-
Notifications
You must be signed in to change notification settings - Fork 115
WindowsServer 2016 MS 2.7
Eric Jenkins edited this page Dec 22, 2023
·
1 revision
Title: Microsoft Windows Server 2016 Security Technical Implementation Guide
Version: 2
Release: Release: 7 Benchmark Date: 09 Nov 2023 3.4.1.22916 1.10.0
FileName: U_MS_Windows_Server_2016_MS_STIG_V2R7_Manual-xccdf.xml
Created: 12/22/2023
Description: This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.
Total Stig Rule Coverage: 205 of 239 rules are automated; 86%
- High (CAT I): 20 of 24 rules are automated
- Medium (CAT II): 177 of 203 rules are automated
- Low (CAT III): 8 of 12 rules are automated
| StigRuleId | Severity | RuleType | DscResource | DuplicateOf |
|---|---|---|---|---|
| V-224866 | Medium | AccountPolicyRule | AccountPolicy | |
| V-224867 | Medium | AccountPolicyRule | AccountPolicy | |
| V-224868 | Medium | AccountPolicyRule | AccountPolicy | |
| V-224869 | Medium | AccountPolicyRule | AccountPolicy | |
| V-224870 | Medium | AccountPolicyRule | AccountPolicy | |
| V-224871 | Medium | AccountPolicyRule | AccountPolicy | |
| V-224872 | Medium | AccountPolicyRule | AccountPolicy | |
| V-224873 | Medium | AccountPolicyRule | AccountPolicy | |
| V-224874 | High | AccountPolicyRule | AccountPolicy | |
| V-224881 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224882 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224883 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224884 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224885 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224886 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224887 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224888 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224890 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224891 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224892 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224893 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224894 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224895 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224896 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224897 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224898 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224899 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224900 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224901 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224902 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224903 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224904 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224905 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224906 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224907 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224908 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224909 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224910 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224911 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224912 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224913 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-224828 | High | AuditSettingRule | AuditSetting | |
| V-224831 | High | AuditSettingRule | AuditSetting | |
| V-224832 | Medium | PermissionRule | NTFSAccessEntry | |
| V-224833.a | Medium | PermissionRule | NTFSAccessEntry | |
| V-224833.b | Medium | PermissionRule | NTFSAccessEntry | |
| V-224834 | Medium | PermissionRule | NTFSAccessEntry | |
| V-224835.a | Medium | PermissionRule | RegistryAccessEntry | |
| V-224835.b | Medium | PermissionRule | RegistryAccessEntry | |
| V-224835.c | Medium | PermissionRule | RegistryAccessEntry | |
| V-224877 | Medium | PermissionRule | NTFSAccessEntry | |
| V-224878 | Medium | PermissionRule | NTFSAccessEntry | |
| V-224879 | Medium | PermissionRule | NTFSAccessEntry | |
| V-224880 | Medium | PermissionRule | NTFSAccessEntry | |
| V-224857 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224858 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224914 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224915 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224916 | Low | RegistryRule | RegistryPolicyFile | |
| V-224917 | Low | RegistryRule | RegistryPolicyFile | |
| V-224918 | Low | RegistryRule | RegistryPolicyFile | |
| V-224919 | Low | RegistryRule | RegistryPolicyFile | |
| V-224920 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224921.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-224921.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-224922 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224923.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-224923.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-224924 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224925 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224926 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224927 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224928 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224929 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224930 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224931 | Low | RegistryRule | RegistryPolicyFile | |
