Microsoft Windows Server 2019 Ver 1, Rel 3 Checklist Details (Checklist Revisions)
The Windows Server 2019 Security Technical Implementation Guide (STIG) is published as a
tool to improve the security of Department of Defense (DoD) information systems. The
requirements were developed by DoD Consensus as well as Windows security guidance by
Microsoft Corporation. This document is meant for use in conjunction with other applicable
STIGs including such topics as Active Directory Domain, Active Directory Forest, and Domain
Name Service (DNS).
The Windows Server 2019 STIG includes requirements for both domain controllers and member
servers/standalone systems. Requirements specific to domain controllers have “DC” as the
second component of the STIG IDs. Requirements specific to member servers have “MS” as the
second component of the STIG IDs. All other requirements apply to all systems.
- Desktop and Server Operating System
This checklist is primarily for IT generalists, security specialists, network architects, and other IT professionals and consultants who plan application or infrastructure development and deployments of Windows 8 and BitLocker for both desktop and laptop client computers in an enterprise environment.
- Specialized Security-Limited Functionality (SSLF)
DoD Instruction (DoDI) 8500.01
Updated status to FINAL - 7/10/19
Updated URLs - 8/12/2019
added SCAP content - 9/12/19
updated GPO file - 10/31/19
updated URLs per DISA - 1/21/2020
Updated GPO file per DISA - 1/29/2020
Updated GPO file per DISA - 2/3/2020
NIST checklist record last modified on 02/03/2020