-
Notifications
You must be signed in to change notification settings - Fork 114
WindowsServer 2022 DC 1.4
Eric Jenkins edited this page Dec 22, 2023
·
1 revision
Title: Microsoft Windows Server 2022 Security Technical Implementation Guide
Version: 1
Release: Release: 4 Benchmark Date: 09 Nov 2023 3.4.1.22916 1.10.0
FileName: U_MS_Windows_Server_2022_DC_STIG_V1R4_Manual-xccdf.xml
Created: 12/22/2023
Description: This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.
Total Stig Rule Coverage: 216 of 267 rules are automated; 81%
- High (CAT I): 20 of 28 rules are automated
- Medium (CAT II): 187 of 227 rules are automated
- Low (CAT III): 9 of 12 rules are automated
| StigRuleId | Severity | RuleType | DscResource | DuplicateOf |
|---|---|---|---|---|
| V-254386 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254387 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254388 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254389 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254390 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254285 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254286 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254287 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254288 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254289 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254290 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254291 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254292 | Medium | AccountPolicyRule | AccountPolicy | |
| V-254293 | High | AccountPolicyRule | AccountPolicy | |
| V-254300 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254301 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254302 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254303 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254304 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254305 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254306 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254307 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254309 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254310 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254311 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254312 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254313 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254314 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254315 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254316 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254317 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254318 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254319 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254320 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254321 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254322 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254323 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254324 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254325 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254326 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254327 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254328 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254329 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254330 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254331 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254332 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254407 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254408 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254409 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254410 | Medium | AuditPolicyRule | AuditPolicySubcategory | |
| V-254247 | Medium | AuditSettingRule | AuditSetting | |
| V-254250 | High | AuditSettingRule | AuditSetting | |
| V-254251 | Medium | PermissionRule | NTFSAccessEntry | |
| V-254252.a | Medium | PermissionRule | NTFSAccessEntry | |
| V-254252.b | Medium | PermissionRule | NTFSAccessEntry | |
| V-254253 | Medium | PermissionRule | NTFSAccessEntry | |
| V-254254.a | Medium | PermissionRule | RegistryAccessEntry | |
| V-254254.b | Medium | PermissionRule | RegistryAccessEntry | |
| V-254254.c | Medium | PermissionRule | RegistryAccessEntry | |
