The system must be configured to store all data in the error report archive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-63539	WN10-ER-000055	SV-78029r1_rule		Medium

Description
The error reporting archive is stored locally on the system and is created after an error report has been sent to the local collector or DOD-wide collector (if defined). Storing all data, including memory contents, adds data that is very helpful in analyzing the errors.

STIG	Date
Windows 10 Security Technical Implementation Guide	2016-10-28

Details

Check Text ( None )
None

Fix Text (F-69469r1_fix)
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Error Reporting >> Advanced Error Reporting Settings >> "Configure Report Archive" to "Enabled" with "Store all" selected for "Archive behavior:".