Item Search

NameAudit NamePluginCategory
WN19-CC-000130 - Windows Server 2019 Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000140 - Windows Server 2019 group policy objects must be reprocessed even if they have not changed.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000170 - Windows Server 2019 network selection user interface (UI) must not be displayed on the logon screen.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000230 - Windows Server 2019 AutoPlay must be disabled for all drives.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000290 - Windows Server 2019 System event log size must be configured to 32768 KB or greater.DISA Microsoft Windows Server 2019 STIG v3r9Windows

AUDIT AND ACCOUNTABILITY

WN19-CC-000340 - Windows Server 2019 must not save passwords in the Remote Desktop Client.DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION

WN19-CC-000380 - Windows Server 2019 Remote Desktop Services must be configured with the client connection encryption set to High Level.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-CC-000410 - Windows Server 2019 must prevent Indexing of encrypted files.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000430 - Windows Server 2019 must disable the Windows Installer Always install with elevated privileges option.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000440 - Windows Server 2019 users must be notified if a web-based program attempts to install software.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000480 - Windows Server 2019 Windows Remote Management (WinRM) client must not allow unencrypted traffic.DISA Microsoft Windows Server 2019 STIG v3r9Windows

MAINTENANCE

WN19-CC-000510 - Windows Server 2019 Windows Remote Management (WinRM) service must not allow unencrypted traffic.DISA Microsoft Windows Server 2019 STIG v3r9Windows

MAINTENANCE

WN19-DC-000170 - Windows Server 2019 Active Directory Group Policy objects must be configured with proper audit settings.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN19-DC-000180 - Windows Server 2019 Active Directory Domain object must be configured with proper audit settings.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN19-DC-000230 - Windows Server 2019 must be configured to audit Account Management - Computer Account Management successes.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN19-DC-000290 - Windows Server 2019 domain controller PKI certificates must be issued by the DOD PKI or an approved External Certificate Authority (ECA).DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION

WN19-MS-000030 - Windows Server 2019 local users on domain-joined member servers must not be enumerated.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-MS-000050 - Windows Server 2019 must limit the caching of logon credentials to four or less on domain-joined member servers.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000020 - Windows Server 2019 must prevent local accounts with blank passwords from being used from the network.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000030 - Windows Server 2019 built-in administrator account must be renamed.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000040 - Windows Server 2019 built-in guest account must be renamed.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000050 - Windows Server 2019 must force audit policy subcategory settings to override audit policy category settings.DISA Microsoft Windows Server 2019 STIG v3r9Windows

AUDIT AND ACCOUNTABILITY

WN19-SO-000060 - Windows Server 2019 setting Domain member: Digitally encrypt or sign secure channel data (always) must be configured to Enabled.DISA Microsoft Windows Server 2019 STIG v3r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN19-SO-000070 - Windows Server 2019 setting Domain member: Digitally encrypt secure channel data (when possible) must be configured to enabled.DISA Microsoft Windows Server 2019 STIG v3r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN19-SO-000080 - Windows Server 2019 setting Domain member: Digitally sign secure channel data (when possible) must be configured to Enabled.DISA Microsoft Windows Server 2019 STIG v3r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN19-SO-000090 - Windows Server 2019 computer account password must not be prevented from being reset.DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION

WN19-SO-000210 - Windows Server 2019 must not allow anonymous SID/Name translation.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000230 - Windows Server 2019 must not allow anonymous enumeration of shares.DISA Microsoft Windows Server 2019 STIG v3r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN19-SO-000280 - Windows Server 2019 must prevent PKU2U authentication using online identities.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000320 - Windows Server 2019 must be configured to at least negotiate signing for LDAP client signing.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000340 - Windows Server 2019 session security for NTLM SSP-based servers must be configured to require NTLMv2 session security and 128-bit encryption.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-SO-000360 - Windows Server 2019 must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.DISA Microsoft Windows Server 2019 STIG v3r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN19-SO-000410 - Windows Server 2019 User Account Control must automatically deny standard user requests for elevation.DISA Microsoft Windows Server 2019 STIG v3r9Windows

IDENTIFICATION AND AUTHENTICATION

WN19-SO-000420 - Windows Server 2019 User Account Control must be configured to detect application installations and prompt for elevation.DISA Microsoft Windows Server 2019 STIG v3r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN19-UR-000020 - Windows Server 2019 Act as part of the operating system user right must not be assigned to any groups or accounts.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-UR-000080 - Windows Server 2019 Create permanent shared objects user right must not be assigned to any groups or accounts.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-UR-000110 - Windows Server 2019 Force shutdown from a remote system user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-UR-000130 - Windows Server 2019 Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN19-UR-000160 - Windows Server 2019 Lock pages in memory user right must not be assigned to any groups or accounts.DISA Microsoft Windows Server 2019 STIG v3r9Windows

ACCESS CONTROL

WN22-00-000050 - Windows Server 2022 manually managed application account passwords must be at least 14 characters in length.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-00-000090 - Windows Server 2022 systems must have a Trusted Platform Module (TPM) enabled and ready for use.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000100 - Windows Server 2022 must be maintained at a supported servicing level.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-00-000200 - Windows Server 2022 accounts must require passwords.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-00-000270 - Windows Server 2022 must have the roles and features required by the system documented.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-AC-000010 - Windows Server 2022 account lockout duration must be configured to 15 minutes or greater.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-AC-000030 - Windows Server 2022 must have the period of time before the bad logon counter is reset configured to 15 minutes or greater.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL

WN22-AC-000080 - Windows Server 2022 must have the built-in Windows password complexity policy enabled.DISA Microsoft Windows Server 2022 STIG v2r11Windows

IDENTIFICATION AND AUTHENTICATION

WN22-AU-000100 - Windows Server 2022 must be configured to audit Account Management - Security Group Management successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000120 - Windows Server 2022 must be configured to audit Account Management - User Account Management failures.DISA Microsoft Windows Server 2022 STIG v2r11Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000220 - Windows Server 2022 must be configured to audit Object Access - Other Object Access Events successes.DISA Microsoft Windows Server 2022 STIG v2r11Windows

AUDIT AND ACCOUNTABILITY