DISA Microsoft Windows Server 2016 STIG v2r10

Audit Details

Name: DISA Microsoft Windows Server 2016 STIG v2r10

Updated: 9/11/2026

Authority: DISA STIG

Plugin: Windows

Revision: 1.5

Estimated Item Count: 274

File Details

Filename: DISA_STIG_Microsoft_Windows_Server_2016_v2r10.audit

Size: 770 kB

MD5: 59d4156a968b368246872ea5fc52896e
SHA256: 2d87062e2086e2cd6cf4f28419467818c509dd8ec6c5650df1f73f74e7fc51d1

Audit Changelog

 
Revision 1.5

Sep 11, 2026

Functional Update
  • WN16-00-000190 - Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.
Miscellaneous
  • Metadata updated.
Revision 1.4

Jun 16, 2026

Functional Update
  • WN16-UR-000220 - The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service.
Revision 1.3

Feb 25, 2026

Functional Update
  • WN16-00-000450 - The time service must synchronize with an appropriate DoD time source.
  • WN16-00-000480 - Windows 2016 systems must have Unified Extensible Firmware Interface (UEFI) firmware and be configured to run in UEFI mode, not Legacy BIOS.
Miscellaneous
  • Metadata updated.
  • Platform check updated.
Added
  • DISA_STIG_Microsoft_Windows_Server_2016_v2r10.audit from DISA Microsoft Windows Server 2016 STIG v2r10
Removed
  • DISA_Microsoft_Windows_Server_2016_STIG_v2r10.audit from DISA Microsoft Windows Server 2016 STIG v2r10
Revision 1.2

Oct 30, 2025

Functional Update
  • WN16-00-000460 - Orphaned security identifiers (SIDs) must be removed from user rights on Windows 2016.
Informational Update
  • WN16-00-000460 - Orphaned security identifiers (SIDs) must be removed from user rights on Windows 2016.
Miscellaneous
  • Metadata updated.
Revision 1.1

Oct 20, 2025

Functional Update
  • WN16-00-000230 - Passwords must be configured to expire.
Miscellaneous
  • Metadata updated.