II - Mission Support Public
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000480-GPOS-00229
Group -
Windows Server 2019 must disable automatically signing in the last interactive user after a system-initiated restart.
Windows can be configured to automatically sign the user back in after a Windows Update restart. Some protections are in place to help ensure this is done in a secure fashion; however, disabling th...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
Group -
Windows Server 2019 must have a host-based firewall installed and enabled.
A firewall provides a line of defense against attack, allowing or blocking inbound and outbound connections based on a set of rules.Rule Medium Severity -
SRG-OS-000041-GPOS-00019
Group -
Windows Server 2019 must have PowerShell Transcription enabled.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000080-GPOS-00048
Group -
Windows Server 2019 must be configured for certificate-based authentication for domain controllers.
Active Directory domain services elevation of privilege vulnerability could allow a user rights to the system, such as administrative and other high-level capabilities.Rule Medium Severity -
SRG-OS-000080-GPOS-00048
Group -
Windows Server 2019 must be configured for named-based strong mappings for certificates.
Weak mappings give rise to security vulnerabilities and demand hardening measures. Certificate names must be correctly mapped to the intended user account in Active Directory. A lack of strong name...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.