Domain-joined systems must use Windows 10 Enterprise Edition 64-bit version.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-220697	WN10-00-000005	SV-220697r569187_rule		Medium

Description
Features such as Credential Guard use virtualization based security to protect information that could be used in credential theft attacks if compromised. There are a number of system requirements that must be met in order for Credential Guard to be configured and enabled properly. Virtualization based security and Credential Guard are only available with Windows 10 Enterprise 64-bit version.

STIG	Date
Windows 10 Security Technical Implementation Guide	2021-08-18

Details

Check Text ( C-22412r554576_chk )
Verify domain-joined systems are using Windows 10 Enterprise Edition 64-bit version. For standalone systems, this is NA. Open "Settings". Select "System", then "About". If "Edition" is not "Windows 10 Enterprise", this is a finding. If "System type" is not "64-bit operating system…", this is a finding.

Fix Text (F-22401r554577_fix)
Use Windows 10 Enterprise 64-bit version for domain-joined systems.