Home
Security Hardening
CIS Windows 8 L1 V1.0.0

CIS Windows 8 L1 V1.0.0

Set ‘Account lockout duration’ to ’15 or more minute(s)’
Details This policy setting determines the length of time that must pass before a locked account is unlocked and a...
Set ‘Account lockout threshold’ to ‘5 invalid logon attempt(s)’
Details This policy setting determines the number of failed logon attempts before a lock occurs. Solution Make sure ‘Account lockout...
Set ‘Audit Policy: Account Logon: Kerberos Authentication Service’ to ‘No Auditing’
Details This subcategory reports events generated by the Kerberos Authentication Server. Solution Make sure ‘Account Logon: Kerberos Authentication Service’ is...
Set ‘Audit Policy: Account Logon: Other Account Logon Events’ to ‘No Auditing’
Details This subcategory reports the events that occur in response to credentials submitted for a user account logon request that...
Set ‘Audit Policy: Account Management: Application Group Management’ to ‘No Auditing’
Details This subcategory reports each event of application group management on a computer, such as when an application group is...
Set ‘Audit Policy: Account Management: Computer Account Management’ to ‘No Auditing’
Details This subcategory reports each event of computer account management, such as when a computer account is created, changed, deleted,...
Set ‘Audit Policy: DS Access: Directory Service Changes’ to ‘No Auditing’
Details This subcategory reports changes to objects in Active Directory Domain Services (AD DS). Solution Make sure ‘DS Access: Directory...
Set ‘Audit Policy: DS Access: Directory Service Replication’ to ‘No Auditing’
Details This subcategory reports when replication between two domain controllers begins and ends. Solution Make sure ‘DS access: Directory Service...
Set ‘Audit Policy: Logon-Logoff: Account Lockout’ to ‘No Auditing’
Details This subcategory reports when a user’s account is locked out as a result of too many failed logon attempts....
Set ‘Audit Policy: Logon-Logoff: IPsec Quick Mode’ to ‘No Auditing’
Details This subcategory reports the results of IKE protocol and AuthIP during Quick Mode negotiations. 4654: An IPsec Quick Mode...

CIS Windows 8 L1 V1.0.0

Set ‘Account lockout duration’ to ’15 or more minute(s)’

Set ‘Account lockout threshold’ to ‘5 invalid logon attempt(s)’

Set ‘Audit Policy: Account Logon: Kerberos Authentication Service’ to ‘No Auditing’

Set ‘Audit Policy: Account Logon: Other Account Logon Events’ to ‘No Auditing’

Set ‘Audit Policy: Account Management: Application Group Management’ to ‘No Auditing’

Set ‘Audit Policy: Account Management: Computer Account Management’ to ‘No Auditing’

Set ‘Audit Policy: DS Access: Directory Service Changes’ to ‘No Auditing’

Set ‘Audit Policy: DS Access: Directory Service Replication’ to ‘No Auditing’

Set ‘Audit Policy: Logon-Logoff: Account Lockout’ to ‘No Auditing’

Set ‘Audit Policy: Logon-Logoff: IPsec Quick Mode’ to ‘No Auditing’