-
Notifications
You must be signed in to change notification settings - Fork 114
WindowsServer 2019 MS 2.8
Eric Jenkins edited this page Dec 22, 2023
·
1 revision
Title: Microsoft Windows Server 2019 Security Technical Implementation Guide
Version: 2
Release: Release: 8 Benchmark Date: 09 Nov 2023 3.4.1.22916 1.10.0
FileName: U_MS_Windows_Server_2019_MS_STIG_V2R8_Manual-xccdf.xml
Created: 12/22/2023
Description: This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.
Total Stig Rule Coverage: 209 of 241 rules are automated; 87%
- High (CAT I): 21 of 24 rules are automated
- Medium (CAT II): 179 of 204 rules are automated
- Low (CAT III): 9 of 13 rules are automated
| StigRuleId | Severity | RuleType | DscResource | DuplicateOf |
|---|---|---|---|---|
| V-205629 | Medium | AccountPolicyRule | AccountPolicy | |
| V-205630 | Medium | AccountPolicyRule | AccountPolicy | |
| V-205652 | Medium | AccountPolicyRule | AccountPolicy | |
| V-205653 | High | AccountPolicyRule | AccountPolicy | |
| V-205656 | Medium | AccountPolicyRule | AccountPolicy | |
| V-205659 | Medium | AccountPolicyRule | AccountPolicy | |
| V-205660 | Medium | AccountPolicyRule | AccountPolicy | |
| V-205662 | Medium | AccountPolicyRule | AccountPolicy | |
| V-205795 | Medium | AccountPolicyRule | AccountPolicy | |
| V-205625 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205626 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205627 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205634 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205635 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205730 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205769 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205770 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205771 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205772 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205773 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205774 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205775 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205776 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205777 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205778 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205779 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205780 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205781 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205782 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205783 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205784 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205832 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205833 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205834 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205835 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205836 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205837 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205838 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205839 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205840 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205841 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-205663 | High | AuditSettingRule | AuditSetting | |
| V-205849 | High | AuditSettingRule | AuditSetting | |
| V-205640 | Medium | PermissionRule | NTFSAccessEntry | |
| V-205641 | Medium | PermissionRule | NTFSAccessEntry | |
| V-205642 | Medium | PermissionRule | NTFSAccessEntry | |
| V-205731 | Medium | PermissionRule | NTFSAccessEntry | |
| V-205734 | Medium | PermissionRule | NTFSAccessEntry | |
| V-205735.a | Medium | PermissionRule | NTFSAccessEntry | |
| V-205735.b | Medium | PermissionRule | NTFSAccessEntry | |
| V-205736 | Medium | PermissionRule | NTFSAccessEntry | |
| V-205737.a | Medium | PermissionRule | RegistryAccessEntry | |
| V-205737.b | Medium | PermissionRule | RegistryAccessEntry | |
| V-205737.c | Medium | PermissionRule | RegistryAccessEntry | |
| V-205631 | Medium | RegistryRule | Registry | |
| V-205632 | Low | RegistryRule | Registry | |
| V-205633 | Medium | RegistryRule | Registry | |
| V-205636 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205637 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205638 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205639 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205644 | Medium | RegistryRule | Registry | |
| V-205651 | Medium | RegistryRule | Registry | |
| V-205654 | High | RegistryRule | Registry | |
| V-205655 | Medium | RegistryRule | Registry | |
| V-205683 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205684 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205686 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205687 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205688 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205689 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205690 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205691 | Low | RegistryRule | RegistryPolicyFile | |
| V-205692 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205693 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205694 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205696 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205708 | Medium | RegistryRule | Registry | |
