Item Search

NameAudit NamePluginCategory
WN22-00-000160 - Windows Server 2022 permissions for the Windows installation directory must conform to minimum requirements.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-00-000190 - Windows Server 2022 outdated or unused accounts must be removed or disabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-00-000340 - Windows Server 2022 must not have the Peer Name Resolution Protocol installed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000420 - Windows Server 2022 FTP servers must be configured to prevent anonymous logons.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000430 - Windows Server 2022 FTP servers must be configured to prevent access to the system drive.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000470 - Windows Server 2022 must have Secure Boot enabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-AC-000010 - Windows Server 2022 account lockout duration must be configured to 15 minutes or greater.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-AC-000070 - Windows Server 2022 minimum password length must be configured to 14 characters.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-AC-000080 - Windows Server 2022 must have the built-in Windows password complexity policy enabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-AU-000020 - Windows Server 2022 must, at a minimum, offload audit records of interconnected systems in real time and offload standalone or nondomain-joined systems weekly.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000030 - Windows Server 2022 permissions for the Application event log must prevent access by nonprivileged accounts.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000090 - Windows Server 2022 must be configured to audit Account Management - Other Account Management Events successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000200 - Windows Server 2022 must be configured to audit logon failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000260 - Windows Server 2022 must be configured to audit Policy Change - Audit Policy Change successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000280 - Windows Server 2022 must be configured to audit Policy Change - Authentication Policy Change successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000380 - Windows Server 2022 must be configured to audit System - System Integrity successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000583 - Windows Server 2022 must be configured to audit handle manipulation failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000584 - Windows Server 2022 must be configured to audit handle manipulation successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000040 - Windows Server 2022 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000080 - Windows Server 2022 hardened Universal Naming Convention (UNC) paths must be defined to require mutual authentication and integrity for at least the \\*\SYSVOL and \\*\NETLOGON shares.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000090 - Windows Server 2022 command line data must be included in process creation events.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000250 - Windows Server 2022 Diagnostic Data must be configured to send 'required diagnostic data' or 'optional diagnostic data'.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000260 - Windows Server 2022 Windows Update must not obtain updates from other PCs on the internet.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000290 - Windows Server 2022 System event log size must be configured to 32768 KB or greater.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000430 - Windows Server 2022 must disable the Windows Installer Always install with elevated privileges option.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000460 - Windows Server 2022 PowerShell script block logging must be enabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000470 - Windows Server 2022 Windows Remote Management (WinRM) client must not use Basic authentication.DISA Microsoft Windows Server 2022 STIG v2r8Windows

MAINTENANCE

WN22-CC-000530 - Windows Server 2022 must have PowerShell Transcription enabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-DC-000110 - Windows Server 2022 organization created Active Directory Organizational Unit (OU) objects must have proper access control permissions.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-DC-000120 - Windows Server 2022 data files owned by users must be on a different logical partition from the directory server data files.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-DC-000190 - Windows Server 2022 Active Directory Infrastructure object must be configured with proper audit settings.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000240 - Windows Server 2022 must be configured to audit DS Access - Directory Service Access successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000330 - Windows Server 2022 domain controllers must be configured to allow reset of machine account passwords.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-DC-000350 - Windows Server 2022 Add workstations to domain user right must only be assigned to the Administrators group on domain controllers.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-DC-000370 - Windows Server 2022 Deny access to this computer from the network user right on domain controllers must be configured to prevent unauthenticated access.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-DC-000390 - Windows Server 2022 Deny log on as a service user right must be configured to include no accounts or groups (blank) on domain controllers.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-DC-000420 - Windows Server 2022 Enable computer and user accounts to be trusted for delegation user right must only be assigned to the Administrators group on domain controllers.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-MS-000050 - Windows Server 2022 must limit the caching of logon credentials to four or less on domain-joined member servers.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-MS-000080 - Windows Server 2022 Deny access to this computer from the network user right on domain-joined member servers must be configured to prevent access from highly privileged domain accounts and local accounts and from unauthenticated access on all systems.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-MS-000130 - Windows Server 2022 Enable computer and user accounts to be trusted for delegation user right must not be assigned to any groups or accounts on domain-joined member servers and standalone or nondomain-joined systems.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-PK-000030 - Windows Server 2022 must have the US DOD CCEB Interoperability Root CA cross-certificates in the Untrusted Certificates Store on unclassified systems.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

WN22-SO-000080 - Windows Server 2022 setting Domain member: Digitally sign secure channel data (when possible) must be configured to Enabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-SO-000230 - Windows Server 2022 must not allow anonymous enumeration of shares.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-SO-000280 - Windows Server 2022 must prevent PKU2U authentication using online identities.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000310 - Windows Server 2022 LAN Manager authentication level must be configured to send NTLMv2 response only and to refuse LM and NTLM.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000320 - Windows Server 2022 must be configured to at least negotiate signing for LDAP client signing.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000360 - Windows Server 2022 must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-SO-000440 - Windows Server 2022 User Account Control (UAC) must run all administrators in Admin Approval Mode, enabling UAC.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-UR-000040 - Windows Server 2022 back up files and directories user right must only be assigned to the Administrators group.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-UR-000070 - Windows Server 2022 create global objects user right must only be assigned to Administrators, Service, Local Service, and Network Service.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL