Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide

The Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide (V3 R7) has 364 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

364STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Thu Nov 09 2023

The Smart Card Removal Policy service must be configured to automatic.

Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide

Assessment Title

Rule Text

The Smart Card Removal Policy service must be configured to automatic.

Description

Discussion Text

The automatic start of the Smart Card Removal Policy service is required to support the smart card removal behavior requirement.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226358

Rule

SV-226358r794684_rule

Severity

medium

Rule Version

WN12-SV-000106

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the Smart Card Removal Policy service is configured to "Automatic". 

Run "Services.msc".

If the Startup Type for Smart Card Removal Policy is not set to Automatic, this is a finding.

Implementation Procedure

Fix Text

Configure the Startup Type for the Smart Card Removal Policy service to "Automatic".

STIG check 322 of 364 in the Microsoft Windows Server 2012/2012 R2 Domain Controller STIG checklist

← Previous · V-226357The Telnet service must be disabled if installed.Next · V-226359 →A screen saver must be enabled on the system.