| V-205711 | High | RegistryRule | RegistryPolicyFile | |
| V-205712 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205713 | High | RegistryRule | RegistryPolicyFile | |
| V-205714 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205715 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205716 | Medium | RegistryRule | Registry | |
| V-205717 | Medium | RegistryRule | Registry | |
| V-205718 | Medium | RegistryRule | Registry | |
| V-205719 | Medium | RegistryRule | Registry | |
| V-205720 | Medium | RegistryRule | Registry | |
| V-205722 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205724 | High | RegistryRule | Registry | |
| V-205725 | High | RegistryRule | Registry | |
| V-205747 | Medium | RegistryRule | Registry | |
| V-205796 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205797 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205798 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205801 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205802 | High | RegistryRule | RegistryPolicyFile | |
| V-205804 | High | RegistryRule | RegistryPolicyFile | |
| V-205805 | High | RegistryRule | RegistryPolicyFile | |
| V-205806 | High | RegistryRule | RegistryPolicyFile | |
| V-205808 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205809 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205810 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205811 | Medium | RegistryRule | Registry | |
| V-205812 | Medium | RegistryRule | Registry | |
| V-205813 | Medium | RegistryRule | Registry | |
| V-205814 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205815 | Medium | RegistryRule | Registry | |
| V-205816 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205817 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205819 | Low | RegistryRule | RegistryPolicyFile | |
| V-205821 | Medium | RegistryRule | Registry | |
| V-205822 | Medium | RegistryRule | Registry | |
| V-205823 | Medium | RegistryRule | Registry | |
| V-205824 | Medium | RegistryRule | Registry | |
| V-205825 | Medium | RegistryRule | Registry | |
| V-205826 | Medium | RegistryRule | Registry | |
| V-205827 | Medium | RegistryRule | Registry | |
| V-205828 | Medium | RegistryRule | Registry | |
| V-205830 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205842 | Medium | RegistryRule | Registry | |
| V-205858 | Low | RegistryRule | RegistryPolicyFile | |
| V-205859 | Low | RegistryRule | RegistryPolicyFile | |
| V-205860 | Low | RegistryRule | RegistryPolicyFile | |
| V-205861 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205862.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-205862.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-205863 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205864.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-205864.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-205865 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205866 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205867 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205868 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205869 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205870 | Low | RegistryRule | RegistryPolicyFile | |
| V-205871 | Low | RegistryRule | RegistryPolicyFile | |
| V-205872 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205873 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205874 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205906 | Medium | RegistryRule | Registry | |
| V-205907 | High | RegistryRule | RegistryPolicyFile | |
| V-205908 | High | RegistryRule | Registry | |
| V-205911 | Medium | RegistryRule | Registry | |
| V-205912 | Medium | RegistryRule | Registry | |
| V-205914 | High | RegistryRule | Registry | |
| V-205915 | Medium | RegistryRule | Registry | |
| V-205916 | Medium | RegistryRule | Registry | |
| V-205917 | Medium | RegistryRule | Registry | |
| V-205918 | Medium | RegistryRule | Registry | |
| V-205919 | High | RegistryRule | Registry | |
| V-205920 | Medium | RegistryRule | Registry | |
| V-205921 | Medium | RegistryRule | Registry | |
| V-205922 | Medium | RegistryRule | Registry | |
| V-205923 | Low | RegistryRule | Registry | |
| V-205924 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205925 | Medium | RegistryRule | RegistryPolicyFile | |
| V-236001.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-236001.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-257503 | Medium | RegistryRule | RegistryPolicyFile | |
| V-205648.a | Medium | RootCertificateRule | CertificateDSC | |
| V-205648.b | Medium | RootCertificateRule | CertificateDSC | |
| V-205648.c | Medium | RootCertificateRule | CertificateDSC | |
| V-205648.d | Medium | RootCertificateRule | CertificateDSC | |
| V-205649 | Medium | RootCertificateRule | CertificateDSC | |
| V-205650 | Medium | RootCertificateRule | CertificateDSC | |
| V-205913 | High | SecurityOptionRule | SecurityOption | |
| V-205709 | Medium | SecurityOptionRule | SecurityOption | |
| V-205909 | Medium | SecurityOptionRule | SecurityOption | |
| V-205910 | Medium | SecurityOptionRule | SecurityOption | |
| V-205850 | High | ServiceRule | Service | |
| V-214936 | Medium | ServiceRule | Service | |
| V-205643 | Medium | UserRightRule | UserRightsAssignment | |
| V-205671 | Medium | UserRightRule | UserRightsAssignment | |
