Home
Security Hardening
DISA Windows Server 2019 STIG V2R3

DISA Windows Server 2019 STIG V2R3

WN19-00-000140 – Windows Server 2019 permissions for the system drive root directory (usually C:) must conform to minimum requirements.
Details Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system...
WN19-00-000150 – Windows Server 2019 permissions for program file directories must conform to minimum requirements – Program Files
Details Changing the system’s file and directory permissions allows the possibility of unauthorized and anonymous modification to the operating system...
WN19-00-000290 – Windows Server 2019 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, where Endpoint Security Solution (ESS) is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP) – CNDSP.
Details Without the use of automated mechanisms to scan for security flaws on a continuous and/or periodic basis, the operating...
WN19-00-000300 – Windows Server 2019 must automatically remove or disable temporary user accounts after 72 hours.
Details If temporary user accounts remain active when no longer needed or for an excessive period, these accounts may be...
WN19-00-000310 – Windows Server 2019 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.
Details Emergency administrator accounts are privileged accounts established in response to crisis situations where the need for rapid account activation...
WN19-00-000320 – Windows Server 2019 must not have the Fax Server role installed.
Details Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of...
WN19-00-000330 – Windows Server 2019 must not have the Microsoft FTP service installed unless required by the organization.
Details Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of...
WN19-00-000340 – Windows Server 2019 must not have the Peer Name Resolution Protocol installed.
Details Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of...
WN19-00-000350 – Windows Server 2019 must not have Simple TCP/IP Services installed.
Details Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of...
WN19-00-000200 – Windows Server 2019 accounts must require passwords.
Details The lack of password protection enables anyone to gain access to the information system, which opens a backdoor opportunity...

Prev Next

DISA Windows Server 2019 STIG V2R3

WN19-00-000140 – Windows Server 2019 permissions for the system drive root directory (usually C:) must conform to minimum requirements.

WN19-00-000150 – Windows Server 2019 permissions for program file directories must conform to minimum requirements – Program Files

WN19-00-000300 – Windows Server 2019 must automatically remove or disable temporary user accounts after 72 hours.

WN19-00-000310 – Windows Server 2019 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.

WN19-00-000320 – Windows Server 2019 must not have the Fax Server role installed.

WN19-00-000330 – Windows Server 2019 must not have the Microsoft FTP service installed unless required by the organization.

WN19-00-000340 – Windows Server 2019 must not have the Peer Name Resolution Protocol installed.

WN19-00-000350 – Windows Server 2019 must not have Simple TCP/IP Services installed.

WN19-00-000200 – Windows Server 2019 accounts must require passwords.