DISA Microsoft Windows Server 2016 STIG v2r10

Audit Details

Name: DISA Microsoft Windows Server 2016 STIG v2r10

Updated: 10/22/2026

Authority: DISA STIG

Plugin: Windows

Revision: 1.6

Estimated Item Count: 274

File Details

Filename: DISA_STIG_Microsoft_Windows_Server_2016_v2r10.audit

Size: 769 kB

MD5: e869d9e80b17ef7b937e2de27376c0a8
SHA256: b78c060de18c4ba8e75ea025ba958673a98bae50d72fb65baad6e6c363fa4c4a

Audit Changelog

 
Revision 1.6

Oct 22, 2026

Miscellaneous
  • Variables updated.
Revision 1.5

Sep 11, 2026

Functional Update
  • WN16-00-000190 - Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.
Miscellaneous
  • Metadata updated.
Revision 1.4

Jun 16, 2026

Functional Update
  • WN16-UR-000220 - The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service.
Revision 1.3

Feb 25, 2026

Functional Update
  • WN16-00-000450 - The time service must synchronize with an appropriate DoD time source.
  • WN16-00-000480 - Windows 2016 systems must have Unified Extensible Firmware Interface (UEFI) firmware and be configured to run in UEFI mode, not Legacy BIOS.
Miscellaneous
  • Metadata updated.
  • Platform check updated.
Added
  • DISA_STIG_Microsoft_Windows_Server_2016_v2r10.audit from DISA Microsoft Windows Server 2016 STIG v2r10
Removed
  • DISA_Microsoft_Windows_Server_2016_STIG_v2r10.audit from DISA Microsoft Windows Server 2016 STIG v2r10
Revision 1.2

Oct 30, 2025

Functional Update
  • WN16-00-000460 - Orphaned security identifiers (SIDs) must be removed from user rights on Windows 2016.
Informational Update
  • WN16-00-000460 - Orphaned security identifiers (SIDs) must be removed from user rights on Windows 2016.
Miscellaneous
  • Metadata updated.
Revision 1.1

Oct 20, 2025

Functional Update
  • WN16-00-000230 - Passwords must be configured to expire.
Miscellaneous
  • Metadata updated.