Windows 2008 Member Server Security Technical Implementation Guide

The Windows 2008 Member Server Security Technical Implementation Guide (V6 R46) has 215 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

215STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R46

CurrentPublished Wed Jun 17 2020

Solicited Remote Assistance is allowed.

Windows 2008 Member Server Security Technical Implementation Guide

Assessment Title

Rule Text

Solicited Remote Assistance is allowed.

Description

Discussion Text

This setting controls whether or not solicited remote assistance is allowed from this computer. Solicited assistance is help that is specifically requested by the user. This is a Category 1 finding because it may allow unauthorized parties access to the resources on the computer.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-3343

Rule

SV-29230r1_rule

Severity

high

Rule Version

3.068

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the following registry value doesn’t exist or is not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE 
Subkey: \Software\Policies\Microsoft\Windows NT\Terminal Services\ 

Value Name: fAllowToGetHelp
 
Type: REG_DWORD 
Value: 0

Implementation Procedure

Fix Text

Configure the system to disable Remote Assistance by setting the policy value for Computer Configuration -> Administrative Templates -> System -> Remote Assistance "Solicited Remote Assistance" to "Disabled".

STIG check 157 of 215 in the Windows 2008 Member Server STIG checklist

← Previous · V-3340Unauthorized shares can be accessed anonymously.Next · V-3344 →The use of local accounts with blank passwords is not restricted to console logons only.