Skip to content
Log In

II - Mission Support Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000041-GPOS-00019

    Group
    Show

  • Windows Server 2022 must have PowerShell Transcription enabled.

    Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...
    Rule Medium Severity
    Show

  • SRG-OS-000324-GPOS-00125

    Group
    Show

  • Windows Server 2022 must only allow administrators responsible for the domain controller to have Administrator rights on the system.

    An account that does not have Administrator duties must not have Administrator rights. Such rights would allow the account to bypass or modify required security restrictions on that machine and mak...
    Rule High Severity
    Show

  • SRG-OS-000112-GPOS-00057

    Group
    Show

  • Windows Server 2022 Kerberos user logon restrictions must be enforced.

    This policy setting determines whether the Kerberos Key Distribution Center (KDC) validates every request for a session ticket against the user rights policy of the target computer. The policy is e...
    Rule Medium Severity
    Show

  • SRG-OS-000112-GPOS-00057

    Group
    Show

  • Windows Server 2022 Kerberos service ticket maximum lifetime must be limited to 600 minutes or less.

    This setting determines the maximum amount of time (in minutes) that a granted session ticket can be used to access a particular service. Session tickets are used only to authenticate new connectio...
    Rule Medium Severity
    Show

  • SRG-OS-000112-GPOS-00057

    Group
    Show

  • Windows Server 2022 Kerberos user ticket lifetime must be limited to 10 hours or less.

    In Kerberos, there are two types of tickets: Ticket Granting Tickets (TGTs) and Service Tickets. Kerberos tickets have a limited lifetime so the time an attacker has to implement an attack is limit...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules