Ensure ‘Minimum password age’ is set to ‘1 or more day(s)’
Details This policy setting determines the number of days that you must use a password before you can change it....
- Home
- Security Hardening
- CIS Microsoft Windows Server 2016 STIG DC STIG V1.1.0
CIS Microsoft Windows Server 2016 STIG DC STIG V1.1.0
Ensure ‘Minimum password length’ is set to ’14 or more character(s)’
Details This policy setting determines the least number of characters that make up a password for a user account. There...Ensure ‘Modify firmware environment values’ is set to ‘Administrators’
Details This policy setting allows users to configure the system-wide environment variables that affect hardware configuration. This information is typically...Ensure ‘Password must meet complexity requirements’ is set to ‘Enabled’
Details This policy setting checks all new passwords to ensure that they meet basic requirements for strong passwords. When this...Ensure ‘Perform volume maintenance tasks’ is set to ‘Administrators’
Details This policy setting allows users to manage the system’s volume or disk configuration, which could allow a user to...Ensure ‘Profile single process’ is set to ‘Administrators’
Details This policy setting determines which users can use tools to monitor the performance of non-system processes. Typically, you do...Ensure ‘Reset account lockout counter after’ is set to ’15 or more minute(s)’
Details This policy setting determines the length of time before the Account lockout threshold resets to zero. The default value...Ensure ‘Restore files and directories’ is set to ‘Administrators’
Details This policy setting determines which users can bypass file, directory, registry, and other persistent object permissions when restoring backed...Ensure ‘Store passwords using reversible encryption’ is set to ‘Disabled’
Details This policy setting determines whether the operating system stores passwords in a way that uses reversible encryption, which provides...Ensure ‘Take ownership of files or other objects’ is set to ‘Administrators’
Details This policy setting allows users to take ownership of files, folders, registry keys, processes, or threads. This user right...