Windows Server 2008 R2 Member
Server STIG Computer v1r23 GPO
Backup
DoD Windows Server 2008 R2 Member
Server STIG Computer v1r23 GPO
Reports
DoD Windows Server 2012 R2 Domain
Controller STIG Computer v2r9 GPO
Backup
DoD Windows Server 2012 R2 Domain
Controller STIG Computer v2r9 GPO
Report
DoD Windows Server 2012 R2 Domain
Controller STIG User v2r9 GPO Backup
DoD Windows Server 2012 R2 Domain
Description of Change Change
Date
Initial Release 1 Aug 17
Addition of Windows Defender Antivirus STIG 7 Sept 17
GPO Backup, GPO Report, Checklist file, WMI
Filter
Modified Administrator rename account from 7 Sept 17
Dod_Admin to X_Admin
Update to GPO Report to reflect account 7 Sept 17
rename within GPO
Modified Administrator rename account from 7 Sept 17
Dod_Admin to X_Admin
Update to GPO Report to reflect account 7 Sept 17
rename within GPO
Modified Administrator rename account from 7 Sept 17
Dod_Admin to X_Admin
Update to GPO Report to reflect account 7 Sept 17
rename within GPO
Modified DC GPO to include all settings. Allows 7 Sept 17
administrator to apply single GPO instead of
applying both member server and DC GPOs
Update to GPO Report 7 Sept 17
Added DC User GPO Backup 7 Sept 17
Add DC User GPO Report 7 Sept 17
Update to DC Checklist 7 Sept 17
Modified Administrator rename account from 7 Sept 17
Dod_Admin to X_Admin
Update to GPO Report to reflect account 7 Sept 17
rename within GPO
Modified DC GPO to include all settings. Allows 7 Sept 17
administrator to apply single GPO instead of
applying both member server and DC GPOs
Update to GPO Report 7 Sept 17
Added DC User GPO Backup 7 Sept 17
Add DC User GPO Report 7 Sept 17
Controller STIG User v2r9 GPO Report
DoD Windows Server 2012 R2 Domain
Controller v2r9 Checklist
DoD Windows Server 2012 R2 Member
Server STIG Computer v2r9 GPO
Backups
DoD Windows Server 2012 R2 Member
Server STIG Computer v2r9 GPO
Report
DoD Windows Server 2016 Domain
Controller STIG Computer v1r2 GPO
Backup
DoD Windows Server 2016 Domain
Controller STIG Computer v1r2 GPO
Reports
DoD Windows Server 2016 Domain
Controller STIG User v1r2 GPO Backups
DoD Windows Server 2016 Domain
Controller STIG User v1r2 GPO Reports
DoD Windows Server 2016 Domain
Controller v1r2 Checklist
DoD Windows Server 2016 Member
Server STIG Computer v1r2 GPO
Backup
DoD Windows Server 2016 Member
Server STIG Computer v1r2 GPO
Report
ReadMe.txt
Change Log.docx
Google Chrome GPO/Report/Checklist
MS Excel 2016 GPO/Report/Checklist
MS Outlook 2013
GPO/Report/Checklist
Windows Defender Antivirus
GPO/Report/Checklist
Windows 7 GPO/Report/Checklist
Windows 8 and 8.1
GPO/Report/Checklist
Windows Server 2008 R2 Member
Server GPO/Report/Checklist
Windows Server 2008 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2012 R2 Member
Server GPO/Report/Checklist
Windows Server 2012 R2 Domain
Controller GPO/Report/Checklist
Update to DC Checklist 7 Sept 17
Modified Administrator rename account from 7 Sept 17
Dod_Admin to X_Admin
Update to GPO Report to reflect account 7 Sept 17
rename within GPO
Modified DC GPO to include all settings. Allows 7 Sept 17
administrator to apply single GPO instead of
applying both member server and DC GPOs
Update to GPO Report 7 Sept 17
Added DC User GPO Backup 7 Sept 17
Add DC User GPO Report 7 Sept 17
Update to DC Checklist 7 Sept 17
Modified Administrator rename account from 7 Sept 17
Dod_Admin to X_Admin
Update to GPO Report to reflect account 7 Sept 17
rename within GPO
Added Windows Defender Antivirus to File 7 Sept 17
Structure
Added Change Log file 7 Sept 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
New export to meet STIG revision 13 Oct 17
Readme.txt
DoD Windows 10 v1r11
GPO/Report/Checklist
Readme.txt
ADMX/ADML Template file updates
Google Chrome GPO/Report/Checklist
Internet Explorer11
GPO/Report/Checklist
Windows Defender Antivirus
GPO/Report/Checklist
Windows 7 GPO/Report/Checklist
Windows 8 and 8.1
GPO/Report/Checklist
Windows 10 GPO/Report/Checklist
Windows Server 2008 R2 Member
Server GPO/Report/Checklist
Windows Server 2008 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2012 R2 Member
Server GPO/Report/Checklist
Windows Server 2012 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2016 Member Server
GPO/Report/Checklist
Windows Server 2016 Domain
Controller GPO/Report/Checklist
