Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-68

Guidance for Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist

Date Published: October 2005


Murugiah Souppaya (NIST), Karen Kent (BAH), Paul Johnson (BAH)



anti-virus; authentication; computer security; COTS; email; encryption; firewall; hardening; IPsec; lockdown; malware; Microsoft; operating system; security checklist; Security configuration; security controls; security policy; security templates; spyware; threats; web browser; Windows XP
Control Families

None selected


Download URL

Supplemental Material:
None available

Document History:
10/20/05: SP 800-68 (Final)