Home
Security Hardening
CIS Microsoft Windows Server 2019 STIG MS L2 V1.0.1

CIS Microsoft Windows Server 2019 STIG MS L2 V1.0.1

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableUPnPRegistrar
Details This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the...
Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableWPDRegistrar
Details This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the...
Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – EnableRegistrars
Details This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the...
Ensure ‘Disallow copying of user input methods to the system account for sign-in’ is set to ‘Enabled’
Details This policy prevents automatic copying of user input methods to the system account for use on the sign-in screen....
Ensure ‘Enable/Disable PerfTrack’ is set to ‘Disabled’
Details This policy setting specifies whether to enable or disable tracking of responsiveness events. The recommended state for this setting...
Ensure ‘Enable Font Providers’ is set to ‘Disabled’
Details This policy setting determines whether Windows is allowed to download fonts and font catalog data from an online font...
Ensure ‘Enable Windows NTP Client’ is set to ‘Enabled’
Details This policy setting specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer...
Ensure ‘Enable Windows NTP Server’ is set to ‘Disabled’ (MS only)
Details This policy setting allows you to specify whether the Windows NTP Server is enabled. The recommended state for this...
Ensure ‘Interactive logon: Number of previous logons to cache (in case domain controller is not available)’ is set to ‘4 or fewer logon(s)’ (MS only) – 4 or fewer logon(s)
Details This policy setting determines whether a user can log on to a Windows domain using cached account information. Logon...
Ensure ‘Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider’ is set to ‘Disabled’
Details This policy setting configures Microsoft Support Diagnostic Tool (MSDT) interactive communication with the support provider. MSDT gathers diagnostic data...

Prev Next

CIS Microsoft Windows Server 2019 STIG MS L2 V1.0.1

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableUPnPRegistrar

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – DisableWPDRegistrar

Ensure ‘Configuration of wireless settings using Windows Connect Now’ is set to ‘Disabled’ – EnableRegistrars

Ensure ‘Disallow copying of user input methods to the system account for sign-in’ is set to ‘Enabled’

Ensure ‘Enable/Disable PerfTrack’ is set to ‘Disabled’

Ensure ‘Enable Font Providers’ is set to ‘Disabled’

Ensure ‘Enable Windows NTP Client’ is set to ‘Enabled’

Ensure ‘Enable Windows NTP Server’ is set to ‘Disabled’ (MS only)

Ensure ‘Interactive logon: Number of previous logons to cache (in case domain controller is not available)’ is set to ‘4 or fewer logon(s)’ (MS only) – 4 or fewer logon(s)

Ensure ‘Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider’ is set to ‘Disabled’