Windows Server 2008 R2 Member
Server GPO/Report/Checklist
Windows Server 2008 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2012 R2 Member
Server GPO/Report/Checklist
Windows Server 2012 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2016 Member Server
GPO/Report/Checklist
Windows Server 2016 Domain
Controller GPO/Report/Checklist
Windows 7 GPO/Report/Checklist
Added Know Issues section
Update to file structure
New export to meet STIG revision 23 Oct 17
Provided details of Windows 10 v1R11 23 Oct 17
Windows Defender Exploit Protection
implementation requirements
Update to file structure – added Windows
Defender Exploit Protection XML
Updated Office 2013 and Office 2016 template 22 Jan 18
files
Updated Google Chrome templates
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 22 Jan 18
New export to meet STIG revision 18 Apr 18
Removed V-26534, V-26536, V-26556
New export to meet STIG revision 18 Apr 18
Removed V-26534, V-26536, V-26556
New export to meet STIG revision 18 Apr 18
Removed V-26534, V-26536, V-26556
New export to meet STIG revision 18 Apr 18
Removed V-26534, V-26536, V-26556
New export to meet STIG revision 18 Apr 18
Removed V-73421, V-73425, V-73485
New export to meet STIG revision 18 Apr 18
Removed V-73421, V-73425, V-73485
New export to meet STIG revision 18 Apr 18
Removed V-26534, V-26536, V-26556
Windows 8 and 8.1
GPO/Report/Checklist
Rename Windows 8 and 8.1 WMI MOF
Google Chrome GPO/Report/Checklist
DoD Publisher 2016 STIG v1r3
GPO/Report/Checklist
DoD Internet Explorer 11 v1r15
GPOs/Reports/Checklist
DoD Windows Defender Antivirus STIG
v1r4 GPO/Report/Checklist
DoD Windows Firewall v1r7
GPO/Report/Checklist
Office 2013 System and Components
GPO/Reports/Checklist
DoD Windows 10 v1r13
GPOs/Reports/Checklist
Windows Defender Exploit Protection
XML
Update ADMX/L Template files
Added Delta GPO reports
Addition to STIG Package
ADMX/ADML Template file updates
Update Google Chrome GPO
Windows Server 2008 R2 Member
Server GPO/Report/Checklist
Windows Server 2008 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2012 R2 Member
Server GPO/Report/Checklist
Windows Server 2012 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2016 Member Server
GPO/Report/Checklist
Windows Server 2016 Domain
Controller GPO/Report/Checklist
DoD Windows 10
GPOs/Reports/Checklist
DoD Internet Explorer 11
New export to meet STIG revision 18 Apr 18
Removed V-26534, V-26536, V-26556
Removed Windows 8 18 Apr 18
New export to meet STIG revision 18 Apr 18
Added V-52795, V-79929, V-79933, V-79931
Removed V-44749, V-44787
New export to meet STIG revision 18 Apr 18
New export to meet STIG revision 18 Apr 18
New export to meet STIG revision 18 Apr 18
Added V-79965, V-79967, V-79971
New export to meet STIG revision 18 Apr 18
New export to meet STIG revision 18 Apr 18
Removed V-63439, V-63443, V-63511, V- 18 Apr 18
63637, V-63799, V-63813, V-63835, V-63837
Update V-63523
New Exploit Guard EP.XML 18 Apr 18
Update Google Chrome template files, Update 18 Apr 18
SecGuide template files, Update Office 2013 &
Office 2016 template files
Added spreadsheet of delta of GPO reports 18 Apr 18
Added Adobe Acrobat Pro DC Classic and 27 Jul 18
Adobe Acrobat Pro DC Continuous
Added Adobe 2016 template files 27 Jul 18
Remove Chrome://History from Block access to 27 Jul 18
a list of URLs
(V80475) Added PowerShell script logging 27 Jul 18
requirement
(V80475) Added PowerShell script logging 27 Jul 18
requirement
(V80475) Added PowerShell script logging 27 Jul 18
requirement
(V80475) Added PowerShell script logging 27 Jul 18
requirement
New export to meet STIG revision 27 Jul 18
(V-73677) Network access: Restrict clients 27 Jul 18
allowed to make remote calls to SAM to Not
Configured
Updated Exploit Guard XML to \\ 27 Jul 18
YOUR_FOLDER_SHARE\EP.xml
New export to meet STIG revision 27 Jul 18
GPOs/Reports/Checklist
Windows Server 2008 R2 Member (V80475) Added PowerShell script logging 27 Jul 18
Server GPO/Report/Checklist requirement
Windows Server 2008 R2 Domain New export to meet STIG revision 25 Oct 18
Controller GPO/Report/Checklist
Windows Server 2012 R2 Member New export to meet STIG revision 25 Oct 18
Server GPO/Report/Checklist
Windows Server 2012 R2 Domain New export to meet STIG revision 25 Oct 18
