Microsoft Windows Server 2016 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-OS-000324-GPOS-00125
<GroupDescription></GroupDescription>Group -
Only administrators responsible for the member server or standalone or nondomain-joined system must have Administrator rights on the system.
<VulnDiscussion>An account that does not have Administrator duties must not have Administrator rights. Such rights would allow the account to...Rule High Severity -
SRG-OS-000134-GPOS-00068
<GroupDescription></GroupDescription>Group -
Local users on domain-joined computers must not be enumerated.
<VulnDiscussion>The username is one part of logon credentials that could be used to gain access to a system. Preventing the enumeration of us...Rule Medium Severity -
SRG-OS-000379-GPOS-00164
<GroupDescription></GroupDescription>Group -
Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems.
<VulnDiscussion>A compromised local administrator account can provide means for an attacker to move laterally between domain systems. With U...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
SRG-OS-000423-GPOS-00187
<GroupDescription></GroupDescription>Group -
Unauthenticated Remote Procedure Call (RPC) clients must be restricted from connecting to the RPC server.
<VulnDiscussion>Unauthenticated RPC clients may allow anonymous access to sensitive information. Configuring RPC to restrict unauthenticated ...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.