STIGQter: STIG Summary: Microsoft Windows 11 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

Windows 11 must use multifactor authentication for local and network access to privileged and nonprivileged accounts.

DISA Rule

SV-253470r1106510_rule

Vulnerability Number

V-253470

Group Title

SRG-OS-000105-GPOS-00052

Rule Version

WN11-SO-000251

Severity

CAT II

CCI(s)

• CCI-000765 - Implement multifactor authentication for network access to privileged accounts.

Weight

10

Fix Recommendation

For nondomain joined systems, configuring Windows Hello for sign-on options would be suggested based on the organization's needs and capabilities.

Check Contents

If the system is not a member of a domain, this is Not Applicable.

If all of the following settings exist and are populated, this is not a finding.

\HKLM\SOFTWARE\Microsoft\Cryptography\Calais\Readers
\HKLM\SOFTWARE\Microsoft\Cryptography\Calais\SmartCards

Vulnerability Number

V-253470

Documentable

False

Rule Version

WN11-SO-000251

Severity Override Guidance

If the system is not a member of a domain, this is Not Applicable.

If all of the following settings exist and are populated, this is not a finding.

\HKLM\SOFTWARE\Microsoft\Cryptography\Calais\Readers
\HKLM\SOFTWARE\Microsoft\Cryptography\Calais\SmartCards

Check Content Reference

M

Target Key

5471