| FDCC |
|
|
|
NIST
Resources
|
|
|
Other
Resources |
|
|
|
|
|
|
Federal Desktop Core
Configuration
FDCC
- DOWNLOAD PAGE -
|
WARNING NOTICE
|
|
Do not attempt
to implement any of the settings without first testing them in
a non-operational environment. These recommendations should be
applied only to Windows XP Professional SP2 and Vista
systems and will not work on Windows 9X/ME, Windows NT, Windows
2000 or Windows Server 2003. The security policies have been tested
on Windows XP Professional SP2 and Vista
systems with a Windows 2003 server and will not work on Windows
9X/ME, Windows NT, Windows 2000 or Windows Server 2003.
The draft download
packages contain recommended security settings; they are not meant
to replace well-structured policy or sound judgment. Furthermore,
these recommendations do not address site-specific configuration
issues. Care must be taken when implementing these settings to
address local operational and policy concerns.
These recommendations
were developed at the National Institute of Standards and Technology,
which collaborated with DHS, DISA, NSA, USAF, and Microsoft to
produce the Windows XP and Vista FDCC baseline. Pursuant to title
17 Section 105 of the United States Code, these recommendations
are not subject to copyright protection and are in the public
domain. NIST assumes no responsibility whatsoever for their use
by other parties, and makes no guarantees, expressed or implied,
about their quality, reliability, or any other characteristic.
We would appreciate acknowledgement if the recommendations are
used.
|
|
Download Packages
|
|
2008.02.15
Released the
2008 Q1 Revised GPOs, a changelog is included in the compressed file. Also updated the FDCC Documentation, new version is 1-0-2.
2008.01.24
Updated
the ZIP SCAP file to include January 08 patches.
2008.01.12
NIST
released the updated SCAP content for Windows XP, Vista, XP firewall,
Vista firewall, and Internet Explorer 7. The updated content includes
additional automated checks and a complete mapping from the CCEs
to the NIST 800-53 security contols. The settings that cannot
be automated are documented in the readme.txt file included in
the ZIP file.
2007.11.17
Microsoft
has corrected the activation issue with the FDCC Vista virtual
machine. Please download the updated FDCC Windows Vista ZIP files.
2007.11.10
NIST
is working with Microsoft to resolve the activation issue with
the FDCC Vista virtual hard Disk (VHD). It will be posted to the
site by the end of the week.
2007.10.31
NIST corrected
typos in the FDCC SCAP Documentation Release 1.0.1.
2007.10.30
NIST has updated
the Windows Vista and XP documentation to include the revision
history and released the SCAP content documentation to reflect
the settings that are included in the SCAP data stream.
2007.10.23
NIST has updated
the Windows Vista and XP documentation, VHDs, and SCAP content.
2007.08.20
Please read the Download FAQs
to resolve issues with downloading, logging on, and activating
Windows Vista.
|
|
Documentation
|
GPOs
|
SCAP Content
|
|
2008.02.15
FDCC Documentation Release
1.0.2 - Draft [xls, 444K]
SHA-1 Digest:
CD6BE8CD77D26D6
F67BA074DA63535
412907D6DF
SHA-256
Digest:
29E4896C04AEF446
DDAA929C09DF904E
EA34985FE2FAC3E6
D3C3ACF42B3C3BCC
|
2008.02.15
FDCC 2008 Q1 GPO Release
-Draft [zip, ~3 MB]
SHA-1 Digest:
ADF10595AEFBA7
AF3290BAD0BC55
0084CB701CE4
SHA-256
Digest:
A5D0750A79893C
7276C874E01E97
883D27E5BAD541
E4A2AEF6ECD4FAA
F7AEDFE
|
2008.01.24
Windows XP, Vista, firewall, and IE 7.
- [zip, ~452K]
SHA-1 Digest:
bb84aabb47491ad04073
6a1cadc9043b97ad772c
SHA-256
Digest:
e6f01a9fbe8262d4eec4e
cae581eb6031bff44cda6
11b8ab8d7b6fc042f6a8c4
The
preceding files are intended for use with "SCAP FDCC scanning capable"
tools.
|
|
VHD Files
|
SHA-1 Digest
|
SHA-256 Digest
|
Note
|
| Windows
XP FDCC VHD Release 1.0.1 - Part 1 of 6 - Draft [zip,
~465MB] |
9f3b5cc32979f0cdf6a7
f6da0327413cc00ecd89
|
e6e61e880e359705ab29c
432bb0a0a35466125ddcf5
f154911e325a34f65fd0c |
2007.10.23
Download
the six files. Use WinZip to open the archive and extract
the .VHD and .VMC files.
