Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide

The Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide (V1 R34) has 328 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

328STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R34

CurrentPublished Wed Jun 17 2020

Booting into alternate non STIG compliant operating systems will not be permitted.

Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide

Assessment Title

Rule Text

Booting into alternate non STIG compliant operating systems will not be permitted.

Description

Discussion Text

Allowing other operating systems to run on a secure system, can allow users to circumvent security. If more than one operating system is installed on a computer each must be configured to be compliant with STIG guidance.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-1119

Rule

SV-32253r1_rule

Severity

medium

Rule Version

5.003

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Open the Control.
Panel Double-click on the "System" applet. 
Click on the "Advanced System Settings" link. 
Click the Startup and Recovery "Settings" button. 

If the drop-down listbox in System Startup shows any operating system other than the current Windows OS, this may be a finding. If all additional operating systems are STIG compliant, then this is not a finding.

Implementation Procedure

Fix Text

Remove any non STIG compliant alternate operating systems.

STIG check 24 of 328 in the Windows Server 2008 R2 Domain Controller STIG checklist

← Previous · V-1115The built-in administrator account will be renamed.Next · V-1120 →File Transfer Protocol (FTP) servers must be configured to prevent anonymous logons.