National Institute of Standards and Technology (NIST) - Information technology Laboratory (ITL)

The United States Government Configuration Baseline (USGCB) - Windows Vista Content

Warning Notice

Do not attempt to implement any of the settings without first testing them in a non-operational environment. These recommendations have only been tested on Windows 7 Ultimate 32-bit, Windows 7 Ultimate 64-bit, Windows 7 Enterprise x86, and Windows 7 Enterprise x64. These settings may be applicable to other Windows systems and service packs; however, NIST has not tested other Windows based systems with these settings. Please see the National Checklist Program (NCP) website for configuration guides related to other Windows Based systems and applications.

The draft download packages contain recommended security settings; they are not meant to replace well-structured policy or sound judgment. Furthermore, these recommendations do not address site-specific configuration issues. Care must be taken when implementing these settings to address local operational and policy concerns.

These recommendations were developed at the National Institute of Standards and Technology, which collaborated with DoD and Microsoft to produce the Windows 7, Windows 7 Firewall, Internet Explorer 8 USGCB. Pursuant to title 17 Section 105 of the United States Code, these recommendations are not subject to copyright protection and are in the public domain. NIST assumes no responsibility whatsoever for their use by other parties, and makes no guarantees, expressed or implied, about their quality, reliability, or any other characteristic. We would appreciate acknowledgement if the recommendations are used.


Download Packages

The following table provides the downloads for the Windows Vista USGCB Content. VHDs are also available to use for testing. Additional information can be found in the FAQ.

Documentation GPOs SCAP Content CCE to 800-53 Mappings
  • USGCB Major Version 1.2.x.0 Settings
    Please refer to the top-level Microsoft Content Page for the listing of all USGCB settings and associated hash values.
  • USGCB Major Version 1.2.x.0 Known Issues
    Please refer to the top-level Microsoft Content Page for the listing of all known issues relating to USGCB content and associated hash values.
  • USGCB/FDCC Comparison for Windows - 2010.11.09
    sha1
    6920E757F12E00ED58E39E27FCB2F79B35BBFF8F
    sha256
    7659F2007E3A0286EBCC344885F68540A4B93849628A0603382F28AE74110E18
  • USGCB Windows Vista GPOs - 2011.11.10
    sha1
    A6886CC6844676232EFF0EF063F66ACE330D9CFC
    sha256
    6253EE0C5DBE936EFA278458B00FF1F2113CD2C35D587C901E1690CA011FE244
  • SCAP 1.2 (Oval 5.10)

    Windows Vista Content - 2012.11.28
    sha1
    6BD3BFD32164EEFD43F7B037CAE7812A82ACAF37
    sha256
    3E9B76318CA13A3072E72295E42B29AF1E540C9F62F9851A40F6B19B5C91A5F3
  • SCAP 1.0 (Oval 5.4)

    Windows Vista Content - 2013.12.17
    sha1
    A12582B2E361B4E0B8753C78775C20FCF48504DC
    sha256
    C29803D2DFF27CFCF037C7CE0E763D3AE10E67BB6BF9F0E8E97D1DAD8A950D23
  • SCAP 1.0 (Oval 5.3)

    Windows Vista Content - 2013.12.17
    sha1
    8EA22CD0160894F3158E2480D262E84B514794B6
    sha256
    8A4B81ABEC799602E4209CF2138C4FAA0A2F9FBF1FEBBEDC03B4105BE908F43C
  • Windows Vista SCAP Patch Content - 2013.12.17
    sha1
    F99AA072D85E6B88C5F3D05EDC680856728C54E6
    sha256
    D82E6C12E25F348918EDE5AA0C38EF68EF3A05CD584FDB960165DFF065551622

Update History
Date Documentation GPOs SCAP Content CCE to 800-53 Mappings
December 17, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
November 19, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
October 22, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
September 20, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
August 30, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
July 31, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
June 25, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
May 29, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
April 29, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
March 21, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
February 25, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
January 22, 2013 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
December 28, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
December 05, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
November 28, 2012 No changes No changes SCAP 1.2 (Oval 5.10) content signature updated; no other change to content. No changes
October 31, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
August 17, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
July 30, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
June 15, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. No changes
May 21, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted. SCAP 1.2 (Oval 5.10) content signature updated; no change to content No changes
April 23, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
March 22, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
February 23, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
January 23, 2012 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
November 14, 2011 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
November 10, 2011 No changes USGCB GPOs posted No changes No changes
October 17, 2011 No changes No changes USGCB major version 2.0.x.0 SCAP content posted No changes
October 05, 2011 No changes No changes No changes National Checklist Program's Machine-readable CCE to 800-53 Mappings linked
September 21, 2011 USGCB major version 1.2.x.0 Settings and Known Issues posted No changes USGCB major version 2.0.x.0-Alpha-Candidate SCAP content posted No changes