Please read the Download FAQs.
|
| Windows
XP FDCC VHD Release 1.0.1 - Part 2 of 6 - Draft [zip,
~696MB] |
1d7eaf0bdd22d2dd12b3
0fda647c32bbda4c2e8c
|
85f6292e04a691b0ef7c
0c1e3db29e905d614ded0c
da7c1f7fabc04fc4bcaf24 |
| Windows
XP FDCC VHD Release 1.0.1 - Part 3 of 6 - Draft [zip,
~696MB] |
105b0d54e9b2057f8ccf
4e998e8e05513fe1a234 |
91e6d6208e9a389108b4a
b4298369cab604bfd5a9b
2414aae43be05763400f11 |
| Windows
XP FDCC VHD Release 1.0.1 - Part 4 of 6 - Draft [zip,
~696MB] |
2b7ebc8a5032edebf9aa
53086ca7a78883fe020b |
c6d8325a4f9f00f661d11
e91687b5e8cf2e0dffca8d
62c65af2c3e1f48a2af2e |
| Windows
XP FDCC VHD Release 1.0.1 - Part 5 of 6 - Draft [zip,
~696MB] |
193c643549eb503826ba
b534e860097650b2b55c |
3dc8e053879b060f2ae6
0fd06dc22408ddbeb6d6ee
7b578434c35b9f4b3ed437 |
| Windows
XP FDCC VHD Release 1.0.1 - Part 6 of 6 - Draft [zip,
~696MB] |
28e871fd4422a3ad2b47
f881aa748a15c0d29789 |
e665593f2e12b32524b1
e97a31be179b66da7a9c32
da52c2db2c6bb34723d97f |
| Windows
Vista FDCC VHD Release 1.0.1 - Part 1 of 7 - Draft [zip,
~267MB] |
e036c11c76c45457c41e
ab3c177df383dde887ac |
c46f34bbcf6065da756a2
06b788bd532177662a21a
72e9cdd16bbd6d0915b9a3 |
2007.11.17
Download
the 7 files. Use WinZip to open the archive and extract the
.vhd and .vmc files.
Please read the Download FAQs.
|
| Windows
Vista FDCC VHD Release 1.0.1 - Part 2 of 7 - Draft [zip,
~696MB] |
a7f5f36ed136b4160440
3e21b4d2f1cff6086058 |
5cc174dc9aeba0c1ab60a
5ec4700db337ff98c55b8
7990a3741ff40b4ad4d929 |
| Windows
Vista FDCC VHD Release 1.0.1 - Part 3 of 7 - Draft [zip,
~696MB] |
a1d46eafe92c646f0861
8f7b02da070d10fa7606 |
18151e31a51e5a9d12f00
57efc0b9671621de9f4d3
27f47308fd2dd93578c776 |
| Windows
Vista FDCC VHD Release 1.0.1 - Part 4 of 7 - Draft [zip,
~696MB] |
c3ace2eb4d54c81e48b5
ba31b3b8141153491d81 |
b1096293d00b00b11277a
b242e34a92e5e1c4db956
95db8e168948460ddaa0a2 |
| Windows
Vista FDCC VHD Release 1.0.1 - Part 5 of 7 - Draft [zip,
~696MB] |
ef405071af4ed61b6cae
669a1c9b8da2749e6e7b |
257af8a616eb25204d203
c035c0191d805cb3851dc
61e0f17a74b890650d6844 |
| Windows
Vista FDCC VHD Release 1.0.1 - Part 6 of 7 - Draft [zip,
~696MB] |
43736f934ca8f5918b51
d94f2016300a200d4dd1 |
528d62128ed0e9888ff10
e2be876c01841cb4a8b09
c2a6dfff0f4694311e15d9 |
| Windows
Vista FDCC VHD Release 1.0.1 - Part 7 of 7 - Draft [zip,
~696MB] |
6afb0542f5b5bfc7c827
c350e38ba82faf0b1d78 |
95dfd6dd22bc3b7b5fde0
fbaf189465db5f2d18629
16fc6bf2386067f38b54a7 |
|
|
Updates History
|
|
Documentation
|
GPO Files
|
VHD Files
|
SCAP Content
|
2008.02.15
FDCC Documentation Release
1.0.2 - Draft
|
2008.02.15
2008 Q1 GPO Release |
|
|
| |
|
|
2008.01.12
Post
the updated SCAP Content. |
| |
|
2007.11.17
Post
the Vista FDCC split ZIP files - Correct the activation
issue. |
|
2007.10.31
FDCC
SCAP Documentation Release
1.0.1 - Draft
Correct typos. |
|
|
|
|
2007.10.30
FDCC SCAP Documentation Release 1.0.1 - Draft
includes the revision history.
FDCC Documentation Release
1.0.1 - Draft
reflects the settings that are included in the SCAP data
stream.
|
|
|
|
2007.10.23
FDCC Documentation Release 1.0.1 - Draft
includes registry settings, description, and updated CCEs. |
|
2007.10.23
Post
the segmented VHD files - Release 1.0.1 - Draft |
2007.10.23
Release 1.0.1 - Draft |
| |
|
2007.08.20
Post
the segmented VHD files - Release 1.0 - Draft
|
|
2007.07.31
Release 1.0 - Draft |
2007.07.31
Release 1.0 - Draft
|
2007.07.31
Release 1.0 - Draft
|
2007.07.31
Release 1.0 - Draft
|
|
|
Comments and Questions
|
|
Comments
and questions may be addressed to fdcc@nist.gov.
|
|