Controller GPO/Report/Checklist
Windows Server 2016 Member Server New export to meet STIG revision 25 Oct 18
GPO/Report/Checklist
Windows Server 2016 Domain New export to meet STIG revision 25 Oct 18
Controller GPO/Report/Checklist
Office System 2013 New export to meet STIG revision 25 Oct 18
GPO/Report/Checklist
Office System 2013 New export to meet STIG revision 25 Oct 18
GPO/Report/Checklist
Google Chrome GPO/Report New export to meet STIG version 05 Nov 18
Windows 10 GPOs/Reports New export to meet STIG version 15 Nov 18
Windows Defender Exploit Protection Update DOD_EP_V2.XML DISA baseline XML 15 Nov 18
XML
ADMX Templates OneDrive.admx & OneDrive.adml 15 Nov 18
DoD Adobe Acrobat Pro DC Continuous Removed Checklist 28 Jan 19
DoD Internet Explorer 11 Removed Checklist 28 Jan 19
Windows 10 GPOs/Reports/Checklist New export to meet STIG version 28 Jan 19
New checklist v1r16
Windows Server 2008 R2 Member New export to meet STIG version 28 Jan 19
Server GPO/Report Removed Checklist
Windows Server 2008 R2 Domain New export to meet STIG version 28 Jan 19
Controller GPO/Report/Checklist Removed Checklist
Windows Server 2012 R2 Member New export to meet STIG version 28 Jan 19
Server GPO/Report Removed Checklist
Windows Server 2012 R2 Domain New export to meet STIG version 28 Jan 19
Controller GPO/Report Removed Checklist
Windows Server 2016 Member Server Multiple setting changes – review WINDOWS 28 Jan 19
GPO/Report SERVER 2016 STIG REVISION HISTORY
Removed Checklist
Windows Server 2016 Domain Multiple setting changes – review WINDOWS 28 Jan 19
Controller GPO/Report SERVER 2016 STIG REVISION HISTORY
Removed Checklist
Google Chrome GPO/Report Multiple setting changes – review GOOGLE 28 Jan 19
CHROME STIG REVISION HISTORY
Removed Checklist
Readme.txt Added known issue of missing checklist files for 28 Jan 19
Adobe Acrobat Pro DC Continuous, Internet
Explorer, Google Chrome, and all Windows
Server versions.
DoD Adobe Acrobat Pro DC Classic New export to meet STIG version 24 Apr 19
GPO/Report
DoD Internet Explorer 11 GPO/Report Remove V-46505 24 Apr 19
Remove V-46585
New export to meet STIG version
DoD Office System 2013 GPO/Report New export to meet STIG version 24 Apr 19
Windows Server 2008 R2 Member New export to meet STIG version 24 Apr 19
Server GPO/Report Removed Checklist
Windows Server 2008 R2 Domain New export to meet STIG version 24 Apr 19
Controller GPO/Report/Checklist Removed Checklist
Windows Server 2012 R2 Member Remove V15680 24 Apr 19
Server GPO/Report Remove V-15713
New export to meet STIG version
Removed Checklist
Windows Server 2012 R2 Domain Remove V-15713 24 Apr 19
Controller GPO/Report New export to meet STIG version
Removed Checklist
Windows Defender Antivirus New export to meet STIG revision 24 Apr 19
GPO/Report
Windows Server 2016 Member Server New export to meet STIG revision 24 Apr 19
GPO/Report Removed User version of GPO/Report
Windows Server 2016 Domain New export to meet STIG revision 24 Apr 19
Controller GPO/Report Removed User version of GPO/Report
Windows 10 GPOs/Reports New export to meet STIG version 24 May 19
Added V-94719
Removed Checklist
Windows Server 2016 Member Sever Modified filter from Version like 10.% to 06 Jun 19
WMI Filter include full build number Version Like
10.0.14393
Windows Server 2016 Domain Modified filter from Version like 10.% to 06 Jun 19
Controller WMI Filter include full build number Version Like
10.0.14393
Windows Server 2019 Added Windows Server 2019 STIG Checklist 06 Jun 19
Checklist/GPOs/Reports/WMI Filter files, GPOs, Reports and WMI filters for
Windows Server 2019 MS and DC
AcrobatProDCContinuous.adml Updated ADML 29 Jul 19
send_and_track_plugin corrected
Adobe_Acrobat_Pro_DC_Classic Updated to latest STIG revision 29 Jul 19
Checklist/GPOs/Reports
Adobe_Acrobat_Pro_DC_Continuous Updated to latest STIG revision 29 Jul 19
Checklist/GPOs/Reports Review STIG Revision History documentation
for detailed changes
Google Chrome Checklist/GPO/Report Updated to latest STIG revision 29 Jul 19
Review STIG Revision History documentation
for detailed changes
Internet Explorer Checklist Added 29 Jul 19
Windows 10 Checklist/GPOs/Reports Updated to latest STIG revision 29 Jul 19

Windows Defender AntiVirus
Checklist/GPOs/Reports
Windows Server 2008 R2 Member
