) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Microsoft Windows 11 STIG Ver 2, Rel 5 Checklist Details (Checklist Revisions)
SCAP 1.3 Content:
-
Download SCAP 1.3 Content - Microsoft Windows 11 STIG SCAP Benchmark - Ver 2, Rel 6
- Author: Defense Information Systems Agency
Supporting Resources:
-
Download Standalone XCCDF 1.1.4 - Microsoft Windows 11 STIG for Chef - Ver 1, Rel 3
- Defense Information Systems Agency
-
Download Standalone XCCDF 1.1.4 - Rev. 4 Sunset - Microsoft Windows 11 STIG - Ver 1, Rel 6
- Defense Information Systems Agency
-
Download Standalone XCCDF 1.1.4 - Microsoft Windows 11 STIG - Ver 2, Rel 5
- Defense Information Systems Agency
-
Download Intune Policies - Intune Policy - October 2025
- Defense Information Systems Agency
-
Download GPOs - Group Policy Objects (GPOs) - October 2025
- Defense Information Systems Agency
-
Download Automated Content - SCC 5.12.1 Windows
- Defense Information Systems Agency
Target:
| Target | CPE Name |
|---|---|
| Microsoft Windows 11 | cpe:/o:microsoft:windows_11:- (View CVEs) |
Checklist Highlights
- Checklist Name:
- Microsoft Windows 11 STIG
- Checklist ID:
- 1028
- Version:
- Ver 2, Rel 5
- Type:
- Compliance
- Review Status:
- Final
- Authority:
- Governmental Authority: Defense Information Systems Agency
- Original Publication Date:
- 07/22/2022
Checklist Summary:
The Microsoft Windows 11 Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DOD) information systems. This document is meant for use in conjunction with other STIGs, such as the Windows Defender Antivirus STIG, Microsoft Edge STIG, MS OneDrive STIG, and appropriate operating system STIGs. This Microsoft Windows 11 Enterprise Security Requirements Guide (SRG) provides the technical security policies and requirements for applying security concepts to systems. The requirements discussed in this document are applicable to Windows 11 Enterprise. The majority will also apply to Windows 11 Professional; however, domain-joined systems have several requirements that can only be implemented with the Enterprise edition.
Checklist Role:
- Operating System
Known Issues:
Not provided.
Target Audience:
Not provided.
Target Operational Environment:
- Managed
- Specialized Security-Limited Functionality (SSLF)
Testing Information:
Not provided.
Regulatory Compliance:
This document is provided under the authority of DoDI 8500.01.
Comments/Warnings/Miscellaneous:
Comments or proposed revisions to this document should be sent via email to the following address: [email protected]. DISA will coordinate all change requests with the relevant DOD organizations before inclusion in this document. Approved changes will be made in accordance with the DISA maintenance release schedule.
Disclaimer:
Not provided.
Product Support:
Not provided.
Point of Contact:
Sponsor:
Not provided.
Licensing:
Not provided.
Change History:
updated to FINAL - 8/29/2022 updated URLs - 11/15/2022 added SCAP content - 11/18/2022 updated title - 11/22/2022 updated URLs - 5/10/23 updated URLs - 5/19/2023 Updated resource per DISA - 8/21/23 Updated resource per DISA - 11/2/23 Update Version and Resources - 06/10/2024 Updated Version, Resource and SHA - 08/07/2024 Updated Resources and SHA - 08/12/2024 Resource Title Updated, Resource Sunset - 08/21/2024 Resources and Title Updated - 11/05/2024 Updated Checklist Version & Resources - 01/30/2025 Updated Resources - 02/03/2025 Updated Resources and Title Version - 04/09/2025 Updated Resources - 04/09/2025 Added Intune Policies - 05/08/2025 Updated SHA - 06/11/2025 Update Resources, Intune Policy and GPOs - 08/29/2025 Updated Version, Resources, General - 12/1/2025 Updated SHA - 12/11/2025
Dependency/Requirements:
| URL | Description |
|---|
References:
| Reference URL | Description |
|---|