XIA Configuration Server

Windows Server Security Audit & Compliance

XIA Configuration delivers complete visibility, auditing, benchmarking, and reporting of the security configuration and posture of every Windows server and workstation across your entire IT estate.

Start your free trialView example document
An image of a shield that represents Windows Server security.

Microsoft Defender

XIA Configuration automatically documents Microsoft Defender on every Windows server and workstation, giving you visibility of built-in antivirus protection across your estate.

It captures real-time, tamper and cloud-delivered protection, sample submission settings, product and engine versions, and the signature version and date of the last update. It also records excluded file extensions, paths and processes, so you can spot machines with protection turned off, signatures that are out of date, and overly broad exclusions that weaken malware protection.

The Microsoft Defender logo.

Security Compliance Benchmark

The Windows security compliance benchmark includes over 340 tests to aid with server and workstation security hardening.

A screenshot showing the Windows Security compliance benchmark results.
Use XIA Configuration's compliance benchmark to check your Windows settings meet security best practices

User Rights Assignment

XIA Configuration documents the User Rights Assignment configuration on every Windows server and workstation, giving IT managers immediate visibility of which accounts can, for example, log on locally or remotely, back up and restore files, debug programs, or act as part of the operating system.

For each user right it captures the accounts assigned that right and where it is configured, whether through a Group Policy object or locally on the machine. Find security gaps such as over-privileged accounts or legacy groups like Everyone, and automatically check the configuration against the built-in Windows security compliance benchmark, which follows Microsoft's recommended User Rights Assignment guidance.

An image that represents Windows user rights assignment.

Advanced Audit Policy

XIA Configuration documents the Advanced Audit Policy on every Windows server and workstation, giving IT managers immediate visibility of which security events are being recorded across the estate.

For each subcategory it captures the audit setting (Success, Failure or None) and where it is configured. Find audit gaps and automatically check the configuration against the built-in Windows security compliance benchmark, which follows Microsoft's recommended audit policy.

A screenshot showing the Advanced Audit Policy information.
Use XIA Configuration to collect information on the Windows Advanced Audit Policy.

Trusted Platform Module (TPM)

XIA Configuration documents the Trusted Platform Module (TPM) on every Windows server and workstation. It records whether a TPM is present, the manufacturer, firmware and specification version, and whether it is activated, ready, locked out and owned.

You can quickly find machines that aren't ready for BitLocker or Windows 11, TPMs that are locked out, and devices running outdated TPM firmware.

An image that represents a trusted platform module.

Windows Firewall

XIA Configuration's Windows Firewall support provides essential visibility into your network security posture by capturing profile-level settings such as operational states, default inbound and outbound actions, and logging configurations, alongside precise rule-level details like specific ports, protocols, and bound applications.

IT and security teams can easily audit compliance, verify that critical services remain securely accessible, and quickly troubleshoot connectivity issues across the estate.

An image that represents the Windows Firewall.

Windows Update

XIA Configuration documents how Windows Update is set up on every server and workstation, including the update mode, whether other Microsoft products are included, automatic maintenance, and whether updates come from Microsoft or your own WSUS server.

Easily identify machines where the Windows Update configuration doesn't match your organization's policy, or where updates aren't being installed automatically.

An image of a green circle and tick that represents Windows Update.

SSL/TLS Certificates

XIA Configuration collects detailed information about the SSL/TLS certificates stored across every Windows server and workstation in your environment.

  • Subject
  • Issuer
  • Expiry Date
  • Key Usage
  • Enhanced Key Usage
  • Subject Alternative Names
  • Thumbprint

Detect expiring certificates before they trigger service outages, spot untrusted or rogue self-signed certificates, and quickly pinpoint every machine across the estate where a replaced certificate still needs to be unbound or removed.

Learn how to check SSL certificate expiration dates in Windows Server

An image of a certificate with a question mark over it.

Complete Windows System Visibility

Windows security settings are only one part of total system visibility provided by XIA Configuration.

To view the complete set of information collected by XIA Configuration for Windows systems, view the Windows platform page.

The Microsoft Windows logo.

Windows Server Security Audit & Compliance FAQ

Here are answers to the most common questions about Windows Server Security Audit & Compliance support within XIA Configuration.

Does XIA Configuration need an agent installed on the Windows machines?

No. XIA Configuration is completely agentless. All Windows machine information is retrieved using PowerShell remoting (optionally failing back to classic protocols such as WMI if required).

What security settings and policy areas does XIA Configuration audit?

XIA Configuration audits a comprehensive range of security settings across your Windows estate, including User Rights Assignments, Local Group and User Accounts, Account Policies, Advanced Audit Policies, Windows Firewall configurations, LAPS, Microsoft Defender status, machine certificates, and Windows Update configuration and history.

How does the security compliance benchmarking work?

The software includes over 340 built-in benchmark tests based on Microsoft's recommended security guidance. It automatically evaluates your servers and workstations against these best practices so you can instantly identify misconfigurations and hardening gaps.

Can XIA Configuration detect unauthorized configuration changes?

Yes. By periodically scanning and comparing documentation over time, XIA Configuration detects configuration drift, tracking changes to your server security posture to support internal change management and compliance audits.

Can I run reports across multiple servers to find compliance failures?

Yes. You can run estate-wide reports to quickly identify which computers do not meet your organization's security requirements or fail specific compliance benchmark tests.

What output formats are supported for security documentation and reports?

The documentation can be exported to PDF, Microsoft Word (DOCX), and XML formats, making it easy to archive snapshots, share documentation with management, or include them in compliance and audit packs. Reports can be exported in PDF, Microsoft Word (DOCX), and CSV formats.

Does XIA Configuration support Windows workstations?

Yes. The system automatically detects and adapts to scanning supported versions of both Windows workstations and servers.