Revision 1.1

Aug 11, 2022
Functional Update
  • WN12-00-000009-01 - Members of the Backup Operators group must be documented.
  • WN12-00-000009-02 - Members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks.
  • WN12-00-000190 - Orphaned security identifiers (SIDs) must be removed from user rights on Windows 2012 / 2012 R2.
  • WN12-FW-000001 - A host-based firewall must be installed and enabled on the system.
  • WN12-GE-000010 - The system must not boot into multiple operating systems (dual-boot).
  • WN12-GE-000012 - Nonadministrative user accounts or groups must only have print permissions on printer shares.
  • WN12-GE-000014 - Outdated or unused accounts must be removed from the system or disabled.
  • WN12-GE-000056 - Windows 2012 / 2012 R2 must automatically remove or disable temporary user accounts after 72 hours.
  • WN12-GE-000057 - Windows 2012 / 2012 R2 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.
Informational Update
  • WN12-00-000009-01 - Members of the Backup Operators group must be documented.
  • WN12-00-000009-02 - Members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks.
  • WN12-00-000190 - Orphaned security identifiers (SIDs) must be removed from user rights on Windows 2012 / 2012 R2.
  • WN12-FW-000001 - A host-based firewall must be installed and enabled on the system.
  • WN12-GE-000010 - The system must not boot into multiple operating systems (dual-boot).
  • WN12-GE-000012 - Nonadministrative user accounts or groups must only have print permissions on printer shares.
  • WN12-GE-000014 - Outdated or unused accounts must be removed from the system or disabled.
  • WN12-GE-000056 - Windows 2012 / 2012 R2 must automatically remove or disable temporary user accounts after 72 hours.
  • WN12-GE-000057 - Windows 2012 / 2012 R2 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.
Miscellaneous
  • References updated.