| V-224932 | High | RegistryRule | RegistryPolicyFile | |
| V-224933 | High | RegistryRule | RegistryPolicyFile | |
| V-224934 | High | RegistryRule | RegistryPolicyFile | |
| V-224935 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224936 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224937 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224938 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224939 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224940 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224941 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224942 | Low | RegistryRule | RegistryPolicyFile | |
| V-224943 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224944 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224945 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224946 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224947 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224948 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224949 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224951 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224952 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224953 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224954 | High | RegistryRule | RegistryPolicyFile | |
| V-224955 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224956 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224957 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224958 | High | RegistryRule | RegistryPolicyFile | |
| V-224959 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224960 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224961 | High | RegistryRule | RegistryPolicyFile | |
| V-224962 | Medium | RegistryRule | RegistryPolicyFile | |
| V-224963 | Medium | RegistryRule | RegistryPolicyFile | |
| V-225008 | Medium | RegistryRule | RegistryPolicyFile | |
| V-225009 | Medium | RegistryRule | RegistryPolicyFile | |
| V-225010 | Medium | RegistryRule | RegistryPolicyFile | |
| V-225011 | Medium | RegistryRule | Registry | |
| V-225012 | High | RegistryRule | RegistryPolicyFile | |
| V-225013 | Medium | RegistryRule | Registry | |
| V-225025 | High | RegistryRule | Registry | |
| V-225028 | Medium | RegistryRule | Registry | |
| V-225029 | Medium | RegistryRule | Registry | |
| V-225030 | Medium | RegistryRule | Registry | |
| V-225031 | Medium | RegistryRule | Registry | |
| V-225032 | Medium | RegistryRule | Registry | |
| V-225033 | Medium | RegistryRule | Registry | |
| V-225034 | Medium | RegistryRule | Registry | |
| V-225035 | Medium | RegistryRule | Registry | |
| V-225036 | Medium | RegistryRule | Registry | |
| V-225037 | Low | RegistryRule | Registry | |
| V-225038 | Medium | RegistryRule | Registry | |
| V-225039 | Medium | RegistryRule | Registry | |
| V-225040 | Medium | RegistryRule | Registry | |
| V-225041 | Medium | RegistryRule | Registry | |
| V-225042 | Medium | RegistryRule | Registry | |
| V-225043 | Medium | RegistryRule | Registry | |
| V-225045 | High | RegistryRule | Registry | |
| V-225046 | High | RegistryRule | Registry | |
| V-225047 | Medium | RegistryRule | Registry | |
| V-225048 | High | RegistryRule | Registry | |
| V-225049 | Medium | RegistryRule | Registry | |
| V-225050 | Medium | RegistryRule | Registry | |
| V-225051 | Medium | RegistryRule | Registry | |
| V-225052 | Medium | RegistryRule | Registry | |
| V-225053 | High | RegistryRule | Registry | |
| V-225054 | High | RegistryRule | Registry | |
| V-225055 | Medium | RegistryRule | Registry | |
| V-225056 | Medium | RegistryRule | Registry | |
| V-225057 | Medium | RegistryRule | Registry | |
| V-225058 | Medium | RegistryRule | Registry | |
| V-225059 | Medium | RegistryRule | Registry | |
| V-225060 | Low | RegistryRule | Registry | |
| V-225061 | Medium | RegistryRule | Registry | |
| V-225062 | Medium | RegistryRule | Registry | |
| V-225063 | Medium | RegistryRule | Registry | |
| V-225064 | Medium | RegistryRule | Registry | |
| V-225065 | Medium | RegistryRule | Registry | |
| V-225066 | Medium | RegistryRule | Registry | |
| V-225067 | Medium | RegistryRule | Registry | |
| V-225068 | Medium | RegistryRule | Registry | |
| V-225069 | Medium | RegistryRule | RegistryPolicyFile | |
| V-236000.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-236000.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-257502 | Medium | RegistryRule | RegistryPolicyFile | |
| V-225021.a | Medium | RootCertificateRule | CertificateDSC | |
| V-225021.b | Medium | RootCertificateRule | CertificateDSC | |
| V-225021.c | Medium | RootCertificateRule | CertificateDSC | |
| V-225021.d | Medium | RootCertificateRule | CertificateDSC | |
| V-225022 | Medium | RootCertificateRule | CertificateDSC | |
| V-225023 | Medium | RootCertificateRule | CertificateDSC | |
| V-225024 | Medium | SecurityOptionRule | SecurityOption | |
| V-225026 | Medium | SecurityOptionRule | SecurityOption | |
| V-225027 | Medium | SecurityOptionRule | SecurityOption | |
| V-225044 | High | SecurityOptionRule | SecurityOption | |
| V-225014 | Medium | UserRightRule | UserRightsAssignment | |
| V-225015 | Medium | UserRightRule | UserRightsAssignment | |
| V-225016 | Medium | UserRightRule | UserRightsAssignment | |
| V-225017 | Medium | UserRightRule | UserRightsAssignment | |
