Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide

The Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide (V1 R34) has 328 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

328STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R34

CurrentPublished Wed Jun 17 2020

Audit data must be retained for at least one year.

Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide

Assessment Title

Rule Text

Audit data must be retained for at least one year.

Description

Discussion Text

Audit records are essential for investigating system activity after the fact. Retention periods for audit data are determined based on the sensitivity of the data handled by the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-14226

Rule

SV-32275r2_rule

Severity

medium

Rule Version

1.032

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine whether audit data is retained for at least one year. If the audit data is not retained for at least one year, this is a finding.

Implementation Procedure

Fix Text

Ensure the audit data is retained for at least one year.

STIG check 56 of 328 in the Windows Server 2008 R2 Domain Controller STIG checklist

← Previous · V-14225The Windows 2008 R2 password for the built-in Administrator account must be changed at least annually or when a member of the administrative team leaves the organization.Next · V-14228 →Auditing Access of Global System Objects must be turned off.