Ensure ‘Enforce password history’ is set to ’24 or more password(s)’
Details This policy setting determines the number of renewed, unique passwords that have to be associated with a user account...
- Home
- Security Hardening
- CIS Microsoft Windows Server 2019 STIG MS STIG V1.0.1
CIS Microsoft Windows Server 2019 STIG MS STIG V1.0.1
Ensure ‘Force shutdown from a remote system’ is set to ‘Administrators’
Details This policy setting allows users to shut down Windows Vista-based and newer computers from remote locations on the network....Ensure ‘Generate security audits’ is set to ‘LOCAL SERVICE, NETWORK SERVICE’
Details This policy setting determines which users or processes can generate audit records in the Security log. The recommended state...Ensure ‘Impersonate a client after authentication’ is set to ‘Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE’ (STIG MS only)
Details The policy setting allows programs that run on behalf of a user to impersonate that user (or another specified...Ensure ‘Increase scheduling priority’ is set to ‘Administrators’
Details This policy setting determines whether users can increase the base priority class of a process. (It is not a...Ensure ‘Interactive logon: Machine inactivity limit’ is set to ‘900 or fewer second(s), but not 0’
Details Windows notices inactivity of a logon session, and if the amount of inactive time exceeds the inactivity limit, then...Ensure ‘Load and unload device drivers’ is set to ‘Administrators’
Details This policy setting allows users to dynamically load a new device driver on a system. An attacker could potentially...Ensure ‘Lock pages in memory’ is set to ‘No One’
Details This policy setting allows a process to keep data in physical memory, which prevents the system from paging the...Ensure ‘Manage auditing and security log’ is set to ‘Administrators’ (MS only)
Details This policy setting determines which users can change the auditing options for files and directories and clear the Security...Ensure ‘Maximum password age’ is set to ’60 or fewer days, but not 0′
Details This policy setting defines how long a user can use their password before it expires. Values for this policy...