FDCC

NIST Resources

Other Resources


 

white space

white space

Federal Desktop Core Configuration
FDCC

- DOWNLOAD PAGE -

WARNING NOTICE

Do not attempt to implement any of the settings without first testing them in a non-operational environment. These recommendations should be applied only to Windows XP Professional SP2 and Vista systems and will not work on Windows 9X/ME, Windows NT, Windows 2000 or Windows Server 2003. The security policies have been tested on Windows XP Professional SP2 and Vista systems with a Windows 2003 server and will not work on Windows 9X/ME, Windows NT, Windows 2000 or Windows Server 2003.

The draft download packages contain recommended security settings; they are not meant to replace well-structured policy or sound judgment. Furthermore, these recommendations do not address site-specific configuration issues. Care must be taken when implementing these settings to address local operational and policy concerns.

These recommendations were developed at the National Institute of Standards and Technology, which collaborated with DHS, DISA, NSA, USAF, and Microsoft to produce the Windows XP and Vista FDCC baseline. Pursuant to title 17 Section 105 of the United States Code, these recommendations are not subject to copyright protection and are in the public domain. NIST assumes no responsibility whatsoever for their use by other parties, and makes no guarantees, expressed or implied, about their quality, reliability, or any other characteristic. We would appreciate acknowledgement if the recommendations are used.

 

Download Packages

2008.02.15

Released the 2008 Q1 Revised GPOs, a changelog is included in the compressed file. Also updated the FDCC Documentation, new version is 1-0-2.

2008.01.24

Updated the ZIP SCAP file to include January 08 patches.

2008.01.12
NIST released the updated SCAP content for Windows XP, Vista, XP firewall, Vista firewall, and Internet Explorer 7. The updated content includes additional automated checks and a complete mapping from the CCEs to the NIST 800-53 security contols. The settings that cannot be automated are documented in the readme.txt file included in the ZIP file.


2007.11.17 

Microsoft has corrected the activation issue with the FDCC Vista virtual machine. Please download the updated FDCC Windows Vista ZIP files.

2007.11.10 

NIST is working with Microsoft to resolve the activation issue with the FDCC Vista virtual hard Disk (VHD). It will be posted to the site by the end of the week.


2007.10.31

NIST corrected typos in the FDCC SCAP Documentation Release 1.0.1.


2007.10.30

NIST has updated the Windows Vista and XP documentation to include the revision history and released the SCAP content documentation to reflect the settings that are included in the SCAP data stream.


2007.10.23

NIST has updated the Windows Vista and XP documentation, VHDs, and SCAP content.

2007.08.20
Please read the Download FAQs to resolve issues with downloading, logging on, and activating Windows Vista.

 

Documentation

GPOs

SCAP Content

2008.02.15
FDCC Documentation Release 1.0.2 - Draft [xls, 444K]

SHA-1 Digest:
CD6BE8CD77D26D6
F67BA074DA63535
412907D6DF

SHA-256 Digest:
29E4896C04AEF446
DDAA929C09DF904E
EA34985FE2FAC3E6
D3C3ACF42B3C3BCC

2008.02.15
FDCC 2008 Q1 GPO Release -Draft [zip, ~3 MB]

SHA-1 Digest:
ADF10595AEFBA7
AF3290BAD0BC55
0084CB701CE4

SHA-256 Digest:
A5D0750A79893C
7276C874E01E97
883D27E5BAD541
E4A2AEF6ECD4FAA
F7AEDFE

 

2008.01.24
Windows XP, Vista, firewall, and IE 7. - [zip, ~452K]

SHA-1 Digest:
bb84aabb47491ad04073
6a1cadc9043b97ad772c

SHA-256 Digest:
e6f01a9fbe8262d4eec4e
cae581eb6031bff44cda6
11b8ab8d7b6fc042f6a8c4

The preceding files are intended for use with "SCAP FDCC scanning capable" tools.

 

 


VHD Files

SHA-1 Digest

SHA-256 Digest

Note

Windows XP FDCC VHD Release 1.0.1 - Part 1 of 6 - Draft [zip, ~465MB] 9f3b5cc32979f0cdf6a7
f6da0327413cc00ecd89

e6e61e880e359705ab29c
432bb0a0a35466125ddcf5
f154911e325a34f65fd0c

2007.10.23
Download the six files. Use WinZip to open the archive and extract the .VHD and .VMC files.

Please read the Download FAQs.

