DISA Windows Server 2019 STIG V2R3

Details Windows shares are a means by which files, folders, printers, and other resources can be published for network users...

Details Setting application account passwords to expire may cause applications to stop functioning. However, not changing them on a regular...

Details Outdated or unused accounts provide penetration points that may go undetected. Inactive accounts must be deleted if no longer...

Details Shared accounts (accounts where two or more people log on with the same user identification) do not provide adequate...

Details Using a whitelist provides a configuration management method to allow the execution of only authorized software. Using only authorized...

Details Credential Guard uses virtualization-based security to protect data that could be used in credential theft attacks if compromised. A...

Details Systems at unsupported servicing levels will not receive security updates for new vulnerabilities, which leave them subject to exploitation....

Details Malicious software can establish a base on individual desktops and servers. Employing an automated mechanism to detect this type...

Details A properly configured Host-based Intrusion Detection System (HIDS) or Host-based Intrusion Prevention System (HIPS) provides another level of defense...

Details The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of...