| V-254296 | Medium | PermissionRule | NTFSAccessEntry | |
| V-254297 | Medium | PermissionRule | NTFSAccessEntry | |
| V-254298 | Medium | PermissionRule | NTFSAccessEntry | |
| V-254299 | Medium | PermissionRule | NTFSAccessEntry | |
| V-254391 | High | PermissionRule | NTFSAccessEntry | |
| V-254392 | High | PermissionRule | NTFSAccessEntry | |
| V-254276 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254277 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254333 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254334 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254335 | Low | RegistryRule | RegistryPolicyFile | |
| V-254336 | Low | RegistryRule | RegistryPolicyFile | |
| V-254337 | Low | RegistryRule | RegistryPolicyFile | |
| V-254338 | Low | RegistryRule | RegistryPolicyFile | |
| V-254339 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254340.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-254340.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-254341 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254342 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254343.a | Medium | RegistryRule | RegistryPolicyFile | |
| V-254343.b | Medium | RegistryRule | RegistryPolicyFile | |
| V-254344 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254345 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254346 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254347 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254348 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254349 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254350 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254351 | Low | RegistryRule | RegistryPolicyFile | |
| V-254352 | High | RegistryRule | RegistryPolicyFile | |
| V-254353 | High | RegistryRule | RegistryPolicyFile | |
| V-254354 | High | RegistryRule | RegistryPolicyFile | |
| V-254355 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254356 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254357 | Low | RegistryRule | RegistryPolicyFile | |
| V-254358 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254359 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254360 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254361 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254362 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254363 | Low | RegistryRule | RegistryPolicyFile | |
| V-254364 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254365 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254366 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254367 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254368 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254369 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254370 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254371 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254372 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254373 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254374 | High | RegistryRule | RegistryPolicyFile | |
| V-254375 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254376 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254377 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254378 | High | RegistryRule | RegistryPolicyFile | |
| V-254379 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254380 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254381 | High | RegistryRule | RegistryPolicyFile | |
| V-254382 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254383 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254384 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254416 | Medium | RegistryRule | Registry | |
| V-254417 | Medium | RegistryRule | Registry | |
| V-254446 | High | RegistryRule | Registry | |
| V-254449 | Medium | RegistryRule | Registry | |
| V-254450 | Medium | RegistryRule | Registry | |
| V-254451 | Medium | RegistryRule | Registry | |
| V-254452 | Medium | RegistryRule | Registry | |
| V-254453 | Medium | RegistryRule | Registry | |
| V-254454 | Medium | RegistryRule | Registry | |
| V-254455 | Medium | RegistryRule | Registry | |
| V-254456 | Medium | RegistryRule | Registry | |
| V-254457 | Medium | RegistryRule | Registry | |
