An error occurred:

Windows 2003 MS STIG

Windows 2003 Member Server Security Technical Implementation Guide

ID Vuln ID Title Cat Status
1.001 V-1070 Physical security of the Automated Information System (AIS) does not meet DISA requirements. Cat II
1.006 V-1140 Users with Administrative privilege are not documented or do not have separate accounts for administrative duties and normal operational tasks. Cat I
1.006-01 V-36451 Policy must require that administrative user accounts not be used with applications that access the internet, such as web browsers, or with potential internet sources, such as email. Cat I
1.007 V-1168 Members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks. Cat II
1.008 V-1072 Shared user accounts are permitted on the system. Cat II
1.010 V-1137 An Auditors group has not been created to restrict access to the Windows Event Logs. Cat II
1.013 V-1076 System information backups are not created, updated, and protected according to DISA requirements. Cat III
1.016 V-1128 Security configuration tools or equivalent processes must be used to configure and maintain platforms for security compliance. Cat III
1.024 V-2907 System files are not checked for unauthorized changes. Cat II
1.025 V-3289 A Server does not have a host-based Intrusion Detection System. Cat II
1.029 V-3491 There is no local policy for reviewing audit logs. Cat II
1.032 V-14226 Audit logs are archived to prevent loss. Cat II
2.001 V-1077 Access permissions for event logs must conform to minimum requirements. Cat II
2.005 V-1073 Systems must be at supported service packs (SP) or releases levels. Cat I
2.006 V-1130 ACLs for system files and directories do not conform to minimum requirements. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.