Home
Security Hardening
CIS Microsoft Windows Server 2019 STIG DC L2 V1.0.1

CIS Microsoft Windows Server 2019 STIG DC L2 V1.0.1

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableInBand802DOT11Registrar
Details This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the...
Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableUPnPRegistrar
Details This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the...
Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableWPDRegistrar
Details This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the...
Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – EnableRegistrars
Details This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the...
Ensure ‘Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service’ is set to ‘Enabled: Disable Authenticated Proxy usage’
Details This policy setting controls whether the Connected User Experience and Telemetry service can automatically use an authenticated proxy to...
Ensure ‘Disallow copying of user input methods to the system account for sign-in’ is set to ‘Enabled’
Details This policy prevents automatic copying of user input methods to the system account for use on the sign-in screen....
Ensure ‘Enable/Disable PerfTrack’ is set to ‘Disabled’
Details This policy setting specifies whether to enable or disable tracking of responsiveness events. The recommended state for this setting...
Ensure ‘Enable Font Providers’ is set to ‘Disabled’
Details This policy setting determines whether Windows is allowed to download fonts and font catalog data from an online font...
Ensure ‘Enable Windows NTP Client’ is set to ‘Enabled’
Details This policy setting specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer...
Ensure ‘Log on as a batch job’ is set to ‘Administrators’ (DC Only)
Details This policy setting allows accounts to log on using the task scheduler service. Because the task scheduler is often...

Prev Next

CIS Microsoft Windows Server 2019 STIG DC L2 V1.0.1

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableInBand802DOT11Registrar

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableUPnPRegistrar

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableWPDRegistrar

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – EnableRegistrars

Ensure ‘Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service’ is set to ‘Enabled: Disable Authenticated Proxy usage’

Ensure ‘Disallow copying of user input methods to the system account for sign-in’ is set to ‘Enabled’

Ensure ‘Enable/Disable PerfTrack’ is set to ‘Disabled’

Ensure ‘Enable Font Providers’ is set to ‘Disabled’

Ensure ‘Enable Windows NTP Client’ is set to ‘Enabled’

Ensure ‘Log on as a batch job’ is set to ‘Administrators’ (DC Only)