Item Search

NameAudit NamePluginCategory
WN19-SO-000270 - Windows Server 2019 must prevent NTLM from falling back to a Null session.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000330 - Windows Server 2019 session security for NTLM SSP-based clients must be configured to require NTLMv2 session security and 128-bit encryption.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000350 - Windows Server 2019 users must be required to enter a password to access private keys stored on the computer.DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION

WN19-SO-000380 - Windows Server 2019 User Account Control approval mode for the built-in Administrator must be enabled.DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION

WN19-UR-000040 - Windows Server 2019 Back up files and directories user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-UR-000150 - Windows Server 2019 Load and unload device drivers user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-UR-000170 - Windows Server 2019 Manage auditing and security log user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

AUDIT AND ACCOUNTABILITY

WN19-UR-000180 - Windows Server 2019 Modify firmware environment values user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN22-00-000070 - Windows Server 2022 shared user accounts must not be permitted.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-00-000160 - Windows Server 2022 permissions for the Windows installation directory must conform to minimum requirements.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-00-000180 - Windows Server 2022 nonadministrative accounts or groups must only have print permissions on printer shares.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-00-000220 - Windows Server 2022 system files must be monitored for unauthorized changes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000230 - Windows Server 2022 nonsystem-created file shares must limit access to groups that require it.DISA Microsoft Windows Server 2022 STIG v2r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-00-000330 - Windows Server 2022 must not have the Microsoft FTP service installed unless required by the organization.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000360 - Windows Server 2022 must not have the Telnet Client installed.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000410 - Windows Server 2022 must not have Windows PowerShell 2.0 installed.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000420 - Windows Server 2022 FTP servers must be configured to prevent anonymous logons.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000440 - The Windows Server 2022 time service must synchronize with an appropriate DoW time source.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-00-000450 - Windows Server 2022 must have orphaned security identifiers (SIDs) removed from user rights.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000470 - Windows Server 2022 must have Secure Boot enabled.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-AU-000060 - Windows Server 2022 Event Viewer must be protected from unauthorized modification and deletion.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000080 - Windows Server 2022 must be configured to audit Account Logon - Credential Validation failures.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000140 - Windows Server 2022 must be configured to audit Detailed Tracking - Process Creation successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000160 - Windows Server 2022 must be configured to audit Logon/Logoff - Account Lockout failures.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000290 - Windows Server 2022 must be configured to audit Policy Change - Authorization Policy Change successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000320 - Windows Server 2022 must be configured to audit System - IPsec Driver successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000330 - Windows Server 2022 must be configured to audit System - IPsec Driver failures.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000587 - Windows Server 2022 must be configured to audit sensitive privilege use successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000090 - Windows Server 2022 command line data must be included in process creation events.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000110 - Windows Server 2022 virtualization-based security must be enabled with the platform security level configured to Secure Boot or Secure Boot with DMA Protection.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000150 - Windows Server 2022 downloading print driver packages over HTTP must be turned off.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000280 - The Windows Server 2022 security event log size must be configured to a value that holds at least one week's worth of audit records.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000320 - Windows Server 2022 Turning off File Explorer heap termination on corruption must be disabled.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000360 - Windows Server 2022 Remote Desktop Services must always prompt a client for passwords upon connection.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-CC-000370 - Windows Server 2022 Remote Desktop Services must require secure Remote Procedure Call (RPC) communications.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-CC-000410 - Windows Server 2022 must prevent Indexing of encrypted files.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000440 - Windows Server 2022 users must be notified if a web-based program attempts to install software.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000450 - Windows Server 2022 must disable automatically signing in the last interactive user after a system-initiated restart.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000470 - Windows Server 2022 Windows Remote Management (WinRM) client must not use Basic authentication.DISA Microsoft Windows Server 2022 STIG v2r11Windows

MAINTENANCE

WN22-CC-000500 - Windows Server 2022 Windows Remote Management (WinRM) service must not use Basic authentication.DISA Microsoft Windows Server 2022 STIG v2r11Windows

MAINTENANCE

WN22-CC-000510 - Windows Server 2022 Windows Remote Management (WinRM) service must not allow unencrypted traffic.DISA Microsoft Windows Server 2022 STIG v2r11Windows

MAINTENANCE

WN22-CC-000520 - Windows Server 2022 Windows Remote Management (WinRM) service must not store RunAs credentials.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000060 - Windows Server 2022 computer clock synchronization tolerance must be limited to five minutes or less.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000070 - Windows Server 2022 permissions on the Active Directory data files must only allow System and Administrators access.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY

WN22-DC-000080 - Windows Server 2022 Active Directory SYSVOL directory must have the proper access control permissions.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-DC-000120 - Windows Server 2022 data files owned by users must be on a different logical partition from the directory server data files.DISA Microsoft Windows Server 2022 STIG v2r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-DC-000160 - Windows Server 2022 directory service must be configured to terminate LDAP-based network connections to the directory server after five minutes of inactivity.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

WN22-DC-000220 - Windows Server 2022 Active Directory RID Manager$ object must be configured with proper audit settings.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000280 - Windows Server 2022 domain controllers must have a PKI server certificate.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000300 - Windows Server 2022 PKI certificates associated with user accounts must be issued by a DoW PKI or an approved External Certificate Authority (ECA).DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION