) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Microsoft Windows 2008 R2 STIG Version 1, Release 34 Checklist Details (Checklist Revisions)
NOTE
This is not the current revision of this Checklist, view the current revision.
SCAP 1.0 Content:
-
Download SCAP 1.0 Content - Windows 2008 R2 DC STIG Benchmark Version 1, Release 14
- Author: Defense Information Systems Agency
-
Download SCAP 1.0 Content - Windows 2008 R2 MS STIG Benchmark Version 1, Release 14
- Author: Defense Information Systems Agency
Supporting Resources:
-
Download Standalone XCCDF 1.1.4 - Windows 2008 R2 STIG - Version 1, Release 12
- Defense Information Systems Agency
Target:
| Target | CPE Name |
|---|---|
| Microsoft Windows Server 2008 R2 | cpe:/o:microsoft:windows_server_2008:r2 (View CVEs) |
| Microsoft Windows Server 2008 R2 Service Pack 1 | cpe:/o:microsoft:windows_server_2008:r2:sp1 (View CVEs) |
| Microsoft Windows Server 2008 r2 Itanium | cpe:/o:microsoft:windows_server_2008:r2::itanium (View CVEs) |
| Microsoft Windows Server 2008 r2 Service Pack 1 Itanium | cpe:/o:microsoft:windows_server_2008:r2:sp1:itanium (View CVEs) |
| Microsoft Windows Server 2008 r2 x64 | cpe:/o:microsoft:windows_server_2008:r2::x64 (View CVEs) |
| Microsoft Windows Server 2008 r2 x64 Service Pack 1 | cpe:/o:microsoft:windows_server_2008:r2:sp1:x64 (View CVEs) |
Checklist Highlights
- Checklist Name:
- Microsoft Windows 2008 R2 STIG
- Checklist ID:
- 377
- Version:
- Version 1, Release 34
- Type:
- Compliance
- Review Status:
- Final
- Authority:
- Governmental Authority: Defense Information Systems Agency
- Original Publication Date:
- 07/27/2012
Checklist Summary:
The Windows Server 2008 R2 Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. The requirements were developed from Federal and DoD consensus, as well as the Windows Server 2008 R2 Security Guide and security templates published by Microsoft Corporation. The vulnerabilities discussed in this document are applicable to Windows Server 2008 R2 (all versions). This STIG is for a Windows Server 2008 R2 baseline. It is meant for use in conjunction with other applicable STIGs and Checklists including such topics as Active Directory, Web Services, Domain Name Service (DNS), Database, Secure Remote Computing, and Desktop Applications. For example, Domain Controller reviews will also need to include the Active Directory STIG.
Checklist Role:
- Server Operating System
- Operating System
Known Issues:
Not provided
Target Audience:
This document is a requirement for all DoD-administered systems and all systems connected to DoD networks. These requirements are designed to assist Security Managers (SMs), Information Assurance Managers (IAMs), IAOs, and System Administrators (SAs) with configuring and maintaining security controls. This guidance supports DoD system design, development, implementation, and certification and accreditation (C&A) efforts.
Target Operational Environment:
- Managed
- Specialized Security-Limited Functionality (SSLF)
Testing Information:
The vulnerabilities discussed in this document are applicable to Windows Server 2008 R2 (all versions).
Regulatory Compliance:
DoD Directive (DoDD) 8500.1 DoD Directive (DoDD) 8500.2
Comments/Warnings/Miscellaneous:
Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document.
Disclaimer:
Not provided
Product Support:
Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document.
Point of Contact:
disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil
Sponsor:
DoD
Licensing:
Not provided
Change History:
Version 1, Release 14 - 25 July 2014 (SCAP 1.0) Version 1, Release 13 - 25 April 2014 Version 1, Release 12 - 13 March 2014 Version 1, Release 11 - 24 January 2014 Version 1, Release 10 - 23 December 2013 Version 1, Release 9 - 25 October 2013 Version 1, Release 8 - 24 July 2013 Version 1, Release 7 - 29 March 2013 Version 1, Release 6 - 26 October 2012 Version 1, Release 5 - July 27, 2012 Version 1, Release 4 - April 27, 2012 Version 1, Release 3 - January 27, 2012 Version 1, Release 2 - October 28, 2011 Version 1, Release 1 - May 25, 2011 Updated "Point of Contact", "Product Support" and "Comments" Sectons - 15 January 2015
Dependency/Requirements:
| URL | Description |
|---|---|
| http://iase.disa.mil/stigs/Documents/database-stig-v8r1.zip | Database Security Technical Implementation Guide, Version 8.1, Release 1 |
| http://iase.disa.mil/stigs/Documents/u_active_directory_v2r1_stig.zip | Microsoft Active Directory STIG, Version 2, Release 1 |
| http://iase.disa.mil/stigs/Documents/u_dns_v4r1.12.checklist_20110429.zip | Domain Name System Security Checklist Version 4 Release 1.12 |
| http://iase.disa.mil/stigs/Documents/u_ms_windows_server_2008_r2_stig_v1r1_release_memo.pdf | Release Memo - Windows 2008 STIG R2 - Version 1, Release 1 |
| http://iase.disa.mil/stigs/Documents/unclassified_DesktopApplicationsGeneral_v4r1_stig.pdf | Desktop Applications General, Version 4, Release 1 |
| http://iase.disa.mil/stigs/downloads/zip/unclassified_web_server_v7r1_stig.zip | Web Server STIG, Version 7, Release 1 |
References:
| Reference URL | Description |
|---|