Windows Server 2008 R2 Domain Controller STIG

Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
4.006	V-1136	Users will be forcibly disconnected when their logon hours expire.	Cat III
4.011	V-1104	The maximum password age must be configured to 60 days or less.	Cat II
4.012	V-1105	The minimum password age must be configured to at least 1 day.	Cat II
4.013	V-6836	For systems utilizing a logon ID as the individual identifier, passwords will, at a minimum, be 14 characters.	Cat II
4.014	V-1107	The password history must be configured to 24 passwords remembered.	Cat II
4.017	V-7002	Windows 2008 R2 accounts must be configured to require passwords.	Cat I
4.018	V-14271	Application account passwords must meet DoD requirements for length, complexity and changes.	Cat II
4.019	V-1112	Outdated or unused accounts must be removed from the system or disabled.	Cat III
4.020	V-1113	The built-in guest account must be disabled.	Cat II
4.021	V-1114	The built-in guest account will be renamed.	Cat II
4.022	V-1115	The built-in administrator account will be renamed.	Cat II
4.026	V-6840	Windows 2008 R2 passwords must be configured to expire.	Cat II
4.027-DC	V-1127	Only administrators responsible for the system must have Administrator rights on the system.	Cat I
4.028	V-1174	The amount of idle time required before suspending a session must be properly set.	Cat III
4.036	V-3344	The use of local accounts with blank passwords will be restricted to console logons only.	Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.