Domain-joined systems must use Windows 10 Enterprise Edition.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-63319	WN10-00-000005	SV-77809r1_rule		Medium

Description
Features such as Credential Guard uses virtualization based security to protect secrets that could be used in credential theft attacks if compromised. There are a number of system requirements that must be met in order for Credential Guard to be configured and enabled properly. Virtualization based security and Credential Guard are only available with Windows 10 Enterprise.

STIG	Date
Windows 10 Security Technical Implementation Guide	2016-11-03

Details

Check Text ( C-64053r1_chk )
Verify domain-joined systems are using Windows 10 Enterprise Edition. For standalone systems, this is NA. Verify the version of Windows 10 is Enterprise. Run "System Information". Under "System Summary", verify "OS Name" = Microsoft Windows 10 Enterprise. If another version of Windows 10 is reported, this is a finding.

Fix Text (F-69237r1_fix)
Use Windows 10 Enterprise for domain-joined systems.