Checklist Summary:

The Windows Server 2016 Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. The requirements were developed by DoD Consensus as well as Windows security guidance by Microsoft Corporation. This document is meant for use in conjunction with other applicable STIGs including such topics as Active Directory Domain, Active Directory Forest, and Domain Name Service (DNS). The Windows Server 2016 STIG includes requirements for both domain controllers and member servers/standalone systems. Requirements specific to domain controllers have “DC” as the second component of the STIG IDs. Requirements specific to member servers have “MS” as the second component of the STIG IDs. All other requirements apply to all systems.

Checklist Role:

• Desktop and Server Operating System

Known Issues:

Not provided.

Target Audience:

This checklist is primarily for IT generalists, security specialists, network architects, and other IT professionals and consultants who plan application or infrastructure development and deployments of Windows 8 and BitLocker for both desktop and laptop client computers in an enterprise environment.

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DoD Instruction (DoDI) 8500.01

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

Not provided.

Product Support:

disa.stig_spt@mail.mil

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Updated to FINAL - 03/13/2017
Updated URL to reflect change to the DISA website - http --> https
Updated - 11/01/2017
Updated to FINAL - 12/02/2017
corrected resource title - 1/24/2018
Updated to Version 1, Release 3 - 02/16/2018
Updated to FINAL - 3/18/2018
updated to v1,r4 - 4/25/18
Updated to FINAL - 5/27/18
updated to Version 1, Release 5 - 7/24/18
Added GPOs - 8/6/18
Updated to FINAL - 9/6/2018
Updated to Version 1, Release 6 - 10/25/18
Updated to FINAL - 11/26/18
Updated GPO Resource - 11/29/2018
Corrected SHA for GPO file - 12/19/2018
Resource Title Update - 12/21/2018
null
updated to Version 1, Release 7- 1/28/19
updated benchmark - 1/29/19
updated GPO file - 2/8/19
Status Updated to FINAL - 3/8/19
updated to Version 1, Release 8 - 4/30/19
Updated GPO resource - 5/2/19
Updated to FINAL  - 6/4/19
Updated URLs - 6/12/19
Updated URLs - 8/12/2019
Updated GPO file - 10/31/19
updated URLs - 11/1/19
updated to V1, R12 - removed reference link per DISA - 1/17/2020
Updated GPO file per DISA - 1/29/2020
Updated GPO file per DISA - 2/3/2020
updated GPO file - 3/6/2020
updated resource title per DISA - 3/12/2020
Updated URLs - 4/15/2020
updated Resource Titles - 4/17/2020
updated GPO file - 4/27/2020
updated URLs per DISA - 6/8/2020
Updated URL per DISA - 6/23/2020
Fixed title of resource - 6/25/2020
Updated URLs per DISA - 7/7/2020
Updated GPO file per DISA - 8/5/2020
updated GPO file - 10/29/2020
updated URLs and GPO file - 12/3/2020
Updated GPO per DISA - 1/28/21
Updated GPO per DISA - 3/1/21
added SCC files per DISA - 4/20/21
Updated resource per DISA - 5/5/21
Updated GPO per DISA - 5/12/21
Updated resources per DISA - 5/25/21
Updated GPO - 8/9/21
null
Updated GPO per DISA - 8/24/21
updated SCC tool per DISA - 9/16/2021
updated GPO files - 11/22/2021
Updated resource per DISA - 11/26/21
corrected title - 1/10/2022
Updated GPO per DISA - 2/17/22
Updated GPO per DISA - 5/2/22
null
Updated resources per DISA - 5/29/22
null
Updated SCC per DISA - 6/14/22
Updated GPO per DISA - 8/1/22
null
SCC - 10/13/22
Updated checklist per DISA - 10/27/22
updated GPO file - 11/7/22
updated URLs - 11/15/2022
updated GPO file - 1/31/2023
updated SCC content - 2/3/2023
 updated SCC content - 3/9/2023
Updated GPO per DISA - 5/1/23

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 05/01/2023