An error occurred:

Microsoft Windows Server 2012/2012 R2 Domain Controller STIG

Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WN12-AC-000004 V-226059 The password history must be configured to 24 passwords remembered. Cat II
WN12-AC-000005 V-226060 The maximum password age must meet requirements. Cat II
WN12-AC-000006 V-226061 The minimum password age must meet requirements. Cat II
WN12-AC-000007 V-226062 Passwords must, at a minimum, be 14 characters. Cat II
WN12-AC-000008 V-226063 The built-in Windows password complexity policy must be enabled. Cat II
WN12-AC-000009 V-226064 Reversible password encryption must be disabled. Cat I
WN12-AC-000010-DC V-226065 Kerberos user logon restrictions must be enforced. Cat II
WN12-AC-000011-DC V-226066 The Kerberos service ticket maximum lifetime must be limited to 600 minutes or less. Cat II
WN12-AC-000012-DC V-226067 The Kerberos user ticket lifetime must be limited to 10 hours or less. Cat II
WN12-AC-000013-DC V-226068 The Kerberos policy user ticket renewal maximum lifetime must be limited to 7 days or less. Cat II
WN12-AC-000014-DC V-226069 The computer clock synchronization tolerance must be limited to 5 minutes or less. Cat II
WN12-AD-000001-DC V-226070 Active Directory data files must have proper access control permissions. Cat I
WN12-AD-000002-DC V-226071 The Active Directory SYSVOL directory must have the proper access control permissions. Cat I
WN12-AD-000003-DC V-226072 Active Directory Group Policy objects must have proper access control permissions. Cat I
WN12-AD-000004-DC V-226073 The Active Directory Domain Controllers Organizational Unit (OU) object must have the proper access control permissions. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.