Home
Security Hardening
DISA Windows Server 2016 STIG V2R3

DISA Windows Server 2016 STIG V2R3

WN16-00-000070 – Manually managed application account passwords must be changed at least annually or when a system administrator with knowledge of the password leaves the organization.
Details Setting application account passwords to expire may cause applications to stop functioning. However, not changing them on a regular...
WN16-00-000080 – Shared user accounts must not be permitted on the system.
Details Shared accounts (accounts where two or more people log on with the same user identification) do not provide adequate...
WN16-00-000090 – Windows Server 2016 must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.
Details Using a whitelist provides a configuration management method to allow the execution of only authorized software. Using only authorized...
WN16-00-000100 – Windows Server 2016 domain-joined systems must have a Trusted Platform Module (TPM) enabled and ready for use – TPM enabled and ready for use.
Details Credential Guard uses virtualization-based security to protect data that could be used in credential theft attacks if compromised. A...
WN16-00-000110 – Systems must be maintained at a supported servicing level.
Details Systems at unsupported servicing levels will not receive security updates for new vulnerabilities, which leave them subject to exploitation....
WN16-00-000120 – The Windows Server 2016 system must use an anti-virus program.
Details Malicious software can establish a base on individual desktops and servers. Employing an automated mechanism to detect this type...
WN16-00-000140 – Servers must have a host-based intrusion detection or prevention system.
Details A properly configured Host-based Intrusion Detection System (HIDS) or Host-based Intrusion Prevention System (HIPS) provides another level of defense...
WN16-00-000150 – Local volumes must use a format that supports NTFS attributes.
Details The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of...
WN16-00-000160 – Permissions for the system drive root directory (usually C:) must conform to minimum requirements.
Details Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system...
WN16-00-000170 – Permissions for program file directories must conform to minimum requirements – Program Files
Details Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system...

Prev Next

DISA Windows Server 2016 STIG V2R3

WN16-00-000070 – Manually managed application account passwords must be changed at least annually or when a system administrator with knowledge of the password leaves the organization.

WN16-00-000080 – Shared user accounts must not be permitted on the system.

WN16-00-000090 – Windows Server 2016 must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.

WN16-00-000100 – Windows Server 2016 domain-joined systems must have a Trusted Platform Module (TPM) enabled and ready for use – TPM enabled and ready for use.

WN16-00-000110 – Systems must be maintained at a supported servicing level.

WN16-00-000120 – The Windows Server 2016 system must use an anti-virus program.

WN16-00-000140 – Servers must have a host-based intrusion detection or prevention system.

WN16-00-000150 – Local volumes must use a format that supports NTFS attributes.

WN16-00-000160 – Permissions for the system drive root directory (usually C:) must conform to minimum requirements.

WN16-00-000170 – Permissions for program file directories must conform to minimum requirements – Program Files