| V-254458 | Low | RegistryRule | Registry | |
| V-254459 | Medium | RegistryRule | Registry | |
| V-254460 | Medium | RegistryRule | Registry | |
| V-254461 | Medium | RegistryRule | Registry | |
| V-254462 | Medium | RegistryRule | Registry | |
| V-254463 | Medium | RegistryRule | Registry | |
| V-254464 | Medium | RegistryRule | Registry | |
| V-254466 | High | RegistryRule | Registry | |
| V-254467 | High | RegistryRule | Registry | |
| V-254468 | Medium | RegistryRule | Registry | |
| V-254469 | High | RegistryRule | Registry | |
| V-254470 | Medium | RegistryRule | Registry | |
| V-254471 | Medium | RegistryRule | Registry | |
| V-254472 | Medium | RegistryRule | Registry | |
| V-254473 | Medium | RegistryRule | Registry | |
| V-254474 | High | RegistryRule | Registry | |
| V-254475 | High | RegistryRule | Registry | |
| V-254476 | Medium | RegistryRule | Registry | |
| V-254477 | Medium | RegistryRule | Registry | |
| V-254478 | Medium | RegistryRule | Registry | |
| V-254479 | Medium | RegistryRule | Registry | |
| V-254480 | Medium | RegistryRule | Registry | |
| V-254481 | Low | RegistryRule | Registry | |
| V-254482 | Medium | RegistryRule | Registry | |
| V-254483 | Medium | RegistryRule | Registry | |
| V-254484 | Medium | RegistryRule | Registry | |
| V-254485 | Medium | RegistryRule | Registry | |
| V-254486 | Medium | RegistryRule | Registry | |
| V-254487 | Medium | RegistryRule | Registry | |
| V-254488 | Medium | RegistryRule | Registry | |
| V-254489 | Medium | RegistryRule | Registry | |
| V-254490 | Medium | RegistryRule | RegistryPolicyFile | |
| V-254442.a | Medium | RootCertificateRule | CertificateDSC | |
| V-254442.b | Medium | RootCertificateRule | CertificateDSC | |
| V-254442.c | Medium | RootCertificateRule | CertificateDSC | |
| V-254442.d | Medium | RootCertificateRule | CertificateDSC | |
| V-254443 | Medium | RootCertificateRule | CertificateDSC | |
| V-254444 | Medium | RootCertificateRule | CertificateDSC | |
| V-254465 | High | SecurityOptionRule | SecurityOption | |
| V-254445 | Medium | SecurityOptionRule | SecurityOption | |
| V-254447 | Medium | SecurityOptionRule | SecurityOption | |
| V-254448 | Medium | SecurityOptionRule | SecurityOption | |
| V-254248 | Medium | ServiceRule | Service | |
| V-254265 | Medium | ServiceRule | Service | |
| V-254418 | Medium | UserRightRule | UserRightsAssignment | |
| V-254419 | Medium | UserRightRule | UserRightsAssignment | |
| V-254420 | Medium | UserRightRule | UserRightsAssignment | |
| V-254421 | Medium | UserRightRule | UserRightsAssignment | |
| V-254422 | Medium | UserRightRule | UserRightsAssignment | |
| V-254423 | Medium | UserRightRule | UserRightsAssignment | |
| V-254424 | Medium | UserRightRule | UserRightsAssignment | |
| V-254425 | Medium | UserRightRule | UserRightsAssignment | |
| V-254426 | Medium | UserRightRule | UserRightsAssignment | |
| V-254491 | Medium | UserRightRule | UserRightsAssignment | |
| V-254492 | High | UserRightRule | UserRightsAssignment | |
| V-254493 | Medium | UserRightRule | UserRightsAssignment | |
| V-254494 | Medium | UserRightRule | UserRightsAssignment | |
| V-254495 | Medium | UserRightRule | UserRightsAssignment | |
| V-254496 | High | UserRightRule | UserRightsAssignment | |
| V-254497 | Medium | UserRightRule | UserRightsAssignment | |
| V-254498 | Medium | UserRightRule | UserRightsAssignment | |
| V-254499 | Medium | UserRightRule | UserRightsAssignment | |
| V-254500 | High | UserRightRule | UserRightsAssignment | |
| V-254501 | Medium | UserRightRule | UserRightsAssignment | |
| V-254502 | Medium | UserRightRule | UserRightsAssignment | |
| V-254503 | Medium | UserRightRule | UserRightsAssignment | |
| V-254504 | Medium | UserRightRule | UserRightsAssignment | |
| V-254505 | Medium | UserRightRule | UserRightsAssignment | |
| V-254506 | Medium | UserRightRule | UserRightsAssignment | |
| V-254507 | Medium | UserRightRule | UserRightsAssignment | |
| V-254508 | Medium | UserRightRule | UserRightsAssignment | |
| V-254509 | Medium | UserRightRule | UserRightsAssignment | |
| V-254510 | Medium | UserRightRule | UserRightsAssignment | |
| V-254511 | Medium | UserRightRule | UserRightsAssignment | |
| V-254512 | Medium | UserRightRule | UserRightsAssignment | |
