Item Search

NameAudit NamePluginCategory
WN19-DC-000110 - Windows Server 2019 organization created Active Directory Organizational Unit (OU) objects must have proper access control permissions.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-DC-000130 - Windows Server 2019 domain controllers must run on a machine dedicated to that function.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-DC-000220 - Windows Server 2019 Active Directory RID Manager$ object must be configured with proper audit settings.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN19-DC-000250 - Windows Server 2019 must be configured to audit DS Access - Directory Service Access failures.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN19-DC-000390 - Windows Server 2019 Deny log on as a service user right must be configured to include no accounts or groups (blank) on domain controllers.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-DC-000410 - Windows Server 2019 Deny log on through Remote Desktop Services user right on domain controllers must be configured to prevent unauthenticated access.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-MS-000060 - Windows Server 2019 must restrict remote calls to the Security Account Manager (SAM) to Administrators on domain-joined member servers and standalone or nondomain-joined systems.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-MS-000130 - Windows Server 2019 'Enable computer and user accounts to be trusted for delegation' user right must not be assigned to any groups or accounts on domain-joined member servers and standalone or nondomain-joined systems.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-PK-000010 - Windows Server 2019 must have the DoD Root Certificate Authority (CA) certificates installed in the Trusted Root Store.DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

WN19-SO-000130 - Windows Server 2019 required legal notice must be configured to display before console logon.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-SO-000170 - Windows Server 2019 setting Microsoft network client: Digitally sign communications (if server agrees) must be configured to Enabled.DISA Microsoft Windows Server 2019 STIG v3r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN19-SO-000250 - Windows Server 2019 must restrict anonymous access to Named Pipes and Shares.DISA Microsoft Windows Server 2019 STIG v3r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN19-SO-000260 - Windows Server 2019 services using Local System that use Negotiate when reverting to NTLM authentication must use the computer identity instead of authenticating anonymously.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000270 - Windows Server 2019 must prevent NTLM from falling back to a Null session.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000330 - Windows Server 2019 session security for NTLM SSP-based clients must be configured to require NTLMv2 session security and 128-bit encryption.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000350 - Windows Server 2019 users must be required to enter a password to access private keys stored on the computer.DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION

WN19-SO-000380 - Windows Server 2019 User Account Control approval mode for the built-in Administrator must be enabled.DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION

WN19-UR-000040 - Windows Server 2019 Back up files and directories user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-UR-000150 - Windows Server 2019 Load and unload device drivers user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-UR-000170 - Windows Server 2019 Manage auditing and security log user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

AUDIT AND ACCOUNTABILITY

WN19-UR-000180 - Windows Server 2019 Modify firmware environment values user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN22-00-000070 - Windows Server 2022 shared user accounts must not be permitted.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-00-000160 - Windows Server 2022 permissions for the Windows installation directory must conform to minimum requirements.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-00-000180 - Windows Server 2022 nonadministrative accounts or groups must only have print permissions on printer shares.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-00-000220 - Windows Server 2022 system files must be monitored for unauthorized changes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000230 - Windows Server 2022 nonsystem-created file shares must limit access to groups that require it.DISA Microsoft Windows Server 2022 STIG v2r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-00-000330 - Windows Server 2022 must not have the Microsoft FTP service installed unless required by the organization.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000360 - Windows Server 2022 must not have the Telnet Client installed.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000410 - Windows Server 2022 must not have Windows PowerShell 2.0 installed.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000420 - Windows Server 2022 FTP servers must be configured to prevent anonymous logons.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000440 - The Windows Server 2022 time service must synchronize with an appropriate DoW time source.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-00-000450 - Windows Server 2022 must have orphaned security identifiers (SIDs) removed from user rights.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000470 - Windows Server 2022 must have Secure Boot enabled.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-AU-000060 - Windows Server 2022 Event Viewer must be protected from unauthorized modification and deletion.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000080 - Windows Server 2022 must be configured to audit Account Logon - Credential Validation failures.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000140 - Windows Server 2022 must be configured to audit Detailed Tracking - Process Creation successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000160 - Windows Server 2022 must be configured to audit Logon/Logoff - Account Lockout failures.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000290 - Windows Server 2022 must be configured to audit Policy Change - Authorization Policy Change successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000320 - Windows Server 2022 must be configured to audit System - IPsec Driver successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000330 - Windows Server 2022 must be configured to audit System - IPsec Driver failures.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000587 - Windows Server 2022 must be configured to audit sensitive privilege use successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000090 - Windows Server 2022 command line data must be included in process creation events.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000110 - Windows Server 2022 virtualization-based security must be enabled with the platform security level configured to Secure Boot or Secure Boot with DMA Protection.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000150 - Windows Server 2022 downloading print driver packages over HTTP must be turned off.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000280 - The Windows Server 2022 security event log size must be configured to a value that holds at least one week's worth of audit records.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000320 - Windows Server 2022 Turning off File Explorer heap termination on corruption must be disabled.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000360 - Windows Server 2022 Remote Desktop Services must always prompt a client for passwords upon connection.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-CC-000370 - Windows Server 2022 Remote Desktop Services must require secure Remote Procedure Call (RPC) communications.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-CC-000410 - Windows Server 2022 must prevent Indexing of encrypted files.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000440 - Windows Server 2022 users must be notified if a web-based program attempts to install software.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT