Home
Security Hardening
CIS Microsoft Windows Server 2016 STIG MS STIG V1.1.0

CIS Microsoft Windows Server 2016 STIG MS STIG V1.1.0

Ensure ‘Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings’ is set to ‘Enabled’
Details This policy setting allows administrators to enable the more precise auditing capabilities present in Windows Vista. The Audit Policy...
Ensure ‘Back up files and directories’ is set to ‘Administrators’
Details This policy setting allows users to circumvent file and directory permissions to back up the system. This user right...
Ensure ‘Create a pagefile’ is set to ‘Administrators’
Details This policy setting allows users to change the size of the pagefile. By making the pagefile extremely large or...
Ensure ‘Create a token object’ is set to ‘No One’
Details This policy setting allows a process to create an access token, which may provide elevated rights to access sensitive...
Ensure ‘Create global objects’ is set to ‘Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE’
Details This policy setting determines whether users can create global objects that are available to all sessions. Users can still...
Ensure ‘Create permanent shared objects’ is set to ‘No One’
Details This user right is useful to kernel-mode components that extend the object namespace. However, components that run in kernel...
Ensure ‘Create symbolic links’ is set to ‘Administrators’ (STIG MS and DC only)
Details This policy setting determines which users can create symbolic links. In Windows Vista, existing NTFS file system objects, such...
Ensure ‘Debug programs’ is set to ‘Administrators’
Details This policy setting determines which user accounts will have the right to attach a debugger to any process or...
Ensure ‘Deny access to this computer from the network’ to include ‘Guests, member of Administrators group, Enterprise Admins Group, and Domain Admins Group’ (STIG MS only)
Details This policy setting prohibits users from connecting to a computer from across the network, which would allow users to...
Ensure ‘Deny log on as a batch job’ to include ‘Guests, Enterprise Admins group, and Domain Admins group’ (STIG MS only)
Details This policy setting determines which accounts will not be able to log on to the computer as a batch...

Prev Next

CIS Microsoft Windows Server 2016 STIG MS STIG V1.1.0

Ensure ‘Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings’ is set to ‘Enabled’

Ensure ‘Back up files and directories’ is set to ‘Administrators’

Ensure ‘Create a pagefile’ is set to ‘Administrators’

Ensure ‘Create a token object’ is set to ‘No One’

Ensure ‘Create global objects’ is set to ‘Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE’

Ensure ‘Create permanent shared objects’ is set to ‘No One’

Ensure ‘Create symbolic links’ is set to ‘Administrators’ (STIG MS and DC only)

Ensure ‘Debug programs’ is set to ‘Administrators’

Ensure ‘Deny access to this computer from the network’ to include ‘Guests, member of Administrators group, Enterprise Admins Group, and Domain Admins Group’ (STIG MS only)

Ensure ‘Deny log on as a batch job’ to include ‘Guests, Enterprise Admins group, and Domain Admins group’ (STIG MS only)