| V-254269 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-254270 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-254271 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-254272 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-254273 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-254274 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-254275 | Medium | WindowsFeatureRule | WindowsFeature | |
| V-254278 | Medium | WindowsFeatureRule | WindowsFeature |
| StigRuleId | Severity | RuleType |
|---|---|---|
| V-254244 | Medium | DocumentRule |
| V-254249 | Medium | DocumentRule |
| V-254256 | Medium | DocumentRule |
| V-254261 | Medium | DocumentRule |
| V-254264 | Medium | DocumentRule |
| V-254266 | Medium | DocumentRule |
| V-254393 | High | DocumentRule |
| V-254395 | High | DocumentRule |
| V-254398 | Medium | DocumentRule |
| V-254414 | High | DocumentRule |
| V-254238 | Medium | ManualRule |
| V-254239 | Medium | ManualRule |
| V-254240 | High | ManualRule |
| V-254241 | Medium | ManualRule |
| V-254242 | Medium | ManualRule |
| V-254243 | Medium | ManualRule |
| V-254245 | Medium | ManualRule |
| V-254246 | Medium | ManualRule |
| V-254255 | Low | ManualRule |
| V-254257 | Medium | ManualRule |
| V-254258 | Medium | ManualRule |
| V-254259 | Medium | ManualRule |
| V-254260 | Medium | ManualRule |
| V-254262 | Medium | ManualRule |
| V-254263 | Medium | ManualRule |
| V-254267 | Medium | ManualRule |
| V-254268 | Medium | ManualRule |
| V-254279 | Medium | ManualRule |
| V-254280 | Medium | ManualRule |
| V-254281 | Low | ManualRule |
| V-254283 | Medium | ManualRule |
| V-254284 | Medium | ManualRule |
| V-254294 | Medium | ManualRule |
| V-254295 | Medium | ManualRule |
| V-254385 | High | ManualRule |
| V-254394 | High | ManualRule |
| V-254396 | Medium | ManualRule |
| V-254397 | Medium | ManualRule |
| V-254399 | High | ManualRule |
| V-254400 | Low | ManualRule |
| V-254401 | Medium | ManualRule |
| V-254402 | Medium | ManualRule |
| V-254403 | Medium | ManualRule |
| V-254404 | Medium | ManualRule |
| V-254405 | Medium | ManualRule |
| V-254406 | Medium | ManualRule |
| V-254412 | Medium | ManualRule |
| V-254413 | High | ManualRule |
| V-254415 | Medium | ManualRule |
| V-254427 | Medium | ManualRule |
| V-254282 | Medium | ManualRule |
-
- Adobe-AcrobatPro-2.1
- Adobe-AcrobatReader-1.6
- Adobe-AcrobatReader-2.1
- DotNetFramework-4-2.3
- DotNetFramework-4-2.4
- FireFox-All-5.2
- FireFox-All-6.5
- Google-Chrome-2.8
- Google-Chrome-2.9
- IISServer-10.0-2.10
- IISServer-10.0-2.9
- IISServer-8.5-2.4
- IISServer-8.5-2.5
- IISSite-10.0-2.8
- IISSite-10.0-2.9
- IISSite-8.5-2.7
- IISSite-8.5-2.8
- InternetExplorer-11-2.2
- InternetExplorer-11-2.5
- McAfee-8.8-VirusScan-5.16
- MS-Edge-1.7
- MS-Edge-1.8
- Office-365ProPlus-2.11
- Office-365ProPlus-2.12
- Office-Access2016-1.1
- Office-Excel2013-1.7
- Office-Excel2016-1.2
- Office-OneNote2016-1.2
- Office-Outlook2013-1.12
- Office-Outlook2013-1.13
- Office-Outlook2016-2.2
- Office-Outlook2016-2.3
- Office-PowerPoint2013-1.6
- Office-PowerPoint2016-1.1
- Office-Publisher2016-1.3
- Office-Skype2016-1.1
- Office-System2013-1.9
- Office-System2013-2.1
- Office-System2016-2.2
- Office-System2016-2.3
- Office-Visio2013-1.4
- Office-Word2013-1.6
- Office-Word2016-1.1
- OracleJRE-8-1.5
- OracleJRE-8-2.1
- RHEL-7-3.13
- RHEL-7-3.14
- SqlServer-2012-Database-1.19
- SqlServer-2012-Database-1.20
- SqlServer-2012-Instance-1.19
- SqlServer-2012-Instance-1.20
- SqlServer-2016-Instance-2.11
- SqlServer-2016-Instance-2.12
- Ubuntu-18.04-2.13
- Ubuntu-18.04-2.14
- Vsphere-6.5-2.2
- Vsphere-6.5-2.3
- WindowsClient-10-2.8
- WindowsClient-10-2.9
- WindowsClient-11-1.5
- WindowsClient-11-1.6
- WindowsDefender-All-2.3
- WindowsDefender-All-2.4
- WindowsDnsServer-2012R2-2.4
- WindowsDnsServer-2012R2-2.5
- WindowsFirewall-All-2.1
- WindowsFirewall-All-2.2
- WindowsServer-2012R2-DC-3.3
- WindowsServer-2012R2-DC-3.4
- WindowsServer-2012R2-MS-3.3
- WindowsServer-2012R2-MS-3.4
- WindowsServer-2016-DC-2.7
- WindowsServer-2016-DC-2.8
- WindowsServer-2016-MS-2.7
- WindowsServer-2016-MS-2.8
- WindowsServer-2019-DC-2.8
- WindowsServer-2019-DC-2.9
- WindowsServer-2019-MS-2.8
- WindowsServer-2019-MS-2.9
- WindowsServer-2022-DC-1.4
- WindowsServer-2022-DC-1.5
- WindowsServer-2022-MS-1.4
- WindowsServer-2022-MS-1.5