Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-243466 High Membership to the Enterprise Admins group must be restricted to accounts used only to manage the ...
V-243467 High Membership to the Domain Admins group must be restricted to accounts used only to manage the Acti...
V-243468 Medium Administrators must have separate accounts specifically for managing domain member servers
V-243469 Medium Administrators must have separate accounts specifically for managing domain workstations
V-243470 High Delegation of privileged accounts must be prohibited
V-243472 Medium Separate smart cards must be used for Enterprise Admin (EA) and Domain Admin (DA) accounts from s...
V-243473 Medium Separate domain accounts must be used to manage public facing servers from any domain accounts us...
V-243475 Medium Domain controllers must be blocked from Internet access
V-243477 Medium User accounts with domain level administrative privileges must be members of the Protected Users ...
V-243478 Medium Domain-joined systems (excluding domain controllers) must not be configured for unconstrained del...
V-243479 Medium The Directory Service Restore Mode (DSRM) passwords must be changed on each Domain Controller (DC...
V-243480 Medium The domain functional level must be at a Windows Server version still supported by Microsoft
V-243481 Medium Access to need-to-know information must be restricted to an authorized community of interest
V-243482 High Interconnections between DoD directory services of different classification levels must use a cro...
V-243483 High A controlled interface must have interconnections among DoD information systems operating between...
V-243487 Medium Membership in the Group Policy Creator Owners and Incoming Forest Trust Builders groups must be l...
V-243488 Low User accounts with delegated authority must be removed from Windows built-in administrative group...
V-243489 Medium Read-only Domain Controller (RODC) architecture and configuration must comply with directory serv...
V-243490 Medium Usage of administrative accounts must be monitored for suspicious and anomalous activity
V-243491 Medium Systems must be monitored for attempts to use local accounts to log on remotely from other systems
V-243492 Medium Systems must be monitored for remote desktop logons
V-243493 Medium Active Directory data must be backed up daily for systems with a Risk Management Framework catego...
V-243494 Low Each cross-directory authentication configuration must be documented
V-243496 Medium Accounts from outside directories that are not part of the same organization or are not subject t...
V-243497 Medium Inter-site replication must be enabled and configured to occur at least daily
V-243499 Low Active Directory implementation information must be added to the organization contingency plan wh...
V-243500 Medium Active Directory must be supported by multiple domain controllers where the Risk Management Frame...
V-243501 Low The impact of CPCON changes on the cross-directory authentication configuration must be considere...
V-269097 Medium Windows Server domain controllers must have Kerberos logging enabled with servers hosting Active ...