CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0

Updated: 1/28/2022

Authority: CIS

Plugin: Windows

Revision: 1.4

Estimated Item Count: 288

Audit Changelog

 
Revision 1.4

Jan 28, 2022

Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Revision 1.3

Oct 29, 2021

Functional Update
  • 19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'
  • 19.1.3.2 Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'
  • 19.1.3.3 Ensure 'Password protect the screen saver' is set to 'Enabled'
  • 19.1.3.4 Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'
  • 19.5.1.1 Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'
  • 19.7.26.1 Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'
  • 19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'
  • 19.7.4.2 Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'
  • 19.7.41.1 Ensure 'Always install with elevated privileges' is set to 'Disabled'
  • 19.7.7.1 Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'
  • 19.7.7.2 Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'
Miscellaneous
  • References updated.
Revision 1.2

Jun 25, 2021

Functional Update
  • 18.9.16.1 Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only]' or 'Enabled: 1 - Basic'
Revision 1.1

Jun 17, 2021

Miscellaneous
  • Metadata updated.
  • References updated.
Added
  • 9.3.7 Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log' - %SYSTEMROOT%\System32\logfiles\firewall\publicfw.log
Removed
  • .3.7 Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log' - %SYSTEMROOT%\System32\logfiles\firewall\publicfw.log