Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

United States Government Configuration Baseline

Project Links

Windows XP

Warning Notice

Do not attempt to implement any of the settings without first testing them in a non-operational environment. Please see the National Checklist Program (NCP) website for configuration guides related to other Windows Based systems and applications.

The draft download packages contain recommended security settings; they are not meant to replace well-structured policy or sound judgment. Furthermore, these recommendations do not address site-specific configuration issues. Care must be taken when implementing these settings to address local operational and policy concerns.

These recommendations were developed at the National Institute of Standards and Technology, which collaborated with DoD and Microsoft to produce the Windows 7, Windows 7 Firewall, Internet Explorer 8 USGCB. Pursuant to title 17 Section 105 of the United States Code, these recommendations are not subject to copyright protection and are in the public domain. NIST assumes no responsibility whatsoever for their use by other parties, and makes no guarantees, expressed or implied, about their quality, reliability, or any other characteristic. We would appreciate acknowledgement if the recommendations are used.

Download Packages

The following sections provide the downloads for the Windows XP USGCB Content. VHDs are also available to use for testing. Additional information can be found in the FAQ.

SCAP Content

USGCB SCAP 1.2
SHA-256: 85db1f1bf5dc7e5978f78339c308764fb48d7e08a172cb47941e335f7bfcaac2
Size (MB): 0.13
Last Modified: 04/20/2015

Documentation

USGCB Major Version 3.0.x.1 Settings

Please refer to the top-level Microsoft Content Page for the listing of all USGCB settings and associated hash values.

USGCB Major Version 3.0.x.1 Known Issues

Please refer to the top-level Microsoft Content Page for the listing of all known issues relating to USGCB content and associated hash values.

USGCB/FDCC Comparison for Windows
SHA-256:  18c842f84882390f518e025741e1bae66449f30b9b84ca7070f33065bbc959ee
Size (MB): 0.13
Last Modified: 11/09/2010

GPOs

USGCB Windows XP GPOs
SHA-256:  111467e5a61f1df7d69a9e3d6db90e6d03224f1a5d48d8a59a911fec6eeab80d
Size (MB): 1.03
Last Modified: 11/10/2011

CCE to 800-53 Mappings

Machine-readable CCE to 800-53 Mappings

Update History

Date Documentation GPOs SCAP Content CCE to 800-53 Mappings
April 20, 2015 No changes No changes USGCB major version 3.0.5.1 Final Release SCAP content posted. No changes
February 25, 2015 USGCB SCAP 1.2 Settings posted No changes USGCB major version 3.0.5.1 Release Candidate SCAP content posted. No changes
February 25, 2015 No changes No changes Removed SCAP 1.0 USGCB content. No changes
October 03, 2014 Added the following CCEs: CCE-2777-1, CCE-2336-6, CCE-3014-8, and CCE-2810-0 No changes USGCB major version 2.1.3.1 Release Candidate SCAP content posted. No changes
December 17, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
November 19, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
October 22, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
September 20, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
August 30, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
July 31, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
June 25, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
May 29, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
April 29, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
March 21, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
February 25, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
January 22, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
December 28, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
December 05, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
November 28, 2012 No changes No changes SCAP 1.2 (Oval 5.10) content signature updated; no other change to content. No changes
October 31, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
August 17, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
July 30, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
June 15, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
May 21, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. SCAP 1.2 (Oval 5.10) content signature updated; no change to content No changes
April 23, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
March 22, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
February 23, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
January 23, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
November 14, 2011 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
November 10, 2011 No changes USGCB GPOs posted No changes No changes
October 26, 2011 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
October 17, 2011 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
October 05, 2011 No changes No changes No changes National Checklist Program's Machine-readable CCE to 800-53 Mappings linked
September 21, 2011 USGCB major version 1.2.x.0 Settings and Known Issues posted No changes USGCB major version 2.0.x.0-Alpha-Candidate SCAP content posted No changes
Created December 14, 2016, Updated March 28, 2018