StigData/Processed/WindowsServer-2016-DC-2.2.org.default.xml

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
<!--
    The organizational settings file is used to define the local organizations
    preferred setting within an allowed range of the STIG.
 
    Each setting in this file is linked by STIG ID and the valid range is in an
    associated comment.
-->
<OrganizationalSettings fullversion="2.2">
  <!-- Ensure ''V-224923.b'' -match '1|3'-->
  <OrganizationalSetting id="V-224923.b" ValueData="1" />
  <!-- Ensure ''V-224924'' -match '1|3|8|ShouldBeAbsent'-->
  <OrganizationalSetting id="V-224924" ValueData="8" />
  <!-- Ensure ''V-224936'' -match '0|1'-->
  <OrganizationalSetting id="V-224936" ValueData="0" />
  <!-- Ensure ''V-224937'' -ge '32768'-->
  <OrganizationalSetting id="V-224937" ValueData="32768" />
  <!-- Ensure ''V-224938'' -ge '196608'-->
  <OrganizationalSetting id="V-224938" ValueData="196608" />
  <!-- Ensure ''V-224939'' -ge '32768'-->
  <OrganizationalSetting id="V-224939" ValueData="32768" />
  <!-- Ensure ''V-224941'' -match '0|ShouldBeAbsent'-->
  <OrganizationalSetting id="V-224941" ValueData="0" />
  <!-- Ensure ''V-224942'' -match '0|ShouldBeAbsent'-->
  <OrganizationalSetting id="V-224942" ValueData="0" />
  <!-- Ensure ''V-224943'' -match '0|ShouldBeAbsent'-->
  <OrganizationalSetting id="V-224943" ValueData="0" />
  <!-- Ensure ''V-224951'' -match '0|ShouldBeAbsent'-->
  <OrganizationalSetting id="V-224951" ValueData="0" />
  <!-- Ensure ''V-224955'' -match '0|ShouldBeAbsent'-->
  <OrganizationalSetting id="V-224955" ValueData="0" />
  <!-- Ensure ''V-224966'' -le '600' -and ''V-224966'' -ne '0'-->
  <OrganizationalSetting id="V-224966" PolicyValue="600" />
  <!-- Ensure ''V-224967'' -le '10' -and ''V-224967'' -ne '0'-->
  <OrganizationalSetting id="V-224967" PolicyValue="10" />
  <!-- Ensure ''V-224968'' -le '7'-->
  <OrganizationalSetting id="V-224968" PolicyValue="7" />
  <!-- Ensure ''V-224969'' -le '5'-->
  <OrganizationalSetting id="V-224969" PolicyValue="5" />
  <!-- Ensure location for DoD Root CA 2 certificate is present-->
  <OrganizationalSetting id="V-225021.a" Location="" />
  <!-- Ensure location for DoD Root CA 3 certificate is present-->
  <OrganizationalSetting id="V-225021.b" Location="" />
  <!-- Ensure location for DoD Root CA 4 certificate is present-->
  <OrganizationalSetting id="V-225021.c" Location="" />
  <!-- Ensure location for DoD Root CA 5 certificate is present-->
  <OrganizationalSetting id="V-225021.d" Location="" />
  <!-- Ensure location for DoD Interoperability Root CA 2 certificate is present-->
  <OrganizationalSetting id="V-225022.a" Location="" />
  <!-- Ensure location for DoD Interoperability Root CA 1 certificate is present-->
  <OrganizationalSetting id="V-225022.b" Location="" />
  <!-- Ensure location for US DoD CCEB Interoperability Root CA 2 certificate is present-->
  <OrganizationalSetting id="V-225023" Location="" />
  <!-- Ensure ''V-225033'' -le '30' -and ''V-225033'' -gt '0'-->
  <OrganizationalSetting id="V-225033" ValueData="30" />
  <!-- Ensure ''V-225035'' -le '900' -and ''V-225035'' -gt '0'-->
  <OrganizationalSetting id="V-225035" ValueData="900" />
  <!-- Ensure ''V-225037'' -match '^(DoD Notice and Consent Banner|US Department of Defense Warning Statement)$'-->
  <OrganizationalSetting id="V-225037" ValueData="DoD Notice and Consent Banner" />
  <!-- Ensure ''V-225038'' -match '1|2'-->
  <OrganizationalSetting id="V-225038" ValueData="1" />
  <!-- Ensure ''V-225063'' -match '1|2'-->
  <OrganizationalSetting id="V-225063" ValueData="1" />
  <!-- Ensure ''V-225069'' -match '2|ShouldBeAbsent'-->
  <OrganizationalSetting id="V-225069" ValueData="2" />
  <!-- Ensure ''V-224866'' -ge '15' -or ''V-224866'' -eq '0'-->
  <OrganizationalSetting id="V-224866" PolicyValue="15" />
  <!-- Ensure ''V-224867'' -le '3' -and ''V-224867'' -ne '0'-->
  <OrganizationalSetting id="V-224867" PolicyValue="3" />
  <!-- Ensure ''V-224868'' -ge '15'-->
  <OrganizationalSetting id="V-224868" PolicyValue="15" />
  <!-- Ensure ''V-224869'' -ge '24'-->
  <OrganizationalSetting id="V-224869" PolicyValue="24" />
  <!-- Ensure ''V-224870'' -le '60' -and ''V-224870'' -ne '0'-->
  <OrganizationalSetting id="V-224870" PolicyValue="60" />
  <!-- Ensure ''V-224871'' -ne '0'-->
  <OrganizationalSetting id="V-224871" PolicyValue="1" />
  <!-- Ensure ''V-224872'' -ge '14'-->
  <OrganizationalSetting id="V-224872" PolicyValue="14" />
  <!-- Ensure ''V-225026'' -ne 'Administrator'-->
  <OrganizationalSetting id="V-225026" OptionValue="" />
  <!-- Ensure ''V-225027'' -ne 'Guest'-->
  <OrganizationalSetting id="V-225027" OptionValue="" />
</OrganizationalSettings>