Microsoft Windows Server 2012/2012 R2 Domain Controller STIG Version Comparison
Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide
Comparison
There are 10 differences between versions v3 r1 (Nov. 13, 2020) (the "left" version) and v3 r3 (Nov. 1, 2021) (the "right" version).
Check WN12-CC-000007 was removed from the benchmark in the "right" version. The text below reflects the old wording.
This check's original form is available here.
Text Differences
Title
The 6to4 IPv6 transition technology must be disabled.
Check Content
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Microsoft\Windows\TCPIP\v6Transition\ Value Name: 6to4_State Type: REG_SZ Value: Disabled
Discussion
IPv6 transition technologies, which tunnel packets through other protocols, do not provide visibility.
Fix
Configure the policy value for Computer Configuration -> Administrative Templates -> Network -> TCPIP Settings -> IPv6 Transition Technologies -> "Set 6to4 State" to "Enabled: Disabled State".