Windows XP FDCC VHD Release 1.0.1 - Part 2 of 6 - Draft [zip, ~696MB] 1d7eaf0bdd22d2dd12b3
0fda647c32bbda4c2e8c

85f6292e04a691b0ef7c
0c1e3db29e905d614ded0c
da7c1f7fabc04fc4bcaf24
Windows XP FDCC VHD Release 1.0.1 - Part 3 of 6 - Draft [zip, ~696MB] 105b0d54e9b2057f8ccf
4e998e8e05513fe1a234
91e6d6208e9a389108b4a
b4298369cab604bfd5a9b
2414aae43be05763400f11
Windows XP FDCC VHD Release 1.0.1 - Part 4 of 6 - Draft [zip, ~696MB] 2b7ebc8a5032edebf9aa
53086ca7a78883fe020b
c6d8325a4f9f00f661d11
e91687b5e8cf2e0dffca8d
62c65af2c3e1f48a2af2e
Windows XP FDCC VHD Release 1.0.1 - Part 5 of 6 - Draft [zip, ~696MB] 193c643549eb503826ba
b534e860097650b2b55c
3dc8e053879b060f2ae6
0fd06dc22408ddbeb6d6ee
7b578434c35b9f4b3ed437
Windows XP FDCC VHD Release 1.0.1 - Part 6 of 6 - Draft [zip, ~696MB] 28e871fd4422a3ad2b47
f881aa748a15c0d29789
e665593f2e12b32524b1
e97a31be179b66da7a9c32
da52c2db2c6bb34723d97f
Windows Vista FDCC VHD Release 1.0.1 - Part 1 of 7 - Draft [zip, ~267MB] e036c11c76c45457c41e
ab3c177df383dde887ac
c46f34bbcf6065da756a2
06b788bd532177662a21a
72e9cdd16bbd6d0915b9a3
2007.11.17
Download the 7 files. Use WinZip to open the archive and extract the .vhd and .vmc files.

Please read the Download FAQs.
Windows Vista FDCC VHD Release 1.0.1 - Part 2 of 7 - Draft [zip, ~696MB] a7f5f36ed136b4160440
3e21b4d2f1cff6086058
5cc174dc9aeba0c1ab60a
5ec4700db337ff98c55b8
7990a3741ff40b4ad4d929
Windows Vista FDCC VHD Release 1.0.1 - Part 3 of 7 - Draft [zip, ~696MB] a1d46eafe92c646f0861
8f7b02da070d10fa7606
18151e31a51e5a9d12f00
57efc0b9671621de9f4d3
27f47308fd2dd93578c776
Windows Vista FDCC VHD Release 1.0.1 - Part 4 of 7 - Draft [zip, ~696MB] c3ace2eb4d54c81e48b5
ba31b3b8141153491d81
b1096293d00b00b11277a
b242e34a92e5e1c4db956
95db8e168948460ddaa0a2
Windows Vista FDCC VHD Release 1.0.1 - Part 5 of 7 - Draft [zip, ~696MB] ef405071af4ed61b6cae
669a1c9b8da2749e6e7b
257af8a616eb25204d203
c035c0191d805cb3851dc
61e0f17a74b890650d6844
Windows Vista FDCC VHD Release 1.0.1 - Part 6 of 7 - Draft [zip, ~696MB] 43736f934ca8f5918b51
d94f2016300a200d4dd1
528d62128ed0e9888ff10
e2be876c01841cb4a8b09
c2a6dfff0f4694311e15d9
Windows Vista FDCC VHD Release 1.0.1 - Part 7 of 7 - Draft [zip, ~696MB] 6afb0542f5b5bfc7c827
c350e38ba82faf0b1d78
95dfd6dd22bc3b7b5fde0
fbaf189465db5f2d18629
16fc6bf2386067f38b54a7

 

Updates History

Documentation

GPO Files

VHD Files

SCAP Content

2008.02.15
FDCC Documentation Release
1.0.2
- Draft
2008.02.15
2008 Q1 GPO Release
   
      2008.01.12
Post the updated SCAP Content.
    2007.11.17
Post the Vista FDCC split ZIP files - Correct the activation issue.
 
2007.10.31
FDCC SCAP Documentation Release
1.0.1
- Draft
Correct typos.
     

2007.10.30
FDCC SCAP Documentation Release 1.0.1 - Draft
includes the revision history.

FDCC Documentation Release
1.0.1
- Draft
reflects the settings that are included in the SCAP data stream.

     
2007.10.23
FDCC Documentation Release 1.0.1 - Draft
includes registry settings, description, and updated CCEs.
  2007.10.23
Post the segmented VHD files - Release 1.0.1 - Draft
2007.10.23
Release 1.0.1 - Draft
    2007.08.20
Post the segmented VHD files - Release 1.0 - Draft
 
2007.07.31
Release 1.0 - Draft

2007.07.31
Release 1.0 - Draft

2007.07.31
Release 1.0 - Draft

2007.07.31
Release 1.0 - Draft

 

 

Comments and Questions

Comments and questions may be addressed to fdcc@nist.gov.

 

 

 

Disclaimer
Any mention of commercial products or reference to commercial organizations is for information only; it does not imply recommendation or endorsement by NIST nor does it imply that the products mentioned are necessarily the best available for the purpose.

 


Last updatMarch 27, 2014!-- #EndDate -->
Page created: July 22, 2007

Disclaimer Notice & Privacy Statement / Security Notice
Send comments or suggestions to itsec@nist.gov
NIST is an Agency of the U.S. Department of Commerce