amiic93769
asked on
Problems with Windows 7 STIG
Attempting to STIG a Windows 7 laptop. We loaded the Non-Compliance Report – U_Windows_7_V1R19_STIG_Ben
•Audit - Credential Validation - Success
The system will be configured to audit "Account Logon -> Credential Validation" successes. - (CCE-9725-3) - Error
•Audit - Credential Validation - Failure
The system will be configured to audit "Account Logon -> Credential Validation" failures. - (CCE-9718-8) - Error
•Audit - Computer Account Management - Success
The system will be configured to audit "Account Management -> Computer Account Management" successes. - (CCE-9498-7) - Error
•Audit - Computer Account Management - Failure
The system will be configured to audit "Account Management -> Computer Account Management" failures. - (CCE-9608-1) - Error
Explanation example-When configuring the setting in gpedit under Computer Configuration-Windows Settings-Security Settings-Advanced Audit Policy Configuration-System Audit Policy-Audit Logon, according to the STIG, the key, Audit Credential Validation should be set at ‘Enabled’ with both ‘Success’ and ‘Failure’ checked. However, enabling the policy and checking both ‘success’ and ‘failure’ returns error messages as shown above and prevents us from achieving the 95% compliance. Does anyone have a workaround for this issue or have seen this before?
•Audit - Credential Validation - Success
The system will be configured to audit "Account Logon -> Credential Validation" successes. - (CCE-9725-3) - Error
•Audit - Credential Validation - Failure
The system will be configured to audit "Account Logon -> Credential Validation" failures. - (CCE-9718-8) - Error
•Audit - Computer Account Management - Success
The system will be configured to audit "Account Management -> Computer Account Management" successes. - (CCE-9498-7) - Error
•Audit - Computer Account Management - Failure
The system will be configured to audit "Account Management -> Computer Account Management" failures. - (CCE-9608-1) - Error
Explanation example-When configuring the setting in gpedit under Computer Configuration-Windows Settings-Security Settings-Advanced Audit Policy Configuration-System Audit Policy-Audit Logon, according to the STIG, the key, Audit Credential Validation should be set at ‘Enabled’ with both ‘Success’ and ‘Failure’ checked. However, enabling the policy and checking both ‘success’ and ‘failure’ returns error messages as shown above and prevents us from achieving the 95% compliance. Does anyone have a workaround for this issue or have seen this before?
ASKER
Yes, we are attempting it manually. We use the version 1 rev 19 Windows 7 benchmark STIG with SCAP and then complete it with the manual STIG in Stigviewer.
No, the computer is not joined to a domain. It is a standalone utility laptop. It will not join a domain at any time. It will only connect to our out-of-bank network to receive WSUS updates, run Retina scans, etc.
No, the computer is not joined to a domain. It is a standalone utility laptop. It will not join a domain at any time. It will only connect to our out-of-bank network to receive WSUS updates, run Retina scans, etc.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Auditpol settings worked.
Is the computer joined to the domain? If so, that policy element might be set on a domain policy and enforced.