<div dir="ltr"><p class="MsoNormal" style="margin:0in 0in 12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Product:<br>
</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">BigFix Compliance</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Title:</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"><br>
Updated </span><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/t/bigfix-compliance-updated-cis-checklist-for-windows-server-2019-published-2025-09-10/52686"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(34,34,34);text-decoration-line:none">DISA STIG Checklist for Windows 2022</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> with bug fixes.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Security Benchmark:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/t/bigfix-compliance-updated-cis-checklist-for-windows-server-2019-published-2025-09-10/52686"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(34,34,34);text-decoration-line:none">DISA STIG Checklist for Windows 2022</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Benchmark, V2R5</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Published Sites:</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"><br>
</span><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/t/bigfix-compliance-updated-cis-checklist-for-windows-server-2019-published-2025-09-10/52686"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(34,34,34);text-decoration-line:none">DISA STIG Checklist for Windows 2022</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">, site version 16.<br>
(The site version is provided for air-gap customers.)</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Details: </span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Total New Fixlets: 0</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Total Updated Fixlets: 5</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Total Deleted Fixlets: 0</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Total Fixlets in Site: 220</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">UPDATED:</span></b></p>

<p class="gmail-MsoListParagraphCxSpFirst" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Windows Server 2022
Deny access to this computer from the network user right on domain-joined
member servers must be configured to prevent access from highly privileged
domain accounts and local accounts and from unauthenticated access on all
systems.</span></p>

<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Windows Server 2022
Deny log on through Remote Desktop Services user right on domain-joined member
servers must be configured to prevent access from highly privileged domain
accounts and all local accounts and from unauthenticated access on all systems.</span></p>

<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Windows Server 2022
Deny log on locally user right on domain-joined member servers must be
configured to prevent access from highly privileged domain accounts and from
unauthenticated access on all systems.</span></p>

<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Windows Server 2022
Deny log on as a batch job user right on domain-joined member servers must be
configured to prevent access from highly privileged domain accounts and from
unauthenticated access on all systems.</span></p>

<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Windows Server 2022
Deny log on as a service user right on domain-joined member servers must be
configured to prevent access from highly privileged domain accounts. No other
groups or accounts must be assigned this right.</span></p>

<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Symbol">·<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Both analysis and
remediation checks are included</span></p>

<p class="gmail-MsoListParagraphCxSpLast" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Symbol">·<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Some of the checks
allow you to use the parameterized setting to enable customization for
compliance evaluation. Note that parameterization and remediation actions
require the creation of a custom site.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Actions to take:</span></b></p>

<p class="gmail-MsoListParagraphCxSpFirst" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Symbol">·<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">To subscribe to the
above site, you can use the License Overview Dashboard to enable and gather the
site. Note that you must be entitled to the BigFix Compliance product, and you
must be using BigFix version 10 and later.</span></p>

<p class="gmail-MsoListParagraphCxSpLast" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Symbol">·<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">If you use custom
sites, update your custom sites accordingly to use the latest content. You can
synchronize your content by using the Synchronize Custom Checks wizard. For
more information, see </span><span lang="EN" style="color:black"><a href="https://help.hcl-software.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">https://help.hcl-software.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">More information:<br>
</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">To know more information about the BigFix Compliance SCM
checklists, please see the following resources:</span></p>

<p class="gmail-MsoListParagraphCxSpFirst" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Symbol;color:rgb(0,136,204)">·<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">BigFix Forum:<br>
</span><span lang="EN" style="color:black"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration-line:none">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204)"></span></p>

<p class="gmail-MsoListParagraphCxSpLast" style="margin:12pt 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Symbol;color:rgb(0,136,204)">·<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">BigFix Compliance
SCM Checklists:<br>
</span><span lang="EN" style="color:black"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sJEji05sRie522iksNIya8RoKSDGBtgSCKlAzsF0N%2Fo%3D&reserved=0"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration-line:none">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204)"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">We hope you find this latest release of SCM content
useful and effective. Thank you!</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">– The BigFix Compliance team</span></i></p></div>