| V-225018 | Medium | UserRightRule | UserRightsAssignment | |
| V-225019 | Medium | UserRightRule | UserRightsAssignment | |
| V-225020 | Medium | UserRightRule | UserRightsAssignment | |
| V-225070 | Medium | UserRightRule | UserRightsAssignment | |
| V-225071 | High | UserRightRule | UserRightsAssignment | |
| V-225072 | Medium | UserRightRule | UserRightsAssignment | |
| V-225073 | Medium | UserRightRule | UserRightsAssignment | |
| V-225074 | Medium | UserRightRule | UserRightsAssignment | |
| V-225076 | Medium | UserRightRule | UserRightsAssignment | |
| V-225077 | Medium | UserRightRule | UserRightsAssignment | |
| V-225078 | Medium | UserRightRule | UserRightsAssignment | |
| V-225079 | High | UserRightRule | UserRightsAssignment | |
| V-225080 | Medium | UserRightRule | UserRightsAssignment | |
| V-225081 | Medium | UserRightRule | UserRightsAssignment | |
| V-225082 | Medium | UserRightRule | UserRightsAssignment | |
| V-225083 | Medium | UserRightRule | UserRightsAssignment | |
| V-225084 | Medium | UserRightRule | UserRightsAssignment | |
| V-225085 | Medium | UserRightRule | UserRightsAssignment | |
| V-225086 | Medium | UserRightRule | UserRightsAssignment | |
| V-225087 | Medium | UserRightRule | UserRightsAssignment | |
| V-225088 | Medium | UserRightRule | UserRightsAssignment | |
| V-225089 | Medium | UserRightRule | UserRightsAssignment | |
| V-225091 | High | UserRightRule | UserRightsAssignment | |
| V-225092 | Medium | UserRightRule | UserRightsAssignment | |
| V-225093 | Medium | UserRightRule | UserRightsAssignment | |
| V-224850 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-224851 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-224852 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-224853 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-224854 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-224855 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-224856 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-224859 | Medium | WindowsFeatureRule | WindowsFeature |
| StigRuleId | Severity | RuleType |
|---|---|---|
| V-224825 | Medium | DocumentRule |
| V-224830 | Medium | DocumentRule |
| V-224836 | Low | DocumentRule |
| V-224837 | Medium | DocumentRule |
| V-224842 | Medium | DocumentRule |
| V-224845 | Medium | DocumentRule |
| V-224847 | Medium | DocumentRule |
| V-224819 | High | ManualRule |
| V-224820 | Medium | ManualRule |
| V-224821 | High | ManualRule |
| V-224822 | Medium | ManualRule |
| V-224823 | Medium | ManualRule |
| V-224824 | Medium | ManualRule |
| V-224826 | Medium | ManualRule |
| V-224827 | Medium | ManualRule |
| V-224829 | High | ManualRule |
| V-224838 | Medium | ManualRule |
| V-224839 | Medium | ManualRule |
| V-224840 | Medium | ManualRule |
| V-224841 | Medium | ManualRule |
| V-224843 | Medium | ManualRule |
| V-224844 | Medium | ManualRule |
| V-224846 | Medium | ManualRule |
| V-224848 | Medium | ManualRule |
| V-224849 | Medium | ManualRule |
| V-224860 | Medium | ManualRule |
| V-224861 | Medium | ManualRule |
| V-224862 | Low | ManualRule |
| V-224864 | Low | ManualRule |
| V-224865 | Low | ManualRule |
| V-224875 | Medium | ManualRule |
| V-224876 | Medium | ManualRule |
| V-225007 | High | ManualRule |
| V-224863 | Medium | ManualRule |
-
- Adobe-AcrobatPro-2.1
- Adobe-AcrobatReader-1.6
- Adobe-AcrobatReader-2.1
- DotNetFramework-4-2.3
- DotNetFramework-4-2.4
- FireFox-All-5.2
- FireFox-All-6.5
- Google-Chrome-2.8
- Google-Chrome-2.9
- IISServer-10.0-2.10
- IISServer-10.0-2.9
- IISServer-8.5-2.4
- IISServer-8.5-2.5
- IISSite-10.0-2.8
- IISSite-10.0-2.9
- IISSite-8.5-2.7
- IISSite-8.5-2.8
- InternetExplorer-11-2.2
- InternetExplorer-11-2.5
- McAfee-8.8-VirusScan-5.16
- MS-Edge-1.7
- MS-Edge-1.8
- Office-365ProPlus-2.11
- Office-365ProPlus-2.12
- Office-Access2016-1.1
- Office-Excel2013-1.7
- Office-Excel2016-1.2
- Office-OneNote2016-1.2
- Office-Outlook2013-1.12
- Office-Outlook2013-1.13
- Office-Outlook2016-2.2
- Office-Outlook2016-2.3
- Office-PowerPoint2013-1.6
- Office-PowerPoint2016-1.1
- Office-Publisher2016-1.3
- Office-Skype2016-1.1
- Office-System2013-1.9
- Office-System2013-2.1
- Office-System2016-2.2
- Office-System2016-2.3
- Office-Visio2013-1.4
- Office-Word2013-1.6
- Office-Word2016-1.1
- OracleJRE-8-1.5
- OracleJRE-8-2.1
- RHEL-7-3.13
- RHEL-7-3.14
- SqlServer-2012-Database-1.19
- SqlServer-2012-Database-1.20
- SqlServer-2012-Instance-1.19
- SqlServer-2012-Instance-1.20
- SqlServer-2016-Instance-2.11
- SqlServer-2016-Instance-2.12
- Ubuntu-18.04-2.13
- Ubuntu-18.04-2.14
- Vsphere-6.5-2.2
- Vsphere-6.5-2.3
- WindowsClient-10-2.8
- WindowsClient-10-2.9
- WindowsClient-11-1.5
- WindowsClient-11-1.6
- WindowsDefender-All-2.3
- WindowsDefender-All-2.4
- WindowsDnsServer-2012R2-2.4
- WindowsDnsServer-2012R2-2.5
- WindowsFirewall-All-2.1
- WindowsFirewall-All-2.2
- WindowsServer-2012R2-DC-3.3
- WindowsServer-2012R2-DC-3.4
- WindowsServer-2012R2-MS-3.3
- WindowsServer-2012R2-MS-3.4
- WindowsServer-2016-DC-2.7
- WindowsServer-2016-DC-2.8
- WindowsServer-2016-MS-2.7
- WindowsServer-2016-MS-2.8
- WindowsServer-2019-DC-2.8
- WindowsServer-2019-DC-2.9
- WindowsServer-2019-MS-2.8
- WindowsServer-2019-MS-2.9
- WindowsServer-2022-DC-1.4
- WindowsServer-2022-DC-1.5
- WindowsServer-2022-MS-1.4
- WindowsServer-2022-MS-1.5