| V-205672 | Medium | UserRightRule | UserRightsAssignment | |
| V-205673 | Medium | UserRightRule | UserRightsAssignment | |
| V-205674 | Medium | UserRightRule | UserRightsAssignment | |
| V-205675 | Medium | UserRightRule | UserRightsAssignment | |
| V-205676 | Medium | UserRightRule | UserRightsAssignment | |
| V-205733 | Medium | UserRightRule | UserRightsAssignment | |
| V-205748 | Medium | UserRightRule | UserRightsAssignment | |
| V-205749 | Medium | UserRightRule | UserRightsAssignment | |
| V-205750 | High | UserRightRule | UserRightsAssignment | |
| V-205751 | Medium | UserRightRule | UserRightsAssignment | |
| V-205752 | Medium | UserRightRule | UserRightsAssignment | |
| V-205753 | High | UserRightRule | UserRightsAssignment | |
| V-205754 | Medium | UserRightRule | UserRightsAssignment | |
| V-205755 | Medium | UserRightRule | UserRightsAssignment | |
| V-205756 | Medium | UserRightRule | UserRightsAssignment | |
| V-205757 | High | UserRightRule | UserRightsAssignment | |
| V-205758 | Medium | UserRightRule | UserRightsAssignment | |
| V-205759 | Medium | UserRightRule | UserRightsAssignment | |
| V-205760 | Medium | UserRightRule | UserRightsAssignment | |
| V-205761 | Medium | UserRightRule | UserRightsAssignment | |
| V-205762 | Medium | UserRightRule | UserRightsAssignment | |
| V-205763 | Medium | UserRightRule | UserRightsAssignment | |
| V-205764 | Medium | UserRightRule | UserRightsAssignment | |
| V-205765 | Medium | UserRightRule | UserRightsAssignment | |
| V-205766 | Medium | UserRightRule | UserRightsAssignment | |
| V-205767 | Medium | UserRightRule | UserRightsAssignment | |
| V-205768 | Medium | UserRightRule | UserRightsAssignment | |
| V-205678 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-205679 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-205680 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-205681 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-205682 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-205685 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-205697 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-205698 | Medium | WindowsFeatureRule | WindowsFeature |
| StigRuleId | Severity | RuleType |
|---|---|---|
| V-205677 | Medium | DocumentRule |
| V-205699 | Medium | DocumentRule |
| V-205707 | Medium | DocumentRule |
| V-205728 | Medium | DocumentRule |
| V-205851 | Medium | DocumentRule |
| V-205852 | Medium | DocumentRule |
| V-205624 | Medium | ManualRule |
| V-205657 | Medium | ManualRule |
| V-205658 | Medium | ManualRule |
| V-205661 | Medium | ManualRule |
| V-205664 | Low | ManualRule |
| V-205700 | Medium | ManualRule |
| V-205710 | Medium | ManualRule |
| V-205721 | Medium | ManualRule |
| V-205727 | Medium | ManualRule |
| V-205746 | High | ManualRule |
| V-205799 | Medium | ManualRule |
| V-205800 | Low | ManualRule |
| V-205803 | Medium | ManualRule |
| V-205807 | Medium | ManualRule |
| V-205829 | Medium | ManualRule |
| V-205843 | Medium | ManualRule |
| V-205844 | High | ManualRule |
| V-205845 | High | ManualRule |
| V-205846 | Medium | ManualRule |
| V-205847 | Medium | ManualRule |
| V-205848 | Medium | ManualRule |
| V-205853 | Medium | ManualRule |
| V-205854 | Medium | ManualRule |
| V-205856 | Low | ManualRule |
| V-205857 | Low | ManualRule |
| V-205855 | Medium | ManualRule |
-
- Adobe-AcrobatPro-2.1
- Adobe-AcrobatReader-1.6
- Adobe-AcrobatReader-2.1
- DotNetFramework-4-2.3
- DotNetFramework-4-2.4
- FireFox-All-5.2
- FireFox-All-6.5
- Google-Chrome-2.8
- Google-Chrome-2.9
- IISServer-10.0-2.10
- IISServer-10.0-2.9
- IISServer-8.5-2.4
- IISServer-8.5-2.5
- IISSite-10.0-2.8
- IISSite-10.0-2.9
- IISSite-8.5-2.7
- IISSite-8.5-2.8
- InternetExplorer-11-2.2
- InternetExplorer-11-2.5
- McAfee-8.8-VirusScan-5.16
- MS-Edge-1.7
- MS-Edge-1.8
- Office-365ProPlus-2.11
- Office-365ProPlus-2.12
- Office-Access2016-1.1
- Office-Excel2013-1.7
- Office-Excel2016-1.2
- Office-OneNote2016-1.2
- Office-Outlook2013-1.12
- Office-Outlook2013-1.13
- Office-Outlook2016-2.2
- Office-Outlook2016-2.3
- Office-PowerPoint2013-1.6
- Office-PowerPoint2016-1.1
- Office-Publisher2016-1.3
- Office-Skype2016-1.1
- Office-System2013-1.9
- Office-System2013-2.1
- Office-System2016-2.2
- Office-System2016-2.3
- Office-Visio2013-1.4
- Office-Word2013-1.6
- Office-Word2016-1.1
- OracleJRE-8-1.5
- OracleJRE-8-2.1
- RHEL-7-3.13
- RHEL-7-3.14
- SqlServer-2012-Database-1.19
- SqlServer-2012-Database-1.20
- SqlServer-2012-Instance-1.19
- SqlServer-2012-Instance-1.20
- SqlServer-2016-Instance-2.11
- SqlServer-2016-Instance-2.12
- Ubuntu-18.04-2.13
- Ubuntu-18.04-2.14
- Vsphere-6.5-2.2
- Vsphere-6.5-2.3
- WindowsClient-10-2.8
- WindowsClient-10-2.9
- WindowsClient-11-1.5
- WindowsClient-11-1.6
- WindowsDefender-All-2.3
- WindowsDefender-All-2.4
- WindowsDnsServer-2012R2-2.4
- WindowsDnsServer-2012R2-2.5
- WindowsFirewall-All-2.1
- WindowsFirewall-All-2.2
- WindowsServer-2012R2-DC-3.3
- WindowsServer-2012R2-DC-3.4
- WindowsServer-2012R2-MS-3.3
- WindowsServer-2012R2-MS-3.4
- WindowsServer-2016-DC-2.7
- WindowsServer-2016-DC-2.8
- WindowsServer-2016-MS-2.7
- WindowsServer-2016-MS-2.8
- WindowsServer-2019-DC-2.8
- WindowsServer-2019-DC-2.9
- WindowsServer-2019-MS-2.8
- WindowsServer-2019-MS-2.9
- WindowsServer-2022-DC-1.4
- WindowsServer-2022-DC-1.5
- WindowsServer-2022-MS-1.4
- WindowsServer-2022-MS-1.5