Skip to content
ATO Pathways
  Log In

Microsoft Windows Server 2016 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The TFTP Client must not be installed.

    <VulnDiscussion>Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authe...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Server Message Block (SMB) v1 protocol must be uninstalled.

    &lt;VulnDiscussion&gt;SMBv1 is a legacy protocol that uses the MD5 algorithm as part of SMB. MD5 is known to be vulnerable to a number of attacks s...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Server Message Block (SMB) v1 protocol must be disabled on the SMB server.

    &lt;VulnDiscussion&gt;SMBv1 is a legacy protocol that uses the MD5 algorithm as part of SMB. MD5 is known to be vulnerable to a number of attacks s...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Windows Remote Management (WinRM) service must not use Basic authentication.

    &lt;VulnDiscussion&gt;Basic authentication uses plain-text passwords that could be used to compromise a system. Disabling Basic authentication will...
    Rule High Severity
    Show

  • SRG-OS-000393-GPOS-00173

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000134-GPOS-00068

    <GroupDescription></GroupDescription>
    Group
    Show

  • Insecure logons to an SMB server must be disabled.

    &lt;VulnDiscussion&gt;Insecure guest logons allow unauthenticated access to shared folders. Shared resources on a system must require authenticatio...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The default AutoRun behavior must be configured to prevent AutoRun commands.

    &lt;VulnDiscussion&gt;Allowing AutoRun commands to execute may introduce malicious code to a system. Configuring this setting prevents AutoRun comm...
    Rule High Severity
    Show

  • SRG-OS-000368-GPOS-00154

    <GroupDescription></GroupDescription>
    Group
    Show

  • Basic authentication for RSS feeds over HTTP must not be used.

    &lt;VulnDiscussion&gt;Basic authentication uses plain-text passwords that could be used to compromise a system. Disabling Basic authentication will...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • Indexing of encrypted files must be turned off.

    &lt;VulnDiscussion&gt;Indexing of encrypted files may expose sensitive data. This setting prevents encrypted files from being indexed.&lt;/VulnDisc...
    Rule Medium Severity
    Show

  • SRG-OS-000362-GPOS-00149

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Telnet Client must not be installed.

    &lt;VulnDiscussion&gt;Unnecessary services increase the attack surface of a system. Some of these services may not support required levels of authe...
    Rule Medium Severity
    Show

  • Manually managed application account passwords must be at least 14 characters in length.

    &lt;VulnDiscussion&gt;Application/service account passwords must be of sufficient length to prevent being easily cracked. Application/service accou...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules