Home
Security Hardening
DISA Windows Server 2019 STIG V2R3

DISA Windows Server 2019 STIG V2R3

WN19-00-000010 – Windows Server 2019 users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks.
Details Using a privileged account to perform routine functions makes the computer vulnerable to malicious software inadvertently introduced during a...
WN19-00-000020 – Windows Server 2019 passwords for the built-in Administrator account must be changed at least every 60 days.
Details The longer a password is in use, the greater the opportunity for someone to gain unauthorized knowledge of the...
WN19-00-000150 – Windows Server 2019 permissions for program file directories must conform to minimum requirements – Program Files (x86)
Details Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system...
WN19-00-000160 – Windows Server 2019 permissions for the Windows installation directory must conform to minimum requirements.
Details Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system...
WN19-00-000170 – Windows Server 2019 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESECURITY
Details The registry is integral to the function, security, and stability of the Windows system. Changing the system’s registry permissions...
WN19-00-000030 – Windows Server 2019 administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email.
Details Using applications that access the Internet or have potential Internet sources using administrative privileges exposes a system to compromise....
WN19-00-000170 – Windows Server 2019 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESOFTWARE
Details The registry is integral to the function, security, and stability of the Windows system. Changing the system’s registry permissions...
WN19-00-000040 – Windows Server 2019 members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks.
Details Backup Operators are able to read and write to any file in the system, regardless of the rights assigned...
WN19-00-000170 – Windows Server 2019 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESYSTEM
Details The registry is integral to the function, security, and stability of the Windows system. Changing the system’s registry permissions...
WN19-00-000050 – Windows Server 2019 manually managed application account passwords must be at least 15 characters in length.
Details Application/service account passwords must be of sufficient length to prevent being easily cracked. Application/service accounts that are manually managed...

DISA Windows Server 2019 STIG V2R3

WN19-00-000010 – Windows Server 2019 users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks.

WN19-00-000020 – Windows Server 2019 passwords for the built-in Administrator account must be changed at least every 60 days.

WN19-00-000150 – Windows Server 2019 permissions for program file directories must conform to minimum requirements – Program Files (x86)

WN19-00-000160 – Windows Server 2019 permissions for the Windows installation directory must conform to minimum requirements.

WN19-00-000170 – Windows Server 2019 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESECURITY

WN19-00-000030 – Windows Server 2019 administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email.

WN19-00-000170 – Windows Server 2019 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESOFTWARE

WN19-00-000040 – Windows Server 2019 members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks.

WN19-00-000170 – Windows Server 2019 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained – HKEY_LOCAL_MACHINESYSTEM

WN19-00-000050 – Windows Server 2019 manually managed application account passwords must be at least 15 characters in length.