Security configuration tools or equivalent processes will be used to configure platforms for security compliance.

From Windows Server 2008 R2 Domain Controller Security Technical Implementation Guide

Associated with: CCI-000366

SV-32255r1_rule Security configuration tools or equivalent processes will be used to configure platforms for security compliance.

Vulnerability discussion

Security configuration tools, such as Security Templates and Group Policy, allow system administrators to consolidate all security-related system settings into a single configuration file. These settings can then be applied consistently to any number of Windows machines. The Security Configuration tools can use the same configuration file to check platforms for compliance with security policy.

Check content

Interview the SA to determine if the Security Configuration tools, or equivalent process, is being used to configure Windows systems to meet security requirements. The Microsoft Security Configuration tools (such as Security Templates and Group Policy that are integrated into Windows) should be used to configure platforms for security compliance. If an alternate method is used to configure a system (e.g., manually - using the DISA Windows STIGs, etc.) that achieves the same configured result, then this is acceptable.

Fix text

Security configuration tools or equivalent should be used to configure Windows systems to meet security requirements.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.