Microsoft Windows Server 2016 Security Technical Implementation Guide

The Microsoft Windows Server 2016 Security Technical Implementation Guide (V2 R10) has 273 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

273STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R10

CurrentPublished Wed Jan 15 2025

Unauthenticated Remote Procedure Call (RPC) clients must be restricted from connecting to the RPC server.

Microsoft Windows Server 2016 Security Technical Implementation Guide

Assessment Title

Rule Text

Unauthenticated Remote Procedure Call (RPC) clients must be restricted from connecting to the RPC server.

Description

Discussion Text

Unauthenticated RPC clients may allow anonymous access to sensitive information. Configuring RPC to restrict unauthenticated RPC clients from connecting to the RPC server will prevent anonymous connections.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-225010

Rule

SV-225010r971545_rule

Severity

medium

Rule Version

WN16-MS-000040

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

This applies to member servers and standalone or nondomain-joined systems. It is NA for domain controllers.

If the following registry value does not exist or is not configured as specified, this is a finding.

Registry Hive:  HKEY_LOCAL_MACHINE
Registry Path:  \SOFTWARE\Policies\Microsoft\Windows NT\Rpc\

Value Name:  RestrictRemoteClients

Type:  REG_DWORD
Value:  0x00000001 (1)

Implementation Procedure

Fix Text

Configure the policy value for Computer Configuration >> Administrative Templates >> System >> Remote Procedure Call >> "Restrict Unauthenticated RPC clients" to "Enabled" with "Authenticated" selected.

STIG check 189 of 273 in the Microsoft Windows Server 2016 STIG checklist

← Previous · V-225009Local users on domain-joined computers must not be enumerated.Next · V-225011 →Caching of logon credentials must be limited.