Home
Security Hardening
DISA Windows Server 2016 STIG V2R3

DISA Windows Server 2016 STIG V2R3

WN16-00-000170 – Permissions for program file directories must conform to minimum requirements – Program Files (x86)
Details Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system...
WN16-00-000010 – Users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks.
Details Using a privileged account to perform routine functions makes the computer vulnerable to malicious software inadvertently introduced during a...
WN16-00-000180 – Permissions for the Windows installation directory must conform to minimum requirements.
Details Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system...
WN16-00-000030 – Passwords for the built-in Administrator account must be changed at least every 60 days.
Details The longer a password is in use, the greater the opportunity for someone to gain unauthorized knowledge of the...
WN16-00-000190 – Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESECURITY
Details The registry is integral to the function, security, and stability of the Windows system. Changing the system’s registry permissions...
WN16-00-000040 – Administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email.
Details Using applications that access the Internet or have potential Internet sources using administrative privileges exposes a system to compromise....
WN16-00-000190 – Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESOFTWARE
Details The registry is integral to the function, security, and stability of the Windows system. Changing the system’s registry permissions...
WN16-00-000050 – Members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks.
Details Backup Operators are able to read and write to any file in the system, regardless of the rights assigned...
WN16-00-000190 – Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESYSTEM
Details The registry is integral to the function, security, and stability of the Windows system. Changing the system’s registry permissions...
WN16-00-000060 – Manually managed application account passwords must be at least 15 characters in length.
Details Application/service account passwords must be of sufficient length to prevent being easily cracked. Application/service accounts that are manually managed...

DISA Windows Server 2016 STIG V2R3

WN16-00-000170 – Permissions for program file directories must conform to minimum requirements – Program Files (x86)

WN16-00-000010 – Users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks.

WN16-00-000180 – Permissions for the Windows installation directory must conform to minimum requirements.

WN16-00-000030 – Passwords for the built-in Administrator account must be changed at least every 60 days.

WN16-00-000190 – Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESECURITY

WN16-00-000040 – Administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email.

WN16-00-000190 – Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESOFTWARE

WN16-00-000050 – Members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks.

WN16-00-000190 – Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESYSTEM

WN16-00-000060 – Manually managed application account passwords must be at least 15 characters in length.