Ensure ‘Access Credential Manager as a trusted caller’ is set to ‘No One’
Details This security setting is used by Credential Manager during Backup and Restore. No accounts should have this user right,...
- Home
- Security Hardening
- CIS Microsoft Windows Server 2016 MS L1 V1.3.0
CIS Microsoft Windows Server 2016 MS L1 V1.3.0
Ensure ‘Access this computer from the network’ is set to ‘Administrators, Authenticated Users’ (MS only)
Details This policy setting allows other users on the network to connect to the computer and is required by various...Ensure ‘Account lockout duration’ is set to ’15 or more minute(s)’
Details This policy setting determines the length of time that must pass before a locked account is unlocked and a...Ensure ‘Account lockout threshold’ is set to ‘5 or fewer invalid logon attempt(s), but not 0’
Details This policy setting determines the number of failed logon attempts before the account is locked. Setting this policy to...Ensure ‘Accounts: Administrator account status’ is set to ‘Disabled’ (MS only)
Details This policy setting enables or disables the Administrator account during normal operation. When a computer is booted into safe...Ensure ‘Accounts: Block Microsoft accounts’ is set to ‘Users can’t add or log on with Microsoft accounts’
Details This policy setting prevents users from adding new Microsoft accounts on this computer. The recommended state for this setting...Ensure ‘Accounts: Guest account status’ is set to ‘Disabled’ (MS only)
Details This policy setting determines whether the Guest account is enabled or disabled. The Guest account allows unauthenticated network users...Ensure ‘Accounts: Limit local account use of blank passwords to console logon only’ is set to ‘Enabled’
Details This policy setting determines whether local accounts that are not password protected can be used to log on from...Ensure ‘Act as part of the operating system’ is set to ‘No One’
Details This policy setting allows a process to assume the identity of any user and thus gain access to the...Ensure ‘Adjust memory quotas for a process’ is set to ‘Administrators, LOCAL SERVICE, NETWORK SERVICE’
Details This policy setting allows a user to adjust the maximum amount of memory that is available to a process....