Microsoft products have been awarded Common Criteria (CC) Evaluation Assurance Level (EAL) 4 Augmented with ALC_FLR.3 certification. Microsoft products were evaluated against the Controlled Access Protection Profile (CAPP) CAPP is available to download the Windows XP / Server 2003 CommonCriteria Evaluation Technical Report in.zip format. CECP is based on the CECS (Security Level 3 Protection Profile, Version 1.0) AECP-conformant TOEs are applicable to networked or distributed environments only if the entire network operates under the same constraints and resides within a single management domain.”]
Source: https://taosecurity.blogspot.com/2005/12/thoughts-on-recent-microsoft-common.html