Microsoft Windows Server 2012/2012 R2 Domain Controller STIG Version Comparison
Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide
There are 10 differences between versions v3 r1 (Nov. 13, 2020) (the "left" version) and v3 r3 (Nov. 1, 2021) (the "right" version).
Check WN12-CC-000007 was removed from the benchmark in the "right" version. The text below reflects the old wording.
This check's original form is available here.
The 6to4 IPv6 transition technology must be disabled.
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Microsoft\Windows\TCPIP\v6Transition\ Value Name: 6to4_State Type: REG_SZ Value: Disabled
IPv6 transition technologies, which tunnel packets through other protocols, do not provide visibility.
Configure the policy value for Computer Configuration -> Administrative Templates -> Network -> TCPIP Settings -> IPv6 Transition Technologies -> "Set 6to4 State" to "Enabled: Disabled State".