Checklist Summary:

The Windows 7 Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. The requirements were developed from Federal and DoD consensus, as well as the Windows 7 Security Guide and security templates published by Microsoft Corporation. The vulnerabilities discussed in this document are applicable to Windows 7 Business, Enterprise and Ultimate Editions.

Checklist Role:

• Operating System

Known Issues:

Not provided.

Target Audience:

These requirements are designed to assist Security Managers (SMs), Information Assurance Managers (IAMs), IAOs, and System Administrators (SAs) with configuring and maintaining security controls. This guidance supports DoD system design, development, implementation, certification, and accreditation efforts.

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

The vulnerabilities discussed in this document are applicable to Windows 7 Business, Enterprise and Ultimate Editions.

Regulatory Compliance:

Department of Defense [DoD] Directive 8500

Comments/Warnings/Miscellaneous:

Comments or proposed revisions to this document should be sent via e-mail to the following address: fso_spt@disa.mil. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document.

Disclaimer:

Not provided.

Product Support:

Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.stig_spt@mail.mil

Point of Contact:

Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Changed status from "Under Review" to "Final" - 03 June 2015
V1R22 - 07-25-2014
V1R21 - 04-25-2014
V1R20 - 03-13-2014
V1R19 - 01-24-2014
V1R18 - 12-23-2013
V1R17 - 10-25-2013
V1R16 - 07-24-2013
V1R15 - 03-29-2013
V1R14 - 01-24-2014 (XCCDF only)
V1R13 - 07-27-2012
V1R12 - 07-24-2013
V1R11 - 05-31-2012
V1R10 - 04-06-2012
V1R9 - 03-12-2012
V1R8 - 02-28-2012
V1R7 - 01-27-2012
V1R6 - 10-28-2011
V1R5 - 07-29-2011
V1R4 - 04-29-2011
V1R3 - 01-28-2011
V1R2 - 08-27-2010
V1R1 - 04-26-2010 (initial release)
Updated "Point of Contact" - 07 January 2015
Version 1, Release 23 Benchmark - 28 January 2015
Version 1, Release 18 - 28 January 2015
Changed Status from "Under Review" to "Final" - 12 March 2015
Version 1, Release 21 - 30 October 2015
Version 1, Release 27 Benchmark - 30 October 2015
Changed status from "Under Review" to "Final" - 04 December 2015
5/2/2016 - Version 1, Release 7
moved to FINAL - 6/7/2016
updated to - v1, r23 - 07/22/2016
Updated to FINAL - 09/12/2016
Updated STIG to Version 1 Release 24 - 10/28/2016
updated to FINAL - 12/07/2016
Updated to Ver 1, Rel 25 - 01/27/2017
Updated to FINAL - 03/13/2017
Updated to Version 1, Release 26 - 04/28/2017
Updated to FINAL - 05/30/2017
null
Updated URL to reflect change to the DISA website - http --> https
Updated - 11/01/2017
Updated to FINAL - 12/02/2017
corrected resource title - 1/24/2018
Updated to Version 1, Release 29 - 02/16/2018
Updated to FINAL - 3/18/2018
Update to Final - 4/18/18
sunset - 4/25/18
updated GPO file - 2/8/19
Updated URLs - 6/12/19
Added audit file - 6/26/19
updated URLs - 9/11/19
Updated GPO file - 10/31/19
updated URLs - 6/8/2020
updated URLs per DISA - 7/7/2020

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 07/07/2020