What changed in Microsoft Windows Server 2019 SCAP Benchmark V3R9V3R9 changes

Microsoft Windows Server 2019 SCAP Benchmark V3R9 (2026-05-19) replaced V3R8 (2026-02-12): 3 rules added, 1 updated. It has 220 rules, against 217 in V3R8.

V3R9 benchmarkV3R8 benchmark Compare V3R8 and V3R9 in SCAP Compare

  • 3 added
  • 0 removed
  • 1 updated

Updated fields: CCIs 1Check text 1Fix text 1

Added in V3R9 (3)

  • V-205913CAT IWindows Server 2019 must not allow anonymous SID/Name translation.
  • V-271428CAT IIWindows Server 2019 must be configured for certificate-based authentication for domain controllers.
  • V-271429CAT IIWindows Server 2019 must be configured for named-based strong mappings for certificates.

Updated in V3R9 (1)

V-205849CAT IWindows Server 2019 must be maintained at a supported servicing level.Check text, Fix text, CCIs

Check text

AND - The Windows Release ID is 1809 or higher. registry_test (check: all, existence: ) object registry_object: hive equals "HKEY_LOCAL_MACHINE"; name equals "ReleaseId"; key equals "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion" state registry_state: type equals "reg_sz"; value greater than or equal "1809" - The Windows Current Build is 17763 or higher. registry_test (check: at least one, existence: at_least_one_exists) object registry_object: hive equals "HKEY_LOCAL_MACHINE"; name equals "CurrentBuildNumber"; key equals "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion" state registry_state: value greater than or equal "17763" Open "Command Prompt". Enter "winver.exe". If the "About Windows" dialog box does not display "Microsofta Windowsversion Serversupported Versionby 1809the (Build 17763.xxx)" or greatervendor, this is a finding. Preview versions must not be used in a production environment.

Fix text

Update the system to a Version 1809 (Build 17763.xxx) or greater.Upgrade to a supported version of the operating system.

CCIs

CCI-00033766

V-205849 in V3R9

How these changes are found

Rules are matched across the two benchmark releases by their STIG V-number. A rule counts as updated when its rule id changed and its title, severity, discussion, fix text or OVAL check logic changed — the same comparison SCAP Compare makes.

Comparing other releases, or this one against an older release? Pick any two in SCAP Compare.