Ensure ‘Access Credential Manager as a trusted caller’ is set to ‘No One’
Details This security setting is used by Credential Manager during Backup and Restore. No accounts should have this user right,...
- Home
- Security Hardening
- CIS Microsoft Windows Server 2016 DC L1 V1.3.0
CIS Microsoft Windows Server 2016 DC L1 V1.3.0
Ensure ‘Access this computer from the network’ is set to ‘Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS’ (DC only)
Details This policy setting allows other users on the network to connect to the computer and is required by various...Ensure ‘Account lockout duration’ is set to ’15 or more minute(s)’
Details This policy setting determines the length of time that must pass before a locked account is unlocked and a...Ensure ‘Account lockout threshold’ is set to ‘5 or fewer invalid logon attempt(s), but not 0’
Details This policy setting determines the number of failed logon attempts before the account is locked. Setting this policy to...Ensure ‘Accounts: Block Microsoft accounts’ is set to ‘Users can’t add or log on with Microsoft accounts’
Details This policy setting prevents users from adding new Microsoft accounts on this computer. The recommended state for this setting...Ensure ‘Accounts: Limit local account use of blank passwords to console logon only’ is set to ‘Enabled’
Details This policy setting determines whether local accounts that are not password protected can be used to log on from...Ensure ‘Act as part of the operating system’ is set to ‘No One’
Details This policy setting allows a process to assume the identity of any user and thus gain access to the...Ensure ‘Add workstations to domain’ is set to ‘Administrators’ (DC only)
Details This policy setting specifies which users can add computer workstations to the domain. For this policy setting to take...Ensure ‘Adjust memory quotas for a process’ is set to ‘Administrators, LOCAL SERVICE, NETWORK SERVICE’
Details This policy setting allows a user to adjust the maximum amount of memory that is available to a process....Ensure ‘Allow log on locally’ is set to ‘Administrators’
Details This policy setting determines which users can interactively log on to computers in your environment. Logons that are initiated...