Server Checklist/GPO/Report
Windows Server 2008 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2012 R2 Member
Server Checklist/GPO/Report
Windows Server 2012 R2 Domain
Controller GPO/Report/Checklist
Windows Server 2016 Member Server
Checklist/GPO/Report
Windows Server 2016 Domain
Controller GPO/Report/Checklist
Windows Server 2019 Member Server
Checklist/GPO/Report
Windows Server 2019 Domain
Controller GPO/Report/Checklist
Removed Checklist files
Windows Server 2012 R2 Member
Server GPO/Report
Windows Server 2012 R2 Domain
Controller GPO/Report
Windows 10 GPO/Report
Office System 2013 GPO/Report
Review STIG Revision History documentation
for detailed changes
Added checklist
Updated to latest STIG revision 29 Jul 19
Review STIG Revision History documentation
for detailed changes
Added checklist
Updated to latest STIG revision 29 Jul 19
Added checklist
Updated to latest STIG revision 29 Jul 19
Added checklist
Updated to latest STIG revision 29 Jul 19
Review STIG Revision History documentation
for detailed changes
Added checklist
Updated to latest STIG revision 29 Jul 19
Review STIG Revision History documentation
for detailed changes
Added checklist
Updated to latest STIG revision 29 Jul 19
Review STIG Revision History documentation
for detailed changes
Added checklist
Updated to latest STIG revision 29 Jul 19
Review STIG Revision History documentation
for detailed changes
Added checklist
Updated to latest STIG revision 29 Jul 19
Review STIG Revision History documentation
for detailed changes
Added checklist
Updated to latest STIG revision 29 Jul 19
Review STIG Revision History documentation
for detailed changes
Added checklist
Checklist importer tool incompatibilities 15 Oct 19
Updated to latest STIG revision 15 Oct 19
Review STIG Revision History documentation
for detailed changes
Updated to latest STIG revision 15 Oct 19
Review STIG Revision History documentation
for detailed changes
Updated to latest STIG revision 15 Oct 19
Review STIG Revision History documentation
for detailed changes
Updated to latest STIG revision 15 Oct 19
Review STIG Revision History documentation
 for detailed changes
Google Chrome GPO/Report Updated to latest STIG revision V-97525 15 Oct 19
Review STIG Revision History documentation
for detailed changes
Google Chrome, Office 2013. Office Updated files 15 Oct 19
2016 and SecGuide ADMX/ADML
template files
Internet Explorer 11 GPO/Report Updated to latest STIG revision V-97527 15 Oct 19
Review STIG Revision History documentation
for detailed changes
Removed Windows 7 and Windows Operating systems have reach vendor’s end of 13 Jan 20
Server 2008 R2 files life support cycle
Google Chrome GPO/Report files Updated to latest STIG revision 13 Jan 20
Review STIG Revision History documentation
for detailed changes
Windows Defender Anti-virus Updated to latest STIG revision 13 Jan 20
GPO/Report files
Windows Server 2012 R2 domain Updated to latest STIG revision 13 Jan 20
controller GPO/Report files
Windows Server 2016 GPO/Report files Updated to latest STIG revision 13 Jan 20
Windows Server 2019 GPO/Report files Updated to latest STIG revision 13 Jan 20
Readme.txt Added notes of removal of Windows 7 and 13 Jan 20
Windows Server 2008 R2 files based on vendor
end of life for operating systems
Windows Server 2016 GPO/Report files New GPO backup files of Windows Server 2016 29 Jan 20
DC GPO file – invalid entries in previous
package
Windows 10 GPO/Report files Updated to latest STIG revision 10 Apr 20
Windows Defender Anti-Virus Setting updated to latest STIG revision 10 Apr 20
GPO/Report files Review STIG Revision History documentation
for detailed changes

DoD OneDrive for Business 2016 STIG Updated to latest STIG revision 10 Apr 20
GPO/Report files
Microsoft 2019 and Office 365 Pro Plus Initial STIG release 10 Apr 20
GPO/Reports/WMI Filter New GPO backup and Report files
ADMX Templates Google Chrome ADMX/L files 10 Apr 20
Rename Microsoft Office 2016 to Microsoft
2016-2019-O365
Microsoft Office 2016 AMDX/L files
Readme.txt Added notes of addition of Microsoft Office 10 Apr 20
2019 and O365
Office 2016/2019/O365 ADMX/ADML Latest version of template files 10 Jun 20
template files
Removed OneDrive for Business and These files were duplicates of each and 10 Jun 20
OneDrive NextGen ADMX/ADML outdated.
