CSCv6|3.7

Title

Deploy system configuration management tools that will automatically enforce and redeploy configuration settings to systems at regularly scheduled intervals.

Description

Deploy system configuration management tools, such as Active Directory Group Policy Objects for Microsoft Windows systems or Puppet for UNIX systems that will automatically enforce and redeploy configuration settings to systems at regularly scheduled intervals. They should be capable of triggering redeployment of configuration settings on a scheduled, manual, or event-driven basis.

Reference Item Details

Category: Secure Configurations for Hardware and Software

Family: System

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.2.3.7 Set 'Do not apply during periodic background processing' to 'Enabled:FALSE'WindowsCIS Windows 8 L1 v1.0.0
1.2.3.8 Set 'Process even if the Group Policy objects have not changed' to 'Enabled:TRUE'WindowsCIS Windows 8 L1 v1.0.0
3.7 Disable IPv6UnixCIS Debian 9 Server L2 v1.0.1
3.7 Disable IPv6UnixCIS Debian 9 Workstation L2 v1.0.1
18.8.21.2 (L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
18.8.21.3 (L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
18.8.21.4 (L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
18.8.21.4 Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
18.8.21.4 Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server v20H2 DC v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server v1909 DC v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server v2004 DC v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server v1909 MS v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server v20H2 MS v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows 10 v2004 v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows 10 1809 v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows 10 v1507 v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows 10 v20H2 v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server v2004 MS v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server 2016 MS v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server 1903 DC v1.19.9
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server 1903 MS v1.19.9
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server 2019 MS v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server 2019 DC v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows Server 2016 DC v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows 10 1903 v1.19.9
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows 10 1909 v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows 10 1803 v1.0.0
Configure registry policy processing - NoBackgroundPolicyWindowsMSCT Windows 10 v21H2 v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server v2004 MS v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server 1903 DC v1.19.9
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server 2019 MS v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server 2019 DC v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server 2016 DC v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows 10 1803 v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows 10 1903 v1.19.9
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows 10 v1507 v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows 10 v21H2 v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows 10 v20H2 v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server v2004 DC v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server v1909 DC v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server 2016 MS v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server v20H2 DC v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server v1909 MS v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server 1903 MS v1.19.9
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows Server v20H2 MS v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows 10 v2004 v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows 10 1809 v1.0.0
Configure registry policy processing - NoGPOListChangesWindowsMSCT Windows 10 1909 v1.0.0