directories
Added OneDrive to ADMX Templates
Windows 8 and 8.1 GPO/Report files
Windows 10 GPO/Report files
Windows Server 2012 R2 member
server GPO/Report files
Windows Server 2012 R2 domain
controller GPO/Report files
Windows Server 2016 GPO/Report files
Windows Server 2019 GPO/Report files
Windows Defender Antivirus
GPO/Report
Office 2016/2019/O365 ADMX/ADML
template files
Google Chrome ADMX/ADML template
files
Google Chrome GPO/Reports
Internet Explorer 11 GPO/Reports
Microsoft 2019 and Office 365 Pro Plus Updated to latest STIG revision
GPO/Reports
Support Files
disa_stig_gpo_import.docx
disa_gpo_baseline_import.ps1
disa_allgpo_import_oct2020.csv
disa_quarterlygpo_oct2020_import.csv PowerShell script that will request
import.migration
sample_lgpo.bat
Local Policies
Latest version of template files supporting 10 Jun 20
OneDrive
Updated to latest STIG revision 10 Jun 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 10 Jun 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 10 Jun 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 10 Jun 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 10 Jun 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 10 Jun 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 10 Jun 20
Review STIG revision history for detailed
changes
Latest version of template files 10 Jul 20
Latest version of template files 10 Jul 20
Updated to latest STIG revision 10 Jul 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 10 Jul 20
Review STIG revision history for detailed
changes
10 Jul 20
Review STIG revision history for detailed
changes
Added Support Files directory and files to assist 09 Oct 20
in automation of importing GPOs to Active
Directory environment.
DISA_GPO_Baseline_Import.ps1 is a
administrator to select import file and
migration table to be used during execution.
The script will import identified GPOs based on
selected import file. If GPO is already present
in environment administrator is prompted to
overwrite or skip.

Office 2016/2019/O365 ADMX/ADML
template files
Google Chrome ADMX/ADML template
files
Google Chrome GPO/Reports
Microsoft Office 2019 and Office 365
Pro Plus User and Computer
GPOs/Reports
Microsoft Office 2013 Office System
User and Computer GPOs/Reports
Microsoft Outlook 2016 GPO/Report
Office 2016/2019/O365 ADMX/ADML
template files
Google Chrome ADMX/ADML template
files
Microsoft OneDrive for Business 2016
GPO/Report
Windows 10 GPO/Report files
Windows Server 2012 R2 member
DISA_AllGPO_Import_MMMYYYY.csv is used to
import all DISA STIG Baseline GPOs into your
Active Directory environment. This is intended
in new environments or overwrite existing
GPOs.
DISA_QuarterlyGPO_MMMYYYY_Import.csv is
used to import only the modified GPOs in the
quarterly baseline release.
Importable.migration is used during import of
DISAOS baseline GPOs.
Sample_LGPO.bat is a sample batch file that
can be used to apply STIG setting via local
policy on standalone systems.
Local Policies contains GPO backups to be used
in conjunction with the LGPO. The backup
GPOs are copies of the domain STIG baseline
operating system GPOs without the required
domain settings and remote desktop services
setting restricting local account access.
Latest version of template files 09 Oct 20
Latest version of template files 09 Oct 20
Updated to latest STIG revision 09 Oct 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Oct 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Oct 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Oct 20
Review STIG revision history for detailed
changes
Latest version of template files 09 Nov 20
Latest version of template files 09 Nov 20
Updated to latest STIG revision 09 Nov 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Nov 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Nov 20
server GPO/Report files
Windows Server 2012 R2 domain
controller GPO/Report files
Windows Server 2016 GPO/Report files
Windows Server 2019 GPO/Report files
Windows Defender Antivirus
GPO/Report files
Local Policies GPO/Report files
Windows 10
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Support Files
DISA_AllGPO_Import_Nov2020.csv
DISA_Quarterly_Import_Nov2020.csv
Google Chrome GPO/Reports
Office 2016/2019/O365 ADMX/ADML
template files
Google Chrome ADMX/ADML template
files
Microsoft ADMX/ADML template files
OneDrive ADMX/ADML template files
Support Files
DISA_AllGPO_Import_Jan2021.csv
DISA_Quarterly_Import_Jan2021.csv
Google Chrome GPO/Reports Update
Google Chrome WMI Filter
Added Microsoft Edge ADMX/ADML
template files
Added Microsoft Edge
GPO/Report/WMI filter files
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Nov 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Nov 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Nov 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Nov 20
Review STIG revision history for detailed
changes
Updated to latest STIG revision 09 Nov 20
Review STIG revision history for detailed
changes
Updated GPO backup paths to reflect current 09 Nov 20
package
Updated to latest STIG revision 07 Jan 21
Review STIG revision history for detailed
changes
Latest version of template files 07 Jan 21
Latest version of template files 07 Jan 21
Latest version of template files 07 Jan 21
Latest version of template files 07 Jan 21
Updated GPO backup paths to reflect current 07 Jan 21
package
Modified Default Search Provider setting 11 Feb 21
STIG ID: DTBC-0008
Modified Download restrictions – relaxed
setting to a registry value of 1 from 2
Modified WMI Filter to include both ‘C:\ 11 Feb 21
Program Files (x86)\Google\Chrome\
Application\chrome.exe' and ‘C:\Program Files\
Google\Chrome\Application\chrome.exe'
Initial release with DISA STIG package 11 Feb 21
Initial release with DISA STIG package 11 Feb 21
NOTE: Proxy Server settings requires

Support Files
DISA_AllGPO_Import_Feb2021.csv
DISA_Quarterly_Import_Feb2021.csv
Google Chrome GPO/Reports Update
Windows Server 2012 R2 domain
controller and Member server
GPO/Report files
Windows Server 2016 GPO/Report files
Windows Server 2019 GPO/Report files
Windows Defender Antivirus
GPO/Report files
Windows 10 GPO/Report files
Microsoft Office 365 Pro Plus
GPO/Report files
Local Policies GPO/Report files
Windows 10
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Added MSIntunePolicies_Beta
directory
Google Chrome GPO/Reports Updates
Microsoft Edge GPO/Reports Updates
Adobe Acrobat Pro DC GPO/Reports
file Updates
Adobe Acrobat Reader DC
GPO/Reports file Updates
Microsoft Office 2016 System
modification to reflect local site requirements
Updated GPO backup paths to reflect current 11 Feb 21
package
Updated to latest STIG revision 16 Apr 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 16 Apr 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 16 Apr 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 16 Apr 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 16 Apr 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 16 Apr 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 16 Apr 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 16 Apr 21
Review STIG revision history for detailed
changes
Provided Microsoft Intune Policy JSON 16 Apr 21
configurations files to evaluation of Microsoft
Intune Baseline device configuration profiles
Updated to latest STIG revision 13 Jul 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 13 Jul 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 13 Jul 21
Review STIG revision history for detailed
changes
Added Adobe Acrobat Reader DC Continuous 13 Jul 21
GPOs/Reports and templates to DISA package
Updated to latest STIG revision 13 Jul 21
GPO/Reports Updates
Microsoft Office 2019-Microsoft 365
Apps GPO/Reports Updates
ADMX/ADML template files updates
Added STIG Checklist files to Support
Files – files to assist administrators
with IA certifications
Microsoft Intune Policies
Removed Adobe Acrobat Pro DC
Classic
Windows Server 2012 R2 domain
controller and Member server
GPO/Report files
Windows Server 2016 GPO/Report files
Review STIG revision history for detailed
changes
Renamed Office 365 ProPlus to Microsoft 365 13 Jul 21
Apps
Updated to latest STIG revision
Review STIG revision history for detailed
changes
AdobeDCContinuous.ADMX/L 13 Jul 21
Chrome.ADMX/L
Google.ADMX/L
GoogleUpdate.ADMX/L
AdmPwd.ADMX/L
MSS-legacy.ADMX/L
SecGuide.ADMX/L
MSEdge.ADMX/L
MSEdgeupdatge.ADMX/L
MEEdgewebview2.ADMX/L
Office 2016 ADMX/L
DoD Adobe Acrobat Pro DC Continuous STIG 13 Jul 21
v2r1
DoD Adobe Acrobat Reader DC Continuous
STIG v2r1
DoD Google Chrome STIG v2r4
DoD Microsoft Edge STIG v1r2
DoD Microsoft 2019 Office-Microsoft 365 Apps
STIG v2r3
DoD Microsoft Office 2016 System v2r1
DoD Windows Defender Antivirus STIG v2r2
DoD Windows Firewall STIG v1r7
DoD Windows Server 2019_DC STIG v2r2
DoD Windows Server 2019_MS STIG v2r2
Updated to latest STIG revision 13 Jul 21
Review STIG revision history for detailed
changes
DoD Adobe Acrobat Pro DC Continuous STIG
v2r1
DoD Adobe Acrobat Reader DC Continuous
STIG v2r1
DoD Google Chrome STIG v2r4
DoD Microsoft Edge STIG v1r2
Remove Adobe Acrobat Pro DC Classic from 13 Jul 21
package
Updated to latest STIG revision 15 Oct 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 15 Oct 21
Review STIG revision history for detailed

Windows Server 2019 GPO/Report files
Windows Defender Antivirus
GPO/Report files
Windows 10 GPO/Report files
Microsoft Edge GPO/Report files
Microsoft Internet Explorer 11
GPO/Report files
Microsoft OneDrive GPO/Reports
Updates
Google Chrome GPO/Report files
ADMX/L template files
Checklist
Microsoft Edge GPO/Report files
ADMX/L template files
Checklist
Microsoft Office 2016 System
GPO/Reports
Microsoft 365 GPO/Reports
Google Chrome GPO/Report/Checklist
files
Mozilla Firefox GPO/Report/Checklist
files
Microsoft Outlook 2016
GPO/Reports/Checklist files
Microsoft 365 GPO/Reports/Checklist
files
Microsoft Endpoint Manager Policies
(Intune Policies)
changes
Updated to latest STIG revision 15 Oct 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 15 Oct 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 15 Oct 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 15 Oct 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 15 Oct 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 15 Oct 21
Review STIG revision history for detailed
changes
Updated to latest STIG revision 14 Jan 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 14 Jan 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 14 Jan 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 14 Jan 22
Review STIG revision history for detailed
changes
Added Mozilla Firefox GPO/MEM Policies, 14 Jan 22
ADMX/L files, and checklist files
Updated to latest STIG revision 28 Mar 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 28 Mar 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 28 Mar 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 28 Mar 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 28 Mar 22
Review individual STIG revision history for

Windows Server 2012 R2 domain
controller and Member server
GPO/Report/Checklist files
Windows Server 2016
GPO/Report/Checklist files
Windows Server 2019
GPO/Report/Checklist files
Microsoft Defender Antivirus
GPO/Report/Checklist files
Windows 10 GPO/Report/Checklist
files
ADMX/ADML template files updates
Readme.txt
Microsoft Endpoint Manager
Policies.zip
Microsoft 365 GPO/Reports/Checklist
files
Mozilla Firefox GPO/Report/Checklist
files
Internet Explorer 11
GPO/Report/Checklist files
Microsoft Edge GPO/Report/Checklist
files
detailed changes
DoD Google Chrome STIG v2r6
DoD Mozilla Firefox STIG v6r2
DoD Microsoft 365 STIG v2r5 Administrative
Templates
DoD Windows 10 STIG v2r4 and Internet
Explorer 11 STIG v2r1 Security Baseline
Updated to latest STIG revision 30 Mar 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 30 Mar 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 30 Mar 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 30 Mar 22
Review STIG revision history for detailed
changes
Renamed from Windows Defender Antivirus to
Microsoft Defender Antivirus
Updated to latest STIG revision 30 Mar 22
Review STIG revision history for detailed
changes
Chrome.ADMX/L 30 Mar 22
Google.ADMX/L
GoogleUpdate.ADMX/L
MSEdge.ADMX/L
MSEdgeupdatge.ADMX/L
Office 2016 ADMX/L
Firefox.ADMX/L
Mozilla/ADMX/L
Removed reference to DOD_EP_V3.XML file 30 Mar 22
Removed Microsoft Endpoint Manager (MEM) 01 Jul 22
policies. MEM policies to be provided in a
separate baseline package.
Updated to latest STIG revision 01 Jul 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 01 Jul 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 01 Jul 22
Review STIG revision history for detailed
changes
Updated to latest STIG revision 01 Jul 22
Review STIG revision history for detailed
 changes
ADMX/ADML template files updates Chrome.ADMX/L 01 Jul 22
Google.ADMX/L
GoogleUpdate.ADMX/L
MSEdge.ADMX/L
MSEdgeupdatge.ADMX/L
Firefox.ADMX/L
Mozilla/ADMX/L
Windows 11 GPO/Report/Checklist Initial release of Windows 11 STIG 15 Jul 22
files Review STIG revision history for detailed
changes
Renamed folder structure Renamed Windows Server directories and
GPOs, Office 2019-Microsoft 365 Apps and
GPOs to shorten filename structure to avoid
errors when expanding files.
ADMX/ADML template files updates Chrome.ADMX/L 12 Oct 22
Google.ADMX/L
GoogleUpdate.ADMX/L
MSEdge.ADMX/L
MSEdgeupdatge.ADMX/L
Firefox.ADMX/L
Mozilla/ADMX/L
Intune STIG Setting Basleine.zip Provides Microsoft Endpoint Manager (MEM) 12 Oct 22
policies. Policies meant to support DoD MEM
environment to assist admin baseline STIG
configurations.
Microsoft 365 GPO/Reports/Checklist Updated to latest STIG revision 12 Oct 22
files Review STIG revision history for detailed
changes.
Rename GPOs
DoD Office 2019-M365 Apps STIG Comp v2r7
DoD Office 2019-M365 Apps STIG User v2r7
Mozilla Firefox GPO/Report/Checklist Updated to latest STIG revision 12 Oct 22
files Review STIG revision history for detailed
changes
Internet Explorer 11 Updated to latest STIG revision 12 Oct 22
GPO/Report/Checklist files Review STIG revision history for detailed
changes
Microsoft Edge GPO/Report/Checklist Updated to latest STIG revision 12 Oct 22
files Review STIG revision history for detailed
changes
Windows Server 2012 R2 domain Updated to latest STIG revision
controller and Member server Review STIG revision history for detailed
GPO/Report/Checklist files changes
Rename GPOs
DoD WinSvr 2012 R2 MS STIG User v3r5
DoD WinSvr 2012 R2 MS STIG Comp v3r5

Windows Server 2016
GPO/Report/Checklist files
Windows Server 2019
GPO/Report/Checklist files
Added Windows Server 2022
GPO/Report/Checklist files
Microsoft 365 GPO/Reports/Checklist
files
Google Chrome GPO/Report/Checklist
files
Updates to Intune Baseline policies
Microsoft Edge GPO/Report/Checklist
files
Mozilla Firefox GPO/Report/Checklist
files
OneDrive GPO/Report
Windows Server 2016 DC
GPO/Report/Checklist files
Windows Server 2022 DC
GPO/Report/Checklist files
Microsoft 365 GPO/Reports/Checklist
files
DoD WinSvr 2012 R2 DC STIG User v3r5
DoD WinSvr 2012 R2 DC STIG Comp v3r5
Updated to latest STIG revision
Review STIG revision history for detailed
changes
Rename GPOs
DoD WinSvr 2016 MS STIG User v2r5
DoD WinSvr 2016 MS STIG Comp v2r5
DoD WinSvr 2016 DC STIG User v2r5
DoD WinSvr 2016 DC STIG Comp v2r5
Updated to latest STIG revision
Review STIG revision history for detailed
changes
Rename GPOs
DoD WinSvr 2019 MS STIG User v2r5
DoD WinSvr 2019 MS STIG Comp v2r5
DoD WinSvr 2019 DC STIG User v2r5
DoD WinSvr 2019 DC STIG Comp v2r5
Initial release STIG revision
Updated to latest STIG revision 13 Dec 22
Review STIG revision history for detailed
changes.
Updated to latest STIG revision 13 Dec 22
Review STIG revision history for detailed
changes
Review Intune Change log contained in 20 Dec 22
DISAIntune STIG Baselines_Jan23
Updated to latest STIG revision 27 Jun 23
Review STIG revision history for detailed
changes
Updated to latest STIG revision 27 Jun 23
Review STIG revision history for detailed
changes
Updated to latest STIG revision 27 Jun 23
Review STIG revision history for detailed
changes
Removed (Not Configured) Computer 27 Jun 23
Configuration >> Administrative Templates >>
System >> Remote Procedure Call >> "Restrict
Unauthenticated RPC clients"
Removed (Not Configured) Computer 27 Jun 23
Configuration >> Administrative Templates >>
System >> Remote Procedure Call >> "Restrict
Unauthenticated RPC clients"
Updated to latest STIG revision 16 Aug 23
Review STIG revision history for detailed
 changes.
STIG ID: O365-OU-000006: Configured to Not
Configured
Updates to Intune Baseline policies Review Intune Change log contained in Intune 20 Dec 22
STIG Baselines
ADMX/ADML template files updates Chrome.ADMX/L 16 Aug 23
Google.ADMX/L
GoogleUpdate.ADMX/L
MSEdge.ADMX/L
MSEdgeupdatge.ADMX/L
Firefox.ADMX/L
Mozilla/ADMX/L
Access16.ADMX/L
Excel16.ADMX/L
Lync16.ADMX/L
Office16.ADMX/L
Onent16.ADMX/L
Outlk16.ADMX/L
Ppt16.ADMX/L
Proj16.ADMX/L
Pub16.ADMX/L
Teams16.ADMX/L
Visio16.ADMX/L
Word16.ADMX/L
Windows Server 2012 R2 domain Updated to latest STIG revision 11 Sept 23
controller and Member server Review STIG revision history for detailed
GPO/Report/Checklist files changes
Windows Server 2016 Updated to latest STIG revision 11 Sept 23
GPO/Report/Checklist files Review STIG revision history for detailed
changes
Windows Server 2019 Updated to latest STIG revision 11 Sept 23
GPO/Report/Checklist files Review STIG revision history for detailed
changes
Added Windows Server 2022 Updated to latest STIG revision 11 Sept 23
GPO/Report/Checklist files Review STIG revision history for detailed
changes
Microsoft 365 GPO/Reports/Checklist Updated to latest STIG revision 11 Sept 23
files Review STIG revision history for detailed
changes.
Windows 11 GPO/Report/Checklist Updated to latest STIG revision 11 Sept 23
files Review STIG revision history for detailed
changes
Windows 10 GPO/Report/Checklist Updated to latest STIG revision 11 Sept 23
files Review STIG revision history for detailed
changes
DoD Windows Firewall v1r7 Updated to latest STIG revision 11 Sept 23
GPO/Report/Checklist Review STIG revision history for detailed
 changes.
Renamed:
DoD Windows Defender Firewall STIG v2r2
Updates to Intune Baseline policies Review Intune Change log contained in Intune 11 Sept 23
STIG Baselines
ADMX/ADML template files updates Chrome.ADMX/L 11 Sept 23
Google.ADMX/L
GoogleUpdate.ADMX/L
MSEdge.ADMX/L
MSEdgeupdatge.ADMX/L
Firefox.ADMX/L
Mozilla/ADMX/L
Access16.ADMX/L
Excel16.ADMX/L
Lync16.ADMX/L
Office16.ADMX/L
Onent16.ADMX/L
Outlk16.ADMX/L
Ppt16.ADMX/L
Proj16.ADMX/L
Pub16.ADMX/L
Teams16.ADMX/L
Visio16.ADMX/L
Word16.ADMX/L